packages feed

ory-hydra-client 2.0.3 → 2.1.2

raw patch · 34 files changed

+6592/−6500 lines, 34 filesdep ~text

Dependency ranges changed: text

Files

README.md view
@@ -59,11 +59,11 @@ | allowFromJsonNulls              | allow JSON Null during model decoding from JSON                                                                               | true     | true              | | allowNonUniqueOperationIds      | allow *different* API modules to contain the same operationId. Each API must be imported qualified                            | false    | true    | | allowToJsonNulls                | allow emitting JSON Null during model encoding to JSON                                                                        | false    | false                |-| baseModule                      | Set the base module namespace                                                                                                 |          | OryHydra                      |+| baseModule                      | Set the base module namespace                                                                                                 |          | ORYHydra                      | | cabalPackage                    | Set the cabal package name, which consists of one or more alphanumeric words separated by hyphens                             |          | ory-hydra-client                    | | cabalVersion                    | Set the cabal version number, consisting of a sequence of one or more integers separated by dots                              | 0.1.0.0  | 0.1.0.0                    | | customTestInstanceModule        | test module used to provide typeclass instances for types not known by the generator                                          |          |         |-| configType                      | Set the name of the type used for configuration                                                                               |          | OryHydraConfig                      |+| configType                      | Set the name of the type used for configuration                                                                               |          | ORYHydraConfig                      | | dateFormat                      | format string used to parse/render a date                                                                                     | %Y-%m-%d | %Y-%m-%d                      | | dateTimeFormat                  | format string used to parse/render a datetime. (Defaults to [formatISO8601Millis][1] when not provided)                       |          |                   | | dateTimeParseFormat             | overrides the format string used to parse a datetime                                                                          |          |              |@@ -73,7 +73,7 @@ | generateModelConstructors       | Generate smart constructors (only supply required fields) for models                                                          | true     | true       | | inlineMimeTypes                 | Inline (hardcode) the content-type and accept parameters on operations, when there is only 1 option                           | true     | true                 | | modelDeriving                   | Additional classes to include in the deriving() clause of Models                                                              |          |                    |-| requestType                     | Set the name of the type used to generate requests                                                                            |          | OryHydraRequest                     |+| requestType                     | Set the name of the type used to generate requests                                                                            |          | ORYHydraRequest                     | | strictFields                    | Add strictness annotations to all model fields                                                                                | true     | false                  | | useKatip                        | Sets the default value for the UseKatip cabal flag. If true, the katip package provides logging instead of monad-logger       | true     | true                      | | queryExtraUnreserved            | Configures additional querystring characters which must not be URI encoded, e.g. '+' or ':'                                   |          |           |@@ -112,13 +112,13 @@  | MODULE              | NOTES                                               | | ------------------- | --------------------------------------------------- |-| OryHydra.Client    | use the "dispatch" functions to send requests       |-| OryHydra.Core      | core functions, config and request types            |-| OryHydra.API       | construct api requests                              |-| OryHydra.Model     | describes api models                                |-| OryHydra.MimeTypes | encoding/decoding MIME types (content-types/accept) |-| OryHydra.ModelLens | lenses for model fields                             |-| OryHydra.Logging   | logging functions and utils                         |+| ORYHydra.Client    | use the "dispatch" functions to send requests       |+| ORYHydra.Core      | core functions, config and request types            |+| ORYHydra.API       | construct api requests                              |+| ORYHydra.Model     | describes api models                                |+| ORYHydra.MimeTypes | encoding/decoding MIME types (content-types/accept) |+| ORYHydra.ModelLens | lenses for model fields                             |+| ORYHydra.Logging   | logging functions and utils                         |   ### MimeTypes
+ lib/ORYHydra.hs view
@@ -0,0 +1,31 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra+-}++module ORYHydra+  (  module ORYHydra.Client+  , module ORYHydra.Core+  , module ORYHydra.Logging+  , module ORYHydra.MimeTypes+  , module ORYHydra.Model+  , module ORYHydra.ModelLens+  ) where+++import ORYHydra.Client+import ORYHydra.Core+import ORYHydra.Logging+import ORYHydra.MimeTypes+import ORYHydra.Model+import ORYHydra.ModelLens
+ lib/ORYHydra/API/Jwk.hs view
@@ -0,0 +1,213 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.API.Jwk+-}++{-# LANGUAGE FlexibleContexts #-}+{-# LANGUAGE FlexibleInstances #-}+{-# LANGUAGE MonoLocalBinds #-}+{-# LANGUAGE MultiParamTypeClasses #-}+{-# LANGUAGE OverloadedStrings #-}+{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.API.Jwk where++import ORYHydra.Core+import ORYHydra.MimeTypes+import ORYHydra.Model as M++import qualified Data.Aeson as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Lazy as BL+import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)+import qualified Data.Foldable as P+import qualified Data.Map as Map+import qualified Data.Maybe as P+import qualified Data.Proxy as P (Proxy(..))+import qualified Data.Set as Set+import qualified Data.String as P+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Data.Text.Lazy as TL+import qualified Data.Text.Lazy.Encoding as TL+import qualified Data.Time as TI+import qualified Network.HTTP.Client.MultipartFormData as NH+import qualified Network.HTTP.Media as ME+import qualified Network.HTTP.Types as NH+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Data.Text (Text)+import GHC.Base ((<|>))++import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)+import qualified Prelude as P++-- * Operations+++-- ** Jwk++-- *** createJsonWebKeySet0++-- | @POST \/admin\/keys\/{set}@+-- +-- Create JSON Web Key+-- +-- This endpoint is capable of generating JSON Web Key Sets for you. There a different strategies available, such as symmetric cryptographic keys (HS256, HS512) and asymetric cryptographic keys (RS256, ECDSA). If the specified JSON Web Key Set does not exist, it will be created.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.+-- +createJsonWebKeySet0+  :: (Consumes CreateJsonWebKeySet0 MimeJSON, MimeRender MimeJSON CreateJsonWebKeySet)+  => CreateJsonWebKeySet -- ^ "createJsonWebKeySet"+  -> Set -- ^ "set" -  The JSON Web Key Set ID+  -> ORYHydraRequest CreateJsonWebKeySet0 MimeJSON JsonWebKeySet MimeJSON+createJsonWebKeySet0 createJsonWebKeySet (Set set) =+  _mkRequest "POST" ["/admin/keys/",toPath set]+    `setBodyParam` createJsonWebKeySet++data CreateJsonWebKeySet0 +instance HasBodyParam CreateJsonWebKeySet0 CreateJsonWebKeySet ++-- | @application/json@+instance Consumes CreateJsonWebKeySet0 MimeJSON++-- | @application/json@+instance Produces CreateJsonWebKeySet0 MimeJSON+++-- *** deleteJsonWebKey++-- | @DELETE \/admin\/keys\/{set}\/{kid}@+-- +-- Delete JSON Web Key+-- +-- Use this endpoint to delete a single JSON Web Key.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.+-- +deleteJsonWebKey+  :: Set -- ^ "set" -  The JSON Web Key Set+  -> Kid -- ^ "kid" -  The JSON Web Key ID (kid)+  -> ORYHydraRequest DeleteJsonWebKey MimeNoContent NoContent MimeNoContent+deleteJsonWebKey (Set set) (Kid kid) =+  _mkRequest "DELETE" ["/admin/keys/",toPath set,"/",toPath kid]++data DeleteJsonWebKey  +instance Produces DeleteJsonWebKey MimeNoContent+++-- *** deleteJsonWebKeySet++-- | @DELETE \/admin\/keys\/{set}@+-- +-- Delete JSON Web Key Set+-- +-- Use this endpoint to delete a complete JSON Web Key Set and all the keys in that set.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.+-- +deleteJsonWebKeySet+  :: Set -- ^ "set" -  The JSON Web Key Set+  -> ORYHydraRequest DeleteJsonWebKeySet MimeNoContent NoContent MimeNoContent+deleteJsonWebKeySet (Set set) =+  _mkRequest "DELETE" ["/admin/keys/",toPath set]++data DeleteJsonWebKeySet  +instance Produces DeleteJsonWebKeySet MimeNoContent+++-- *** getJsonWebKey++-- | @GET \/admin\/keys\/{set}\/{kid}@+-- +-- Get JSON Web Key+-- +-- This endpoint returns a singular JSON Web Key contained in a set. It is identified by the set and the specific key ID (kid).+-- +getJsonWebKey+  :: Set -- ^ "set" -  JSON Web Key Set ID+  -> Kid -- ^ "kid" -  JSON Web Key ID+  -> ORYHydraRequest GetJsonWebKey MimeNoContent JsonWebKeySet MimeJSON+getJsonWebKey (Set set) (Kid kid) =+  _mkRequest "GET" ["/admin/keys/",toPath set,"/",toPath kid]++data GetJsonWebKey  +-- | @application/json@+instance Produces GetJsonWebKey MimeJSON+++-- *** getJsonWebKeySet++-- | @GET \/admin\/keys\/{set}@+-- +-- Retrieve a JSON Web Key Set+-- +-- This endpoint can be used to retrieve JWK Sets stored in ORY Hydra.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.+-- +getJsonWebKeySet+  :: Set -- ^ "set" -  JSON Web Key Set ID+  -> ORYHydraRequest GetJsonWebKeySet MimeNoContent JsonWebKeySet MimeJSON+getJsonWebKeySet (Set set) =+  _mkRequest "GET" ["/admin/keys/",toPath set]++data GetJsonWebKeySet  +-- | @application/json@+instance Produces GetJsonWebKeySet MimeJSON+++-- *** setJsonWebKey++-- | @PUT \/admin\/keys\/{set}\/{kid}@+-- +-- Set JSON Web Key+-- +-- Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your own.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.+-- +setJsonWebKey+  :: (Consumes SetJsonWebKey MimeJSON)+  => Set -- ^ "set" -  The JSON Web Key Set ID+  -> Kid -- ^ "kid" -  JSON Web Key ID+  -> ORYHydraRequest SetJsonWebKey MimeJSON JsonWebKey MimeJSON+setJsonWebKey (Set set) (Kid kid) =+  _mkRequest "PUT" ["/admin/keys/",toPath set,"/",toPath kid]++data SetJsonWebKey +instance HasBodyParam SetJsonWebKey JsonWebKey ++-- | @application/json@+instance Consumes SetJsonWebKey MimeJSON++-- | @application/json@+instance Produces SetJsonWebKey MimeJSON+++-- *** setJsonWebKeySet++-- | @PUT \/admin\/keys\/{set}@+-- +-- Update a JSON Web Key Set+-- +-- Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your own.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.+-- +setJsonWebKeySet+  :: (Consumes SetJsonWebKeySet MimeJSON)+  => Set -- ^ "set" -  The JSON Web Key Set ID+  -> ORYHydraRequest SetJsonWebKeySet MimeJSON JsonWebKeySet MimeJSON+setJsonWebKeySet (Set set) =+  _mkRequest "PUT" ["/admin/keys/",toPath set]++data SetJsonWebKeySet +instance HasBodyParam SetJsonWebKeySet JsonWebKeySet ++-- | @application/json@+instance Consumes SetJsonWebKeySet MimeJSON++-- | @application/json@+instance Produces SetJsonWebKeySet MimeJSON+
+ lib/ORYHydra/API/Metadata.hs view
@@ -0,0 +1,113 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.API.Metadata+-}++{-# LANGUAGE FlexibleContexts #-}+{-# LANGUAGE FlexibleInstances #-}+{-# LANGUAGE MonoLocalBinds #-}+{-# LANGUAGE MultiParamTypeClasses #-}+{-# LANGUAGE OverloadedStrings #-}+{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.API.Metadata where++import ORYHydra.Core+import ORYHydra.MimeTypes+import ORYHydra.Model as M++import qualified Data.Aeson as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Lazy as BL+import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)+import qualified Data.Foldable as P+import qualified Data.Map as Map+import qualified Data.Maybe as P+import qualified Data.Proxy as P (Proxy(..))+import qualified Data.Set as Set+import qualified Data.String as P+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Data.Text.Lazy as TL+import qualified Data.Text.Lazy.Encoding as TL+import qualified Data.Time as TI+import qualified Network.HTTP.Client.MultipartFormData as NH+import qualified Network.HTTP.Media as ME+import qualified Network.HTTP.Types as NH+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Data.Text (Text)+import GHC.Base ((<|>))++import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)+import qualified Prelude as P++-- * Operations+++-- ** Metadata++-- *** getVersion++-- | @GET \/version@+-- +-- Return Running Software Version.+-- +-- This endpoint returns the version of Ory Hydra.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the version will never refer to the cluster state, only to a single instance.+-- +getVersion+  :: ORYHydraRequest GetVersion MimeNoContent GetVersion200Response MimeJSON+getVersion =+  _mkRequest "GET" ["/version"]++data GetVersion  +-- | @application/json@+instance Produces GetVersion MimeJSON+++-- *** isAlive++-- | @GET \/health\/alive@+-- +-- Check HTTP Server Status+-- +-- This endpoint returns a HTTP 200 status code when Ory Hydra is accepting incoming HTTP requests. This status does currently not include checks whether the database connection is working.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.+-- +isAlive+  :: ORYHydraRequest IsAlive MimeNoContent HealthStatus MimeJSON+isAlive =+  _mkRequest "GET" ["/health/alive"]++data IsAlive  +-- | @application/json@+instance Produces IsAlive MimeJSON+++-- *** isReady++-- | @GET \/health\/ready@+-- +-- Check HTTP Server and Database Status+-- +-- This endpoint returns a HTTP 200 status code when Ory Hydra is up running and the environment dependencies (e.g. the database) are responsive as well.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of Ory Hydra, the health status will never refer to the cluster state, only to a single instance.+-- +isReady+  :: ORYHydraRequest IsReady MimeNoContent IsReady200Response MimeJSON+isReady =+  _mkRequest "GET" ["/health/ready"]++data IsReady  +-- | @application/json@+instance Produces IsReady MimeJSON+
+ lib/ORYHydra/API/OAuth2.hs view
@@ -0,0 +1,771 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.API.OAuth2+-}++{-# LANGUAGE FlexibleContexts #-}+{-# LANGUAGE FlexibleInstances #-}+{-# LANGUAGE MonoLocalBinds #-}+{-# LANGUAGE MultiParamTypeClasses #-}+{-# LANGUAGE OverloadedStrings #-}+{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.API.OAuth2 where++import ORYHydra.Core+import ORYHydra.MimeTypes+import ORYHydra.Model as M++import qualified Data.Aeson as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Lazy as BL+import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)+import qualified Data.Foldable as P+import qualified Data.Map as Map+import qualified Data.Maybe as P+import qualified Data.Proxy as P (Proxy(..))+import qualified Data.Set as Set+import qualified Data.String as P+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Data.Text.Lazy as TL+import qualified Data.Text.Lazy.Encoding as TL+import qualified Data.Time as TI+import qualified Network.HTTP.Client.MultipartFormData as NH+import qualified Network.HTTP.Media as ME+import qualified Network.HTTP.Types as NH+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Data.Text (Text)+import GHC.Base ((<|>))++import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)+import qualified Prelude as P++-- * Operations+++-- ** OAuth2++-- *** acceptOAuth2ConsentRequest0++-- | @PUT \/admin\/oauth2\/auth\/requests\/consent\/accept@+-- +-- Accept OAuth 2.0 Consent Request+-- +-- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell Ory now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.  The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells Ory if the subject accepted or rejected the request.  This endpoint tells Ory that the subject has authorized the OAuth 2.0 client to access resources on his/her behalf. The consent provider includes additional information, such as session data for access and ID tokens, and if the consent request should be used as basis for future requests.  The response contains a redirect URL which the consent provider should redirect the user-agent to.  The default consent provider is available via the Ory Managed Account Experience. To customize the consent provider, please head over to the OAuth 2.0 documentation.+-- +acceptOAuth2ConsentRequest0+  :: (Consumes AcceptOAuth2ConsentRequest0 MimeJSON)+  => ConsentChallenge -- ^ "consentChallenge" -  OAuth 2.0 Consent Request Challenge+  -> ORYHydraRequest AcceptOAuth2ConsentRequest0 MimeJSON OAuth2RedirectTo MimeJSON+acceptOAuth2ConsentRequest0 (ConsentChallenge consentChallenge) =+  _mkRequest "PUT" ["/admin/oauth2/auth/requests/consent/accept"]+    `addQuery` toQuery ("consent_challenge", Just consentChallenge)++data AcceptOAuth2ConsentRequest0 +instance HasBodyParam AcceptOAuth2ConsentRequest0 AcceptOAuth2ConsentRequest ++-- | @application/json@+instance Consumes AcceptOAuth2ConsentRequest0 MimeJSON++-- | @application/json@+instance Produces AcceptOAuth2ConsentRequest0 MimeJSON+++-- *** acceptOAuth2LoginRequest0++-- | @PUT \/admin\/oauth2\/auth\/requests\/login\/accept@+-- +-- Accept OAuth 2.0 Login Request+-- +-- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell the Ory OAuth2 Service about it.  The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.  This endpoint tells Ory that the subject has successfully authenticated and includes additional information such as the subject's ID and if Ory should remember the subject's subject agent for future authentication attempts by setting a cookie.  The response contains a redirect URL which the login provider should redirect the user-agent to.+-- +acceptOAuth2LoginRequest0+  :: (Consumes AcceptOAuth2LoginRequest0 MimeJSON)+  => LoginChallenge -- ^ "loginChallenge" -  OAuth 2.0 Login Request Challenge+  -> ORYHydraRequest AcceptOAuth2LoginRequest0 MimeJSON OAuth2RedirectTo MimeJSON+acceptOAuth2LoginRequest0 (LoginChallenge loginChallenge) =+  _mkRequest "PUT" ["/admin/oauth2/auth/requests/login/accept"]+    `addQuery` toQuery ("login_challenge", Just loginChallenge)++data AcceptOAuth2LoginRequest0 +instance HasBodyParam AcceptOAuth2LoginRequest0 AcceptOAuth2LoginRequest ++-- | @application/json@+instance Consumes AcceptOAuth2LoginRequest0 MimeJSON++-- | @application/json@+instance Produces AcceptOAuth2LoginRequest0 MimeJSON+++-- *** acceptOAuth2LogoutRequest++-- | @PUT \/admin\/oauth2\/auth\/requests\/logout\/accept@+-- +-- Accept OAuth 2.0 Session Logout Request+-- +-- When a user or an application requests Ory OAuth 2.0 to remove the session state of a subject, this endpoint is used to confirm that logout request.  The response contains a redirect URL which the consent provider should redirect the user-agent to.+-- +acceptOAuth2LogoutRequest+  :: LogoutChallenge -- ^ "logoutChallenge" -  OAuth 2.0 Logout Request Challenge+  -> ORYHydraRequest AcceptOAuth2LogoutRequest MimeNoContent OAuth2RedirectTo MimeJSON+acceptOAuth2LogoutRequest (LogoutChallenge logoutChallenge) =+  _mkRequest "PUT" ["/admin/oauth2/auth/requests/logout/accept"]+    `addQuery` toQuery ("logout_challenge", Just logoutChallenge)++data AcceptOAuth2LogoutRequest  +-- | @application/json@+instance Produces AcceptOAuth2LogoutRequest MimeJSON+++-- *** createOAuth2Client++-- | @POST \/admin\/clients@+-- +-- Create OAuth 2.0 Client+-- +-- Create a new OAuth 2.0 client. If you pass `client_secret` the secret is used, otherwise a random secret is generated. The secret is echoed in the response. It is not possible to retrieve it later on.+-- +createOAuth2Client+  :: (Consumes CreateOAuth2Client MimeJSON, MimeRender MimeJSON OAuth2Client)+  => OAuth2Client -- ^ "oAuth2Client" -  OAuth 2.0 Client Request Body+  -> ORYHydraRequest CreateOAuth2Client MimeJSON OAuth2Client MimeJSON+createOAuth2Client oAuth2Client =+  _mkRequest "POST" ["/admin/clients"]+    `setBodyParam` oAuth2Client++data CreateOAuth2Client ++-- | /Body Param/ "OAuth2Client" - OAuth 2.0 Client Request Body+instance HasBodyParam CreateOAuth2Client OAuth2Client ++-- | @application/json@+instance Consumes CreateOAuth2Client MimeJSON++-- | @application/json@+instance Produces CreateOAuth2Client MimeJSON+++-- *** deleteOAuth2Client++-- | @DELETE \/admin\/clients\/{id}@+-- +-- Delete OAuth 2.0 Client+-- +-- Delete an existing OAuth 2.0 Client by its ID.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.  Make sure that this endpoint is well protected and only callable by first-party components.+-- +deleteOAuth2Client+  :: Id -- ^ "id" -  The id of the OAuth 2.0 Client.+  -> ORYHydraRequest DeleteOAuth2Client MimeNoContent NoContent MimeNoContent+deleteOAuth2Client (Id id) =+  _mkRequest "DELETE" ["/admin/clients/",toPath id]++data DeleteOAuth2Client  +instance Produces DeleteOAuth2Client MimeNoContent+++-- *** deleteOAuth2Token++-- | @DELETE \/admin\/oauth2\/tokens@+-- +-- Delete OAuth 2.0 Access Tokens from specific OAuth 2.0 Client+-- +-- This endpoint deletes OAuth2 access tokens issued to an OAuth 2.0 Client from the database.+-- +deleteOAuth2Token+  :: ClientId -- ^ "clientId" -  OAuth 2.0 Client ID+  -> ORYHydraRequest DeleteOAuth2Token MimeNoContent NoContent MimeNoContent+deleteOAuth2Token (ClientId clientId) =+  _mkRequest "DELETE" ["/admin/oauth2/tokens"]+    `addQuery` toQuery ("client_id", Just clientId)++data DeleteOAuth2Token  +instance Produces DeleteOAuth2Token MimeNoContent+++-- *** deleteTrustedOAuth2JwtGrantIssuer++-- | @DELETE \/admin\/trust\/grants\/jwt-bearer\/issuers\/{id}@+-- +-- Delete Trusted OAuth2 JWT Bearer Grant Type Issuer+-- +-- Use this endpoint to delete trusted JWT Bearer Grant Type Issuer. The ID is the one returned when you created the trust relationship.  Once deleted, the associated issuer will no longer be able to perform the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grant.+-- +deleteTrustedOAuth2JwtGrantIssuer+  :: Id -- ^ "id" -  The id of the desired grant+  -> ORYHydraRequest DeleteTrustedOAuth2JwtGrantIssuer MimeNoContent NoContent MimeNoContent+deleteTrustedOAuth2JwtGrantIssuer (Id id) =+  _mkRequest "DELETE" ["/admin/trust/grants/jwt-bearer/issuers/",toPath id]++data DeleteTrustedOAuth2JwtGrantIssuer  +instance Produces DeleteTrustedOAuth2JwtGrantIssuer MimeNoContent+++-- *** getOAuth2Client++-- | @GET \/admin\/clients\/{id}@+-- +-- Get an OAuth 2.0 Client+-- +-- Get an OAuth 2.0 client by its ID. This endpoint never returns the client secret.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.+-- +getOAuth2Client+  :: Id -- ^ "id" -  The id of the OAuth 2.0 Client.+  -> ORYHydraRequest GetOAuth2Client MimeNoContent OAuth2Client MimeJSON+getOAuth2Client (Id id) =+  _mkRequest "GET" ["/admin/clients/",toPath id]++data GetOAuth2Client  +-- | @application/json@+instance Produces GetOAuth2Client MimeJSON+++-- *** getOAuth2ConsentRequest++-- | @GET \/admin\/oauth2\/auth\/requests\/consent@+-- +-- Get OAuth 2.0 Consent Request+-- +-- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell Ory now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.  The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells Ory if the subject accepted or rejected the request.  The default consent provider is available via the Ory Managed Account Experience. To customize the consent provider, please head over to the OAuth 2.0 documentation.+-- +getOAuth2ConsentRequest+  :: ConsentChallenge -- ^ "consentChallenge" -  OAuth 2.0 Consent Request Challenge+  -> ORYHydraRequest GetOAuth2ConsentRequest MimeNoContent OAuth2ConsentRequest MimeJSON+getOAuth2ConsentRequest (ConsentChallenge consentChallenge) =+  _mkRequest "GET" ["/admin/oauth2/auth/requests/consent"]+    `addQuery` toQuery ("consent_challenge", Just consentChallenge)++data GetOAuth2ConsentRequest  +-- | @application/json@+instance Produces GetOAuth2ConsentRequest MimeJSON+++-- *** getOAuth2LoginRequest++-- | @GET \/admin\/oauth2\/auth\/requests\/login@+-- +-- Get OAuth 2.0 Login Request+-- +-- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell the Ory OAuth2 Service about it.  Per default, the login provider is Ory itself. You may use a different login provider which needs to be a web-app you write and host, and it must be able to authenticate (\"show the subject a login screen\") a subject (in OAuth2 the proper name for subject is \"resource owner\").  The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.+-- +getOAuth2LoginRequest+  :: LoginChallenge -- ^ "loginChallenge" -  OAuth 2.0 Login Request Challenge+  -> ORYHydraRequest GetOAuth2LoginRequest MimeNoContent OAuth2LoginRequest MimeJSON+getOAuth2LoginRequest (LoginChallenge loginChallenge) =+  _mkRequest "GET" ["/admin/oauth2/auth/requests/login"]+    `addQuery` toQuery ("login_challenge", Just loginChallenge)++data GetOAuth2LoginRequest  +-- | @application/json@+instance Produces GetOAuth2LoginRequest MimeJSON+++-- *** getOAuth2LogoutRequest++-- | @GET \/admin\/oauth2\/auth\/requests\/logout@+-- +-- Get OAuth 2.0 Session Logout Request+-- +-- Use this endpoint to fetch an Ory OAuth 2.0 logout request.+-- +getOAuth2LogoutRequest+  :: LogoutChallenge -- ^ "logoutChallenge"+  -> ORYHydraRequest GetOAuth2LogoutRequest MimeNoContent OAuth2LogoutRequest MimeJSON+getOAuth2LogoutRequest (LogoutChallenge logoutChallenge) =+  _mkRequest "GET" ["/admin/oauth2/auth/requests/logout"]+    `addQuery` toQuery ("logout_challenge", Just logoutChallenge)++data GetOAuth2LogoutRequest  +-- | @application/json@+instance Produces GetOAuth2LogoutRequest MimeJSON+++-- *** getTrustedOAuth2JwtGrantIssuer++-- | @GET \/admin\/trust\/grants\/jwt-bearer\/issuers\/{id}@+-- +-- Get Trusted OAuth2 JWT Bearer Grant Type Issuer+-- +-- Use this endpoint to get a trusted JWT Bearer Grant Type Issuer. The ID is the one returned when you created the trust relationship.+-- +getTrustedOAuth2JwtGrantIssuer+  :: Id -- ^ "id" -  The id of the desired grant+  -> ORYHydraRequest GetTrustedOAuth2JwtGrantIssuer MimeNoContent TrustedOAuth2JwtGrantIssuer MimeJSON+getTrustedOAuth2JwtGrantIssuer (Id id) =+  _mkRequest "GET" ["/admin/trust/grants/jwt-bearer/issuers/",toPath id]++data GetTrustedOAuth2JwtGrantIssuer  +-- | @application/json@+instance Produces GetTrustedOAuth2JwtGrantIssuer MimeJSON+++-- *** introspectOAuth2Token++-- | @POST \/admin\/oauth2\/introspect@+-- +-- Introspect OAuth2 Access and Refresh Tokens+-- +-- The introspection endpoint allows to check if a token (both refresh and access) is active or not. An active token is neither expired nor revoked. If a token is active, additional information on the token will be included. You can set additional data for a token by setting `session.access_token` during the consent flow.+-- +introspectOAuth2Token+  :: (Consumes IntrospectOAuth2Token MimeFormUrlEncoded)+  => Token -- ^ "token" -  The string value of the token. For access tokens, this is the \\\"access_token\\\" value returned from the token endpoint defined in OAuth 2.0. For refresh tokens, this is the \\\"refresh_token\\\" value returned.+  -> ORYHydraRequest IntrospectOAuth2Token MimeFormUrlEncoded IntrospectedOAuth2Token MimeJSON+introspectOAuth2Token (Token token) =+  _mkRequest "POST" ["/admin/oauth2/introspect"]+    `addForm` toForm ("token", token)++data IntrospectOAuth2Token  ++-- | /Optional Param/ "scope" - An optional, space separated list of required scopes. If the access token was not granted one of the scopes, the result of active will be false.+instance HasOptionalParam IntrospectOAuth2Token Scope where+  applyOptionalParam req (Scope xs) =+    req `addForm` toForm ("scope", xs)++-- | @application/x-www-form-urlencoded@+instance Consumes IntrospectOAuth2Token MimeFormUrlEncoded++-- | @application/json@+instance Produces IntrospectOAuth2Token MimeJSON+++-- *** listOAuth2Clients++-- | @GET \/admin\/clients@+-- +-- List OAuth 2.0 Clients+-- +-- This endpoint lists all clients in the database, and never returns client secrets. As a default it lists the first 100 clients.+-- +listOAuth2Clients+  :: ORYHydraRequest ListOAuth2Clients MimeNoContent [OAuth2Client] MimeJSON+listOAuth2Clients =+  _mkRequest "GET" ["/admin/clients"]++data ListOAuth2Clients  ++-- | /Optional Param/ "page_size" - Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+instance HasOptionalParam ListOAuth2Clients PageSize where+  applyOptionalParam req (PageSize xs) =+    req `addQuery` toQuery ("page_size", Just xs)++-- | /Optional Param/ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+instance HasOptionalParam ListOAuth2Clients PageToken where+  applyOptionalParam req (PageToken xs) =+    req `addQuery` toQuery ("page_token", Just xs)++-- | /Optional Param/ "client_name" - The name of the clients to filter by.+instance HasOptionalParam ListOAuth2Clients ClientName where+  applyOptionalParam req (ClientName xs) =+    req `addQuery` toQuery ("client_name", Just xs)++-- | /Optional Param/ "owner" - The owner of the clients to filter by.+instance HasOptionalParam ListOAuth2Clients Owner where+  applyOptionalParam req (Owner xs) =+    req `addQuery` toQuery ("owner", Just xs)+-- | @application/json@+instance Produces ListOAuth2Clients MimeJSON+++-- *** listOAuth2ConsentSessions++-- | @GET \/admin\/oauth2\/auth\/sessions\/consent@+-- +-- List OAuth 2.0 Consent Sessions of a Subject+-- +-- This endpoint lists all subject's granted consent sessions, including client and granted scope. If the subject is unknown or has not granted any consent sessions yet, the endpoint returns an empty JSON array with status code 200 OK.+-- +listOAuth2ConsentSessions+  :: Subject -- ^ "subject" -  The subject to list the consent sessions for.+  -> ORYHydraRequest ListOAuth2ConsentSessions MimeNoContent [OAuth2ConsentSession] MimeJSON+listOAuth2ConsentSessions (Subject subject) =+  _mkRequest "GET" ["/admin/oauth2/auth/sessions/consent"]+    `addQuery` toQuery ("subject", Just subject)++data ListOAuth2ConsentSessions  ++-- | /Optional Param/ "page_size" - Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+instance HasOptionalParam ListOAuth2ConsentSessions PageSize where+  applyOptionalParam req (PageSize xs) =+    req `addQuery` toQuery ("page_size", Just xs)++-- | /Optional Param/ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+instance HasOptionalParam ListOAuth2ConsentSessions PageToken where+  applyOptionalParam req (PageToken xs) =+    req `addQuery` toQuery ("page_token", Just xs)++-- | /Optional Param/ "login_session_id" - The login session id to list the consent sessions for.+instance HasOptionalParam ListOAuth2ConsentSessions LoginSessionId where+  applyOptionalParam req (LoginSessionId xs) =+    req `addQuery` toQuery ("login_session_id", Just xs)+-- | @application/json@+instance Produces ListOAuth2ConsentSessions MimeJSON+++-- *** listTrustedOAuth2JwtGrantIssuers++-- | @GET \/admin\/trust\/grants\/jwt-bearer\/issuers@+-- +-- List Trusted OAuth2 JWT Bearer Grant Type Issuers+-- +-- Use this endpoint to list all trusted JWT Bearer Grant Type Issuers.+-- +listTrustedOAuth2JwtGrantIssuers+  :: ORYHydraRequest ListTrustedOAuth2JwtGrantIssuers MimeNoContent [TrustedOAuth2JwtGrantIssuer] MimeJSON+listTrustedOAuth2JwtGrantIssuers =+  _mkRequest "GET" ["/admin/trust/grants/jwt-bearer/issuers"]++data ListTrustedOAuth2JwtGrantIssuers  +instance HasOptionalParam ListTrustedOAuth2JwtGrantIssuers MaxItems where+  applyOptionalParam req (MaxItems xs) =+    req `addQuery` toQuery ("MaxItems", Just xs)+instance HasOptionalParam ListTrustedOAuth2JwtGrantIssuers DefaultItems where+  applyOptionalParam req (DefaultItems xs) =+    req `addQuery` toQuery ("DefaultItems", Just xs)++-- | /Optional Param/ "issuer" - If optional \"issuer\" is supplied, only jwt-bearer grants with this issuer will be returned.+instance HasOptionalParam ListTrustedOAuth2JwtGrantIssuers Issuer where+  applyOptionalParam req (Issuer xs) =+    req `addQuery` toQuery ("issuer", Just xs)+-- | @application/json@+instance Produces ListTrustedOAuth2JwtGrantIssuers MimeJSON+++-- *** oAuth2Authorize++-- | @GET \/oauth2\/auth@+-- +-- OAuth 2.0 Authorize Endpoint+-- +-- Use open source libraries to perform OAuth 2.0 and OpenID Connect available for any programming language. You can find a list of libraries at https://oauth.net/code/  The Ory SDK is not yet able to this endpoint properly.+-- +oAuth2Authorize+  :: ORYHydraRequest OAuth2Authorize MimeNoContent ErrorOAuth2 MimeJSON+oAuth2Authorize =+  _mkRequest "GET" ["/oauth2/auth"]++data OAuth2Authorize  +-- | @application/json@+instance Produces OAuth2Authorize MimeJSON+++-- *** oauth2TokenExchange++-- | @POST \/oauth2\/token@+-- +-- The OAuth 2.0 Token Endpoint+-- +-- Use open source libraries to perform OAuth 2.0 and OpenID Connect available for any programming language. You can find a list of libraries here https://oauth.net/code/  The Ory SDK is not yet able to this endpoint properly.+-- +-- AuthMethod: 'AuthBasicBasic', 'AuthOAuthOauth2'+-- +oauth2TokenExchange+  :: (Consumes Oauth2TokenExchange MimeFormUrlEncoded)+  => GrantType -- ^ "grantType"+  -> ORYHydraRequest Oauth2TokenExchange MimeFormUrlEncoded OAuth2TokenExchange MimeJSON+oauth2TokenExchange (GrantType grantType) =+  _mkRequest "POST" ["/oauth2/token"]+    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBasic)+    `_hasAuthType` (P.Proxy :: P.Proxy AuthOAuthOauth2)+    `addForm` toForm ("grant_type", grantType)++data Oauth2TokenExchange  +instance HasOptionalParam Oauth2TokenExchange ClientId where+  applyOptionalParam req (ClientId xs) =+    req `addForm` toForm ("client_id", xs)+instance HasOptionalParam Oauth2TokenExchange Code where+  applyOptionalParam req (Code xs) =+    req `addForm` toForm ("code", xs)+instance HasOptionalParam Oauth2TokenExchange RedirectUri where+  applyOptionalParam req (RedirectUri xs) =+    req `addForm` toForm ("redirect_uri", xs)+instance HasOptionalParam Oauth2TokenExchange RefreshToken where+  applyOptionalParam req (RefreshToken xs) =+    req `addForm` toForm ("refresh_token", xs)++-- | @application/x-www-form-urlencoded@+instance Consumes Oauth2TokenExchange MimeFormUrlEncoded++-- | @application/json@+instance Produces Oauth2TokenExchange MimeJSON+++-- *** patchOAuth2Client++-- | @PATCH \/admin\/clients\/{id}@+-- +-- Patch OAuth 2.0 Client+-- +-- Patch an existing OAuth 2.0 Client using JSON Patch. If you pass `client_secret` the secret will be updated and returned via the API. This is the only time you will be able to retrieve the client secret, so write it down and keep it safe.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.+-- +patchOAuth2Client+  :: (Consumes PatchOAuth2Client MimeJSON, MimeRender MimeJSON JsonPatch2)+  => JsonPatch2 -- ^ "jsonPatch" -  OAuth 2.0 Client JSON Patch Body+  -> Id -- ^ "id" -  The id of the OAuth 2.0 Client.+  -> ORYHydraRequest PatchOAuth2Client MimeJSON OAuth2Client MimeJSON+patchOAuth2Client jsonPatch (Id id) =+  _mkRequest "PATCH" ["/admin/clients/",toPath id]+    `setBodyParam` jsonPatch++data PatchOAuth2Client ++-- | /Body Param/ "JsonPatch" - OAuth 2.0 Client JSON Patch Body+instance HasBodyParam PatchOAuth2Client JsonPatch2 ++-- | @application/json@+instance Consumes PatchOAuth2Client MimeJSON++-- | @application/json@+instance Produces PatchOAuth2Client MimeJSON+++-- *** rejectOAuth2ConsentRequest++-- | @PUT \/admin\/oauth2\/auth\/requests\/consent\/reject@+-- +-- Reject OAuth 2.0 Consent Request+-- +-- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell Ory now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.  The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells Ory if the subject accepted or rejected the request.  This endpoint tells Ory that the subject has not authorized the OAuth 2.0 client to access resources on his/her behalf. The consent provider must include a reason why the consent was not granted.  The response contains a redirect URL which the consent provider should redirect the user-agent to.  The default consent provider is available via the Ory Managed Account Experience. To customize the consent provider, please head over to the OAuth 2.0 documentation.+-- +rejectOAuth2ConsentRequest+  :: (Consumes RejectOAuth2ConsentRequest MimeJSON)+  => ConsentChallenge -- ^ "consentChallenge" -  OAuth 2.0 Consent Request Challenge+  -> ORYHydraRequest RejectOAuth2ConsentRequest MimeJSON OAuth2RedirectTo MimeJSON+rejectOAuth2ConsentRequest (ConsentChallenge consentChallenge) =+  _mkRequest "PUT" ["/admin/oauth2/auth/requests/consent/reject"]+    `addQuery` toQuery ("consent_challenge", Just consentChallenge)++data RejectOAuth2ConsentRequest +instance HasBodyParam RejectOAuth2ConsentRequest RejectOAuth2Request ++-- | @application/json@+instance Consumes RejectOAuth2ConsentRequest MimeJSON++-- | @application/json@+instance Produces RejectOAuth2ConsentRequest MimeJSON+++-- *** rejectOAuth2LoginRequest++-- | @PUT \/admin\/oauth2\/auth\/requests\/login\/reject@+-- +-- Reject OAuth 2.0 Login Request+-- +-- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell the Ory OAuth2 Service about it.  The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.  This endpoint tells Ory that the subject has not authenticated and includes a reason why the authentication was denied.  The response contains a redirect URL which the login provider should redirect the user-agent to.+-- +rejectOAuth2LoginRequest+  :: (Consumes RejectOAuth2LoginRequest MimeJSON)+  => LoginChallenge -- ^ "loginChallenge" -  OAuth 2.0 Login Request Challenge+  -> ORYHydraRequest RejectOAuth2LoginRequest MimeJSON OAuth2RedirectTo MimeJSON+rejectOAuth2LoginRequest (LoginChallenge loginChallenge) =+  _mkRequest "PUT" ["/admin/oauth2/auth/requests/login/reject"]+    `addQuery` toQuery ("login_challenge", Just loginChallenge)++data RejectOAuth2LoginRequest +instance HasBodyParam RejectOAuth2LoginRequest RejectOAuth2Request ++-- | @application/json@+instance Consumes RejectOAuth2LoginRequest MimeJSON++-- | @application/json@+instance Produces RejectOAuth2LoginRequest MimeJSON+++-- *** rejectOAuth2LogoutRequest++-- | @PUT \/admin\/oauth2\/auth\/requests\/logout\/reject@+-- +-- Reject OAuth 2.0 Session Logout Request+-- +-- When a user or an application requests Ory OAuth 2.0 to remove the session state of a subject, this endpoint is used to deny that logout request. No HTTP request body is required.  The response is empty as the logout provider has to chose what action to perform next.+-- +rejectOAuth2LogoutRequest+  :: LogoutChallenge -- ^ "logoutChallenge"+  -> ORYHydraRequest RejectOAuth2LogoutRequest MimeNoContent NoContent MimeNoContent+rejectOAuth2LogoutRequest (LogoutChallenge logoutChallenge) =+  _mkRequest "PUT" ["/admin/oauth2/auth/requests/logout/reject"]+    `addQuery` toQuery ("logout_challenge", Just logoutChallenge)++data RejectOAuth2LogoutRequest  +instance Produces RejectOAuth2LogoutRequest MimeNoContent+++-- *** revokeOAuth2ConsentSessions++-- | @DELETE \/admin\/oauth2\/auth\/sessions\/consent@+-- +-- Revoke OAuth 2.0 Consent Sessions of a Subject+-- +-- This endpoint revokes a subject's granted consent sessions and invalidates all associated OAuth 2.0 Access Tokens. You may also only revoke sessions for a specific OAuth 2.0 Client ID.+-- +revokeOAuth2ConsentSessions+  :: Subject -- ^ "subject" -  OAuth 2.0 Consent Subject  The subject whose consent sessions should be deleted.+  -> ORYHydraRequest RevokeOAuth2ConsentSessions MimeNoContent NoContent MimeNoContent+revokeOAuth2ConsentSessions (Subject subject) =+  _mkRequest "DELETE" ["/admin/oauth2/auth/sessions/consent"]+    `addQuery` toQuery ("subject", Just subject)++data RevokeOAuth2ConsentSessions  ++-- | /Optional Param/ "client" - OAuth 2.0 Client ID  If set, deletes only those consent sessions that have been granted to the specified OAuth 2.0 Client ID.+instance HasOptionalParam RevokeOAuth2ConsentSessions Client where+  applyOptionalParam req (Client xs) =+    req `addQuery` toQuery ("client", Just xs)++-- | /Optional Param/ "all" - Revoke All Consent Sessions  If set to `true` deletes all consent sessions by the Subject that have been granted.+instance HasOptionalParam RevokeOAuth2ConsentSessions All where+  applyOptionalParam req (All xs) =+    req `addQuery` toQuery ("all", Just xs)+instance Produces RevokeOAuth2ConsentSessions MimeNoContent+++-- *** revokeOAuth2LoginSessions++-- | @DELETE \/admin\/oauth2\/auth\/sessions\/login@+-- +-- Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID+-- +-- This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpennID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.+-- +revokeOAuth2LoginSessions+  :: ORYHydraRequest RevokeOAuth2LoginSessions MimeNoContent NoContent MimeNoContent+revokeOAuth2LoginSessions =+  _mkRequest "DELETE" ["/admin/oauth2/auth/sessions/login"]++data RevokeOAuth2LoginSessions  ++-- | /Optional Param/ "subject" - OAuth 2.0 Subject  The subject to revoke authentication sessions for.+instance HasOptionalParam RevokeOAuth2LoginSessions Subject where+  applyOptionalParam req (Subject xs) =+    req `addQuery` toQuery ("subject", Just xs)++-- | /Optional Param/ "sid" - OAuth 2.0 Subject  The subject to revoke authentication sessions for.+instance HasOptionalParam RevokeOAuth2LoginSessions Sid where+  applyOptionalParam req (Sid xs) =+    req `addQuery` toQuery ("sid", Just xs)+instance Produces RevokeOAuth2LoginSessions MimeNoContent+++-- *** revokeOAuth2Token++-- | @POST \/oauth2\/revoke@+-- +-- Revoke OAuth 2.0 Access or Refresh Token+-- +-- Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access token can no longer be used to make access requests, and a revoked refresh token can no longer be used to refresh an access token. Revoking a refresh token also invalidates the access token that was created with it. A token may only be revoked by the client the token was generated for.+-- +-- AuthMethod: 'AuthBasicBasic', 'AuthOAuthOauth2'+-- +revokeOAuth2Token+  :: (Consumes RevokeOAuth2Token MimeFormUrlEncoded)+  => Token -- ^ "token"+  -> ORYHydraRequest RevokeOAuth2Token MimeFormUrlEncoded NoContent MimeNoContent+revokeOAuth2Token (Token token) =+  _mkRequest "POST" ["/oauth2/revoke"]+    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBasic)+    `_hasAuthType` (P.Proxy :: P.Proxy AuthOAuthOauth2)+    `addForm` toForm ("token", token)++data RevokeOAuth2Token  +instance HasOptionalParam RevokeOAuth2Token ClientId where+  applyOptionalParam req (ClientId xs) =+    req `addForm` toForm ("client_id", xs)+instance HasOptionalParam RevokeOAuth2Token ClientSecret where+  applyOptionalParam req (ClientSecret xs) =+    req `addForm` toForm ("client_secret", xs)++-- | @application/x-www-form-urlencoded@+instance Consumes RevokeOAuth2Token MimeFormUrlEncoded++instance Produces RevokeOAuth2Token MimeNoContent+++-- *** setOAuth2Client++-- | @PUT \/admin\/clients\/{id}@+-- +-- Set OAuth 2.0 Client+-- +-- Replaces an existing OAuth 2.0 Client with the payload you send. If you pass `client_secret` the secret is used, otherwise the existing secret is used.  If set, the secret is echoed in the response. It is not possible to retrieve it later on.  OAuth 2.0 Clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.+-- +setOAuth2Client+  :: (Consumes SetOAuth2Client MimeJSON, MimeRender MimeJSON OAuth2Client)+  => OAuth2Client -- ^ "oAuth2Client" -  OAuth 2.0 Client Request Body+  -> Id -- ^ "id" -  OAuth 2.0 Client ID+  -> ORYHydraRequest SetOAuth2Client MimeJSON OAuth2Client MimeJSON+setOAuth2Client oAuth2Client (Id id) =+  _mkRequest "PUT" ["/admin/clients/",toPath id]+    `setBodyParam` oAuth2Client++data SetOAuth2Client ++-- | /Body Param/ "OAuth2Client" - OAuth 2.0 Client Request Body+instance HasBodyParam SetOAuth2Client OAuth2Client ++-- | @application/json@+instance Consumes SetOAuth2Client MimeJSON++-- | @application/json@+instance Produces SetOAuth2Client MimeJSON+++-- *** setOAuth2ClientLifespans++-- | @PUT \/admin\/clients\/{id}\/lifespans@+-- +-- Set OAuth2 Client Token Lifespans+-- +-- Set lifespans of different token types issued for this OAuth 2.0 client. Does not modify other fields.+-- +setOAuth2ClientLifespans+  :: (Consumes SetOAuth2ClientLifespans MimeJSON)+  => Id -- ^ "id" -  OAuth 2.0 Client ID+  -> ORYHydraRequest SetOAuth2ClientLifespans MimeJSON OAuth2Client MimeJSON+setOAuth2ClientLifespans (Id id) =+  _mkRequest "PUT" ["/admin/clients/",toPath id,"/lifespans"]++data SetOAuth2ClientLifespans +instance HasBodyParam SetOAuth2ClientLifespans OAuth2ClientTokenLifespans ++-- | @application/json@+instance Consumes SetOAuth2ClientLifespans MimeJSON++-- | @application/json@+instance Produces SetOAuth2ClientLifespans MimeJSON+++-- *** trustOAuth2JwtGrantIssuer0++-- | @POST \/admin\/trust\/grants\/jwt-bearer\/issuers@+-- +-- Trust OAuth2 JWT Bearer Grant Type Issuer+-- +-- Use this endpoint to establish a trust relationship for a JWT issuer to perform JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants [RFC7523](https://datatracker.ietf.org/doc/html/rfc7523).+-- +trustOAuth2JwtGrantIssuer0+  :: (Consumes TrustOAuth2JwtGrantIssuer0 MimeJSON)+  => ORYHydraRequest TrustOAuth2JwtGrantIssuer0 MimeJSON TrustedOAuth2JwtGrantIssuer MimeJSON+trustOAuth2JwtGrantIssuer0 =+  _mkRequest "POST" ["/admin/trust/grants/jwt-bearer/issuers"]++data TrustOAuth2JwtGrantIssuer0 +instance HasBodyParam TrustOAuth2JwtGrantIssuer0 TrustOAuth2JwtGrantIssuer ++-- | @application/json@+instance Consumes TrustOAuth2JwtGrantIssuer0 MimeJSON++-- | @application/json@+instance Produces TrustOAuth2JwtGrantIssuer0 MimeJSON+
+ lib/ORYHydra/API/Oidc.hs view
@@ -0,0 +1,218 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.API.Oidc+-}++{-# LANGUAGE FlexibleContexts #-}+{-# LANGUAGE FlexibleInstances #-}+{-# LANGUAGE MonoLocalBinds #-}+{-# LANGUAGE MultiParamTypeClasses #-}+{-# LANGUAGE OverloadedStrings #-}+{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.API.Oidc where++import ORYHydra.Core+import ORYHydra.MimeTypes+import ORYHydra.Model as M++import qualified Data.Aeson as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Lazy as BL+import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)+import qualified Data.Foldable as P+import qualified Data.Map as Map+import qualified Data.Maybe as P+import qualified Data.Proxy as P (Proxy(..))+import qualified Data.Set as Set+import qualified Data.String as P+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Data.Text.Lazy as TL+import qualified Data.Text.Lazy.Encoding as TL+import qualified Data.Time as TI+import qualified Network.HTTP.Client.MultipartFormData as NH+import qualified Network.HTTP.Media as ME+import qualified Network.HTTP.Types as NH+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Data.Text (Text)+import GHC.Base ((<|>))++import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)+import qualified Prelude as P++-- * Operations+++-- ** Oidc++-- *** createOidcDynamicClient++-- | @POST \/oauth2\/register@+-- +-- Register OAuth2 Client using OpenID Dynamic Client Registration+-- +-- This endpoint behaves like the administrative counterpart (`createOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol. This feature needs to be enabled in the configuration. This endpoint is disabled by default. It can be enabled by an administrator.  Please note that using this endpoint you are not able to choose the `client_secret` nor the `client_id` as those values will be server generated when specifying `token_endpoint_auth_method` as `client_secret_basic` or `client_secret_post`.  The `client_secret` will be returned in the response and you will not be able to retrieve it later on. Write the secret down and keep it somewhere safe.+-- +createOidcDynamicClient+  :: (Consumes CreateOidcDynamicClient MimeJSON, MimeRender MimeJSON OAuth2Client)+  => OAuth2Client -- ^ "oAuth2Client" -  Dynamic Client Registration Request Body+  -> ORYHydraRequest CreateOidcDynamicClient MimeJSON OAuth2Client MimeJSON+createOidcDynamicClient oAuth2Client =+  _mkRequest "POST" ["/oauth2/register"]+    `setBodyParam` oAuth2Client++data CreateOidcDynamicClient ++-- | /Body Param/ "OAuth2Client" - Dynamic Client Registration Request Body+instance HasBodyParam CreateOidcDynamicClient OAuth2Client ++-- | @application/json@+instance Consumes CreateOidcDynamicClient MimeJSON++-- | @application/json@+instance Produces CreateOidcDynamicClient MimeJSON+++-- *** deleteOidcDynamicClient++-- | @DELETE \/oauth2\/register\/{id}@+-- +-- Delete OAuth 2.0 Client using the OpenID Dynamic Client Registration Management Protocol+-- +-- This endpoint behaves like the administrative counterpart (`deleteOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol. This feature needs to be enabled in the configuration. This endpoint is disabled by default. It can be enabled by an administrator.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.+-- +-- AuthMethod: 'AuthBasicBearer'+-- +deleteOidcDynamicClient+  :: Id -- ^ "id" -  The id of the OAuth 2.0 Client.+  -> ORYHydraRequest DeleteOidcDynamicClient MimeNoContent NoContent MimeNoContent+deleteOidcDynamicClient (Id id) =+  _mkRequest "DELETE" ["/oauth2/register/",toPath id]+    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBearer)++data DeleteOidcDynamicClient  +instance Produces DeleteOidcDynamicClient MimeNoContent+++-- *** discoverOidcConfiguration++-- | @GET \/.well-known\/openid-configuration@+-- +-- OpenID Connect Discovery+-- +-- A mechanism for an OpenID Connect Relying Party to discover the End-User's OpenID Provider and obtain information needed to interact with it, including its OAuth 2.0 endpoint locations.  Popular libraries for OpenID Connect clients include oidc-client-js (JavaScript), go-oidc (Golang), and others. For a full list of clients go here: https://openid.net/developers/certified/+-- +discoverOidcConfiguration+  :: ORYHydraRequest DiscoverOidcConfiguration MimeNoContent OidcConfiguration MimeJSON+discoverOidcConfiguration =+  _mkRequest "GET" ["/.well-known/openid-configuration"]++data DiscoverOidcConfiguration  +-- | @application/json@+instance Produces DiscoverOidcConfiguration MimeJSON+++-- *** getOidcDynamicClient++-- | @GET \/oauth2\/register\/{id}@+-- +-- Get OAuth2 Client using OpenID Dynamic Client Registration+-- +-- This endpoint behaves like the administrative counterpart (`getOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.+-- +-- AuthMethod: 'AuthBasicBearer'+-- +getOidcDynamicClient+  :: Id -- ^ "id" -  The id of the OAuth 2.0 Client.+  -> ORYHydraRequest GetOidcDynamicClient MimeNoContent OAuth2Client MimeJSON+getOidcDynamicClient (Id id) =+  _mkRequest "GET" ["/oauth2/register/",toPath id]+    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBearer)++data GetOidcDynamicClient  +-- | @application/json@+instance Produces GetOidcDynamicClient MimeJSON+++-- *** getOidcUserInfo++-- | @GET \/userinfo@+-- +-- OpenID Connect Userinfo+-- +-- This endpoint returns the payload of the ID Token, including `session.id_token` values, of the provided OAuth 2.0 Access Token's consent request.  In the case of authentication error, a WWW-Authenticate header might be set in the response with more information about the error. See [the spec](https://datatracker.ietf.org/doc/html/rfc6750#section-3) for more details about header format.+-- +-- AuthMethod: 'AuthOAuthOauth2'+-- +getOidcUserInfo+  :: ORYHydraRequest GetOidcUserInfo MimeNoContent OidcUserInfo MimeJSON+getOidcUserInfo =+  _mkRequest "GET" ["/userinfo"]+    `_hasAuthType` (P.Proxy :: P.Proxy AuthOAuthOauth2)++data GetOidcUserInfo  +-- | @application/json@+instance Produces GetOidcUserInfo MimeJSON+++-- *** revokeOidcSession++-- | @GET \/oauth2\/sessions\/logout@+-- +-- OpenID Connect Front- and Back-channel Enabled Logout+-- +-- This endpoint initiates and completes user logout at the Ory OAuth2 & OpenID provider and initiates OpenID Connect Front- / Back-channel logout:  https://openid.net/specs/openid-connect-frontchannel-1_0.html https://openid.net/specs/openid-connect-backchannel-1_0.html  Back-channel logout is performed asynchronously and does not affect logout flow.+-- +revokeOidcSession+  :: ORYHydraRequest RevokeOidcSession MimeNoContent NoContent MimeNoContent+revokeOidcSession =+  _mkRequest "GET" ["/oauth2/sessions/logout"]++data RevokeOidcSession  +instance Produces RevokeOidcSession MimeNoContent+++-- *** setOidcDynamicClient++-- | @PUT \/oauth2\/register\/{id}@+-- +-- Set OAuth2 Client using OpenID Dynamic Client Registration+-- +-- This endpoint behaves like the administrative counterpart (`setOAuth2Client`) but is capable of facing the public internet directly to be used by third parties. It implements the OpenID Connect Dynamic Client Registration Protocol.  This feature is disabled per default. It can be enabled by a system administrator.  If you pass `client_secret` the secret is used, otherwise the existing secret is used. If set, the secret is echoed in the response. It is not possible to retrieve it later on.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.+-- +-- AuthMethod: 'AuthBasicBearer'+-- +setOidcDynamicClient+  :: (Consumes SetOidcDynamicClient MimeJSON, MimeRender MimeJSON OAuth2Client)+  => OAuth2Client -- ^ "oAuth2Client" -  OAuth 2.0 Client Request Body+  -> Id -- ^ "id" -  OAuth 2.0 Client ID+  -> ORYHydraRequest SetOidcDynamicClient MimeJSON OAuth2Client MimeJSON+setOidcDynamicClient oAuth2Client (Id id) =+  _mkRequest "PUT" ["/oauth2/register/",toPath id]+    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBearer)+    `setBodyParam` oAuth2Client++data SetOidcDynamicClient ++-- | /Body Param/ "OAuth2Client" - OAuth 2.0 Client Request Body+instance HasBodyParam SetOidcDynamicClient OAuth2Client ++-- | @application/json@+instance Consumes SetOidcDynamicClient MimeJSON++-- | @application/json@+instance Produces SetOidcDynamicClient MimeJSON+
+ lib/ORYHydra/API/Wellknown.hs view
@@ -0,0 +1,77 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.API.Wellknown+-}++{-# LANGUAGE FlexibleContexts #-}+{-# LANGUAGE FlexibleInstances #-}+{-# LANGUAGE MonoLocalBinds #-}+{-# LANGUAGE MultiParamTypeClasses #-}+{-# LANGUAGE OverloadedStrings #-}+{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.API.Wellknown where++import ORYHydra.Core+import ORYHydra.MimeTypes+import ORYHydra.Model as M++import qualified Data.Aeson as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Lazy as BL+import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)+import qualified Data.Foldable as P+import qualified Data.Map as Map+import qualified Data.Maybe as P+import qualified Data.Proxy as P (Proxy(..))+import qualified Data.Set as Set+import qualified Data.String as P+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Data.Text.Lazy as TL+import qualified Data.Text.Lazy.Encoding as TL+import qualified Data.Time as TI+import qualified Network.HTTP.Client.MultipartFormData as NH+import qualified Network.HTTP.Media as ME+import qualified Network.HTTP.Types as NH+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Data.Text (Text)+import GHC.Base ((<|>))++import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)+import qualified Prelude as P++-- * Operations+++-- ** Wellknown++-- *** discoverJsonWebKeys++-- | @GET \/.well-known\/jwks.json@+-- +-- Discover Well-Known JSON Web Keys+-- +-- This endpoint returns JSON Web Keys required to verifying OpenID Connect ID Tokens and, if enabled, OAuth 2.0 JWT Access Tokens. This endpoint can be used with client libraries like [node-jwks-rsa](https://github.com/auth0/node-jwks-rsa) among others.+-- +discoverJsonWebKeys+  :: ORYHydraRequest DiscoverJsonWebKeys MimeNoContent JsonWebKeySet MimeJSON+discoverJsonWebKeys =+  _mkRequest "GET" ["/.well-known/jwks.json"]++data DiscoverJsonWebKeys  +-- | @application/json@+instance Produces DiscoverJsonWebKeys MimeJSON+
+ lib/ORYHydra/Client.hs view
@@ -0,0 +1,224 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.Client+-}++{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RankNTypes #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE FlexibleContexts #-}+{-# LANGUAGE ScopedTypeVariables #-}+{-# LANGUAGE DeriveFunctor #-}+{-# LANGUAGE DeriveFoldable #-}+{-# LANGUAGE DeriveTraversable #-}+{-# OPTIONS_GHC -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.Client where++import ORYHydra.Core+import ORYHydra.Logging+import ORYHydra.MimeTypes++import qualified Control.Exception.Safe as E+import qualified Control.Monad.IO.Class as P+import qualified Control.Monad as P+import qualified Data.Aeson.Types as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Char8 as BC+import qualified Data.ByteString.Lazy as BL+import qualified Data.ByteString.Lazy.Char8 as BCL+import qualified Data.Proxy as P (Proxy(..))+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Network.HTTP.Client as NH+import qualified Network.HTTP.Client.MultipartFormData as NH+import qualified Network.HTTP.Types as NH+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Data.Function ((&))+import Data.Monoid ((<>))+import Data.Text (Text)+import GHC.Exts (IsString(..))++-- * Dispatch++-- ** Lbs++-- | send a request returning the raw http response+dispatchLbs+  :: (Produces req accept, MimeType contentType)+  => NH.Manager -- ^ http-client Connection manager+  -> ORYHydraConfig -- ^ config+  -> ORYHydraRequest req contentType res accept -- ^ request+  -> IO (NH.Response BCL.ByteString) -- ^ response+dispatchLbs manager config request  = do+  initReq <- _toInitRequest config request+  dispatchInitUnsafe manager config initReq++-- ** Mime++-- | pair of decoded http body and http response+data MimeResult res =+  MimeResult { mimeResult :: Either MimeError res -- ^ decoded http body+             , mimeResultResponse :: NH.Response BCL.ByteString -- ^ http response+             }+  deriving (Show, Functor, Foldable, Traversable)++-- | pair of unrender/parser error and http response+data MimeError =+  MimeError {+    mimeError :: String -- ^ unrender/parser error+  , mimeErrorResponse :: NH.Response BCL.ByteString -- ^ http response+  } deriving (Show)++-- | send a request returning the 'MimeResult'+dispatchMime+  :: forall req contentType res accept. (Produces req accept, MimeUnrender accept res, MimeType contentType)+  => NH.Manager -- ^ http-client Connection manager+  -> ORYHydraConfig -- ^ config+  -> ORYHydraRequest req contentType res accept -- ^ request+  -> IO (MimeResult res) -- ^ response+dispatchMime manager config request = do+  httpResponse <- dispatchLbs manager config request+  let statusCode = NH.statusCode . NH.responseStatus $ httpResponse+  parsedResult <-+    runConfigLogWithExceptions "Client" config $+    do if (statusCode >= 400 && statusCode < 600)+         then do+           let s = "error statusCode: " ++ show statusCode+           _log "Client" levelError (T.pack s)+           pure (Left (MimeError s httpResponse))+         else case mimeUnrender (P.Proxy :: P.Proxy accept) (NH.responseBody httpResponse) of+           Left s -> do+             _log "Client" levelError (T.pack s)+             pure (Left (MimeError s httpResponse))+           Right r -> pure (Right r)+  return (MimeResult parsedResult httpResponse)++-- | like 'dispatchMime', but only returns the decoded http body+dispatchMime'+  :: (Produces req accept, MimeUnrender accept res, MimeType contentType)+  => NH.Manager -- ^ http-client Connection manager+  -> ORYHydraConfig -- ^ config+  -> ORYHydraRequest req contentType res accept -- ^ request+  -> IO (Either MimeError res) -- ^ response+dispatchMime' manager config request  = do+    MimeResult parsedResult _ <- dispatchMime manager config request+    return parsedResult++-- ** Unsafe++-- | like 'dispatchReqLbs', but does not validate the operation is a 'Producer' of the "accept" 'MimeType'.  (Useful if the server's response is undocumented)+dispatchLbsUnsafe+  :: (MimeType accept, MimeType contentType)+  => NH.Manager -- ^ http-client Connection manager+  -> ORYHydraConfig -- ^ config+  -> ORYHydraRequest req contentType res accept -- ^ request+  -> IO (NH.Response BCL.ByteString) -- ^ response+dispatchLbsUnsafe manager config request  = do+  initReq <- _toInitRequest config request+  dispatchInitUnsafe manager config initReq++-- | dispatch an InitRequest+dispatchInitUnsafe+  :: NH.Manager -- ^ http-client Connection manager+  -> ORYHydraConfig -- ^ config+  -> InitRequest req contentType res accept -- ^ init request+  -> IO (NH.Response BCL.ByteString) -- ^ response+dispatchInitUnsafe manager config (InitRequest req) = do+  runConfigLogWithExceptions src config $+    do _log src levelInfo requestLogMsg+       _log src levelDebug requestDbgLogMsg+       res <- P.liftIO $ NH.httpLbs req manager+       _log src levelInfo (responseLogMsg res)+       _log src levelDebug ((T.pack . show) res)+       return res+  where+    src = "Client"+    endpoint =+      T.pack $+      BC.unpack $+      NH.method req <> " " <> NH.host req <> NH.path req <> NH.queryString req+    requestLogMsg = "REQ:" <> endpoint+    requestDbgLogMsg =+      "Headers=" <> (T.pack . show) (NH.requestHeaders req) <> " Body=" <>+      (case NH.requestBody req of+         NH.RequestBodyLBS xs -> T.decodeUtf8 (BL.toStrict xs)+         _ -> "<RequestBody>")+    responseStatusCode = (T.pack . show) . NH.statusCode . NH.responseStatus+    responseLogMsg res =+      "RES:statusCode=" <> responseStatusCode res <> " (" <> endpoint <> ")"++-- * InitRequest++-- | wraps an http-client 'Request' with request/response type parameters+newtype InitRequest req contentType res accept = InitRequest+  { unInitRequest :: NH.Request+  } deriving (Show)++-- |  Build an http-client 'Request' record from the supplied config and request+_toInitRequest+  :: (MimeType accept, MimeType contentType)+  => ORYHydraConfig -- ^ config+  -> ORYHydraRequest req contentType res accept -- ^ request+  -> IO (InitRequest req contentType res accept) -- ^ initialized request+_toInitRequest config req0  =+  runConfigLogWithExceptions "Client" config $ do+    parsedReq <- P.liftIO $ NH.parseRequest $ BCL.unpack $ BCL.append (configHost config) (BCL.concat (rUrlPath req0))+    req1 <- P.liftIO $ _applyAuthMethods req0 config+    P.when+        (configValidateAuthMethods config && (not . null . rAuthTypes) req1)+        (E.throw $ AuthMethodException $ "AuthMethod not configured: " <> (show . head . rAuthTypes) req1)+    let req2 = req1 & _setContentTypeHeader & _setAcceptHeader+        params = rParams req2+        reqHeaders = ("User-Agent", WH.toHeader (configUserAgent config)) : paramsHeaders params+        reqQuery = let query = paramsQuery params+                       queryExtraUnreserved = configQueryExtraUnreserved config+                   in if B.null queryExtraUnreserved+                        then NH.renderQuery True query+                        else NH.renderQueryPartialEscape True (toPartialEscapeQuery queryExtraUnreserved query)+        pReq = parsedReq { NH.method = rMethod req2+                        , NH.requestHeaders = reqHeaders+                        , NH.queryString = reqQuery+                        }+    outReq <- case paramsBody params of+        ParamBodyNone -> pure (pReq { NH.requestBody = mempty })+        ParamBodyB bs -> pure (pReq { NH.requestBody = NH.RequestBodyBS bs })+        ParamBodyBL bl -> pure (pReq { NH.requestBody = NH.RequestBodyLBS bl })+        ParamBodyFormUrlEncoded form -> pure (pReq { NH.requestBody = NH.RequestBodyLBS (WH.urlEncodeForm form) })+        ParamBodyMultipartFormData parts -> NH.formDataBody parts pReq++    pure (InitRequest outReq)++-- | modify the underlying Request+modifyInitRequest :: InitRequest req contentType res accept -> (NH.Request -> NH.Request) -> InitRequest req contentType res accept+modifyInitRequest (InitRequest req) f = InitRequest (f req)++-- | modify the underlying Request (monadic)+modifyInitRequestM :: Monad m => InitRequest req contentType res accept -> (NH.Request -> m NH.Request) -> m (InitRequest req contentType res accept)+modifyInitRequestM (InitRequest req) f = fmap InitRequest (f req)++-- ** Logging++-- | Run a block using the configured logger instance+runConfigLog+  :: P.MonadIO m+  => ORYHydraConfig -> LogExec m a+runConfigLog config = configLogExecWithContext config (configLogContext config)++-- | Run a block using the configured logger instance (logs exceptions)+runConfigLogWithExceptions+  :: (E.MonadCatch m, P.MonadIO m)+  => T.Text -> ORYHydraConfig -> LogExec m a+runConfigLogWithExceptions src config = runConfigLog config . logExceptions src
+ lib/ORYHydra/Core.hs view
@@ -0,0 +1,582 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.Core+-}++{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE ExistentialQuantification #-}+{-# LANGUAGE GeneralizedNewtypeDeriving #-}+{-# LANGUAGE MultiParamTypeClasses #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RankNTypes #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE ScopedTypeVariables #-}+{-# LANGUAGE TupleSections #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE CPP #-}+{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.Core where++import ORYHydra.MimeTypes+import ORYHydra.Logging++import qualified Control.Arrow as P (left)+import qualified Control.DeepSeq as NF+import qualified Control.Exception.Safe as E+import qualified Data.Aeson as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Base64.Lazy as BL64+import qualified Data.ByteString.Builder as BB+import qualified Data.ByteString.Char8 as BC+import qualified Data.ByteString.Lazy as BL+import qualified Data.ByteString.Lazy.Char8 as BCL+import qualified Data.CaseInsensitive as CI+import qualified Data.Data as P (Data, Typeable, TypeRep, typeRep)+import qualified Data.Foldable as P+import qualified Data.Ix as P+import qualified Data.Kind as K (Type)+import qualified Data.Maybe as P+import qualified Data.Proxy as P (Proxy(..))+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Data.Time as TI+import qualified Data.Time.ISO8601 as TI+import qualified GHC.Base as P (Alternative)+import qualified Lens.Micro as L+import qualified Network.HTTP.Client.MultipartFormData as NH+import qualified Network.HTTP.Types as NH+import qualified Prelude as P+import qualified Text.Printf as T+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Control.Applicative ((<|>))+import Control.Applicative (Alternative)+import Control.Monad.Fail (MonadFail)+import Data.Function ((&))+import Data.Foldable(foldlM)+import Data.Monoid ((<>))+import Data.Text (Text)+import Prelude (($), (.), (&&), (<$>), (<*>), Maybe(..), Bool(..), Char, String, fmap, mempty, pure, return, show, IO, Monad, Functor, maybe)++-- * ORYHydraConfig++-- |+data ORYHydraConfig = ORYHydraConfig+  { configHost  :: BCL.ByteString -- ^ host supplied in the Request+  , configUserAgent :: Text -- ^ user-agent supplied in the Request+  , configLogExecWithContext :: LogExecWithContext -- ^ Run a block using a Logger instance+  , configLogContext :: LogContext -- ^ Configures the logger+  , configAuthMethods :: [AnyAuthMethod] -- ^ List of configured auth methods+  , configValidateAuthMethods :: Bool -- ^ throw exceptions if auth methods are not configured+  , configQueryExtraUnreserved :: B.ByteString -- ^ Configures additional querystring characters which must not be URI encoded, e.g. '+' or ':'+  }++-- | display the config+instance P.Show ORYHydraConfig where+  show c =+    T.printf+      "{ configHost = %v, configUserAgent = %v, ..}"+      (show (configHost c))+      (show (configUserAgent c))++-- | constructs a default ORYHydraConfig+--+-- configHost:+--+-- @http://localhost@+--+-- configUserAgent:+--+-- @"ory-hydra-client/0.1.0.0"@+--+newConfig :: IO ORYHydraConfig+newConfig = do+    logCxt <- initLogContext+    return $ ORYHydraConfig+        { configHost = "http://localhost"+        , configUserAgent = "ory-hydra-client/0.1.0.0"+        , configLogExecWithContext = runDefaultLogExecWithContext+        , configLogContext = logCxt+        , configAuthMethods = []+        , configValidateAuthMethods = True+        , configQueryExtraUnreserved = ""+        }++-- | updates config use AuthMethod on matching requests+addAuthMethod :: AuthMethod auth => ORYHydraConfig -> auth -> ORYHydraConfig+addAuthMethod config@ORYHydraConfig {configAuthMethods = as} a =+  config { configAuthMethods = AnyAuthMethod a : as}++-- | updates the config to use stdout logging+withStdoutLogging :: ORYHydraConfig -> IO ORYHydraConfig+withStdoutLogging p = do+    logCxt <- stdoutLoggingContext (configLogContext p)+    return $ p { configLogExecWithContext = stdoutLoggingExec, configLogContext = logCxt }++-- | updates the config to use stderr logging+withStderrLogging :: ORYHydraConfig -> IO ORYHydraConfig+withStderrLogging p = do+    logCxt <- stderrLoggingContext (configLogContext p)+    return $ p { configLogExecWithContext = stderrLoggingExec, configLogContext = logCxt }++-- | updates the config to disable logging+withNoLogging :: ORYHydraConfig -> ORYHydraConfig+withNoLogging p = p { configLogExecWithContext =  runNullLogExec}++-- * ORYHydraRequest++-- | Represents a request.+--+--   Type Variables:+--+--   * req - request operation+--   * contentType - 'MimeType' associated with request body+--   * res - response model+--   * accept - 'MimeType' associated with response body+data ORYHydraRequest req contentType res accept = ORYHydraRequest+  { rMethod  :: NH.Method   -- ^ Method of ORYHydraRequest+  , rUrlPath :: [BCL.ByteString] -- ^ Endpoint of ORYHydraRequest+  , rParams   :: Params -- ^ params of ORYHydraRequest+  , rAuthTypes :: [P.TypeRep] -- ^ types of auth methods+  }+  deriving (P.Show)++-- | 'rMethod' Lens+rMethodL :: Lens_' (ORYHydraRequest req contentType res accept) NH.Method+rMethodL f ORYHydraRequest{..} = (\rMethod -> ORYHydraRequest { rMethod, ..} ) <$> f rMethod+{-# INLINE rMethodL #-}++-- | 'rUrlPath' Lens+rUrlPathL :: Lens_' (ORYHydraRequest req contentType res accept) [BCL.ByteString]+rUrlPathL f ORYHydraRequest{..} = (\rUrlPath -> ORYHydraRequest { rUrlPath, ..} ) <$> f rUrlPath+{-# INLINE rUrlPathL #-}++-- | 'rParams' Lens+rParamsL :: Lens_' (ORYHydraRequest req contentType res accept) Params+rParamsL f ORYHydraRequest{..} = (\rParams -> ORYHydraRequest { rParams, ..} ) <$> f rParams+{-# INLINE rParamsL #-}++-- | 'rParams' Lens+rAuthTypesL :: Lens_' (ORYHydraRequest req contentType res accept) [P.TypeRep]+rAuthTypesL f ORYHydraRequest{..} = (\rAuthTypes -> ORYHydraRequest { rAuthTypes, ..} ) <$> f rAuthTypes+{-# INLINE rAuthTypesL #-}++-- * HasBodyParam++-- | Designates the body parameter of a request+class HasBodyParam req param where+  setBodyParam :: forall contentType res accept. (Consumes req contentType, MimeRender contentType param) => ORYHydraRequest req contentType res accept -> param -> ORYHydraRequest req contentType res accept+  setBodyParam req xs =+    req `_setBodyLBS` mimeRender (P.Proxy :: P.Proxy contentType) xs & _setContentTypeHeader++-- * HasOptionalParam++-- | Designates the optional parameters of a request+class HasOptionalParam req param where+  {-# MINIMAL applyOptionalParam | (-&-) #-}++  -- | Apply an optional parameter to a request+  applyOptionalParam :: ORYHydraRequest req contentType res accept -> param -> ORYHydraRequest req contentType res accept+  applyOptionalParam = (-&-)+  {-# INLINE applyOptionalParam #-}++  -- | infix operator \/ alias for 'addOptionalParam'+  (-&-) :: ORYHydraRequest req contentType res accept -> param -> ORYHydraRequest req contentType res accept+  (-&-) = applyOptionalParam+  {-# INLINE (-&-) #-}++infixl 2 -&-++-- | Request Params+data Params = Params+  { paramsQuery :: NH.Query+  , paramsHeaders :: NH.RequestHeaders+  , paramsBody :: ParamBody+  }+  deriving (P.Show)++-- | 'paramsQuery' Lens+paramsQueryL :: Lens_' Params NH.Query+paramsQueryL f Params{..} = (\paramsQuery -> Params { paramsQuery, ..} ) <$> f paramsQuery+{-# INLINE paramsQueryL #-}++-- | 'paramsHeaders' Lens+paramsHeadersL :: Lens_' Params NH.RequestHeaders+paramsHeadersL f Params{..} = (\paramsHeaders -> Params { paramsHeaders, ..} ) <$> f paramsHeaders+{-# INLINE paramsHeadersL #-}++-- | 'paramsBody' Lens+paramsBodyL :: Lens_' Params ParamBody+paramsBodyL f Params{..} = (\paramsBody -> Params { paramsBody, ..} ) <$> f paramsBody+{-# INLINE paramsBodyL #-}++-- | Request Body+data ParamBody+  = ParamBodyNone+  | ParamBodyB B.ByteString+  | ParamBodyBL BL.ByteString+  | ParamBodyFormUrlEncoded WH.Form+  | ParamBodyMultipartFormData [NH.Part]+  deriving (P.Show)++-- ** ORYHydraRequest Utils++_mkRequest :: NH.Method -- ^ Method+          -> [BCL.ByteString] -- ^ Endpoint+          -> ORYHydraRequest req contentType res accept -- ^ req: Request Type, res: Response Type+_mkRequest m u = ORYHydraRequest m u _mkParams []++_mkParams :: Params+_mkParams = Params [] [] ParamBodyNone++setHeader ::+     ORYHydraRequest req contentType res accept+  -> [NH.Header]+  -> ORYHydraRequest req contentType res accept+setHeader req header =+  req `removeHeader` P.fmap P.fst header+  & (`addHeader` header)++addHeader ::+     ORYHydraRequest req contentType res accept+  -> [NH.Header]+  -> ORYHydraRequest req contentType res accept+addHeader req header = L.over (rParamsL . paramsHeadersL) (header P.++) req++removeHeader :: ORYHydraRequest req contentType res accept -> [NH.HeaderName] -> ORYHydraRequest req contentType res accept+removeHeader req header =+  req &+  L.over+    (rParamsL . paramsHeadersL)+    (P.filter (\h -> cifst h `P.notElem` P.fmap CI.mk header))+  where+    cifst = CI.mk . P.fst+++_setContentTypeHeader :: forall req contentType res accept. MimeType contentType => ORYHydraRequest req contentType res accept -> ORYHydraRequest req contentType res accept+_setContentTypeHeader req =+    case mimeType (P.Proxy :: P.Proxy contentType) of+        Just m -> req `setHeader` [("content-type", BC.pack $ P.show m)]+        Nothing -> req `removeHeader` ["content-type"]++_setAcceptHeader :: forall req contentType res accept. MimeType accept => ORYHydraRequest req contentType res accept -> ORYHydraRequest req contentType res accept+_setAcceptHeader req =+    case mimeType (P.Proxy :: P.Proxy accept) of+        Just m -> req `setHeader` [("accept", BC.pack $ P.show m)]+        Nothing -> req `removeHeader` ["accept"]++setQuery ::+     ORYHydraRequest req contentType res accept+  -> [NH.QueryItem]+  -> ORYHydraRequest req contentType res accept+setQuery req query =+  req &+  L.over+    (rParamsL . paramsQueryL)+    (P.filter (\q -> cifst q `P.notElem` P.fmap cifst query)) &+  (`addQuery` query)+  where+    cifst = CI.mk . P.fst++addQuery ::+     ORYHydraRequest req contentType res accept+  -> [NH.QueryItem]+  -> ORYHydraRequest req contentType res accept+addQuery req query = req & L.over (rParamsL . paramsQueryL) (query P.++)++addForm :: ORYHydraRequest req contentType res accept -> WH.Form -> ORYHydraRequest req contentType res accept+addForm req newform =+    let form = case paramsBody (rParams req) of+            ParamBodyFormUrlEncoded _form -> _form+            _ -> mempty+    in req & L.set (rParamsL . paramsBodyL) (ParamBodyFormUrlEncoded (newform <> form))++_addMultiFormPart :: ORYHydraRequest req contentType res accept -> NH.Part -> ORYHydraRequest req contentType res accept+_addMultiFormPart req newpart =+    let parts = case paramsBody (rParams req) of+            ParamBodyMultipartFormData _parts -> _parts+            _ -> []+    in req & L.set (rParamsL . paramsBodyL) (ParamBodyMultipartFormData (newpart : parts))++_setBodyBS :: ORYHydraRequest req contentType res accept -> B.ByteString -> ORYHydraRequest req contentType res accept+_setBodyBS req body =+    req & L.set (rParamsL . paramsBodyL) (ParamBodyB body)++_setBodyLBS :: ORYHydraRequest req contentType res accept -> BL.ByteString -> ORYHydraRequest req contentType res accept+_setBodyLBS req body =+    req & L.set (rParamsL . paramsBodyL) (ParamBodyBL body)++_hasAuthType :: AuthMethod authMethod => ORYHydraRequest req contentType res accept -> P.Proxy authMethod -> ORYHydraRequest req contentType res accept+_hasAuthType req proxy =+  req & L.over rAuthTypesL (P.typeRep proxy :)++-- ** Params Utils++toPath+  :: WH.ToHttpApiData a+  => a -> BCL.ByteString+toPath = BB.toLazyByteString . WH.toEncodedUrlPiece++toHeader :: WH.ToHttpApiData a => (NH.HeaderName, a) -> [NH.Header]+toHeader x = [fmap WH.toHeader x]++toForm :: WH.ToHttpApiData v => (BC.ByteString, v) -> WH.Form+toForm (k,v) = WH.toForm [(BC.unpack k,v)]++toQuery :: WH.ToHttpApiData a => (BC.ByteString, Maybe a) -> [NH.QueryItem]+toQuery x = [(fmap . fmap) toQueryParam x]+  where toQueryParam = T.encodeUtf8 . WH.toQueryParam++toPartialEscapeQuery :: B.ByteString -> NH.Query -> NH.PartialEscapeQuery+toPartialEscapeQuery extraUnreserved query = fmap (\(k, v) -> (k, maybe [] go v)) query+  where go :: B.ByteString -> [NH.EscapeItem]+        go v = v & B.groupBy (\a b -> a `B.notElem` extraUnreserved && b `B.notElem` extraUnreserved)+                 & fmap (\xs -> if B.null xs then NH.QN xs+                                  else if B.head xs `B.elem` extraUnreserved+                                          then NH.QN xs -- Not Encoded+                                          else NH.QE xs -- Encoded+                        )++-- *** OpenAPI `CollectionFormat` Utils++-- | Determines the format of the array if type array is used.+data CollectionFormat+  = CommaSeparated -- ^ CSV format for multiple parameters.+  | SpaceSeparated -- ^ Also called "SSV"+  | TabSeparated -- ^ Also called "TSV"+  | PipeSeparated -- ^ `value1|value2|value2`+  | MultiParamArray -- ^ Using multiple GET parameters, e.g. `foo=bar&foo=baz`. This is valid only for parameters in "query" ('NH.Query') or "formData" ('WH.Form')++toHeaderColl :: WH.ToHttpApiData a => CollectionFormat -> (NH.HeaderName, [a]) -> [NH.Header]+toHeaderColl c xs = _toColl c toHeader xs++toFormColl :: WH.ToHttpApiData v => CollectionFormat -> (BC.ByteString, [v]) -> WH.Form+toFormColl c xs = WH.toForm $ fmap unpack $ _toColl c toHeader $ pack xs+  where+    pack (k,v) = (CI.mk k, v)+    unpack (k,v) = (BC.unpack (CI.original k), BC.unpack v)++toQueryColl :: WH.ToHttpApiData a => CollectionFormat -> (BC.ByteString, Maybe [a]) -> NH.Query+toQueryColl c xs = _toCollA c toQuery xs++_toColl :: P.Traversable f => CollectionFormat -> (f a -> [(b, BC.ByteString)]) -> f [a] -> [(b, BC.ByteString)]+_toColl c encode xs = fmap (fmap P.fromJust) (_toCollA' c fencode BC.singleton (fmap Just xs))+  where fencode = fmap (fmap Just) . encode . fmap P.fromJust+        {-# INLINE fencode #-}++_toCollA :: (P.Traversable f, P.Traversable t, P.Alternative t) => CollectionFormat -> (f (t a) -> [(b, t BC.ByteString)]) -> f (t [a]) -> [(b, t BC.ByteString)]+_toCollA c encode xs = _toCollA' c encode BC.singleton xs++_toCollA' :: (P.Monoid c, P.Traversable f, P.Traversable t, P.Alternative t) => CollectionFormat -> (f (t a) -> [(b, t c)]) -> (Char -> c) -> f (t [a]) -> [(b, t c)]+_toCollA' c encode one xs = case c of+  CommaSeparated -> go (one ',')+  SpaceSeparated -> go (one ' ')+  TabSeparated -> go (one '\t')+  PipeSeparated -> go (one '|')+  MultiParamArray -> expandList+  where+    go sep =+      [P.foldl1 (\(sk, sv) (_, v) -> (sk, (combine sep <$> sv <*> v) <|> sv <|> v)) expandList]+    combine sep x y = x <> sep <> y+    expandList = (P.concatMap encode . (P.traverse . P.traverse) P.toList) xs+    {-# INLINE go #-}+    {-# INLINE expandList #-}+    {-# INLINE combine #-}++-- * AuthMethods++-- | Provides a method to apply auth methods to requests+class P.Typeable a =>+      AuthMethod a  where+  applyAuthMethod+    :: ORYHydraConfig+    -> a+    -> ORYHydraRequest req contentType res accept+    -> IO (ORYHydraRequest req contentType res accept)++-- | An existential wrapper for any AuthMethod+data AnyAuthMethod = forall a. AuthMethod a => AnyAuthMethod a deriving (P.Typeable)++instance AuthMethod AnyAuthMethod where applyAuthMethod config (AnyAuthMethod a) req = applyAuthMethod config a req++-- | indicates exceptions related to AuthMethods+data AuthMethodException = AuthMethodException String deriving (P.Show, P.Typeable)++instance E.Exception AuthMethodException++-- | apply all matching AuthMethods in config to request+_applyAuthMethods+  :: ORYHydraRequest req contentType res accept+  -> ORYHydraConfig+  -> IO (ORYHydraRequest req contentType res accept)+_applyAuthMethods req config@(ORYHydraConfig {configAuthMethods = as}) =+  foldlM go req as+  where+    go r (AnyAuthMethod a) = applyAuthMethod config a r++-- * Utils++-- | Removes Null fields.  (OpenAPI-Specification 2.0 does not allow Null in JSON)+#if MIN_VERSION_aeson(2,0,0)+_omitNulls :: [(A.Key, A.Value)] -> A.Value+#else+_omitNulls :: [(Text, A.Value)] -> A.Value+#endif+_omitNulls = A.object . P.filter notNull+  where+    notNull (_, A.Null) = False+    notNull _ = True++-- | Encodes fields using WH.toQueryParam+_toFormItem :: (WH.ToHttpApiData a, Functor f) => t -> f a -> f (t, [Text])+_toFormItem name x = (name,) . (:[]) . WH.toQueryParam <$> x++-- | Collapse (Just "") to Nothing+_emptyToNothing :: Maybe String -> Maybe String+_emptyToNothing (Just "") = Nothing+_emptyToNothing x = x+{-# INLINE _emptyToNothing #-}++-- | Collapse (Just mempty) to Nothing+_memptyToNothing :: (P.Monoid a, P.Eq a) => Maybe a -> Maybe a+_memptyToNothing (Just x) | x P.== P.mempty = Nothing+_memptyToNothing x = x+{-# INLINE _memptyToNothing #-}++-- * DateTime Formatting++newtype DateTime = DateTime { unDateTime :: TI.UTCTime }+  deriving (P.Eq,P.Data,P.Ord,P.Typeable,NF.NFData)+instance A.FromJSON DateTime where+  parseJSON = A.withText "DateTime" (_readDateTime . T.unpack)+instance A.ToJSON DateTime where+  toJSON (DateTime t) = A.toJSON (_showDateTime t)+instance WH.FromHttpApiData DateTime where+  parseUrlPiece = P.maybe (P.Left "parseUrlPiece @DateTime") P.Right . _readDateTime . T.unpack+instance WH.ToHttpApiData DateTime where+  toUrlPiece (DateTime t) = T.pack (_showDateTime t)+instance P.Show DateTime where+  show (DateTime t) = _showDateTime t+instance MimeRender MimeMultipartFormData DateTime where+  mimeRender _ = mimeRenderDefaultMultipartFormData++-- | @_parseISO8601@+_readDateTime :: (MonadFail m, Alternative m) => String -> m DateTime+_readDateTime s =+  DateTime <$> _parseISO8601 s+{-# INLINE _readDateTime #-}++-- | @TI.formatISO8601Millis@+_showDateTime :: (t ~ TI.UTCTime, TI.FormatTime t) => t -> String+_showDateTime =+  TI.formatISO8601Millis+{-# INLINE _showDateTime #-}++-- | parse an ISO8601 date-time string+_parseISO8601 :: (TI.ParseTime t, MonadFail m, Alternative m) => String -> m t+_parseISO8601 t =+  P.asum $+  P.flip (TI.parseTimeM True TI.defaultTimeLocale) t <$>+  ["%FT%T%QZ", "%FT%T%Q%z", "%FT%T%Q%Z"]+{-# INLINE _parseISO8601 #-}++-- * Date Formatting++newtype Date = Date { unDate :: TI.Day }+  deriving (P.Enum,P.Eq,P.Data,P.Ord,P.Ix,NF.NFData)+instance A.FromJSON Date where+  parseJSON = A.withText "Date" (_readDate . T.unpack)+instance A.ToJSON Date where+  toJSON (Date t) = A.toJSON (_showDate t)+instance WH.FromHttpApiData Date where+  parseUrlPiece = P.maybe (P.Left "parseUrlPiece @Date") P.Right . _readDate . T.unpack+instance WH.ToHttpApiData Date where+  toUrlPiece (Date t) = T.pack (_showDate t)+instance P.Show Date where+  show (Date t) = _showDate t+instance MimeRender MimeMultipartFormData Date where+  mimeRender _ = mimeRenderDefaultMultipartFormData++-- | @TI.parseTimeM True TI.defaultTimeLocale "%Y-%m-%d"@+_readDate :: MonadFail m => String -> m Date+_readDate s = Date <$> TI.parseTimeM True TI.defaultTimeLocale "%Y-%m-%d" s+{-# INLINE _readDate #-}++-- | @TI.formatTime TI.defaultTimeLocale "%Y-%m-%d"@+_showDate :: TI.FormatTime t => t -> String+_showDate =+  TI.formatTime TI.defaultTimeLocale "%Y-%m-%d"+{-# INLINE _showDate #-}++-- * Byte/Binary Formatting+++-- | base64 encoded characters+newtype ByteArray = ByteArray { unByteArray :: BL.ByteString }+  deriving (P.Eq,P.Data,P.Ord,P.Typeable,NF.NFData)++instance A.FromJSON ByteArray where+  parseJSON = A.withText "ByteArray" _readByteArray+instance A.ToJSON ByteArray where+  toJSON = A.toJSON . _showByteArray+instance WH.FromHttpApiData ByteArray where+  parseUrlPiece = P.maybe (P.Left "parseUrlPiece @ByteArray") P.Right . _readByteArray+instance WH.ToHttpApiData ByteArray where+  toUrlPiece = _showByteArray+instance P.Show ByteArray where+  show = T.unpack . _showByteArray+instance MimeRender MimeMultipartFormData ByteArray where+  mimeRender _ = mimeRenderDefaultMultipartFormData++-- | read base64 encoded characters+_readByteArray :: MonadFail m => Text -> m ByteArray+_readByteArray = P.either P.fail (pure . ByteArray) . BL64.decode . BL.fromStrict . T.encodeUtf8+{-# INLINE _readByteArray #-}++-- | show base64 encoded characters+_showByteArray :: ByteArray -> Text+_showByteArray = T.decodeUtf8 . BL.toStrict . BL64.encode . unByteArray+{-# INLINE _showByteArray #-}++-- | any sequence of octets+newtype Binary = Binary { unBinary :: BL.ByteString }+  deriving (P.Eq,P.Data,P.Ord,P.Typeable,NF.NFData)++instance A.FromJSON Binary where+  parseJSON = A.withText "Binary" _readBinaryBase64+instance A.ToJSON Binary where+  toJSON = A.toJSON . _showBinaryBase64+instance WH.FromHttpApiData Binary where+  parseUrlPiece = P.maybe (P.Left "parseUrlPiece @Binary") P.Right . _readBinaryBase64+instance WH.ToHttpApiData Binary where+  toUrlPiece = _showBinaryBase64+instance P.Show Binary where+  show = T.unpack . _showBinaryBase64+instance MimeRender MimeMultipartFormData Binary where+  mimeRender _ = unBinary++_readBinaryBase64 :: MonadFail m => Text -> m Binary+_readBinaryBase64 = P.either P.fail (pure . Binary) . BL64.decode . BL.fromStrict . T.encodeUtf8+{-# INLINE _readBinaryBase64 #-}++_showBinaryBase64 :: Binary -> Text+_showBinaryBase64 = T.decodeUtf8 . BL.toStrict . BL64.encode . unBinary+{-# INLINE _showBinaryBase64 #-}++-- * Lens Type Aliases++type Lens_' s a = Lens_ s s a a+type Lens_ s t a b = forall (f :: K.Type -> K.Type). Functor f => (a -> f b) -> s -> f t
+ lib/ORYHydra/Logging.hs view
@@ -0,0 +1,34 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.Logging+Logging functions+-}+{-# LANGUAGE CPP #-}++#ifdef USE_KATIP++module ORYHydra.Logging+  ( module ORYHydra.LoggingKatip+  ) where++import ORYHydra.LoggingKatip++#else++module ORYHydra.Logging+  ( module ORYHydra.LoggingMonadLogger+  ) where++import ORYHydra.LoggingMonadLogger++#endif
+ lib/ORYHydra/LoggingKatip.hs view
@@ -0,0 +1,118 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.LoggingKatip+Katip Logging functions+-}++{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RankNTypes #-}+{-# LANGUAGE ScopedTypeVariables #-}++module ORYHydra.LoggingKatip where++import qualified Control.Exception.Safe as E+import qualified Control.Monad.IO.Class as P+import qualified Control.Monad.Trans.Reader as P+import qualified Data.Text as T+import qualified Lens.Micro as L+import qualified System.IO as IO++import Data.Text (Text)+import GHC.Exts (IsString(..))++import qualified Katip as LG++-- * Type Aliases (for compatibility)++-- | Runs a Katip logging block with the Log environment+type LogExecWithContext = forall m a. P.MonadIO m =>+                                      LogContext -> LogExec m a++-- | A Katip logging block+type LogExec m a = LG.KatipT m a -> m a++-- | A Katip Log environment+type LogContext = LG.LogEnv++-- | A Katip Log severity+type LogLevel = LG.Severity++-- * default logger++-- | the default log environment+initLogContext :: IO LogContext+initLogContext = LG.initLogEnv "ORYHydra" "dev"++-- | Runs a Katip logging block with the Log environment+runDefaultLogExecWithContext :: LogExecWithContext+runDefaultLogExecWithContext = LG.runKatipT++-- * stdout logger++-- | Runs a Katip logging block with the Log environment+stdoutLoggingExec :: LogExecWithContext+stdoutLoggingExec = runDefaultLogExecWithContext++-- | A Katip Log environment which targets stdout+stdoutLoggingContext :: LogContext -> IO LogContext+stdoutLoggingContext cxt = do+    handleScribe <- LG.mkHandleScribe LG.ColorIfTerminal IO.stdout (LG.permitItem LG.InfoS) LG.V2+    LG.registerScribe "stdout" handleScribe LG.defaultScribeSettings cxt++-- * stderr logger++-- | Runs a Katip logging block with the Log environment+stderrLoggingExec :: LogExecWithContext+stderrLoggingExec = runDefaultLogExecWithContext++-- | A Katip Log environment which targets stderr+stderrLoggingContext :: LogContext -> IO LogContext+stderrLoggingContext cxt = do+    handleScribe <- LG.mkHandleScribe LG.ColorIfTerminal IO.stderr (LG.permitItem LG.InfoS) LG.V2+    LG.registerScribe "stderr" handleScribe LG.defaultScribeSettings cxt++-- * Null logger++-- | Disables Katip logging+runNullLogExec :: LogExecWithContext+runNullLogExec le (LG.KatipT f) = P.runReaderT f (L.set LG.logEnvScribes mempty le)++-- * Log Msg++-- | Log a katip message+_log :: (Applicative m, LG.Katip m) => Text -> LogLevel -> Text -> m ()+_log src level msg = do+  LG.logMsg (fromString $ T.unpack src) level (LG.logStr msg)++-- * Log Exceptions++-- | re-throws exceptions after logging them+logExceptions+  :: (LG.Katip m, E.MonadCatch m, Applicative m)+  => Text -> m a -> m a+logExceptions src =+  E.handle+    (\(e :: E.SomeException) -> do+       _log src LG.ErrorS ((T.pack . show) e)+       E.throw e)++-- * Log Level++levelInfo :: LogLevel+levelInfo = LG.InfoS++levelError :: LogLevel+levelError = LG.ErrorS++levelDebug :: LogLevel+levelDebug = LG.DebugS
+ lib/ORYHydra/LoggingMonadLogger.hs view
@@ -0,0 +1,127 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.LoggingMonadLogger+monad-logger Logging functions+-}++{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RankNTypes #-}+{-# LANGUAGE ScopedTypeVariables #-}++module ORYHydra.LoggingMonadLogger where++import qualified Control.Exception.Safe as E+import qualified Control.Monad.IO.Class as P+import qualified Data.Text as T+import qualified Data.Time as TI++import Data.Text (Text)++import qualified Control.Monad.Logger as LG++-- * Type Aliases (for compatibility)++-- | Runs a monad-logger  block with the filter predicate+type LogExecWithContext = forall m a. P.MonadIO m =>+                                      LogContext -> LogExec m a++-- | A monad-logger block+type LogExec m a = LG.LoggingT m a -> m a++-- | A monad-logger filter predicate+type LogContext = LG.LogSource -> LG.LogLevel -> Bool++-- | A monad-logger log level+type LogLevel = LG.LogLevel++-- * default logger++-- | the default log environment+initLogContext :: IO LogContext+initLogContext = pure infoLevelFilter++-- | Runs a monad-logger block with the filter predicate+runDefaultLogExecWithContext :: LogExecWithContext+runDefaultLogExecWithContext = runNullLogExec++-- * stdout logger++-- | Runs a monad-logger block targeting stdout, with the filter predicate+stdoutLoggingExec :: LogExecWithContext+stdoutLoggingExec cxt = LG.runStdoutLoggingT . LG.filterLogger cxt++-- | @pure@+stdoutLoggingContext :: LogContext -> IO LogContext+stdoutLoggingContext = pure++-- * stderr logger++-- | Runs a monad-logger block targeting stderr, with the filter predicate+stderrLoggingExec :: LogExecWithContext+stderrLoggingExec cxt = LG.runStderrLoggingT . LG.filterLogger cxt++-- | @pure@+stderrLoggingContext :: LogContext -> IO LogContext+stderrLoggingContext = pure++-- * Null logger++-- | Disables monad-logger logging+runNullLogExec :: LogExecWithContext+runNullLogExec = const (`LG.runLoggingT` nullLogger)++-- | monad-logger which does nothing+nullLogger :: LG.Loc -> LG.LogSource -> LG.LogLevel -> LG.LogStr -> IO ()+nullLogger _ _ _ _ = return ()++-- * Log Msg++-- | Log a message using the current time+_log :: (P.MonadIO m, LG.MonadLogger m) => Text -> LG.LogLevel -> Text -> m ()+_log src level msg = do+  now <- P.liftIO (formatTimeLog <$> TI.getCurrentTime)+  LG.logOtherNS ("ORYHydra." <> src) level ("[" <> now <> "] " <> msg)+ where+  formatTimeLog =+    T.pack . TI.formatTime TI.defaultTimeLocale "%Y-%m-%dT%H:%M:%S%Z"++-- * Log Exceptions++-- | re-throws exceptions after logging them+logExceptions+   :: (LG.MonadLogger m, E.MonadCatch m, P.MonadIO m)+   => Text -> m a -> m a+logExceptions src =+   E.handle+     (\(e :: E.SomeException) -> do+        _log src LG.LevelError ((T.pack . show) e)+        E.throw e)++-- * Log Level++levelInfo :: LogLevel+levelInfo = LG.LevelInfo++levelError :: LogLevel+levelError = LG.LevelError++levelDebug :: LogLevel+levelDebug = LG.LevelDebug++-- * Level Filter++minLevelFilter :: LG.LogLevel -> LG.LogSource -> LG.LogLevel -> Bool+minLevelFilter l _ l' = l' >= l++infoLevelFilter :: LG.LogSource -> LG.LogLevel -> Bool+infoLevelFilter = minLevelFilter LG.LevelInfo
+ lib/ORYHydra/MimeTypes.hs view
@@ -0,0 +1,204 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.MimeTypes+-}++{-# LANGUAGE ConstraintKinds #-}+{-# LANGUAGE ExistentialQuantification #-}+{-# LANGUAGE FlexibleContexts #-}+{-# LANGUAGE FlexibleInstances #-}+{-# LANGUAGE MultiParamTypeClasses #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE ScopedTypeVariables #-}+{-# OPTIONS_GHC -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.MimeTypes where++import qualified Control.Arrow as P (left)+import qualified Data.Aeson as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Builder as BB+import qualified Data.ByteString.Char8 as BC+import qualified Data.ByteString.Lazy as BL+import qualified Data.ByteString.Lazy.Char8 as BCL+import qualified Data.Data as P (Typeable)+import qualified Data.Proxy as P (Proxy(..))+import qualified Data.String as P+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Network.HTTP.Media as ME+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Prelude (($), (.),(<$>),(<*>),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty)+import qualified Prelude as P++-- * ContentType MimeType++data ContentType a = MimeType a => ContentType { unContentType :: a }++-- * Accept MimeType++data Accept a = MimeType a => Accept { unAccept :: a }++-- * Consumes Class++class MimeType mtype => Consumes req mtype where++-- * Produces Class++class MimeType mtype => Produces req mtype where++-- * Default Mime Types++data MimeJSON = MimeJSON deriving (P.Typeable)+data MimeXML = MimeXML deriving (P.Typeable)+data MimePlainText = MimePlainText deriving (P.Typeable)+data MimeFormUrlEncoded = MimeFormUrlEncoded deriving (P.Typeable)+data MimeMultipartFormData = MimeMultipartFormData deriving (P.Typeable)+data MimeOctetStream = MimeOctetStream deriving (P.Typeable)+data MimeNoContent = MimeNoContent deriving (P.Typeable)+data MimeAny = MimeAny deriving (P.Typeable)++-- | A type for responses without content-body.+data NoContent = NoContent+  deriving (P.Show, P.Eq, P.Typeable)+++-- * MimeType Class++class P.Typeable mtype => MimeType mtype  where+  {-# MINIMAL mimeType | mimeTypes #-}++  mimeTypes :: P.Proxy mtype -> [ME.MediaType]+  mimeTypes p =+    case mimeType p of+      Just x -> [x]+      Nothing -> []++  mimeType :: P.Proxy mtype -> Maybe ME.MediaType+  mimeType p =+    case mimeTypes p of+      [] -> Nothing+      (x:_) -> Just x++  mimeType' :: mtype -> Maybe ME.MediaType+  mimeType' _ = mimeType (P.Proxy :: P.Proxy mtype)+  mimeTypes' :: mtype -> [ME.MediaType]+  mimeTypes' _ = mimeTypes (P.Proxy :: P.Proxy mtype)++-- Default MimeType Instances++-- | @application/json; charset=utf-8@+instance MimeType MimeJSON where+  mimeType _ = Just $ P.fromString "application/json"+-- | @application/xml; charset=utf-8@+instance MimeType MimeXML where+  mimeType _ = Just $ P.fromString "application/xml"+-- | @application/x-www-form-urlencoded@+instance MimeType MimeFormUrlEncoded where+  mimeType _ = Just $ P.fromString "application/x-www-form-urlencoded"+-- | @multipart/form-data@+instance MimeType MimeMultipartFormData where+  mimeType _ = Just $ P.fromString "multipart/form-data"+-- | @text/plain; charset=utf-8@+instance MimeType MimePlainText where+  mimeType _ = Just $ P.fromString "text/plain"+-- | @application/octet-stream@+instance MimeType MimeOctetStream where+  mimeType _ = Just $ P.fromString "application/octet-stream"+-- | @"*/*"@+instance MimeType MimeAny where+  mimeType _ = Just $ P.fromString "*/*"+instance MimeType MimeNoContent where+  mimeType _ = Nothing++-- * MimeRender Class++class MimeType mtype => MimeRender mtype x where+    mimeRender  :: P.Proxy mtype -> x -> BL.ByteString+    mimeRender' :: mtype -> x -> BL.ByteString+    mimeRender' _ x = mimeRender (P.Proxy :: P.Proxy mtype) x+++mimeRenderDefaultMultipartFormData :: WH.ToHttpApiData a => a -> BL.ByteString+mimeRenderDefaultMultipartFormData = BL.fromStrict . T.encodeUtf8 . WH.toQueryParam++-- Default MimeRender Instances++-- | `A.encode`+instance A.ToJSON a => MimeRender MimeJSON a where mimeRender _ = A.encode+-- | @WH.urlEncodeAsForm@+instance WH.ToForm a => MimeRender MimeFormUrlEncoded a where mimeRender _ = WH.urlEncodeAsForm++-- | @P.id@+instance MimeRender MimePlainText BL.ByteString where mimeRender _ = P.id+-- | @BL.fromStrict . T.encodeUtf8@+instance MimeRender MimePlainText T.Text where mimeRender _ = BL.fromStrict . T.encodeUtf8+-- | @BCL.pack@+instance MimeRender MimePlainText String where mimeRender _ = BCL.pack++-- | @P.id@+instance MimeRender MimeOctetStream BL.ByteString where mimeRender _ = P.id+-- | @BL.fromStrict . T.encodeUtf8@+instance MimeRender MimeOctetStream T.Text where mimeRender _ = BL.fromStrict . T.encodeUtf8+-- | @BCL.pack@+instance MimeRender MimeOctetStream String where mimeRender _ = BCL.pack++instance MimeRender MimeMultipartFormData BL.ByteString where mimeRender _ = P.id++instance MimeRender MimeMultipartFormData Bool where mimeRender _ = mimeRenderDefaultMultipartFormData+instance MimeRender MimeMultipartFormData Char where mimeRender _ = mimeRenderDefaultMultipartFormData+instance MimeRender MimeMultipartFormData Double where mimeRender _ = mimeRenderDefaultMultipartFormData+instance MimeRender MimeMultipartFormData Float where mimeRender _ = mimeRenderDefaultMultipartFormData+instance MimeRender MimeMultipartFormData Int where mimeRender _ = mimeRenderDefaultMultipartFormData+instance MimeRender MimeMultipartFormData Integer where mimeRender _ = mimeRenderDefaultMultipartFormData+instance MimeRender MimeMultipartFormData String where mimeRender _ = mimeRenderDefaultMultipartFormData+instance MimeRender MimeMultipartFormData T.Text where mimeRender _ = mimeRenderDefaultMultipartFormData++-- | @P.Right . P.const NoContent@+instance MimeRender MimeNoContent NoContent where mimeRender _ = P.const BCL.empty+++-- * MimeUnrender Class++class MimeType mtype => MimeUnrender mtype o where+    mimeUnrender :: P.Proxy mtype -> BL.ByteString -> P.Either String o+    mimeUnrender' :: mtype -> BL.ByteString -> P.Either String o+    mimeUnrender' _ x = mimeUnrender (P.Proxy :: P.Proxy mtype) x++-- Default MimeUnrender Instances++-- | @A.eitherDecode@+instance A.FromJSON a => MimeUnrender MimeJSON a where mimeUnrender _ = A.eitherDecode+-- | @P.left T.unpack . WH.urlDecodeAsForm@+instance WH.FromForm a => MimeUnrender MimeFormUrlEncoded a where mimeUnrender _ = P.left T.unpack . WH.urlDecodeAsForm+-- | @P.Right . P.id@++instance MimeUnrender MimePlainText BL.ByteString where mimeUnrender _ = P.Right . P.id+-- | @P.left P.show . TL.decodeUtf8'@+instance MimeUnrender MimePlainText T.Text where mimeUnrender _ = P.left P.show . T.decodeUtf8' . BL.toStrict+-- | @P.Right . BCL.unpack@+instance MimeUnrender MimePlainText String where mimeUnrender _ = P.Right . BCL.unpack++-- | @P.Right . P.id@+instance MimeUnrender MimeOctetStream BL.ByteString where mimeUnrender _ = P.Right . P.id+-- | @P.left P.show . T.decodeUtf8' . BL.toStrict@+instance MimeUnrender MimeOctetStream T.Text where mimeUnrender _ = P.left P.show . T.decodeUtf8' . BL.toStrict+-- | @P.Right . BCL.unpack@+instance MimeUnrender MimeOctetStream String where mimeUnrender _ = P.Right . BCL.unpack++-- | @P.Right . P.const NoContent@+instance MimeUnrender MimeNoContent NoContent where mimeUnrender _ = P.Right . P.const NoContent++
+ lib/ORYHydra/Model.hs view
@@ -0,0 +1,2253 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.Model+-}++{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveFoldable #-}+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DeriveTraversable #-}+{-# LANGUAGE GeneralizedNewtypeDeriving #-}+{-# LANGUAGE LambdaCase #-}+{-# LANGUAGE MultiParamTypeClasses #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE TupleSections #-}+{-# LANGUAGE TypeFamilies #-}+{-# OPTIONS_GHC -fno-warn-unused-matches -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.Model where++import ORYHydra.Core+import ORYHydra.MimeTypes++import Data.Aeson ((.:),(.:!),(.:?),(.=))++import qualified Control.Arrow as P (left)+import qualified Data.Aeson as A+import qualified Data.ByteString as B+import qualified Data.ByteString.Base64 as B64+import qualified Data.ByteString.Char8 as BC+import qualified Data.ByteString.Lazy as BL+import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)+import qualified Data.Foldable as P+import qualified Data.HashMap.Lazy as HM+import qualified Data.Map as Map+import qualified Data.Maybe as P+import qualified Data.Set as Set+import qualified Data.Text as T+import qualified Data.Text.Encoding as T+import qualified Data.Time as TI+import qualified Lens.Micro as L+import qualified Web.FormUrlEncoded as WH+import qualified Web.HttpApiData as WH++import Control.Applicative ((<|>))+import Control.Applicative (Alternative)+import Data.Function ((&))+import Data.Monoid ((<>))+import Data.Text (Text)+import Prelude (($),(/=),(.),(<$>),(<*>),(>>=),(=<<),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)++import qualified Prelude as P++++-- * Parameter newtypes+++-- ** All+newtype All = All { unAll :: Bool } deriving (P.Eq, P.Show)++-- ** Client+newtype Client = Client { unClient :: Text } deriving (P.Eq, P.Show)++-- ** ClientId+newtype ClientId = ClientId { unClientId :: Text } deriving (P.Eq, P.Show)++-- ** ClientName+newtype ClientName = ClientName { unClientName :: Text } deriving (P.Eq, P.Show)++-- ** ClientSecret+newtype ClientSecret = ClientSecret { unClientSecret :: Text } deriving (P.Eq, P.Show)++-- ** Code+newtype Code = Code { unCode :: Text } deriving (P.Eq, P.Show)++-- ** ConsentChallenge+newtype ConsentChallenge = ConsentChallenge { unConsentChallenge :: Text } deriving (P.Eq, P.Show)++-- ** DefaultItems+newtype DefaultItems = DefaultItems { unDefaultItems :: Integer } deriving (P.Eq, P.Show)++-- ** GrantType+newtype GrantType = GrantType { unGrantType :: Text } deriving (P.Eq, P.Show)++-- ** Id+newtype Id = Id { unId :: Text } deriving (P.Eq, P.Show)++-- ** Issuer+newtype Issuer = Issuer { unIssuer :: Text } deriving (P.Eq, P.Show)++-- ** JsonPatch2+newtype JsonPatch2 = JsonPatch2 { unJsonPatch2 :: [JsonPatch] } deriving (P.Eq, P.Show, A.ToJSON)++-- ** Kid+newtype Kid = Kid { unKid :: Text } deriving (P.Eq, P.Show)++-- ** LoginChallenge+newtype LoginChallenge = LoginChallenge { unLoginChallenge :: Text } deriving (P.Eq, P.Show)++-- ** LoginSessionId+newtype LoginSessionId = LoginSessionId { unLoginSessionId :: Text } deriving (P.Eq, P.Show)++-- ** LogoutChallenge+newtype LogoutChallenge = LogoutChallenge { unLogoutChallenge :: Text } deriving (P.Eq, P.Show)++-- ** MaxItems+newtype MaxItems = MaxItems { unMaxItems :: Integer } deriving (P.Eq, P.Show)++-- ** Owner+newtype Owner = Owner { unOwner :: Text } deriving (P.Eq, P.Show)++-- ** PageSize+newtype PageSize = PageSize { unPageSize :: Integer } deriving (P.Eq, P.Show)++-- ** PageToken+newtype PageToken = PageToken { unPageToken :: Text } deriving (P.Eq, P.Show)++-- ** RedirectUri+newtype RedirectUri = RedirectUri { unRedirectUri :: Text } deriving (P.Eq, P.Show)++-- ** RefreshToken+newtype RefreshToken = RefreshToken { unRefreshToken :: Text } deriving (P.Eq, P.Show)++-- ** Scope+newtype Scope = Scope { unScope :: Text } deriving (P.Eq, P.Show)++-- ** Set+newtype Set = Set { unSet :: Text } deriving (P.Eq, P.Show)++-- ** Sid+newtype Sid = Sid { unSid :: Text } deriving (P.Eq, P.Show)++-- ** Subject+newtype Subject = Subject { unSubject :: Text } deriving (P.Eq, P.Show)++-- ** Token+newtype Token = Token { unToken :: Text } deriving (P.Eq, P.Show)++-- * Models+++-- ** AcceptOAuth2ConsentRequest+-- | AcceptOAuth2ConsentRequest+-- The request payload used to accept a consent request.+-- +data AcceptOAuth2ConsentRequest = AcceptOAuth2ConsentRequest+  { acceptOAuth2ConsentRequestGrantAccessTokenAudience :: Maybe [Text] -- ^ "grant_access_token_audience"+  , acceptOAuth2ConsentRequestGrantScope :: Maybe [Text] -- ^ "grant_scope"+  , acceptOAuth2ConsentRequestHandledAt :: Maybe DateTime -- ^ "handled_at"+  , acceptOAuth2ConsentRequestRemember :: Maybe Bool -- ^ "remember" - Remember, if set to true, tells ORY Hydra to remember this consent authorization and reuse it if the same client asks the same user for the same, or a subset of, scope.+  , acceptOAuth2ConsentRequestRememberFor :: Maybe Integer -- ^ "remember_for" - RememberFor sets how long the consent authorization should be remembered for in seconds. If set to &#x60;0&#x60;, the authorization will be remembered indefinitely.+  , acceptOAuth2ConsentRequestSession :: Maybe AcceptOAuth2ConsentRequestSession -- ^ "session"+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON AcceptOAuth2ConsentRequest+instance A.FromJSON AcceptOAuth2ConsentRequest where+  parseJSON = A.withObject "AcceptOAuth2ConsentRequest" $ \o ->+    AcceptOAuth2ConsentRequest+      <$> (o .:? "grant_access_token_audience")+      <*> (o .:? "grant_scope")+      <*> (o .:? "handled_at")+      <*> (o .:? "remember")+      <*> (o .:? "remember_for")+      <*> (o .:? "session")++-- | ToJSON AcceptOAuth2ConsentRequest+instance A.ToJSON AcceptOAuth2ConsentRequest where+  toJSON AcceptOAuth2ConsentRequest {..} =+   _omitNulls+      [ "grant_access_token_audience" .= acceptOAuth2ConsentRequestGrantAccessTokenAudience+      , "grant_scope" .= acceptOAuth2ConsentRequestGrantScope+      , "handled_at" .= acceptOAuth2ConsentRequestHandledAt+      , "remember" .= acceptOAuth2ConsentRequestRemember+      , "remember_for" .= acceptOAuth2ConsentRequestRememberFor+      , "session" .= acceptOAuth2ConsentRequestSession+      ]+++-- | Construct a value of type 'AcceptOAuth2ConsentRequest' (by applying it's required fields, if any)+mkAcceptOAuth2ConsentRequest+  :: AcceptOAuth2ConsentRequest+mkAcceptOAuth2ConsentRequest =+  AcceptOAuth2ConsentRequest+  { acceptOAuth2ConsentRequestGrantAccessTokenAudience = Nothing+  , acceptOAuth2ConsentRequestGrantScope = Nothing+  , acceptOAuth2ConsentRequestHandledAt = Nothing+  , acceptOAuth2ConsentRequestRemember = Nothing+  , acceptOAuth2ConsentRequestRememberFor = Nothing+  , acceptOAuth2ConsentRequestSession = Nothing+  }++-- ** AcceptOAuth2ConsentRequestSession+-- | AcceptOAuth2ConsentRequestSession+-- Pass session data to a consent request.+-- +data AcceptOAuth2ConsentRequestSession = AcceptOAuth2ConsentRequestSession+  { acceptOAuth2ConsentRequestSessionAccessToken :: Maybe AnyType -- ^ "access_token" - AccessToken sets session data for the access and refresh token, as well as any future tokens issued by the refresh grant. Keep in mind that this data will be available to anyone performing OAuth 2.0 Challenge Introspection. If only your services can perform OAuth 2.0 Challenge Introspection, this is usually fine. But if third parties can access that endpoint as well, sensitive data from the session might be exposed to them. Use with care!+  , acceptOAuth2ConsentRequestSessionIdToken :: Maybe AnyType -- ^ "id_token" - IDToken sets session data for the OpenID Connect ID token. Keep in mind that the session&#39;id payloads are readable by anyone that has access to the ID Challenge. Use with care!+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON AcceptOAuth2ConsentRequestSession+instance A.FromJSON AcceptOAuth2ConsentRequestSession where+  parseJSON = A.withObject "AcceptOAuth2ConsentRequestSession" $ \o ->+    AcceptOAuth2ConsentRequestSession+      <$> (o .:? "access_token")+      <*> (o .:? "id_token")++-- | ToJSON AcceptOAuth2ConsentRequestSession+instance A.ToJSON AcceptOAuth2ConsentRequestSession where+  toJSON AcceptOAuth2ConsentRequestSession {..} =+   _omitNulls+      [ "access_token" .= acceptOAuth2ConsentRequestSessionAccessToken+      , "id_token" .= acceptOAuth2ConsentRequestSessionIdToken+      ]+++-- | Construct a value of type 'AcceptOAuth2ConsentRequestSession' (by applying it's required fields, if any)+mkAcceptOAuth2ConsentRequestSession+  :: AcceptOAuth2ConsentRequestSession+mkAcceptOAuth2ConsentRequestSession =+  AcceptOAuth2ConsentRequestSession+  { acceptOAuth2ConsentRequestSessionAccessToken = Nothing+  , acceptOAuth2ConsentRequestSessionIdToken = Nothing+  }++-- ** AcceptOAuth2LoginRequest+-- | AcceptOAuth2LoginRequest+-- HandledLoginRequest is the request payload used to accept a login request.+-- +data AcceptOAuth2LoginRequest = AcceptOAuth2LoginRequest+  { acceptOAuth2LoginRequestAcr :: Maybe Text -- ^ "acr" - ACR sets the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it to express that, for example, a user authenticated using two factor authentication.+  , acceptOAuth2LoginRequestAmr :: Maybe [Text] -- ^ "amr"+  , acceptOAuth2LoginRequestContext :: Maybe AnyType -- ^ "context"+  , acceptOAuth2LoginRequestExtendSessionLifespan :: Maybe Bool -- ^ "extend_session_lifespan" - Extend OAuth2 authentication session lifespan  If set to &#x60;true&#x60;, the OAuth2 authentication cookie lifespan is extended. This is for example useful if you want the user to be able to use &#x60;prompt&#x3D;none&#x60; continuously.  This value can only be set to &#x60;true&#x60; if the user has an authentication, which is the case if the &#x60;skip&#x60; value is &#x60;true&#x60;.+  , acceptOAuth2LoginRequestForceSubjectIdentifier :: Maybe Text -- ^ "force_subject_identifier" - ForceSubjectIdentifier forces the \&quot;pairwise\&quot; user ID of the end-user that authenticated. The \&quot;pairwise\&quot; user ID refers to the (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID Connect specification. It allows you to set an obfuscated subject (\&quot;user\&quot;) identifier that is unique to the client.  Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not change the sub claim in the OAuth 2.0 Introspection.  Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself you can use this field. Please note that setting this field has no effect if &#x60;pairwise&#x60; is not configured in ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via &#x60;subject_type&#x60; key in the client&#39;s configuration).  Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies that you have to compute this value on every authentication process (probably depending on the client ID or some other unique value).  If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail.+  , acceptOAuth2LoginRequestRemember :: Maybe Bool -- ^ "remember" - Remember, if set to true, tells ORY Hydra to remember this user by telling the user agent (browser) to store a cookie with authentication data. If the same user performs another OAuth 2.0 Authorization Request, he/she will not be asked to log in again.+  , acceptOAuth2LoginRequestRememberFor :: Maybe Integer -- ^ "remember_for" - RememberFor sets how long the authentication should be remembered for in seconds. If set to &#x60;0&#x60;, the authorization will be remembered for the duration of the browser session (using a session cookie).+  , acceptOAuth2LoginRequestSubject :: Text -- ^ /Required/ "subject" - Subject is the user ID of the end-user that authenticated.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON AcceptOAuth2LoginRequest+instance A.FromJSON AcceptOAuth2LoginRequest where+  parseJSON = A.withObject "AcceptOAuth2LoginRequest" $ \o ->+    AcceptOAuth2LoginRequest+      <$> (o .:? "acr")+      <*> (o .:? "amr")+      <*> (o .:? "context")+      <*> (o .:? "extend_session_lifespan")+      <*> (o .:? "force_subject_identifier")+      <*> (o .:? "remember")+      <*> (o .:? "remember_for")+      <*> (o .:  "subject")++-- | ToJSON AcceptOAuth2LoginRequest+instance A.ToJSON AcceptOAuth2LoginRequest where+  toJSON AcceptOAuth2LoginRequest {..} =+   _omitNulls+      [ "acr" .= acceptOAuth2LoginRequestAcr+      , "amr" .= acceptOAuth2LoginRequestAmr+      , "context" .= acceptOAuth2LoginRequestContext+      , "extend_session_lifespan" .= acceptOAuth2LoginRequestExtendSessionLifespan+      , "force_subject_identifier" .= acceptOAuth2LoginRequestForceSubjectIdentifier+      , "remember" .= acceptOAuth2LoginRequestRemember+      , "remember_for" .= acceptOAuth2LoginRequestRememberFor+      , "subject" .= acceptOAuth2LoginRequestSubject+      ]+++-- | Construct a value of type 'AcceptOAuth2LoginRequest' (by applying it's required fields, if any)+mkAcceptOAuth2LoginRequest+  :: Text -- ^ 'acceptOAuth2LoginRequestSubject': Subject is the user ID of the end-user that authenticated.+  -> AcceptOAuth2LoginRequest+mkAcceptOAuth2LoginRequest acceptOAuth2LoginRequestSubject =+  AcceptOAuth2LoginRequest+  { acceptOAuth2LoginRequestAcr = Nothing+  , acceptOAuth2LoginRequestAmr = Nothing+  , acceptOAuth2LoginRequestContext = Nothing+  , acceptOAuth2LoginRequestExtendSessionLifespan = Nothing+  , acceptOAuth2LoginRequestForceSubjectIdentifier = Nothing+  , acceptOAuth2LoginRequestRemember = Nothing+  , acceptOAuth2LoginRequestRememberFor = Nothing+  , acceptOAuth2LoginRequestSubject+  }++-- ** CreateJsonWebKeySet+-- | CreateJsonWebKeySet+-- Create JSON Web Key Set Request Body+data CreateJsonWebKeySet = CreateJsonWebKeySet+  { createJsonWebKeySetAlg :: Text -- ^ /Required/ "alg" - JSON Web Key Algorithm  The algorithm to be used for creating the key. Supports &#x60;RS256&#x60;, &#x60;ES256&#x60;, &#x60;ES512&#x60;, &#x60;HS512&#x60;, and &#x60;HS256&#x60;.+  , createJsonWebKeySetKid :: Text -- ^ /Required/ "kid" - JSON Web Key ID  The Key ID of the key to be created.+  , createJsonWebKeySetUse :: Text -- ^ /Required/ "use" - JSON Web Key Use  The \&quot;use\&quot; (public key use) parameter identifies the intended use of the public key. The \&quot;use\&quot; parameter is employed to indicate whether a public key is used for encrypting data or verifying the signature on data. Valid values are \&quot;enc\&quot; and \&quot;sig\&quot;.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON CreateJsonWebKeySet+instance A.FromJSON CreateJsonWebKeySet where+  parseJSON = A.withObject "CreateJsonWebKeySet" $ \o ->+    CreateJsonWebKeySet+      <$> (o .:  "alg")+      <*> (o .:  "kid")+      <*> (o .:  "use")++-- | ToJSON CreateJsonWebKeySet+instance A.ToJSON CreateJsonWebKeySet where+  toJSON CreateJsonWebKeySet {..} =+   _omitNulls+      [ "alg" .= createJsonWebKeySetAlg+      , "kid" .= createJsonWebKeySetKid+      , "use" .= createJsonWebKeySetUse+      ]+++-- | Construct a value of type 'CreateJsonWebKeySet' (by applying it's required fields, if any)+mkCreateJsonWebKeySet+  :: Text -- ^ 'createJsonWebKeySetAlg': JSON Web Key Algorithm  The algorithm to be used for creating the key. Supports `RS256`, `ES256`, `ES512`, `HS512`, and `HS256`.+  -> Text -- ^ 'createJsonWebKeySetKid': JSON Web Key ID  The Key ID of the key to be created.+  -> Text -- ^ 'createJsonWebKeySetUse': JSON Web Key Use  The \"use\" (public key use) parameter identifies the intended use of the public key. The \"use\" parameter is employed to indicate whether a public key is used for encrypting data or verifying the signature on data. Valid values are \"enc\" and \"sig\".+  -> CreateJsonWebKeySet+mkCreateJsonWebKeySet createJsonWebKeySetAlg createJsonWebKeySetKid createJsonWebKeySetUse =+  CreateJsonWebKeySet+  { createJsonWebKeySetAlg+  , createJsonWebKeySetKid+  , createJsonWebKeySetUse+  }++-- ** ErrorOAuth2+-- | ErrorOAuth2+-- Error+data ErrorOAuth2 = ErrorOAuth2+  { errorOAuth2Error :: Maybe Text -- ^ "error" - Error+  , errorOAuth2ErrorDebug :: Maybe Text -- ^ "error_debug" - Error Debug Information  Only available in dev mode.+  , errorOAuth2ErrorDescription :: Maybe Text -- ^ "error_description" - Error Description+  , errorOAuth2ErrorHint :: Maybe Text -- ^ "error_hint" - Error Hint  Helps the user identify the error cause.+  , errorOAuth2StatusCode :: Maybe Integer -- ^ "status_code" - HTTP Status Code+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON ErrorOAuth2+instance A.FromJSON ErrorOAuth2 where+  parseJSON = A.withObject "ErrorOAuth2" $ \o ->+    ErrorOAuth2+      <$> (o .:? "error")+      <*> (o .:? "error_debug")+      <*> (o .:? "error_description")+      <*> (o .:? "error_hint")+      <*> (o .:? "status_code")++-- | ToJSON ErrorOAuth2+instance A.ToJSON ErrorOAuth2 where+  toJSON ErrorOAuth2 {..} =+   _omitNulls+      [ "error" .= errorOAuth2Error+      , "error_debug" .= errorOAuth2ErrorDebug+      , "error_description" .= errorOAuth2ErrorDescription+      , "error_hint" .= errorOAuth2ErrorHint+      , "status_code" .= errorOAuth2StatusCode+      ]+++-- | Construct a value of type 'ErrorOAuth2' (by applying it's required fields, if any)+mkErrorOAuth2+  :: ErrorOAuth2+mkErrorOAuth2 =+  ErrorOAuth2+  { errorOAuth2Error = Nothing+  , errorOAuth2ErrorDebug = Nothing+  , errorOAuth2ErrorDescription = Nothing+  , errorOAuth2ErrorHint = Nothing+  , errorOAuth2StatusCode = Nothing+  }++-- ** GenericError+-- | GenericError+data GenericError = GenericError+  { genericErrorCode :: Maybe Integer -- ^ "code" - The status code+  , genericErrorDebug :: Maybe Text -- ^ "debug" - Debug information  This field is often not exposed to protect against leaking sensitive information.+  , genericErrorDetails :: Maybe AnyType -- ^ "details" - Further error details+  , genericErrorId :: Maybe Text -- ^ "id" - The error ID  Useful when trying to identify various errors in application logic.+  , genericErrorMessage :: Text -- ^ /Required/ "message" - Error message  The error&#39;s message.+  , genericErrorReason :: Maybe Text -- ^ "reason" - A human-readable reason for the error+  , genericErrorRequest :: Maybe Text -- ^ "request" - The request ID  The request ID is often exposed internally in order to trace errors across service architectures. This is often a UUID.+  , genericErrorStatus :: Maybe Text -- ^ "status" - The status description+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON GenericError+instance A.FromJSON GenericError where+  parseJSON = A.withObject "GenericError" $ \o ->+    GenericError+      <$> (o .:? "code")+      <*> (o .:? "debug")+      <*> (o .:? "details")+      <*> (o .:? "id")+      <*> (o .:  "message")+      <*> (o .:? "reason")+      <*> (o .:? "request")+      <*> (o .:? "status")++-- | ToJSON GenericError+instance A.ToJSON GenericError where+  toJSON GenericError {..} =+   _omitNulls+      [ "code" .= genericErrorCode+      , "debug" .= genericErrorDebug+      , "details" .= genericErrorDetails+      , "id" .= genericErrorId+      , "message" .= genericErrorMessage+      , "reason" .= genericErrorReason+      , "request" .= genericErrorRequest+      , "status" .= genericErrorStatus+      ]+++-- | Construct a value of type 'GenericError' (by applying it's required fields, if any)+mkGenericError+  :: Text -- ^ 'genericErrorMessage': Error message  The error's message.+  -> GenericError+mkGenericError genericErrorMessage =+  GenericError+  { genericErrorCode = Nothing+  , genericErrorDebug = Nothing+  , genericErrorDetails = Nothing+  , genericErrorId = Nothing+  , genericErrorMessage+  , genericErrorReason = Nothing+  , genericErrorRequest = Nothing+  , genericErrorStatus = Nothing+  }++-- ** GetVersion200Response+-- | GetVersion200Response+data GetVersion200Response = GetVersion200Response+  { getVersion200ResponseVersion :: Maybe Text -- ^ "version" - The version of Ory Hydra.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON GetVersion200Response+instance A.FromJSON GetVersion200Response where+  parseJSON = A.withObject "GetVersion200Response" $ \o ->+    GetVersion200Response+      <$> (o .:? "version")++-- | ToJSON GetVersion200Response+instance A.ToJSON GetVersion200Response where+  toJSON GetVersion200Response {..} =+   _omitNulls+      [ "version" .= getVersion200ResponseVersion+      ]+++-- | Construct a value of type 'GetVersion200Response' (by applying it's required fields, if any)+mkGetVersion200Response+  :: GetVersion200Response+mkGetVersion200Response =+  GetVersion200Response+  { getVersion200ResponseVersion = Nothing+  }++-- ** HealthNotReadyStatus+-- | HealthNotReadyStatus+data HealthNotReadyStatus = HealthNotReadyStatus+  { healthNotReadyStatusErrors :: Maybe (Map.Map String Text) -- ^ "errors" - Errors contains a list of errors that caused the not ready status.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON HealthNotReadyStatus+instance A.FromJSON HealthNotReadyStatus where+  parseJSON = A.withObject "HealthNotReadyStatus" $ \o ->+    HealthNotReadyStatus+      <$> (o .:? "errors")++-- | ToJSON HealthNotReadyStatus+instance A.ToJSON HealthNotReadyStatus where+  toJSON HealthNotReadyStatus {..} =+   _omitNulls+      [ "errors" .= healthNotReadyStatusErrors+      ]+++-- | Construct a value of type 'HealthNotReadyStatus' (by applying it's required fields, if any)+mkHealthNotReadyStatus+  :: HealthNotReadyStatus+mkHealthNotReadyStatus =+  HealthNotReadyStatus+  { healthNotReadyStatusErrors = Nothing+  }++-- ** HealthStatus+-- | HealthStatus+data HealthStatus = HealthStatus+  { healthStatusStatus :: Maybe Text -- ^ "status" - Status always contains \&quot;ok\&quot;.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON HealthStatus+instance A.FromJSON HealthStatus where+  parseJSON = A.withObject "HealthStatus" $ \o ->+    HealthStatus+      <$> (o .:? "status")++-- | ToJSON HealthStatus+instance A.ToJSON HealthStatus where+  toJSON HealthStatus {..} =+   _omitNulls+      [ "status" .= healthStatusStatus+      ]+++-- | Construct a value of type 'HealthStatus' (by applying it's required fields, if any)+mkHealthStatus+  :: HealthStatus+mkHealthStatus =+  HealthStatus+  { healthStatusStatus = Nothing+  }++-- ** IntrospectedOAuth2Token+-- | IntrospectedOAuth2Token+-- Introspection contains an access token's session data as specified by [IETF RFC 7662](https://tools.ietf.org/html/rfc7662)+data IntrospectedOAuth2Token = IntrospectedOAuth2Token+  { introspectedOAuth2TokenActive :: Bool -- ^ /Required/ "active" - Active is a boolean indicator of whether or not the presented token is currently active.  The specifics of a token&#39;s \&quot;active\&quot; state will vary depending on the implementation of the authorization server and the information it keeps about its tokens, but a \&quot;true\&quot; value return for the \&quot;active\&quot; property will generally indicate that a given token has been issued by this authorization server, has not been revoked by the resource owner, and is within its given time window of validity (e.g., after its issuance time and before its expiration time).+  , introspectedOAuth2TokenAud :: Maybe [Text] -- ^ "aud" - Audience contains a list of the token&#39;s intended audiences.+  , introspectedOAuth2TokenClientId :: Maybe Text -- ^ "client_id" - ID is aclient identifier for the OAuth 2.0 client that requested this token.+  , introspectedOAuth2TokenExp :: Maybe Integer -- ^ "exp" - Expires at is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token will expire.+  , introspectedOAuth2TokenExt :: Maybe (Map.Map String AnyType) -- ^ "ext" - Extra is arbitrary data set by the session.+  , introspectedOAuth2TokenIat :: Maybe Integer -- ^ "iat" - Issued at is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token was originally issued.+  , introspectedOAuth2TokenIss :: Maybe Text -- ^ "iss" - IssuerURL is a string representing the issuer of this token+  , introspectedOAuth2TokenNbf :: Maybe Integer -- ^ "nbf" - NotBefore is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token is not to be used before.+  , introspectedOAuth2TokenObfuscatedSubject :: Maybe Text -- ^ "obfuscated_subject" - ObfuscatedSubject is set when the subject identifier algorithm was set to \&quot;pairwise\&quot; during authorization. It is the &#x60;sub&#x60; value of the ID Token that was issued.+  , introspectedOAuth2TokenScope :: Maybe Text -- ^ "scope" - Scope is a JSON string containing a space-separated list of scopes associated with this token.+  , introspectedOAuth2TokenSub :: Maybe Text -- ^ "sub" - Subject of the token, as defined in JWT [RFC7519]. Usually a machine-readable identifier of the resource owner who authorized this token.+  , introspectedOAuth2TokenTokenType :: Maybe Text -- ^ "token_type" - TokenType is the introspected token&#39;s type, typically &#x60;Bearer&#x60;.+  , introspectedOAuth2TokenTokenUse :: Maybe Text -- ^ "token_use" - TokenUse is the introspected token&#39;s use, for example &#x60;access_token&#x60; or &#x60;refresh_token&#x60;.+  , introspectedOAuth2TokenUsername :: Maybe Text -- ^ "username" - Username is a human-readable identifier for the resource owner who authorized this token.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON IntrospectedOAuth2Token+instance A.FromJSON IntrospectedOAuth2Token where+  parseJSON = A.withObject "IntrospectedOAuth2Token" $ \o ->+    IntrospectedOAuth2Token+      <$> (o .:  "active")+      <*> (o .:? "aud")+      <*> (o .:? "client_id")+      <*> (o .:? "exp")+      <*> (o .:? "ext")+      <*> (o .:? "iat")+      <*> (o .:? "iss")+      <*> (o .:? "nbf")+      <*> (o .:? "obfuscated_subject")+      <*> (o .:? "scope")+      <*> (o .:? "sub")+      <*> (o .:? "token_type")+      <*> (o .:? "token_use")+      <*> (o .:? "username")++-- | ToJSON IntrospectedOAuth2Token+instance A.ToJSON IntrospectedOAuth2Token where+  toJSON IntrospectedOAuth2Token {..} =+   _omitNulls+      [ "active" .= introspectedOAuth2TokenActive+      , "aud" .= introspectedOAuth2TokenAud+      , "client_id" .= introspectedOAuth2TokenClientId+      , "exp" .= introspectedOAuth2TokenExp+      , "ext" .= introspectedOAuth2TokenExt+      , "iat" .= introspectedOAuth2TokenIat+      , "iss" .= introspectedOAuth2TokenIss+      , "nbf" .= introspectedOAuth2TokenNbf+      , "obfuscated_subject" .= introspectedOAuth2TokenObfuscatedSubject+      , "scope" .= introspectedOAuth2TokenScope+      , "sub" .= introspectedOAuth2TokenSub+      , "token_type" .= introspectedOAuth2TokenTokenType+      , "token_use" .= introspectedOAuth2TokenTokenUse+      , "username" .= introspectedOAuth2TokenUsername+      ]+++-- | Construct a value of type 'IntrospectedOAuth2Token' (by applying it's required fields, if any)+mkIntrospectedOAuth2Token+  :: Bool -- ^ 'introspectedOAuth2TokenActive': Active is a boolean indicator of whether or not the presented token is currently active.  The specifics of a token's \"active\" state will vary depending on the implementation of the authorization server and the information it keeps about its tokens, but a \"true\" value return for the \"active\" property will generally indicate that a given token has been issued by this authorization server, has not been revoked by the resource owner, and is within its given time window of validity (e.g., after its issuance time and before its expiration time).+  -> IntrospectedOAuth2Token+mkIntrospectedOAuth2Token introspectedOAuth2TokenActive =+  IntrospectedOAuth2Token+  { introspectedOAuth2TokenActive+  , introspectedOAuth2TokenAud = Nothing+  , introspectedOAuth2TokenClientId = Nothing+  , introspectedOAuth2TokenExp = Nothing+  , introspectedOAuth2TokenExt = Nothing+  , introspectedOAuth2TokenIat = Nothing+  , introspectedOAuth2TokenIss = Nothing+  , introspectedOAuth2TokenNbf = Nothing+  , introspectedOAuth2TokenObfuscatedSubject = Nothing+  , introspectedOAuth2TokenScope = Nothing+  , introspectedOAuth2TokenSub = Nothing+  , introspectedOAuth2TokenTokenType = Nothing+  , introspectedOAuth2TokenTokenUse = Nothing+  , introspectedOAuth2TokenUsername = Nothing+  }++-- ** IsReady200Response+-- | IsReady200Response+data IsReady200Response = IsReady200Response+  { isReady200ResponseStatus :: Maybe Text -- ^ "status" - Always \&quot;ok\&quot;.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON IsReady200Response+instance A.FromJSON IsReady200Response where+  parseJSON = A.withObject "IsReady200Response" $ \o ->+    IsReady200Response+      <$> (o .:? "status")++-- | ToJSON IsReady200Response+instance A.ToJSON IsReady200Response where+  toJSON IsReady200Response {..} =+   _omitNulls+      [ "status" .= isReady200ResponseStatus+      ]+++-- | Construct a value of type 'IsReady200Response' (by applying it's required fields, if any)+mkIsReady200Response+  :: IsReady200Response+mkIsReady200Response =+  IsReady200Response+  { isReady200ResponseStatus = Nothing+  }++-- ** IsReady503Response+-- | IsReady503Response+data IsReady503Response = IsReady503Response+  { isReady503ResponseErrors :: Maybe (Map.Map String Text) -- ^ "errors" - Errors contains a list of errors that caused the not ready status.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON IsReady503Response+instance A.FromJSON IsReady503Response where+  parseJSON = A.withObject "IsReady503Response" $ \o ->+    IsReady503Response+      <$> (o .:? "errors")++-- | ToJSON IsReady503Response+instance A.ToJSON IsReady503Response where+  toJSON IsReady503Response {..} =+   _omitNulls+      [ "errors" .= isReady503ResponseErrors+      ]+++-- | Construct a value of type 'IsReady503Response' (by applying it's required fields, if any)+mkIsReady503Response+  :: IsReady503Response+mkIsReady503Response =+  IsReady503Response+  { isReady503ResponseErrors = Nothing+  }++-- ** JsonPatch+-- | JsonPatch+-- A JSONPatch document as defined by RFC 6902+data JsonPatch = JsonPatch+  { jsonPatchFrom :: Maybe Text -- ^ "from" - This field is used together with operation \&quot;move\&quot; and uses JSON Pointer notation.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).+  , jsonPatchOp :: Text -- ^ /Required/ "op" - The operation to be performed. One of \&quot;add\&quot;, \&quot;remove\&quot;, \&quot;replace\&quot;, \&quot;move\&quot;, \&quot;copy\&quot;, or \&quot;test\&quot;.+  , jsonPatchPath :: Text -- ^ /Required/ "path" - The path to the target path. Uses JSON pointer notation.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).+  , jsonPatchValue :: Maybe AnyType -- ^ "value" - The value to be used within the operations.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON JsonPatch+instance A.FromJSON JsonPatch where+  parseJSON = A.withObject "JsonPatch" $ \o ->+    JsonPatch+      <$> (o .:? "from")+      <*> (o .:  "op")+      <*> (o .:  "path")+      <*> (o .:? "value")++-- | ToJSON JsonPatch+instance A.ToJSON JsonPatch where+  toJSON JsonPatch {..} =+   _omitNulls+      [ "from" .= jsonPatchFrom+      , "op" .= jsonPatchOp+      , "path" .= jsonPatchPath+      , "value" .= jsonPatchValue+      ]+++-- | Construct a value of type 'JsonPatch' (by applying it's required fields, if any)+mkJsonPatch+  :: Text -- ^ 'jsonPatchOp': The operation to be performed. One of \"add\", \"remove\", \"replace\", \"move\", \"copy\", or \"test\".+  -> Text -- ^ 'jsonPatchPath': The path to the target path. Uses JSON pointer notation.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).+  -> JsonPatch+mkJsonPatch jsonPatchOp jsonPatchPath =+  JsonPatch+  { jsonPatchFrom = Nothing+  , jsonPatchOp+  , jsonPatchPath+  , jsonPatchValue = Nothing+  }++-- ** JsonWebKey+-- | JsonWebKey+data JsonWebKey = JsonWebKey+  { jsonWebKeyAlg :: Text -- ^ /Required/ "alg" - The \&quot;alg\&quot; (algorithm) parameter identifies the algorithm intended for use with the key.  The values used should either be registered in the IANA \&quot;JSON Web Signature and Encryption Algorithms\&quot; registry established by [JWA] or be a value that contains a Collision- Resistant Name.+  , jsonWebKeyCrv :: Maybe Text -- ^ "crv"+  , jsonWebKeyD :: Maybe Text -- ^ "d"+  , jsonWebKeyDp :: Maybe Text -- ^ "dp"+  , jsonWebKeyDq :: Maybe Text -- ^ "dq"+  , jsonWebKeyE :: Maybe Text -- ^ "e"+  , jsonWebKeyK :: Maybe Text -- ^ "k"+  , jsonWebKeyKid :: Text -- ^ /Required/ "kid" - The \&quot;kid\&quot; (key ID) parameter is used to match a specific key.  This is used, for instance, to choose among a set of keys within a JWK Set during key rollover.  The structure of the \&quot;kid\&quot; value is unspecified.  When \&quot;kid\&quot; values are used within a JWK Set, different keys within the JWK Set SHOULD use distinct \&quot;kid\&quot; values.  (One example in which different keys might use the same \&quot;kid\&quot; value is if they have different \&quot;kty\&quot; (key type) values but are considered to be equivalent alternatives by the application using them.)  The \&quot;kid\&quot; value is a case-sensitive string.+  , jsonWebKeyKty :: Text -- ^ /Required/ "kty" - The \&quot;kty\&quot; (key type) parameter identifies the cryptographic algorithm family used with the key, such as \&quot;RSA\&quot; or \&quot;EC\&quot;. \&quot;kty\&quot; values should either be registered in the IANA \&quot;JSON Web Key Types\&quot; registry established by [JWA] or be a value that contains a Collision- Resistant Name.  The \&quot;kty\&quot; value is a case-sensitive string.+  , jsonWebKeyN :: Maybe Text -- ^ "n"+  , jsonWebKeyP :: Maybe Text -- ^ "p"+  , jsonWebKeyQ :: Maybe Text -- ^ "q"+  , jsonWebKeyQi :: Maybe Text -- ^ "qi"+  , jsonWebKeyUse :: Text -- ^ /Required/ "use" - Use (\&quot;public key use\&quot;) identifies the intended use of the public key. The \&quot;use\&quot; parameter is employed to indicate whether a public key is used for encrypting data or verifying the signature on data. Values are commonly \&quot;sig\&quot; (signature) or \&quot;enc\&quot; (encryption).+  , jsonWebKeyX :: Maybe Text -- ^ "x"+  , jsonWebKeyX5c :: Maybe [Text] -- ^ "x5c" - The \&quot;x5c\&quot; (X.509 certificate chain) parameter contains a chain of one or more PKIX certificates [RFC5280].  The certificate chain is represented as a JSON array of certificate value strings.  Each string in the array is a base64-encoded (Section 4 of [RFC4648] -- not base64url-encoded) DER [ITU.X690.1994] PKIX certificate value. The PKIX certificate containing the key value MUST be the first certificate.+  , jsonWebKeyY :: Maybe Text -- ^ "y"+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON JsonWebKey+instance A.FromJSON JsonWebKey where+  parseJSON = A.withObject "JsonWebKey" $ \o ->+    JsonWebKey+      <$> (o .:  "alg")+      <*> (o .:? "crv")+      <*> (o .:? "d")+      <*> (o .:? "dp")+      <*> (o .:? "dq")+      <*> (o .:? "e")+      <*> (o .:? "k")+      <*> (o .:  "kid")+      <*> (o .:  "kty")+      <*> (o .:? "n")+      <*> (o .:? "p")+      <*> (o .:? "q")+      <*> (o .:? "qi")+      <*> (o .:  "use")+      <*> (o .:? "x")+      <*> (o .:? "x5c")+      <*> (o .:? "y")++-- | ToJSON JsonWebKey+instance A.ToJSON JsonWebKey where+  toJSON JsonWebKey {..} =+   _omitNulls+      [ "alg" .= jsonWebKeyAlg+      , "crv" .= jsonWebKeyCrv+      , "d" .= jsonWebKeyD+      , "dp" .= jsonWebKeyDp+      , "dq" .= jsonWebKeyDq+      , "e" .= jsonWebKeyE+      , "k" .= jsonWebKeyK+      , "kid" .= jsonWebKeyKid+      , "kty" .= jsonWebKeyKty+      , "n" .= jsonWebKeyN+      , "p" .= jsonWebKeyP+      , "q" .= jsonWebKeyQ+      , "qi" .= jsonWebKeyQi+      , "use" .= jsonWebKeyUse+      , "x" .= jsonWebKeyX+      , "x5c" .= jsonWebKeyX5c+      , "y" .= jsonWebKeyY+      ]+++-- | Construct a value of type 'JsonWebKey' (by applying it's required fields, if any)+mkJsonWebKey+  :: Text -- ^ 'jsonWebKeyAlg': The \"alg\" (algorithm) parameter identifies the algorithm intended for use with the key.  The values used should either be registered in the IANA \"JSON Web Signature and Encryption Algorithms\" registry established by [JWA] or be a value that contains a Collision- Resistant Name.+  -> Text -- ^ 'jsonWebKeyKid': The \"kid\" (key ID) parameter is used to match a specific key.  This is used, for instance, to choose among a set of keys within a JWK Set during key rollover.  The structure of the \"kid\" value is unspecified.  When \"kid\" values are used within a JWK Set, different keys within the JWK Set SHOULD use distinct \"kid\" values.  (One example in which different keys might use the same \"kid\" value is if they have different \"kty\" (key type) values but are considered to be equivalent alternatives by the application using them.)  The \"kid\" value is a case-sensitive string.+  -> Text -- ^ 'jsonWebKeyKty': The \"kty\" (key type) parameter identifies the cryptographic algorithm family used with the key, such as \"RSA\" or \"EC\". \"kty\" values should either be registered in the IANA \"JSON Web Key Types\" registry established by [JWA] or be a value that contains a Collision- Resistant Name.  The \"kty\" value is a case-sensitive string.+  -> Text -- ^ 'jsonWebKeyUse': Use (\"public key use\") identifies the intended use of the public key. The \"use\" parameter is employed to indicate whether a public key is used for encrypting data or verifying the signature on data. Values are commonly \"sig\" (signature) or \"enc\" (encryption).+  -> JsonWebKey+mkJsonWebKey jsonWebKeyAlg jsonWebKeyKid jsonWebKeyKty jsonWebKeyUse =+  JsonWebKey+  { jsonWebKeyAlg+  , jsonWebKeyCrv = Nothing+  , jsonWebKeyD = Nothing+  , jsonWebKeyDp = Nothing+  , jsonWebKeyDq = Nothing+  , jsonWebKeyE = Nothing+  , jsonWebKeyK = Nothing+  , jsonWebKeyKid+  , jsonWebKeyKty+  , jsonWebKeyN = Nothing+  , jsonWebKeyP = Nothing+  , jsonWebKeyQ = Nothing+  , jsonWebKeyQi = Nothing+  , jsonWebKeyUse+  , jsonWebKeyX = Nothing+  , jsonWebKeyX5c = Nothing+  , jsonWebKeyY = Nothing+  }++-- ** JsonWebKeySet+-- | JsonWebKeySet+-- JSON Web Key Set+data JsonWebKeySet = JsonWebKeySet+  { jsonWebKeySetKeys :: Maybe [JsonWebKey] -- ^ "keys" - List of JSON Web Keys  The value of the \&quot;keys\&quot; parameter is an array of JSON Web Key (JWK) values. By default, the order of the JWK values within the array does not imply an order of preference among them, although applications of JWK Sets can choose to assign a meaning to the order for their purposes, if desired.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON JsonWebKeySet+instance A.FromJSON JsonWebKeySet where+  parseJSON = A.withObject "JsonWebKeySet" $ \o ->+    JsonWebKeySet+      <$> (o .:? "keys")++-- | ToJSON JsonWebKeySet+instance A.ToJSON JsonWebKeySet where+  toJSON JsonWebKeySet {..} =+   _omitNulls+      [ "keys" .= jsonWebKeySetKeys+      ]+++-- | Construct a value of type 'JsonWebKeySet' (by applying it's required fields, if any)+mkJsonWebKeySet+  :: JsonWebKeySet+mkJsonWebKeySet =+  JsonWebKeySet+  { jsonWebKeySetKeys = Nothing+  }++-- ** OAuth2Client+-- | OAuth2Client+-- OAuth 2.0 Client+-- +-- OAuth 2.0 Clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.+data OAuth2Client = OAuth2Client+  { oAuth2ClientAccessTokenStrategy :: Maybe Text -- ^ "access_token_strategy" - OAuth 2.0 Access Token Strategy  AccessTokenStrategy is the strategy used to generate access tokens. Valid options are &#x60;jwt&#x60; and &#x60;opaque&#x60;. &#x60;jwt&#x60; is a bad idea, see https://www.ory.sh/docs/hydra/advanced#json-web-tokens Setting the stragegy here overrides the global setting in &#x60;strategies.access_token&#x60;.+  , oAuth2ClientAllowedCorsOrigins :: Maybe [Text] -- ^ "allowed_cors_origins"+  , oAuth2ClientAudience :: Maybe [Text] -- ^ "audience"+  , oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientAuthorizationCodeGrantIdTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_refresh_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientBackchannelLogoutSessionRequired :: Maybe Bool -- ^ "backchannel_logout_session_required" - OpenID Connect Back-Channel Logout Session Required  Boolean value specifying whether the RP requires that a sid (session ID) Claim be included in the Logout Token to identify the RP session with the OP when the backchannel_logout_uri is used. If omitted, the default value is false.+  , oAuth2ClientBackchannelLogoutUri :: Maybe Text -- ^ "backchannel_logout_uri" - OpenID Connect Back-Channel Logout URI  RP URL that will cause the RP to log itself out when sent a Logout Token by the OP.+  , oAuth2ClientClientCredentialsGrantAccessTokenLifespan :: Maybe Text -- ^ "client_credentials_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientClientId :: Maybe Text -- ^ "client_id" - OAuth 2.0 Client ID  The ID is autogenerated and immutable.+  , oAuth2ClientClientName :: Maybe Text -- ^ "client_name" - OAuth 2.0 Client Name  The human-readable name of the client to be presented to the end-user during authorization.+  , oAuth2ClientClientSecret :: Maybe Text -- ^ "client_secret" - OAuth 2.0 Client Secret  The secret will be included in the create request as cleartext, and then never again. The secret is kept in hashed format and is not recoverable once lost.+  , oAuth2ClientClientSecretExpiresAt :: Maybe Integer -- ^ "client_secret_expires_at" - OAuth 2.0 Client Secret Expires At  The field is currently not supported and its value is always 0.+  , oAuth2ClientClientUri :: Maybe Text -- ^ "client_uri" - OAuth 2.0 Client URI  ClientURI is a URL string of a web page providing information about the client. If present, the server SHOULD display this URL to the end-user in a clickable fashion.+  , oAuth2ClientContacts :: Maybe [Text] -- ^ "contacts"+  , oAuth2ClientCreatedAt :: Maybe DateTime -- ^ "created_at" - OAuth 2.0 Client Creation Date  CreatedAt returns the timestamp of the client&#39;s creation.+  , oAuth2ClientFrontchannelLogoutSessionRequired :: Maybe Bool -- ^ "frontchannel_logout_session_required" - OpenID Connect Front-Channel Logout Session Required  Boolean value specifying whether the RP requires that iss (issuer) and sid (session ID) query parameters be included to identify the RP session with the OP when the frontchannel_logout_uri is used. If omitted, the default value is false.+  , oAuth2ClientFrontchannelLogoutUri :: Maybe Text -- ^ "frontchannel_logout_uri" - OpenID Connect Front-Channel Logout URI  RP URL that will cause the RP to log itself out when rendered in an iframe by the OP. An iss (issuer) query parameter and a sid (session ID) query parameter MAY be included by the OP to enable the RP to validate the request and to determine which of the potentially multiple sessions is to be logged out; if either is included, both MUST be.+  , oAuth2ClientGrantTypes :: Maybe [Text] -- ^ "grant_types"+  , oAuth2ClientImplicitGrantAccessTokenLifespan :: Maybe Text -- ^ "implicit_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientImplicitGrantIdTokenLifespan :: Maybe Text -- ^ "implicit_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientJwks :: Maybe AnyType -- ^ "jwks" - OAuth 2.0 Client JSON Web Key Set  Client&#39;s JSON Web Key Set [JWK] document, passed by value. The semantics of the jwks parameter are the same as the jwks_uri parameter, other than that the JWK Set is passed by value, rather than by reference. This parameter is intended only to be used by Clients that, for some reason, are unable to use the jwks_uri parameter, for instance, by native applications that might not have a location to host the contents of the JWK Set. If a Client can use jwks_uri, it MUST NOT use jwks. One significant downside of jwks is that it does not enable key rotation (which jwks_uri does, as described in Section 10 of OpenID Connect Core 1.0 [OpenID.Core]). The jwks_uri and jwks parameters MUST NOT be used together.+  , oAuth2ClientJwksUri :: Maybe Text -- ^ "jwks_uri" - OAuth 2.0 Client JSON Web Key Set URL  URL for the Client&#39;s JSON Web Key Set [JWK] document. If the Client signs requests to the Server, it contains the signing key(s) the Server uses to validate signatures from the Client. The JWK Set MAY also contain the Client&#39;s encryption keys(s), which are used by the Server to encrypt responses to the Client. When both signing and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key&#39;s intended usage. Although some algorithms allow the same key to be used for both signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.+  , oAuth2ClientJwtBearerGrantAccessTokenLifespan :: Maybe Text -- ^ "jwt_bearer_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientLogoUri :: Maybe Text -- ^ "logo_uri" - OAuth 2.0 Client Logo URI  A URL string referencing the client&#39;s logo.+  , oAuth2ClientMetadata :: Maybe AnyType -- ^ "metadata"+  , oAuth2ClientOwner :: Maybe Text -- ^ "owner" - OAuth 2.0 Client Owner  Owner is a string identifying the owner of the OAuth 2.0 Client.+  , oAuth2ClientPolicyUri :: Maybe Text -- ^ "policy_uri" - OAuth 2.0 Client Policy URI  PolicyURI is a URL string that points to a human-readable privacy policy document that describes how the deployment organization collects, uses, retains, and discloses personal data.+  , oAuth2ClientPostLogoutRedirectUris :: Maybe [Text] -- ^ "post_logout_redirect_uris"+  , oAuth2ClientRedirectUris :: Maybe [Text] -- ^ "redirect_uris"+  , oAuth2ClientRefreshTokenGrantAccessTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientRefreshTokenGrantIdTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientRefreshTokenGrantRefreshTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_refresh_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientRegistrationAccessToken :: Maybe Text -- ^ "registration_access_token" - OpenID Connect Dynamic Client Registration Access Token  RegistrationAccessToken can be used to update, get, or delete the OAuth2 Client. It is sent when creating a client using Dynamic Client Registration.+  , oAuth2ClientRegistrationClientUri :: Maybe Text -- ^ "registration_client_uri" - OpenID Connect Dynamic Client Registration URL  RegistrationClientURI is the URL used to update, get, or delete the OAuth2 Client.+  , oAuth2ClientRequestObjectSigningAlg :: Maybe Text -- ^ "request_object_signing_alg" - OpenID Connect Request Object Signing Algorithm  JWS [JWS] alg algorithm [JWA] that MUST be used for signing Request Objects sent to the OP. All Request Objects from this Client MUST be rejected, if not signed with this algorithm.+  , oAuth2ClientRequestUris :: Maybe [Text] -- ^ "request_uris"+  , oAuth2ClientResponseTypes :: Maybe [Text] -- ^ "response_types"+  , oAuth2ClientScope :: Maybe Text -- ^ "scope" - OAuth 2.0 Client Scope  Scope is a string containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens.+  , oAuth2ClientSectorIdentifierUri :: Maybe Text -- ^ "sector_identifier_uri" - OpenID Connect Sector Identifier URI  URL using the https scheme to be used in calculating Pseudonymous Identifiers by the OP. The URL references a file with a single JSON array of redirect_uri values.+  , oAuth2ClientSkipConsent :: Maybe Bool -- ^ "skip_consent" - SkipConsent skips the consent screen for this client. This field can only be set from the admin API.+  , oAuth2ClientSubjectType :: Maybe Text -- ^ "subject_type" - OpenID Connect Subject Type  The &#x60;subject_types_supported&#x60; Discovery parameter contains a list of the supported subject_type values for this server. Valid types include &#x60;pairwise&#x60; and &#x60;public&#x60;.+  , oAuth2ClientTokenEndpointAuthMethod :: Maybe Text -- ^ "token_endpoint_auth_method" - OAuth 2.0 Token Endpoint Authentication Method  Requested Client Authentication method for the Token Endpoint. The options are:  &#x60;client_secret_basic&#x60;: (default) Send &#x60;client_id&#x60; and &#x60;client_secret&#x60; as &#x60;application/x-www-form-urlencoded&#x60; encoded in the HTTP Authorization header. &#x60;client_secret_post&#x60;: Send &#x60;client_id&#x60; and &#x60;client_secret&#x60; as &#x60;application/x-www-form-urlencoded&#x60; in the HTTP body. &#x60;private_key_jwt&#x60;: Use JSON Web Tokens to authenticate the client. &#x60;none&#x60;: Used for public clients (native apps, mobile apps) which can not have secrets.+  , oAuth2ClientTokenEndpointAuthSigningAlg :: Maybe Text -- ^ "token_endpoint_auth_signing_alg" - OAuth 2.0 Token Endpoint Signing Algorithm  Requested Client Authentication signing algorithm for the Token Endpoint.+  , oAuth2ClientTosUri :: Maybe Text -- ^ "tos_uri" - OAuth 2.0 Client Terms of Service URI  A URL string pointing to a human-readable terms of service document for the client that describes a contractual relationship between the end-user and the client that the end-user accepts when authorizing the client.+  , oAuth2ClientUpdatedAt :: Maybe DateTime -- ^ "updated_at" - OAuth 2.0 Client Last Update Date  UpdatedAt returns the timestamp of the last update.+  , oAuth2ClientUserinfoSignedResponseAlg :: Maybe Text -- ^ "userinfo_signed_response_alg" - OpenID Connect Request Userinfo Signed Response Algorithm  JWS alg algorithm [JWA] REQUIRED for signing UserInfo Responses. If this is specified, the response will be JWT [JWT] serialized, and signed using JWS. The default, if omitted, is for the UserInfo Response to return the Claims as a UTF-8 encoded JSON object using the application/json content-type.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2Client+instance A.FromJSON OAuth2Client where+  parseJSON = A.withObject "OAuth2Client" $ \o ->+    OAuth2Client+      <$> (o .:? "access_token_strategy")+      <*> (o .:? "allowed_cors_origins")+      <*> (o .:? "audience")+      <*> (o .:? "authorization_code_grant_access_token_lifespan")+      <*> (o .:? "authorization_code_grant_id_token_lifespan")+      <*> (o .:? "authorization_code_grant_refresh_token_lifespan")+      <*> (o .:? "backchannel_logout_session_required")+      <*> (o .:? "backchannel_logout_uri")+      <*> (o .:? "client_credentials_grant_access_token_lifespan")+      <*> (o .:? "client_id")+      <*> (o .:? "client_name")+      <*> (o .:? "client_secret")+      <*> (o .:? "client_secret_expires_at")+      <*> (o .:? "client_uri")+      <*> (o .:? "contacts")+      <*> (o .:? "created_at")+      <*> (o .:? "frontchannel_logout_session_required")+      <*> (o .:? "frontchannel_logout_uri")+      <*> (o .:? "grant_types")+      <*> (o .:? "implicit_grant_access_token_lifespan")+      <*> (o .:? "implicit_grant_id_token_lifespan")+      <*> (o .:? "jwks")+      <*> (o .:? "jwks_uri")+      <*> (o .:? "jwt_bearer_grant_access_token_lifespan")+      <*> (o .:? "logo_uri")+      <*> (o .:? "metadata")+      <*> (o .:? "owner")+      <*> (o .:? "policy_uri")+      <*> (o .:? "post_logout_redirect_uris")+      <*> (o .:? "redirect_uris")+      <*> (o .:? "refresh_token_grant_access_token_lifespan")+      <*> (o .:? "refresh_token_grant_id_token_lifespan")+      <*> (o .:? "refresh_token_grant_refresh_token_lifespan")+      <*> (o .:? "registration_access_token")+      <*> (o .:? "registration_client_uri")+      <*> (o .:? "request_object_signing_alg")+      <*> (o .:? "request_uris")+      <*> (o .:? "response_types")+      <*> (o .:? "scope")+      <*> (o .:? "sector_identifier_uri")+      <*> (o .:? "skip_consent")+      <*> (o .:? "subject_type")+      <*> (o .:? "token_endpoint_auth_method")+      <*> (o .:? "token_endpoint_auth_signing_alg")+      <*> (o .:? "tos_uri")+      <*> (o .:? "updated_at")+      <*> (o .:? "userinfo_signed_response_alg")++-- | ToJSON OAuth2Client+instance A.ToJSON OAuth2Client where+  toJSON OAuth2Client {..} =+   _omitNulls+      [ "access_token_strategy" .= oAuth2ClientAccessTokenStrategy+      , "allowed_cors_origins" .= oAuth2ClientAllowedCorsOrigins+      , "audience" .= oAuth2ClientAudience+      , "authorization_code_grant_access_token_lifespan" .= oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan+      , "authorization_code_grant_id_token_lifespan" .= oAuth2ClientAuthorizationCodeGrantIdTokenLifespan+      , "authorization_code_grant_refresh_token_lifespan" .= oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan+      , "backchannel_logout_session_required" .= oAuth2ClientBackchannelLogoutSessionRequired+      , "backchannel_logout_uri" .= oAuth2ClientBackchannelLogoutUri+      , "client_credentials_grant_access_token_lifespan" .= oAuth2ClientClientCredentialsGrantAccessTokenLifespan+      , "client_id" .= oAuth2ClientClientId+      , "client_name" .= oAuth2ClientClientName+      , "client_secret" .= oAuth2ClientClientSecret+      , "client_secret_expires_at" .= oAuth2ClientClientSecretExpiresAt+      , "client_uri" .= oAuth2ClientClientUri+      , "contacts" .= oAuth2ClientContacts+      , "created_at" .= oAuth2ClientCreatedAt+      , "frontchannel_logout_session_required" .= oAuth2ClientFrontchannelLogoutSessionRequired+      , "frontchannel_logout_uri" .= oAuth2ClientFrontchannelLogoutUri+      , "grant_types" .= oAuth2ClientGrantTypes+      , "implicit_grant_access_token_lifespan" .= oAuth2ClientImplicitGrantAccessTokenLifespan+      , "implicit_grant_id_token_lifespan" .= oAuth2ClientImplicitGrantIdTokenLifespan+      , "jwks" .= oAuth2ClientJwks+      , "jwks_uri" .= oAuth2ClientJwksUri+      , "jwt_bearer_grant_access_token_lifespan" .= oAuth2ClientJwtBearerGrantAccessTokenLifespan+      , "logo_uri" .= oAuth2ClientLogoUri+      , "metadata" .= oAuth2ClientMetadata+      , "owner" .= oAuth2ClientOwner+      , "policy_uri" .= oAuth2ClientPolicyUri+      , "post_logout_redirect_uris" .= oAuth2ClientPostLogoutRedirectUris+      , "redirect_uris" .= oAuth2ClientRedirectUris+      , "refresh_token_grant_access_token_lifespan" .= oAuth2ClientRefreshTokenGrantAccessTokenLifespan+      , "refresh_token_grant_id_token_lifespan" .= oAuth2ClientRefreshTokenGrantIdTokenLifespan+      , "refresh_token_grant_refresh_token_lifespan" .= oAuth2ClientRefreshTokenGrantRefreshTokenLifespan+      , "registration_access_token" .= oAuth2ClientRegistrationAccessToken+      , "registration_client_uri" .= oAuth2ClientRegistrationClientUri+      , "request_object_signing_alg" .= oAuth2ClientRequestObjectSigningAlg+      , "request_uris" .= oAuth2ClientRequestUris+      , "response_types" .= oAuth2ClientResponseTypes+      , "scope" .= oAuth2ClientScope+      , "sector_identifier_uri" .= oAuth2ClientSectorIdentifierUri+      , "skip_consent" .= oAuth2ClientSkipConsent+      , "subject_type" .= oAuth2ClientSubjectType+      , "token_endpoint_auth_method" .= oAuth2ClientTokenEndpointAuthMethod+      , "token_endpoint_auth_signing_alg" .= oAuth2ClientTokenEndpointAuthSigningAlg+      , "tos_uri" .= oAuth2ClientTosUri+      , "updated_at" .= oAuth2ClientUpdatedAt+      , "userinfo_signed_response_alg" .= oAuth2ClientUserinfoSignedResponseAlg+      ]+++-- | Construct a value of type 'OAuth2Client' (by applying it's required fields, if any)+mkOAuth2Client+  :: OAuth2Client+mkOAuth2Client =+  OAuth2Client+  { oAuth2ClientAccessTokenStrategy = Nothing+  , oAuth2ClientAllowedCorsOrigins = Nothing+  , oAuth2ClientAudience = Nothing+  , oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan = Nothing+  , oAuth2ClientAuthorizationCodeGrantIdTokenLifespan = Nothing+  , oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan = Nothing+  , oAuth2ClientBackchannelLogoutSessionRequired = Nothing+  , oAuth2ClientBackchannelLogoutUri = Nothing+  , oAuth2ClientClientCredentialsGrantAccessTokenLifespan = Nothing+  , oAuth2ClientClientId = Nothing+  , oAuth2ClientClientName = Nothing+  , oAuth2ClientClientSecret = Nothing+  , oAuth2ClientClientSecretExpiresAt = Nothing+  , oAuth2ClientClientUri = Nothing+  , oAuth2ClientContacts = Nothing+  , oAuth2ClientCreatedAt = Nothing+  , oAuth2ClientFrontchannelLogoutSessionRequired = Nothing+  , oAuth2ClientFrontchannelLogoutUri = Nothing+  , oAuth2ClientGrantTypes = Nothing+  , oAuth2ClientImplicitGrantAccessTokenLifespan = Nothing+  , oAuth2ClientImplicitGrantIdTokenLifespan = Nothing+  , oAuth2ClientJwks = Nothing+  , oAuth2ClientJwksUri = Nothing+  , oAuth2ClientJwtBearerGrantAccessTokenLifespan = Nothing+  , oAuth2ClientLogoUri = Nothing+  , oAuth2ClientMetadata = Nothing+  , oAuth2ClientOwner = Nothing+  , oAuth2ClientPolicyUri = Nothing+  , oAuth2ClientPostLogoutRedirectUris = Nothing+  , oAuth2ClientRedirectUris = Nothing+  , oAuth2ClientRefreshTokenGrantAccessTokenLifespan = Nothing+  , oAuth2ClientRefreshTokenGrantIdTokenLifespan = Nothing+  , oAuth2ClientRefreshTokenGrantRefreshTokenLifespan = Nothing+  , oAuth2ClientRegistrationAccessToken = Nothing+  , oAuth2ClientRegistrationClientUri = Nothing+  , oAuth2ClientRequestObjectSigningAlg = Nothing+  , oAuth2ClientRequestUris = Nothing+  , oAuth2ClientResponseTypes = Nothing+  , oAuth2ClientScope = Nothing+  , oAuth2ClientSectorIdentifierUri = Nothing+  , oAuth2ClientSkipConsent = Nothing+  , oAuth2ClientSubjectType = Nothing+  , oAuth2ClientTokenEndpointAuthMethod = Nothing+  , oAuth2ClientTokenEndpointAuthSigningAlg = Nothing+  , oAuth2ClientTosUri = Nothing+  , oAuth2ClientUpdatedAt = Nothing+  , oAuth2ClientUserinfoSignedResponseAlg = Nothing+  }++-- ** OAuth2ClientTokenLifespans+-- | OAuth2ClientTokenLifespans+-- OAuth 2.0 Client Token Lifespans+-- +-- Lifespans of different token types issued for this OAuth 2.0 Client.+data OAuth2ClientTokenLifespans = OAuth2ClientTokenLifespans+  { oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_refresh_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan :: Maybe Text -- ^ "client_credentials_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan :: Maybe Text -- ^ "implicit_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan :: Maybe Text -- ^ "implicit_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan :: Maybe Text -- ^ "jwt_bearer_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  , oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_refresh_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2ClientTokenLifespans+instance A.FromJSON OAuth2ClientTokenLifespans where+  parseJSON = A.withObject "OAuth2ClientTokenLifespans" $ \o ->+    OAuth2ClientTokenLifespans+      <$> (o .:? "authorization_code_grant_access_token_lifespan")+      <*> (o .:? "authorization_code_grant_id_token_lifespan")+      <*> (o .:? "authorization_code_grant_refresh_token_lifespan")+      <*> (o .:? "client_credentials_grant_access_token_lifespan")+      <*> (o .:? "implicit_grant_access_token_lifespan")+      <*> (o .:? "implicit_grant_id_token_lifespan")+      <*> (o .:? "jwt_bearer_grant_access_token_lifespan")+      <*> (o .:? "refresh_token_grant_access_token_lifespan")+      <*> (o .:? "refresh_token_grant_id_token_lifespan")+      <*> (o .:? "refresh_token_grant_refresh_token_lifespan")++-- | ToJSON OAuth2ClientTokenLifespans+instance A.ToJSON OAuth2ClientTokenLifespans where+  toJSON OAuth2ClientTokenLifespans {..} =+   _omitNulls+      [ "authorization_code_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan+      , "authorization_code_grant_id_token_lifespan" .= oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan+      , "authorization_code_grant_refresh_token_lifespan" .= oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan+      , "client_credentials_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan+      , "implicit_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan+      , "implicit_grant_id_token_lifespan" .= oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan+      , "jwt_bearer_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan+      , "refresh_token_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan+      , "refresh_token_grant_id_token_lifespan" .= oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan+      , "refresh_token_grant_refresh_token_lifespan" .= oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan+      ]+++-- | Construct a value of type 'OAuth2ClientTokenLifespans' (by applying it's required fields, if any)+mkOAuth2ClientTokenLifespans+  :: OAuth2ClientTokenLifespans+mkOAuth2ClientTokenLifespans =+  OAuth2ClientTokenLifespans+  { oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan = Nothing+  , oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan = Nothing+  }++-- ** OAuth2ConsentRequest+-- | OAuth2ConsentRequest+-- Contains information on an ongoing consent request.+-- +data OAuth2ConsentRequest = OAuth2ConsentRequest+  { oAuth2ConsentRequestAcr :: Maybe Text -- ^ "acr" - ACR represents the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it to express that, for example, a user authenticated using two factor authentication.+  , oAuth2ConsentRequestAmr :: Maybe [Text] -- ^ "amr"+  , oAuth2ConsentRequestChallenge :: Text -- ^ /Required/ "challenge" - ID is the identifier (\&quot;authorization challenge\&quot;) of the consent authorization request. It is used to identify the session.+  , oAuth2ConsentRequestClient :: Maybe OAuth2Client -- ^ "client"+  , oAuth2ConsentRequestContext :: Maybe AnyType -- ^ "context"+  , oAuth2ConsentRequestLoginChallenge :: Maybe Text -- ^ "login_challenge" - LoginChallenge is the login challenge this consent challenge belongs to. It can be used to associate a login and consent request in the login &amp; consent app.+  , oAuth2ConsentRequestLoginSessionId :: Maybe Text -- ^ "login_session_id" - LoginSessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag) this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false) this will be a new random value. This value is used as the \&quot;sid\&quot; parameter in the ID Token and in OIDC Front-/Back- channel logout. It&#39;s value can generally be used to associate consecutive login requests by a certain user.+  , oAuth2ConsentRequestOidcContext :: Maybe OAuth2ConsentRequestOpenIDConnectContext -- ^ "oidc_context"+  , oAuth2ConsentRequestRequestUrl :: Maybe Text -- ^ "request_url" - RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but might come in handy if you want to deal with additional request parameters.+  , oAuth2ConsentRequestRequestedAccessTokenAudience :: Maybe [Text] -- ^ "requested_access_token_audience"+  , oAuth2ConsentRequestRequestedScope :: Maybe [Text] -- ^ "requested_scope"+  , oAuth2ConsentRequestSkip :: Maybe Bool -- ^ "skip" - Skip, if true, implies that the client has requested the same scopes from the same user previously. If true, you must not ask the user to grant the requested scopes. You must however either allow or deny the consent request using the usual API call.+  , oAuth2ConsentRequestSubject :: Maybe Text -- ^ "subject" - Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope requested by the OAuth 2.0 client.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2ConsentRequest+instance A.FromJSON OAuth2ConsentRequest where+  parseJSON = A.withObject "OAuth2ConsentRequest" $ \o ->+    OAuth2ConsentRequest+      <$> (o .:? "acr")+      <*> (o .:? "amr")+      <*> (o .:  "challenge")+      <*> (o .:? "client")+      <*> (o .:? "context")+      <*> (o .:? "login_challenge")+      <*> (o .:? "login_session_id")+      <*> (o .:? "oidc_context")+      <*> (o .:? "request_url")+      <*> (o .:? "requested_access_token_audience")+      <*> (o .:? "requested_scope")+      <*> (o .:? "skip")+      <*> (o .:? "subject")++-- | ToJSON OAuth2ConsentRequest+instance A.ToJSON OAuth2ConsentRequest where+  toJSON OAuth2ConsentRequest {..} =+   _omitNulls+      [ "acr" .= oAuth2ConsentRequestAcr+      , "amr" .= oAuth2ConsentRequestAmr+      , "challenge" .= oAuth2ConsentRequestChallenge+      , "client" .= oAuth2ConsentRequestClient+      , "context" .= oAuth2ConsentRequestContext+      , "login_challenge" .= oAuth2ConsentRequestLoginChallenge+      , "login_session_id" .= oAuth2ConsentRequestLoginSessionId+      , "oidc_context" .= oAuth2ConsentRequestOidcContext+      , "request_url" .= oAuth2ConsentRequestRequestUrl+      , "requested_access_token_audience" .= oAuth2ConsentRequestRequestedAccessTokenAudience+      , "requested_scope" .= oAuth2ConsentRequestRequestedScope+      , "skip" .= oAuth2ConsentRequestSkip+      , "subject" .= oAuth2ConsentRequestSubject+      ]+++-- | Construct a value of type 'OAuth2ConsentRequest' (by applying it's required fields, if any)+mkOAuth2ConsentRequest+  :: Text -- ^ 'oAuth2ConsentRequestChallenge': ID is the identifier (\"authorization challenge\") of the consent authorization request. It is used to identify the session.+  -> OAuth2ConsentRequest+mkOAuth2ConsentRequest oAuth2ConsentRequestChallenge =+  OAuth2ConsentRequest+  { oAuth2ConsentRequestAcr = Nothing+  , oAuth2ConsentRequestAmr = Nothing+  , oAuth2ConsentRequestChallenge+  , oAuth2ConsentRequestClient = Nothing+  , oAuth2ConsentRequestContext = Nothing+  , oAuth2ConsentRequestLoginChallenge = Nothing+  , oAuth2ConsentRequestLoginSessionId = Nothing+  , oAuth2ConsentRequestOidcContext = Nothing+  , oAuth2ConsentRequestRequestUrl = Nothing+  , oAuth2ConsentRequestRequestedAccessTokenAudience = Nothing+  , oAuth2ConsentRequestRequestedScope = Nothing+  , oAuth2ConsentRequestSkip = Nothing+  , oAuth2ConsentRequestSubject = Nothing+  }++-- ** OAuth2ConsentRequestOpenIDConnectContext+-- | OAuth2ConsentRequestOpenIDConnectContext+-- Contains optional information about the OpenID Connect request.+-- +data OAuth2ConsentRequestOpenIDConnectContext = OAuth2ConsentRequestOpenIDConnectContext+  { oAuth2ConsentRequestOpenIDConnectContextAcrValues :: Maybe [Text] -- ^ "acr_values" - ACRValues is the Authentication AuthorizationContext Class Reference requested in the OAuth 2.0 Authorization request. It is a parameter defined by OpenID Connect and expresses which level of authentication (e.g. 2FA) is required.  OpenID Connect defines it as follows: &gt; Requested Authentication AuthorizationContext Class Reference values. Space-separated string that specifies the acr values that the Authorization Server is being requested to use for processing this Authentication Request, with the values appearing in order of preference. The Authentication AuthorizationContext Class satisfied by the authentication performed is returned as the acr Claim Value, as specified in Section 2. The acr Claim is requested as a Voluntary Claim by this parameter.+  , oAuth2ConsentRequestOpenIDConnectContextDisplay :: Maybe Text -- ^ "display" - Display is a string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User. The defined values are: page: The Authorization Server SHOULD display the authentication and consent UI consistent with a full User Agent page view. If the display parameter is not specified, this is the default display mode. popup: The Authorization Server SHOULD display the authentication and consent UI consistent with a popup User Agent window. The popup User Agent window should be of an appropriate size for a login-focused dialog and should not obscure the entire window that it is popping up over. touch: The Authorization Server SHOULD display the authentication and consent UI consistent with a device that leverages a touch interface. wap: The Authorization Server SHOULD display the authentication and consent UI consistent with a \&quot;feature phone\&quot; type display.  The Authorization Server MAY also attempt to detect the capabilities of the User Agent and present an appropriate display.+  , oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims :: Maybe (Map.Map String AnyType) -- ^ "id_token_hint_claims" - IDTokenHintClaims are the claims of the ID Token previously issued by the Authorization Server being passed as a hint about the End-User&#39;s current or past authenticated session with the Client.+  , oAuth2ConsentRequestOpenIDConnectContextLoginHint :: Maybe Text -- ^ "login_hint" - LoginHint hints about the login identifier the End-User might use to log in (if necessary). This hint can be used by an RP if it first asks the End-User for their e-mail address (or other identifier) and then wants to pass that value as a hint to the discovered authorization service. This value MAY also be a phone number in the format specified for the phone_number Claim. The use of this parameter is optional.+  , oAuth2ConsentRequestOpenIDConnectContextUiLocales :: Maybe [Text] -- ^ "ui_locales" - UILocales is the End-User&#39;id preferred languages and scripts for the user interface, represented as a space-separated list of BCP47 [RFC5646] language tag values, ordered by preference. For instance, the value \&quot;fr-CA fr en\&quot; represents a preference for French as spoken in Canada, then French (without a region designation), followed by English (without a region designation). An error SHOULD NOT result if some or all of the requested locales are not supported by the OpenID Provider.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2ConsentRequestOpenIDConnectContext+instance A.FromJSON OAuth2ConsentRequestOpenIDConnectContext where+  parseJSON = A.withObject "OAuth2ConsentRequestOpenIDConnectContext" $ \o ->+    OAuth2ConsentRequestOpenIDConnectContext+      <$> (o .:? "acr_values")+      <*> (o .:? "display")+      <*> (o .:? "id_token_hint_claims")+      <*> (o .:? "login_hint")+      <*> (o .:? "ui_locales")++-- | ToJSON OAuth2ConsentRequestOpenIDConnectContext+instance A.ToJSON OAuth2ConsentRequestOpenIDConnectContext where+  toJSON OAuth2ConsentRequestOpenIDConnectContext {..} =+   _omitNulls+      [ "acr_values" .= oAuth2ConsentRequestOpenIDConnectContextAcrValues+      , "display" .= oAuth2ConsentRequestOpenIDConnectContextDisplay+      , "id_token_hint_claims" .= oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims+      , "login_hint" .= oAuth2ConsentRequestOpenIDConnectContextLoginHint+      , "ui_locales" .= oAuth2ConsentRequestOpenIDConnectContextUiLocales+      ]+++-- | Construct a value of type 'OAuth2ConsentRequestOpenIDConnectContext' (by applying it's required fields, if any)+mkOAuth2ConsentRequestOpenIDConnectContext+  :: OAuth2ConsentRequestOpenIDConnectContext+mkOAuth2ConsentRequestOpenIDConnectContext =+  OAuth2ConsentRequestOpenIDConnectContext+  { oAuth2ConsentRequestOpenIDConnectContextAcrValues = Nothing+  , oAuth2ConsentRequestOpenIDConnectContextDisplay = Nothing+  , oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims = Nothing+  , oAuth2ConsentRequestOpenIDConnectContextLoginHint = Nothing+  , oAuth2ConsentRequestOpenIDConnectContextUiLocales = Nothing+  }++-- ** OAuth2ConsentSession+-- | OAuth2ConsentSession+-- OAuth 2.0 Consent Session+-- +-- A completed OAuth 2.0 Consent Session.+data OAuth2ConsentSession = OAuth2ConsentSession+  { oAuth2ConsentSessionConsentRequest :: Maybe OAuth2ConsentRequest -- ^ "consent_request"+  , oAuth2ConsentSessionExpiresAt :: Maybe OAuth2ConsentSessionExpiresAt -- ^ "expires_at"+  , oAuth2ConsentSessionGrantAccessTokenAudience :: Maybe [Text] -- ^ "grant_access_token_audience"+  , oAuth2ConsentSessionGrantScope :: Maybe [Text] -- ^ "grant_scope"+  , oAuth2ConsentSessionHandledAt :: Maybe DateTime -- ^ "handled_at"+  , oAuth2ConsentSessionRemember :: Maybe Bool -- ^ "remember" - Remember Consent  Remember, if set to true, tells ORY Hydra to remember this consent authorization and reuse it if the same client asks the same user for the same, or a subset of, scope.+  , oAuth2ConsentSessionRememberFor :: Maybe Integer -- ^ "remember_for" - Remember Consent For  RememberFor sets how long the consent authorization should be remembered for in seconds. If set to &#x60;0&#x60;, the authorization will be remembered indefinitely.+  , oAuth2ConsentSessionSession :: Maybe AcceptOAuth2ConsentRequestSession -- ^ "session"+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2ConsentSession+instance A.FromJSON OAuth2ConsentSession where+  parseJSON = A.withObject "OAuth2ConsentSession" $ \o ->+    OAuth2ConsentSession+      <$> (o .:? "consent_request")+      <*> (o .:? "expires_at")+      <*> (o .:? "grant_access_token_audience")+      <*> (o .:? "grant_scope")+      <*> (o .:? "handled_at")+      <*> (o .:? "remember")+      <*> (o .:? "remember_for")+      <*> (o .:? "session")++-- | ToJSON OAuth2ConsentSession+instance A.ToJSON OAuth2ConsentSession where+  toJSON OAuth2ConsentSession {..} =+   _omitNulls+      [ "consent_request" .= oAuth2ConsentSessionConsentRequest+      , "expires_at" .= oAuth2ConsentSessionExpiresAt+      , "grant_access_token_audience" .= oAuth2ConsentSessionGrantAccessTokenAudience+      , "grant_scope" .= oAuth2ConsentSessionGrantScope+      , "handled_at" .= oAuth2ConsentSessionHandledAt+      , "remember" .= oAuth2ConsentSessionRemember+      , "remember_for" .= oAuth2ConsentSessionRememberFor+      , "session" .= oAuth2ConsentSessionSession+      ]+++-- | Construct a value of type 'OAuth2ConsentSession' (by applying it's required fields, if any)+mkOAuth2ConsentSession+  :: OAuth2ConsentSession+mkOAuth2ConsentSession =+  OAuth2ConsentSession+  { oAuth2ConsentSessionConsentRequest = Nothing+  , oAuth2ConsentSessionExpiresAt = Nothing+  , oAuth2ConsentSessionGrantAccessTokenAudience = Nothing+  , oAuth2ConsentSessionGrantScope = Nothing+  , oAuth2ConsentSessionHandledAt = Nothing+  , oAuth2ConsentSessionRemember = Nothing+  , oAuth2ConsentSessionRememberFor = Nothing+  , oAuth2ConsentSessionSession = Nothing+  }++-- ** OAuth2ConsentSessionExpiresAt+-- | OAuth2ConsentSessionExpiresAt+data OAuth2ConsentSessionExpiresAt = OAuth2ConsentSessionExpiresAt+  { oAuth2ConsentSessionExpiresAtAccessToken :: Maybe DateTime -- ^ "access_token"+  , oAuth2ConsentSessionExpiresAtAuthorizeCode :: Maybe DateTime -- ^ "authorize_code"+  , oAuth2ConsentSessionExpiresAtIdToken :: Maybe DateTime -- ^ "id_token"+  , oAuth2ConsentSessionExpiresAtParContext :: Maybe DateTime -- ^ "par_context"+  , oAuth2ConsentSessionExpiresAtRefreshToken :: Maybe DateTime -- ^ "refresh_token"+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2ConsentSessionExpiresAt+instance A.FromJSON OAuth2ConsentSessionExpiresAt where+  parseJSON = A.withObject "OAuth2ConsentSessionExpiresAt" $ \o ->+    OAuth2ConsentSessionExpiresAt+      <$> (o .:? "access_token")+      <*> (o .:? "authorize_code")+      <*> (o .:? "id_token")+      <*> (o .:? "par_context")+      <*> (o .:? "refresh_token")++-- | ToJSON OAuth2ConsentSessionExpiresAt+instance A.ToJSON OAuth2ConsentSessionExpiresAt where+  toJSON OAuth2ConsentSessionExpiresAt {..} =+   _omitNulls+      [ "access_token" .= oAuth2ConsentSessionExpiresAtAccessToken+      , "authorize_code" .= oAuth2ConsentSessionExpiresAtAuthorizeCode+      , "id_token" .= oAuth2ConsentSessionExpiresAtIdToken+      , "par_context" .= oAuth2ConsentSessionExpiresAtParContext+      , "refresh_token" .= oAuth2ConsentSessionExpiresAtRefreshToken+      ]+++-- | Construct a value of type 'OAuth2ConsentSessionExpiresAt' (by applying it's required fields, if any)+mkOAuth2ConsentSessionExpiresAt+  :: OAuth2ConsentSessionExpiresAt+mkOAuth2ConsentSessionExpiresAt =+  OAuth2ConsentSessionExpiresAt+  { oAuth2ConsentSessionExpiresAtAccessToken = Nothing+  , oAuth2ConsentSessionExpiresAtAuthorizeCode = Nothing+  , oAuth2ConsentSessionExpiresAtIdToken = Nothing+  , oAuth2ConsentSessionExpiresAtParContext = Nothing+  , oAuth2ConsentSessionExpiresAtRefreshToken = Nothing+  }++-- ** OAuth2LoginRequest+-- | OAuth2LoginRequest+-- Contains information on an ongoing login request.+-- +data OAuth2LoginRequest = OAuth2LoginRequest+  { oAuth2LoginRequestChallenge :: Text -- ^ /Required/ "challenge" - ID is the identifier (\&quot;login challenge\&quot;) of the login request. It is used to identify the session.+  , oAuth2LoginRequestClient :: OAuth2Client -- ^ /Required/ "client"+  , oAuth2LoginRequestOidcContext :: Maybe OAuth2ConsentRequestOpenIDConnectContext -- ^ "oidc_context"+  , oAuth2LoginRequestRequestUrl :: Text -- ^ /Required/ "request_url" - RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but might come in handy if you want to deal with additional request parameters.+  , oAuth2LoginRequestRequestedAccessTokenAudience :: [Text] -- ^ /Required/ "requested_access_token_audience"+  , oAuth2LoginRequestRequestedScope :: [Text] -- ^ /Required/ "requested_scope"+  , oAuth2LoginRequestSessionId :: Maybe Text -- ^ "session_id" - SessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag) this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false) this will be a new random value. This value is used as the \&quot;sid\&quot; parameter in the ID Token and in OIDC Front-/Back- channel logout. It&#39;s value can generally be used to associate consecutive login requests by a certain user.+  , oAuth2LoginRequestSkip :: Bool -- ^ /Required/ "skip" - Skip, if true, implies that the client has requested the same scopes from the same user previously. If true, you can skip asking the user to grant the requested scopes, and simply forward the user to the redirect URL.  This feature allows you to update / set session information.+  , oAuth2LoginRequestSubject :: Text -- ^ /Required/ "subject" - Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope requested by the OAuth 2.0 client. If this value is set and &#x60;skip&#x60; is true, you MUST include this subject type when accepting the login request, or the request will fail.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2LoginRequest+instance A.FromJSON OAuth2LoginRequest where+  parseJSON = A.withObject "OAuth2LoginRequest" $ \o ->+    OAuth2LoginRequest+      <$> (o .:  "challenge")+      <*> (o .:  "client")+      <*> (o .:? "oidc_context")+      <*> (o .:  "request_url")+      <*> (o .:  "requested_access_token_audience")+      <*> (o .:  "requested_scope")+      <*> (o .:? "session_id")+      <*> (o .:  "skip")+      <*> (o .:  "subject")++-- | ToJSON OAuth2LoginRequest+instance A.ToJSON OAuth2LoginRequest where+  toJSON OAuth2LoginRequest {..} =+   _omitNulls+      [ "challenge" .= oAuth2LoginRequestChallenge+      , "client" .= oAuth2LoginRequestClient+      , "oidc_context" .= oAuth2LoginRequestOidcContext+      , "request_url" .= oAuth2LoginRequestRequestUrl+      , "requested_access_token_audience" .= oAuth2LoginRequestRequestedAccessTokenAudience+      , "requested_scope" .= oAuth2LoginRequestRequestedScope+      , "session_id" .= oAuth2LoginRequestSessionId+      , "skip" .= oAuth2LoginRequestSkip+      , "subject" .= oAuth2LoginRequestSubject+      ]+++-- | Construct a value of type 'OAuth2LoginRequest' (by applying it's required fields, if any)+mkOAuth2LoginRequest+  :: Text -- ^ 'oAuth2LoginRequestChallenge': ID is the identifier (\"login challenge\") of the login request. It is used to identify the session.+  -> OAuth2Client -- ^ 'oAuth2LoginRequestClient' +  -> Text -- ^ 'oAuth2LoginRequestRequestUrl': RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but might come in handy if you want to deal with additional request parameters.+  -> [Text] -- ^ 'oAuth2LoginRequestRequestedAccessTokenAudience' +  -> [Text] -- ^ 'oAuth2LoginRequestRequestedScope' +  -> Bool -- ^ 'oAuth2LoginRequestSkip': Skip, if true, implies that the client has requested the same scopes from the same user previously. If true, you can skip asking the user to grant the requested scopes, and simply forward the user to the redirect URL.  This feature allows you to update / set session information.+  -> Text -- ^ 'oAuth2LoginRequestSubject': Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope requested by the OAuth 2.0 client. If this value is set and `skip` is true, you MUST include this subject type when accepting the login request, or the request will fail.+  -> OAuth2LoginRequest+mkOAuth2LoginRequest oAuth2LoginRequestChallenge oAuth2LoginRequestClient oAuth2LoginRequestRequestUrl oAuth2LoginRequestRequestedAccessTokenAudience oAuth2LoginRequestRequestedScope oAuth2LoginRequestSkip oAuth2LoginRequestSubject =+  OAuth2LoginRequest+  { oAuth2LoginRequestChallenge+  , oAuth2LoginRequestClient+  , oAuth2LoginRequestOidcContext = Nothing+  , oAuth2LoginRequestRequestUrl+  , oAuth2LoginRequestRequestedAccessTokenAudience+  , oAuth2LoginRequestRequestedScope+  , oAuth2LoginRequestSessionId = Nothing+  , oAuth2LoginRequestSkip+  , oAuth2LoginRequestSubject+  }++-- ** OAuth2LogoutRequest+-- | OAuth2LogoutRequest+-- Contains information about an ongoing logout request.+-- +data OAuth2LogoutRequest = OAuth2LogoutRequest+  { oAuth2LogoutRequestChallenge :: Maybe Text -- ^ "challenge" - Challenge is the identifier (\&quot;logout challenge\&quot;) of the logout authentication request. It is used to identify the session.+  , oAuth2LogoutRequestClient :: Maybe OAuth2Client -- ^ "client"+  , oAuth2LogoutRequestRequestUrl :: Maybe Text -- ^ "request_url" - RequestURL is the original Logout URL requested.+  , oAuth2LogoutRequestRpInitiated :: Maybe Bool -- ^ "rp_initiated" - RPInitiated is set to true if the request was initiated by a Relying Party (RP), also known as an OAuth 2.0 Client.+  , oAuth2LogoutRequestSid :: Maybe Text -- ^ "sid" - SessionID is the login session ID that was requested to log out.+  , oAuth2LogoutRequestSubject :: Maybe Text -- ^ "subject" - Subject is the user for whom the logout was request.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2LogoutRequest+instance A.FromJSON OAuth2LogoutRequest where+  parseJSON = A.withObject "OAuth2LogoutRequest" $ \o ->+    OAuth2LogoutRequest+      <$> (o .:? "challenge")+      <*> (o .:? "client")+      <*> (o .:? "request_url")+      <*> (o .:? "rp_initiated")+      <*> (o .:? "sid")+      <*> (o .:? "subject")++-- | ToJSON OAuth2LogoutRequest+instance A.ToJSON OAuth2LogoutRequest where+  toJSON OAuth2LogoutRequest {..} =+   _omitNulls+      [ "challenge" .= oAuth2LogoutRequestChallenge+      , "client" .= oAuth2LogoutRequestClient+      , "request_url" .= oAuth2LogoutRequestRequestUrl+      , "rp_initiated" .= oAuth2LogoutRequestRpInitiated+      , "sid" .= oAuth2LogoutRequestSid+      , "subject" .= oAuth2LogoutRequestSubject+      ]+++-- | Construct a value of type 'OAuth2LogoutRequest' (by applying it's required fields, if any)+mkOAuth2LogoutRequest+  :: OAuth2LogoutRequest+mkOAuth2LogoutRequest =+  OAuth2LogoutRequest+  { oAuth2LogoutRequestChallenge = Nothing+  , oAuth2LogoutRequestClient = Nothing+  , oAuth2LogoutRequestRequestUrl = Nothing+  , oAuth2LogoutRequestRpInitiated = Nothing+  , oAuth2LogoutRequestSid = Nothing+  , oAuth2LogoutRequestSubject = Nothing+  }++-- ** OAuth2RedirectTo+-- | OAuth2RedirectTo+-- OAuth 2.0 Redirect Browser To+-- +-- Contains a redirect URL used to complete a login, consent, or logout request.+data OAuth2RedirectTo = OAuth2RedirectTo+  { oAuth2RedirectToRedirectTo :: Text -- ^ /Required/ "redirect_to" - RedirectURL is the URL which you should redirect the user&#39;s browser to once the authentication process is completed.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2RedirectTo+instance A.FromJSON OAuth2RedirectTo where+  parseJSON = A.withObject "OAuth2RedirectTo" $ \o ->+    OAuth2RedirectTo+      <$> (o .:  "redirect_to")++-- | ToJSON OAuth2RedirectTo+instance A.ToJSON OAuth2RedirectTo where+  toJSON OAuth2RedirectTo {..} =+   _omitNulls+      [ "redirect_to" .= oAuth2RedirectToRedirectTo+      ]+++-- | Construct a value of type 'OAuth2RedirectTo' (by applying it's required fields, if any)+mkOAuth2RedirectTo+  :: Text -- ^ 'oAuth2RedirectToRedirectTo': RedirectURL is the URL which you should redirect the user's browser to once the authentication process is completed.+  -> OAuth2RedirectTo+mkOAuth2RedirectTo oAuth2RedirectToRedirectTo =+  OAuth2RedirectTo+  { oAuth2RedirectToRedirectTo+  }++-- ** OAuth2TokenExchange+-- | OAuth2TokenExchange+-- OAuth2 Token Exchange Result+data OAuth2TokenExchange = OAuth2TokenExchange+  { oAuth2TokenExchangeAccessToken :: Maybe Text -- ^ "access_token" - The access token issued by the authorization server.+  , oAuth2TokenExchangeExpiresIn :: Maybe Integer -- ^ "expires_in" - The lifetime in seconds of the access token. For example, the value \&quot;3600\&quot; denotes that the access token will expire in one hour from the time the response was generated.+  , oAuth2TokenExchangeIdToken :: Maybe Integer -- ^ "id_token" - To retrieve a refresh token request the id_token scope.+  , oAuth2TokenExchangeRefreshToken :: Maybe Text -- ^ "refresh_token" - The refresh token, which can be used to obtain new access tokens. To retrieve it add the scope \&quot;offline\&quot; to your access token request.+  , oAuth2TokenExchangeScope :: Maybe Text -- ^ "scope" - The scope of the access token+  , oAuth2TokenExchangeTokenType :: Maybe Text -- ^ "token_type" - The type of the token issued+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OAuth2TokenExchange+instance A.FromJSON OAuth2TokenExchange where+  parseJSON = A.withObject "OAuth2TokenExchange" $ \o ->+    OAuth2TokenExchange+      <$> (o .:? "access_token")+      <*> (o .:? "expires_in")+      <*> (o .:? "id_token")+      <*> (o .:? "refresh_token")+      <*> (o .:? "scope")+      <*> (o .:? "token_type")++-- | ToJSON OAuth2TokenExchange+instance A.ToJSON OAuth2TokenExchange where+  toJSON OAuth2TokenExchange {..} =+   _omitNulls+      [ "access_token" .= oAuth2TokenExchangeAccessToken+      , "expires_in" .= oAuth2TokenExchangeExpiresIn+      , "id_token" .= oAuth2TokenExchangeIdToken+      , "refresh_token" .= oAuth2TokenExchangeRefreshToken+      , "scope" .= oAuth2TokenExchangeScope+      , "token_type" .= oAuth2TokenExchangeTokenType+      ]+++-- | Construct a value of type 'OAuth2TokenExchange' (by applying it's required fields, if any)+mkOAuth2TokenExchange+  :: OAuth2TokenExchange+mkOAuth2TokenExchange =+  OAuth2TokenExchange+  { oAuth2TokenExchangeAccessToken = Nothing+  , oAuth2TokenExchangeExpiresIn = Nothing+  , oAuth2TokenExchangeIdToken = Nothing+  , oAuth2TokenExchangeRefreshToken = Nothing+  , oAuth2TokenExchangeScope = Nothing+  , oAuth2TokenExchangeTokenType = Nothing+  }++-- ** OidcConfiguration+-- | OidcConfiguration+-- OpenID Connect Discovery Metadata+-- +-- Includes links to several endpoints (for example `/oauth2/token`) and exposes information on supported signature algorithms among others.+data OidcConfiguration = OidcConfiguration+  { oidcConfigurationAuthorizationEndpoint :: Text -- ^ /Required/ "authorization_endpoint" - OAuth 2.0 Authorization Endpoint URL+  , oidcConfigurationBackchannelLogoutSessionSupported :: Maybe Bool -- ^ "backchannel_logout_session_supported" - OpenID Connect Back-Channel Logout Session Required  Boolean value specifying whether the OP can pass a sid (session ID) Claim in the Logout Token to identify the RP session with the OP. If supported, the sid Claim is also included in ID Tokens issued by the OP+  , oidcConfigurationBackchannelLogoutSupported :: Maybe Bool -- ^ "backchannel_logout_supported" - OpenID Connect Back-Channel Logout Supported  Boolean value specifying whether the OP supports back-channel logout, with true indicating support.+  , oidcConfigurationClaimsParameterSupported :: Maybe Bool -- ^ "claims_parameter_supported" - OpenID Connect Claims Parameter Parameter Supported  Boolean value specifying whether the OP supports use of the claims parameter, with true indicating support.+  , oidcConfigurationClaimsSupported :: Maybe [Text] -- ^ "claims_supported" - OpenID Connect Supported Claims  JSON array containing a list of the Claim Names of the Claims that the OpenID Provider MAY be able to supply values for. Note that for privacy or other reasons, this might not be an exhaustive list.+  , oidcConfigurationCodeChallengeMethodsSupported :: Maybe [Text] -- ^ "code_challenge_methods_supported" - OAuth 2.0 PKCE Supported Code Challenge Methods  JSON array containing a list of Proof Key for Code Exchange (PKCE) [RFC7636] code challenge methods supported by this authorization server.+  , oidcConfigurationEndSessionEndpoint :: Maybe Text -- ^ "end_session_endpoint" - OpenID Connect End-Session Endpoint  URL at the OP to which an RP can perform a redirect to request that the End-User be logged out at the OP.+  , oidcConfigurationFrontchannelLogoutSessionSupported :: Maybe Bool -- ^ "frontchannel_logout_session_supported" - OpenID Connect Front-Channel Logout Session Required  Boolean value specifying whether the OP can pass iss (issuer) and sid (session ID) query parameters to identify the RP session with the OP when the frontchannel_logout_uri is used. If supported, the sid Claim is also included in ID Tokens issued by the OP.+  , oidcConfigurationFrontchannelLogoutSupported :: Maybe Bool -- ^ "frontchannel_logout_supported" - OpenID Connect Front-Channel Logout Supported  Boolean value specifying whether the OP supports HTTP-based logout, with true indicating support.+  , oidcConfigurationGrantTypesSupported :: Maybe [Text] -- ^ "grant_types_supported" - OAuth 2.0 Supported Grant Types  JSON array containing a list of the OAuth 2.0 Grant Type values that this OP supports.+  , oidcConfigurationIdTokenSignedResponseAlg :: [Text] -- ^ /Required/ "id_token_signed_response_alg" - OpenID Connect Default ID Token Signing Algorithms  Algorithm used to sign OpenID Connect ID Tokens.+  , oidcConfigurationIdTokenSigningAlgValuesSupported :: [Text] -- ^ /Required/ "id_token_signing_alg_values_supported" - OpenID Connect Supported ID Token Signing Algorithms  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID Token to encode the Claims in a JWT.+  , oidcConfigurationIssuer :: Text -- ^ /Required/ "issuer" - OpenID Connect Issuer URL  An URL using the https scheme with no query or fragment component that the OP asserts as its IssuerURL Identifier. If IssuerURL discovery is supported , this value MUST be identical to the issuer value returned by WebFinger. This also MUST be identical to the iss Claim value in ID Tokens issued from this IssuerURL.+  , oidcConfigurationJwksUri :: Text -- ^ /Required/ "jwks_uri" - OpenID Connect Well-Known JSON Web Keys URL  URL of the OP&#39;s JSON Web Key Set [JWK] document. This contains the signing key(s) the RP uses to validate signatures from the OP. The JWK Set MAY also contain the Server&#39;s encryption key(s), which are used by RPs to encrypt requests to the Server. When both signing and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key&#39;s intended usage. Although some algorithms allow the same key to be used for both signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.+  , oidcConfigurationRegistrationEndpoint :: Maybe Text -- ^ "registration_endpoint" - OpenID Connect Dynamic Client Registration Endpoint URL+  , oidcConfigurationRequestObjectSigningAlgValuesSupported :: Maybe [Text] -- ^ "request_object_signing_alg_values_supported" - OpenID Connect Supported Request Object Signing Algorithms  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for Request Objects, which are described in Section 6.1 of OpenID Connect Core 1.0 [OpenID.Core]. These algorithms are used both when the Request Object is passed by value (using the request parameter) and when it is passed by reference (using the request_uri parameter).+  , oidcConfigurationRequestParameterSupported :: Maybe Bool -- ^ "request_parameter_supported" - OpenID Connect Request Parameter Supported  Boolean value specifying whether the OP supports use of the request parameter, with true indicating support.+  , oidcConfigurationRequestUriParameterSupported :: Maybe Bool -- ^ "request_uri_parameter_supported" - OpenID Connect Request URI Parameter Supported  Boolean value specifying whether the OP supports use of the request_uri parameter, with true indicating support.+  , oidcConfigurationRequireRequestUriRegistration :: Maybe Bool -- ^ "require_request_uri_registration" - OpenID Connect Requires Request URI Registration  Boolean value specifying whether the OP requires any request_uri values used to be pre-registered using the request_uris registration parameter.+  , oidcConfigurationResponseModesSupported :: Maybe [Text] -- ^ "response_modes_supported" - OAuth 2.0 Supported Response Modes  JSON array containing a list of the OAuth 2.0 response_mode values that this OP supports.+  , oidcConfigurationResponseTypesSupported :: [Text] -- ^ /Required/ "response_types_supported" - OAuth 2.0 Supported Response Types  JSON array containing a list of the OAuth 2.0 response_type values that this OP supports. Dynamic OpenID Providers MUST support the code, id_token, and the token id_token Response Type values.+  , oidcConfigurationRevocationEndpoint :: Maybe Text -- ^ "revocation_endpoint" - OAuth 2.0 Token Revocation URL  URL of the authorization server&#39;s OAuth 2.0 revocation endpoint.+  , oidcConfigurationScopesSupported :: Maybe [Text] -- ^ "scopes_supported" - OAuth 2.0 Supported Scope Values  JSON array containing a list of the OAuth 2.0 [RFC6749] scope values that this server supports. The server MUST support the openid scope value. Servers MAY choose not to advertise some supported scope values even when this parameter is used+  , oidcConfigurationSubjectTypesSupported :: [Text] -- ^ /Required/ "subject_types_supported" - OpenID Connect Supported Subject Types  JSON array containing a list of the Subject Identifier types that this OP supports. Valid types include pairwise and public.+  , oidcConfigurationTokenEndpoint :: Text -- ^ /Required/ "token_endpoint" - OAuth 2.0 Token Endpoint URL+  , oidcConfigurationTokenEndpointAuthMethodsSupported :: Maybe [Text] -- ^ "token_endpoint_auth_methods_supported" - OAuth 2.0 Supported Client Authentication Methods  JSON array containing a list of Client Authentication methods supported by this Token Endpoint. The options are client_secret_post, client_secret_basic, client_secret_jwt, and private_key_jwt, as described in Section 9 of OpenID Connect Core 1.0+  , oidcConfigurationUserinfoEndpoint :: Maybe Text -- ^ "userinfo_endpoint" - OpenID Connect Userinfo URL  URL of the OP&#39;s UserInfo Endpoint.+  , oidcConfigurationUserinfoSignedResponseAlg :: [Text] -- ^ /Required/ "userinfo_signed_response_alg" - OpenID Connect User Userinfo Signing Algorithm  Algorithm used to sign OpenID Connect Userinfo Responses.+  , oidcConfigurationUserinfoSigningAlgValuesSupported :: Maybe [Text] -- ^ "userinfo_signing_alg_values_supported" - OpenID Connect Supported Userinfo Signing Algorithm  JSON array containing a list of the JWS [JWS] signing algorithms (alg values) [JWA] supported by the UserInfo Endpoint to encode the Claims in a JWT [JWT].+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OidcConfiguration+instance A.FromJSON OidcConfiguration where+  parseJSON = A.withObject "OidcConfiguration" $ \o ->+    OidcConfiguration+      <$> (o .:  "authorization_endpoint")+      <*> (o .:? "backchannel_logout_session_supported")+      <*> (o .:? "backchannel_logout_supported")+      <*> (o .:? "claims_parameter_supported")+      <*> (o .:? "claims_supported")+      <*> (o .:? "code_challenge_methods_supported")+      <*> (o .:? "end_session_endpoint")+      <*> (o .:? "frontchannel_logout_session_supported")+      <*> (o .:? "frontchannel_logout_supported")+      <*> (o .:? "grant_types_supported")+      <*> (o .:  "id_token_signed_response_alg")+      <*> (o .:  "id_token_signing_alg_values_supported")+      <*> (o .:  "issuer")+      <*> (o .:  "jwks_uri")+      <*> (o .:? "registration_endpoint")+      <*> (o .:? "request_object_signing_alg_values_supported")+      <*> (o .:? "request_parameter_supported")+      <*> (o .:? "request_uri_parameter_supported")+      <*> (o .:? "require_request_uri_registration")+      <*> (o .:? "response_modes_supported")+      <*> (o .:  "response_types_supported")+      <*> (o .:? "revocation_endpoint")+      <*> (o .:? "scopes_supported")+      <*> (o .:  "subject_types_supported")+      <*> (o .:  "token_endpoint")+      <*> (o .:? "token_endpoint_auth_methods_supported")+      <*> (o .:? "userinfo_endpoint")+      <*> (o .:  "userinfo_signed_response_alg")+      <*> (o .:? "userinfo_signing_alg_values_supported")++-- | ToJSON OidcConfiguration+instance A.ToJSON OidcConfiguration where+  toJSON OidcConfiguration {..} =+   _omitNulls+      [ "authorization_endpoint" .= oidcConfigurationAuthorizationEndpoint+      , "backchannel_logout_session_supported" .= oidcConfigurationBackchannelLogoutSessionSupported+      , "backchannel_logout_supported" .= oidcConfigurationBackchannelLogoutSupported+      , "claims_parameter_supported" .= oidcConfigurationClaimsParameterSupported+      , "claims_supported" .= oidcConfigurationClaimsSupported+      , "code_challenge_methods_supported" .= oidcConfigurationCodeChallengeMethodsSupported+      , "end_session_endpoint" .= oidcConfigurationEndSessionEndpoint+      , "frontchannel_logout_session_supported" .= oidcConfigurationFrontchannelLogoutSessionSupported+      , "frontchannel_logout_supported" .= oidcConfigurationFrontchannelLogoutSupported+      , "grant_types_supported" .= oidcConfigurationGrantTypesSupported+      , "id_token_signed_response_alg" .= oidcConfigurationIdTokenSignedResponseAlg+      , "id_token_signing_alg_values_supported" .= oidcConfigurationIdTokenSigningAlgValuesSupported+      , "issuer" .= oidcConfigurationIssuer+      , "jwks_uri" .= oidcConfigurationJwksUri+      , "registration_endpoint" .= oidcConfigurationRegistrationEndpoint+      , "request_object_signing_alg_values_supported" .= oidcConfigurationRequestObjectSigningAlgValuesSupported+      , "request_parameter_supported" .= oidcConfigurationRequestParameterSupported+      , "request_uri_parameter_supported" .= oidcConfigurationRequestUriParameterSupported+      , "require_request_uri_registration" .= oidcConfigurationRequireRequestUriRegistration+      , "response_modes_supported" .= oidcConfigurationResponseModesSupported+      , "response_types_supported" .= oidcConfigurationResponseTypesSupported+      , "revocation_endpoint" .= oidcConfigurationRevocationEndpoint+      , "scopes_supported" .= oidcConfigurationScopesSupported+      , "subject_types_supported" .= oidcConfigurationSubjectTypesSupported+      , "token_endpoint" .= oidcConfigurationTokenEndpoint+      , "token_endpoint_auth_methods_supported" .= oidcConfigurationTokenEndpointAuthMethodsSupported+      , "userinfo_endpoint" .= oidcConfigurationUserinfoEndpoint+      , "userinfo_signed_response_alg" .= oidcConfigurationUserinfoSignedResponseAlg+      , "userinfo_signing_alg_values_supported" .= oidcConfigurationUserinfoSigningAlgValuesSupported+      ]+++-- | Construct a value of type 'OidcConfiguration' (by applying it's required fields, if any)+mkOidcConfiguration+  :: Text -- ^ 'oidcConfigurationAuthorizationEndpoint': OAuth 2.0 Authorization Endpoint URL+  -> [Text] -- ^ 'oidcConfigurationIdTokenSignedResponseAlg': OpenID Connect Default ID Token Signing Algorithms  Algorithm used to sign OpenID Connect ID Tokens.+  -> [Text] -- ^ 'oidcConfigurationIdTokenSigningAlgValuesSupported': OpenID Connect Supported ID Token Signing Algorithms  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID Token to encode the Claims in a JWT.+  -> Text -- ^ 'oidcConfigurationIssuer': OpenID Connect Issuer URL  An URL using the https scheme with no query or fragment component that the OP asserts as its IssuerURL Identifier. If IssuerURL discovery is supported , this value MUST be identical to the issuer value returned by WebFinger. This also MUST be identical to the iss Claim value in ID Tokens issued from this IssuerURL.+  -> Text -- ^ 'oidcConfigurationJwksUri': OpenID Connect Well-Known JSON Web Keys URL  URL of the OP's JSON Web Key Set [JWK] document. This contains the signing key(s) the RP uses to validate signatures from the OP. The JWK Set MAY also contain the Server's encryption key(s), which are used by RPs to encrypt requests to the Server. When both signing and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key's intended usage. Although some algorithms allow the same key to be used for both signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.+  -> [Text] -- ^ 'oidcConfigurationResponseTypesSupported': OAuth 2.0 Supported Response Types  JSON array containing a list of the OAuth 2.0 response_type values that this OP supports. Dynamic OpenID Providers MUST support the code, id_token, and the token id_token Response Type values.+  -> [Text] -- ^ 'oidcConfigurationSubjectTypesSupported': OpenID Connect Supported Subject Types  JSON array containing a list of the Subject Identifier types that this OP supports. Valid types include pairwise and public.+  -> Text -- ^ 'oidcConfigurationTokenEndpoint': OAuth 2.0 Token Endpoint URL+  -> [Text] -- ^ 'oidcConfigurationUserinfoSignedResponseAlg': OpenID Connect User Userinfo Signing Algorithm  Algorithm used to sign OpenID Connect Userinfo Responses.+  -> OidcConfiguration+mkOidcConfiguration oidcConfigurationAuthorizationEndpoint oidcConfigurationIdTokenSignedResponseAlg oidcConfigurationIdTokenSigningAlgValuesSupported oidcConfigurationIssuer oidcConfigurationJwksUri oidcConfigurationResponseTypesSupported oidcConfigurationSubjectTypesSupported oidcConfigurationTokenEndpoint oidcConfigurationUserinfoSignedResponseAlg =+  OidcConfiguration+  { oidcConfigurationAuthorizationEndpoint+  , oidcConfigurationBackchannelLogoutSessionSupported = Nothing+  , oidcConfigurationBackchannelLogoutSupported = Nothing+  , oidcConfigurationClaimsParameterSupported = Nothing+  , oidcConfigurationClaimsSupported = Nothing+  , oidcConfigurationCodeChallengeMethodsSupported = Nothing+  , oidcConfigurationEndSessionEndpoint = Nothing+  , oidcConfigurationFrontchannelLogoutSessionSupported = Nothing+  , oidcConfigurationFrontchannelLogoutSupported = Nothing+  , oidcConfigurationGrantTypesSupported = Nothing+  , oidcConfigurationIdTokenSignedResponseAlg+  , oidcConfigurationIdTokenSigningAlgValuesSupported+  , oidcConfigurationIssuer+  , oidcConfigurationJwksUri+  , oidcConfigurationRegistrationEndpoint = Nothing+  , oidcConfigurationRequestObjectSigningAlgValuesSupported = Nothing+  , oidcConfigurationRequestParameterSupported = Nothing+  , oidcConfigurationRequestUriParameterSupported = Nothing+  , oidcConfigurationRequireRequestUriRegistration = Nothing+  , oidcConfigurationResponseModesSupported = Nothing+  , oidcConfigurationResponseTypesSupported+  , oidcConfigurationRevocationEndpoint = Nothing+  , oidcConfigurationScopesSupported = Nothing+  , oidcConfigurationSubjectTypesSupported+  , oidcConfigurationTokenEndpoint+  , oidcConfigurationTokenEndpointAuthMethodsSupported = Nothing+  , oidcConfigurationUserinfoEndpoint = Nothing+  , oidcConfigurationUserinfoSignedResponseAlg+  , oidcConfigurationUserinfoSigningAlgValuesSupported = Nothing+  }++-- ** OidcUserInfo+-- | OidcUserInfo+-- OpenID Connect Userinfo+data OidcUserInfo = OidcUserInfo+  { oidcUserInfoBirthdate :: Maybe Text -- ^ "birthdate" - End-User&#39;s birthday, represented as an ISO 8601:2004 [ISO8601‑2004] YYYY-MM-DD format. The year MAY be 0000, indicating that it is omitted. To represent only the year, YYYY format is allowed. Note that depending on the underlying platform&#39;s date related function, providing just year can result in varying month and day, so the implementers need to take this factor into account to correctly process the dates.+  , oidcUserInfoEmail :: Maybe Text -- ^ "email" - End-User&#39;s preferred e-mail address. Its value MUST conform to the RFC 5322 [RFC5322] addr-spec syntax. The RP MUST NOT rely upon this value being unique, as discussed in Section 5.7.+  , oidcUserInfoEmailVerified :: Maybe Bool -- ^ "email_verified" - True if the End-User&#39;s e-mail address has been verified; otherwise false. When this Claim Value is true, this means that the OP took affirmative steps to ensure that this e-mail address was controlled by the End-User at the time the verification was performed. The means by which an e-mail address is verified is context-specific, and dependent upon the trust framework or contractual agreements within which the parties are operating.+  , oidcUserInfoFamilyName :: Maybe Text -- ^ "family_name" - Surname(s) or last name(s) of the End-User. Note that in some cultures, people can have multiple family names or no family name; all can be present, with the names being separated by space characters.+  , oidcUserInfoGender :: Maybe Text -- ^ "gender" - End-User&#39;s gender. Values defined by this specification are female and male. Other values MAY be used when neither of the defined values are applicable.+  , oidcUserInfoGivenName :: Maybe Text -- ^ "given_name" - Given name(s) or first name(s) of the End-User. Note that in some cultures, people can have multiple given names; all can be present, with the names being separated by space characters.+  , oidcUserInfoLocale :: Maybe Text -- ^ "locale" - End-User&#39;s locale, represented as a BCP47 [RFC5646] language tag. This is typically an ISO 639-1 Alpha-2 [ISO639‑1] language code in lowercase and an ISO 3166-1 Alpha-2 [ISO3166‑1] country code in uppercase, separated by a dash. For example, en-US or fr-CA. As a compatibility note, some implementations have used an underscore as the separator rather than a dash, for example, en_US; Relying Parties MAY choose to accept this locale syntax as well.+  , oidcUserInfoMiddleName :: Maybe Text -- ^ "middle_name" - Middle name(s) of the End-User. Note that in some cultures, people can have multiple middle names; all can be present, with the names being separated by space characters. Also note that in some cultures, middle names are not used.+  , oidcUserInfoName :: Maybe Text -- ^ "name" - End-User&#39;s full name in displayable form including all name parts, possibly including titles and suffixes, ordered according to the End-User&#39;s locale and preferences.+  , oidcUserInfoNickname :: Maybe Text -- ^ "nickname" - Casual name of the End-User that may or may not be the same as the given_name. For instance, a nickname value of Mike might be returned alongside a given_name value of Michael.+  , oidcUserInfoPhoneNumber :: Maybe Text -- ^ "phone_number" - End-User&#39;s preferred telephone number. E.164 [E.164] is RECOMMENDED as the format of this Claim, for example, +1 (425) 555-1212 or +56 (2) 687 2400. If the phone number contains an extension, it is RECOMMENDED that the extension be represented using the RFC 3966 [RFC3966] extension syntax, for example, +1 (604) 555-1234;ext&#x3D;5678.+  , oidcUserInfoPhoneNumberVerified :: Maybe Bool -- ^ "phone_number_verified" - True if the End-User&#39;s phone number has been verified; otherwise false. When this Claim Value is true, this means that the OP took affirmative steps to ensure that this phone number was controlled by the End-User at the time the verification was performed. The means by which a phone number is verified is context-specific, and dependent upon the trust framework or contractual agreements within which the parties are operating. When true, the phone_number Claim MUST be in E.164 format and any extensions MUST be represented in RFC 3966 format.+  , oidcUserInfoPicture :: Maybe Text -- ^ "picture" - URL of the End-User&#39;s profile picture. This URL MUST refer to an image file (for example, a PNG, JPEG, or GIF image file), rather than to a Web page containing an image. Note that this URL SHOULD specifically reference a profile photo of the End-User suitable for displaying when describing the End-User, rather than an arbitrary photo taken by the End-User.+  , oidcUserInfoPreferredUsername :: Maybe Text -- ^ "preferred_username" - Non-unique shorthand name by which the End-User wishes to be referred to at the RP, such as janedoe or j.doe. This value MAY be any valid JSON string including special characters such as @, /, or whitespace.+  , oidcUserInfoProfile :: Maybe Text -- ^ "profile" - URL of the End-User&#39;s profile page. The contents of this Web page SHOULD be about the End-User.+  , oidcUserInfoSub :: Maybe Text -- ^ "sub" - Subject - Identifier for the End-User at the IssuerURL.+  , oidcUserInfoUpdatedAt :: Maybe Integer -- ^ "updated_at" - Time the End-User&#39;s information was last updated. Its value is a JSON number representing the number of seconds from 1970-01-01T0:0:0Z as measured in UTC until the date/time.+  , oidcUserInfoWebsite :: Maybe Text -- ^ "website" - URL of the End-User&#39;s Web page or blog. This Web page SHOULD contain information published by the End-User or an organization that the End-User is affiliated with.+  , oidcUserInfoZoneinfo :: Maybe Text -- ^ "zoneinfo" - String from zoneinfo [zoneinfo] time zone database representing the End-User&#39;s time zone. For example, Europe/Paris or America/Los_Angeles.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON OidcUserInfo+instance A.FromJSON OidcUserInfo where+  parseJSON = A.withObject "OidcUserInfo" $ \o ->+    OidcUserInfo+      <$> (o .:? "birthdate")+      <*> (o .:? "email")+      <*> (o .:? "email_verified")+      <*> (o .:? "family_name")+      <*> (o .:? "gender")+      <*> (o .:? "given_name")+      <*> (o .:? "locale")+      <*> (o .:? "middle_name")+      <*> (o .:? "name")+      <*> (o .:? "nickname")+      <*> (o .:? "phone_number")+      <*> (o .:? "phone_number_verified")+      <*> (o .:? "picture")+      <*> (o .:? "preferred_username")+      <*> (o .:? "profile")+      <*> (o .:? "sub")+      <*> (o .:? "updated_at")+      <*> (o .:? "website")+      <*> (o .:? "zoneinfo")++-- | ToJSON OidcUserInfo+instance A.ToJSON OidcUserInfo where+  toJSON OidcUserInfo {..} =+   _omitNulls+      [ "birthdate" .= oidcUserInfoBirthdate+      , "email" .= oidcUserInfoEmail+      , "email_verified" .= oidcUserInfoEmailVerified+      , "family_name" .= oidcUserInfoFamilyName+      , "gender" .= oidcUserInfoGender+      , "given_name" .= oidcUserInfoGivenName+      , "locale" .= oidcUserInfoLocale+      , "middle_name" .= oidcUserInfoMiddleName+      , "name" .= oidcUserInfoName+      , "nickname" .= oidcUserInfoNickname+      , "phone_number" .= oidcUserInfoPhoneNumber+      , "phone_number_verified" .= oidcUserInfoPhoneNumberVerified+      , "picture" .= oidcUserInfoPicture+      , "preferred_username" .= oidcUserInfoPreferredUsername+      , "profile" .= oidcUserInfoProfile+      , "sub" .= oidcUserInfoSub+      , "updated_at" .= oidcUserInfoUpdatedAt+      , "website" .= oidcUserInfoWebsite+      , "zoneinfo" .= oidcUserInfoZoneinfo+      ]+++-- | Construct a value of type 'OidcUserInfo' (by applying it's required fields, if any)+mkOidcUserInfo+  :: OidcUserInfo+mkOidcUserInfo =+  OidcUserInfo+  { oidcUserInfoBirthdate = Nothing+  , oidcUserInfoEmail = Nothing+  , oidcUserInfoEmailVerified = Nothing+  , oidcUserInfoFamilyName = Nothing+  , oidcUserInfoGender = Nothing+  , oidcUserInfoGivenName = Nothing+  , oidcUserInfoLocale = Nothing+  , oidcUserInfoMiddleName = Nothing+  , oidcUserInfoName = Nothing+  , oidcUserInfoNickname = Nothing+  , oidcUserInfoPhoneNumber = Nothing+  , oidcUserInfoPhoneNumberVerified = Nothing+  , oidcUserInfoPicture = Nothing+  , oidcUserInfoPreferredUsername = Nothing+  , oidcUserInfoProfile = Nothing+  , oidcUserInfoSub = Nothing+  , oidcUserInfoUpdatedAt = Nothing+  , oidcUserInfoWebsite = Nothing+  , oidcUserInfoZoneinfo = Nothing+  }++-- ** Pagination+-- | Pagination+data Pagination = Pagination+  { paginationPageSize :: Maybe Integer -- ^ "page_size" - Items per page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+  , paginationPageToken :: Maybe Text -- ^ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON Pagination+instance A.FromJSON Pagination where+  parseJSON = A.withObject "Pagination" $ \o ->+    Pagination+      <$> (o .:? "page_size")+      <*> (o .:? "page_token")++-- | ToJSON Pagination+instance A.ToJSON Pagination where+  toJSON Pagination {..} =+   _omitNulls+      [ "page_size" .= paginationPageSize+      , "page_token" .= paginationPageToken+      ]+++-- | Construct a value of type 'Pagination' (by applying it's required fields, if any)+mkPagination+  :: Pagination+mkPagination =+  Pagination+  { paginationPageSize = Nothing+  , paginationPageToken = Nothing+  }++-- ** PaginationHeaders+-- | PaginationHeaders+data PaginationHeaders = PaginationHeaders+  { paginationHeadersLink :: Maybe Text -- ^ "link" - The link header contains pagination links.  For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).  in: header+  , paginationHeadersXTotalCount :: Maybe Text -- ^ "x-total-count" - The total number of clients.  in: header+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON PaginationHeaders+instance A.FromJSON PaginationHeaders where+  parseJSON = A.withObject "PaginationHeaders" $ \o ->+    PaginationHeaders+      <$> (o .:? "link")+      <*> (o .:? "x-total-count")++-- | ToJSON PaginationHeaders+instance A.ToJSON PaginationHeaders where+  toJSON PaginationHeaders {..} =+   _omitNulls+      [ "link" .= paginationHeadersLink+      , "x-total-count" .= paginationHeadersXTotalCount+      ]+++-- | Construct a value of type 'PaginationHeaders' (by applying it's required fields, if any)+mkPaginationHeaders+  :: PaginationHeaders+mkPaginationHeaders =+  PaginationHeaders+  { paginationHeadersLink = Nothing+  , paginationHeadersXTotalCount = Nothing+  }++-- ** RejectOAuth2Request+-- | RejectOAuth2Request+-- The request payload used to accept a login or consent request.+-- +data RejectOAuth2Request = RejectOAuth2Request+  { rejectOAuth2RequestError :: Maybe Text -- ^ "error" - The error should follow the OAuth2 error format (e.g. &#x60;invalid_request&#x60;, &#x60;login_required&#x60;).  Defaults to &#x60;request_denied&#x60;.+  , rejectOAuth2RequestErrorDebug :: Maybe Text -- ^ "error_debug" - Debug contains information to help resolve the problem as a developer. Usually not exposed to the public but only in the server logs.+  , rejectOAuth2RequestErrorDescription :: Maybe Text -- ^ "error_description" - Description of the error in a human readable format.+  , rejectOAuth2RequestErrorHint :: Maybe Text -- ^ "error_hint" - Hint to help resolve the error.+  , rejectOAuth2RequestStatusCode :: Maybe Integer -- ^ "status_code" - Represents the HTTP status code of the error (e.g. 401 or 403)  Defaults to 400+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON RejectOAuth2Request+instance A.FromJSON RejectOAuth2Request where+  parseJSON = A.withObject "RejectOAuth2Request" $ \o ->+    RejectOAuth2Request+      <$> (o .:? "error")+      <*> (o .:? "error_debug")+      <*> (o .:? "error_description")+      <*> (o .:? "error_hint")+      <*> (o .:? "status_code")++-- | ToJSON RejectOAuth2Request+instance A.ToJSON RejectOAuth2Request where+  toJSON RejectOAuth2Request {..} =+   _omitNulls+      [ "error" .= rejectOAuth2RequestError+      , "error_debug" .= rejectOAuth2RequestErrorDebug+      , "error_description" .= rejectOAuth2RequestErrorDescription+      , "error_hint" .= rejectOAuth2RequestErrorHint+      , "status_code" .= rejectOAuth2RequestStatusCode+      ]+++-- | Construct a value of type 'RejectOAuth2Request' (by applying it's required fields, if any)+mkRejectOAuth2Request+  :: RejectOAuth2Request+mkRejectOAuth2Request =+  RejectOAuth2Request+  { rejectOAuth2RequestError = Nothing+  , rejectOAuth2RequestErrorDebug = Nothing+  , rejectOAuth2RequestErrorDescription = Nothing+  , rejectOAuth2RequestErrorHint = Nothing+  , rejectOAuth2RequestStatusCode = Nothing+  }++-- ** TokenPagination+-- | TokenPagination+data TokenPagination = TokenPagination+  { tokenPaginationPageSize :: Maybe Integer -- ^ "page_size" - Items per page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+  , tokenPaginationPageToken :: Maybe Text -- ^ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON TokenPagination+instance A.FromJSON TokenPagination where+  parseJSON = A.withObject "TokenPagination" $ \o ->+    TokenPagination+      <$> (o .:? "page_size")+      <*> (o .:? "page_token")++-- | ToJSON TokenPagination+instance A.ToJSON TokenPagination where+  toJSON TokenPagination {..} =+   _omitNulls+      [ "page_size" .= tokenPaginationPageSize+      , "page_token" .= tokenPaginationPageToken+      ]+++-- | Construct a value of type 'TokenPagination' (by applying it's required fields, if any)+mkTokenPagination+  :: TokenPagination+mkTokenPagination =+  TokenPagination+  { tokenPaginationPageSize = Nothing+  , tokenPaginationPageToken = Nothing+  }++-- ** TokenPaginationHeaders+-- | TokenPaginationHeaders+data TokenPaginationHeaders = TokenPaginationHeaders+  { tokenPaginationHeadersLink :: Maybe Text -- ^ "link" - The link header contains pagination links.  For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).  in: header+  , tokenPaginationHeadersXTotalCount :: Maybe Text -- ^ "x-total-count" - The total number of clients.  in: header+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON TokenPaginationHeaders+instance A.FromJSON TokenPaginationHeaders where+  parseJSON = A.withObject "TokenPaginationHeaders" $ \o ->+    TokenPaginationHeaders+      <$> (o .:? "link")+      <*> (o .:? "x-total-count")++-- | ToJSON TokenPaginationHeaders+instance A.ToJSON TokenPaginationHeaders where+  toJSON TokenPaginationHeaders {..} =+   _omitNulls+      [ "link" .= tokenPaginationHeadersLink+      , "x-total-count" .= tokenPaginationHeadersXTotalCount+      ]+++-- | Construct a value of type 'TokenPaginationHeaders' (by applying it's required fields, if any)+mkTokenPaginationHeaders+  :: TokenPaginationHeaders+mkTokenPaginationHeaders =+  TokenPaginationHeaders+  { tokenPaginationHeadersLink = Nothing+  , tokenPaginationHeadersXTotalCount = Nothing+  }++-- ** TokenPaginationRequestParameters+-- | TokenPaginationRequestParameters+-- Pagination Request Parameters+-- +-- The `Link` HTTP header contains multiple links (`first`, `next`, `last`, `previous`) formatted as: `<https://{project-slug}.projects.oryapis.com/admin/clients?page_size={limit}&page_token={offset}>; rel=\"{page}\"`  For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+data TokenPaginationRequestParameters = TokenPaginationRequestParameters+  { tokenPaginationRequestParametersPageSize :: Maybe Integer -- ^ "page_size" - Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+  , tokenPaginationRequestParametersPageToken :: Maybe Text -- ^ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON TokenPaginationRequestParameters+instance A.FromJSON TokenPaginationRequestParameters where+  parseJSON = A.withObject "TokenPaginationRequestParameters" $ \o ->+    TokenPaginationRequestParameters+      <$> (o .:? "page_size")+      <*> (o .:? "page_token")++-- | ToJSON TokenPaginationRequestParameters+instance A.ToJSON TokenPaginationRequestParameters where+  toJSON TokenPaginationRequestParameters {..} =+   _omitNulls+      [ "page_size" .= tokenPaginationRequestParametersPageSize+      , "page_token" .= tokenPaginationRequestParametersPageToken+      ]+++-- | Construct a value of type 'TokenPaginationRequestParameters' (by applying it's required fields, if any)+mkTokenPaginationRequestParameters+  :: TokenPaginationRequestParameters+mkTokenPaginationRequestParameters =+  TokenPaginationRequestParameters+  { tokenPaginationRequestParametersPageSize = Nothing+  , tokenPaginationRequestParametersPageToken = Nothing+  }++-- ** TokenPaginationResponseHeaders+-- | TokenPaginationResponseHeaders+-- Pagination Response Header+-- +-- The `Link` HTTP header contains multiple links (`first`, `next`, `last`, `previous`) formatted as: `<https://{project-slug}.projects.oryapis.com/admin/clients?page_size={limit}&page_token={offset}>; rel=\"{page}\"`  For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).+data TokenPaginationResponseHeaders = TokenPaginationResponseHeaders+  { tokenPaginationResponseHeadersLink :: Maybe Text -- ^ "link" - The Link HTTP Header  The &#x60;Link&#x60; header contains a comma-delimited list of links to the following pages:  first: The first page of results. next: The next page of results. prev: The previous page of results. last: The last page of results.  Pages are omitted if they do not exist. For example, if there is no next page, the &#x60;next&#x60; link is omitted. Examples:  &lt;/clients?page_size&#x3D;5&amp;page_token&#x3D;0&gt;; rel&#x3D;\&quot;first\&quot;,&lt;/clients?page_size&#x3D;5&amp;page_token&#x3D;15&gt;; rel&#x3D;\&quot;next\&quot;,&lt;/clients?page_size&#x3D;5&amp;page_token&#x3D;5&gt;; rel&#x3D;\&quot;prev\&quot;,&lt;/clients?page_size&#x3D;5&amp;page_token&#x3D;20&gt;; rel&#x3D;\&quot;last\&quot;+  , tokenPaginationResponseHeadersXTotalCount :: Maybe Integer -- ^ "x-total-count" - The X-Total-Count HTTP Header  The &#x60;X-Total-Count&#x60; header contains the total number of items in the collection.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON TokenPaginationResponseHeaders+instance A.FromJSON TokenPaginationResponseHeaders where+  parseJSON = A.withObject "TokenPaginationResponseHeaders" $ \o ->+    TokenPaginationResponseHeaders+      <$> (o .:? "link")+      <*> (o .:? "x-total-count")++-- | ToJSON TokenPaginationResponseHeaders+instance A.ToJSON TokenPaginationResponseHeaders where+  toJSON TokenPaginationResponseHeaders {..} =+   _omitNulls+      [ "link" .= tokenPaginationResponseHeadersLink+      , "x-total-count" .= tokenPaginationResponseHeadersXTotalCount+      ]+++-- | Construct a value of type 'TokenPaginationResponseHeaders' (by applying it's required fields, if any)+mkTokenPaginationResponseHeaders+  :: TokenPaginationResponseHeaders+mkTokenPaginationResponseHeaders =+  TokenPaginationResponseHeaders+  { tokenPaginationResponseHeadersLink = Nothing+  , tokenPaginationResponseHeadersXTotalCount = Nothing+  }++-- ** TrustOAuth2JwtGrantIssuer+-- | TrustOAuth2JwtGrantIssuer+-- Trust OAuth2 JWT Bearer Grant Type Issuer Request Body+data TrustOAuth2JwtGrantIssuer = TrustOAuth2JwtGrantIssuer+  { trustOAuth2JwtGrantIssuerAllowAnySubject :: Maybe Bool -- ^ "allow_any_subject" - The \&quot;allow_any_subject\&quot; indicates that the issuer is allowed to have any principal as the subject of the JWT.+  , trustOAuth2JwtGrantIssuerExpiresAt :: DateTime -- ^ /Required/ "expires_at" - The \&quot;expires_at\&quot; indicates, when grant will expire, so we will reject assertion from \&quot;issuer\&quot; targeting \&quot;subject\&quot;.+  , trustOAuth2JwtGrantIssuerIssuer :: Text -- ^ /Required/ "issuer" - The \&quot;issuer\&quot; identifies the principal that issued the JWT assertion (same as \&quot;iss\&quot; claim in JWT).+  , trustOAuth2JwtGrantIssuerJwk :: JsonWebKey -- ^ /Required/ "jwk"+  , trustOAuth2JwtGrantIssuerScope :: [Text] -- ^ /Required/ "scope" - The \&quot;scope\&quot; contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])+  , trustOAuth2JwtGrantIssuerSubject :: Maybe Text -- ^ "subject" - The \&quot;subject\&quot; identifies the principal that is the subject of the JWT.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON TrustOAuth2JwtGrantIssuer+instance A.FromJSON TrustOAuth2JwtGrantIssuer where+  parseJSON = A.withObject "TrustOAuth2JwtGrantIssuer" $ \o ->+    TrustOAuth2JwtGrantIssuer+      <$> (o .:? "allow_any_subject")+      <*> (o .:  "expires_at")+      <*> (o .:  "issuer")+      <*> (o .:  "jwk")+      <*> (o .:  "scope")+      <*> (o .:? "subject")++-- | ToJSON TrustOAuth2JwtGrantIssuer+instance A.ToJSON TrustOAuth2JwtGrantIssuer where+  toJSON TrustOAuth2JwtGrantIssuer {..} =+   _omitNulls+      [ "allow_any_subject" .= trustOAuth2JwtGrantIssuerAllowAnySubject+      , "expires_at" .= trustOAuth2JwtGrantIssuerExpiresAt+      , "issuer" .= trustOAuth2JwtGrantIssuerIssuer+      , "jwk" .= trustOAuth2JwtGrantIssuerJwk+      , "scope" .= trustOAuth2JwtGrantIssuerScope+      , "subject" .= trustOAuth2JwtGrantIssuerSubject+      ]+++-- | Construct a value of type 'TrustOAuth2JwtGrantIssuer' (by applying it's required fields, if any)+mkTrustOAuth2JwtGrantIssuer+  :: DateTime -- ^ 'trustOAuth2JwtGrantIssuerExpiresAt': The \"expires_at\" indicates, when grant will expire, so we will reject assertion from \"issuer\" targeting \"subject\".+  -> Text -- ^ 'trustOAuth2JwtGrantIssuerIssuer': The \"issuer\" identifies the principal that issued the JWT assertion (same as \"iss\" claim in JWT).+  -> JsonWebKey -- ^ 'trustOAuth2JwtGrantIssuerJwk' +  -> [Text] -- ^ 'trustOAuth2JwtGrantIssuerScope': The \"scope\" contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])+  -> TrustOAuth2JwtGrantIssuer+mkTrustOAuth2JwtGrantIssuer trustOAuth2JwtGrantIssuerExpiresAt trustOAuth2JwtGrantIssuerIssuer trustOAuth2JwtGrantIssuerJwk trustOAuth2JwtGrantIssuerScope =+  TrustOAuth2JwtGrantIssuer+  { trustOAuth2JwtGrantIssuerAllowAnySubject = Nothing+  , trustOAuth2JwtGrantIssuerExpiresAt+  , trustOAuth2JwtGrantIssuerIssuer+  , trustOAuth2JwtGrantIssuerJwk+  , trustOAuth2JwtGrantIssuerScope+  , trustOAuth2JwtGrantIssuerSubject = Nothing+  }++-- ** TrustedOAuth2JwtGrantIssuer+-- | TrustedOAuth2JwtGrantIssuer+-- OAuth2 JWT Bearer Grant Type Issuer Trust Relationship+data TrustedOAuth2JwtGrantIssuer = TrustedOAuth2JwtGrantIssuer+  { trustedOAuth2JwtGrantIssuerAllowAnySubject :: Maybe Bool -- ^ "allow_any_subject" - The \&quot;allow_any_subject\&quot; indicates that the issuer is allowed to have any principal as the subject of the JWT.+  , trustedOAuth2JwtGrantIssuerCreatedAt :: Maybe DateTime -- ^ "created_at" - The \&quot;created_at\&quot; indicates, when grant was created.+  , trustedOAuth2JwtGrantIssuerExpiresAt :: Maybe DateTime -- ^ "expires_at" - The \&quot;expires_at\&quot; indicates, when grant will expire, so we will reject assertion from \&quot;issuer\&quot; targeting \&quot;subject\&quot;.+  , trustedOAuth2JwtGrantIssuerId :: Maybe Text -- ^ "id"+  , trustedOAuth2JwtGrantIssuerIssuer :: Maybe Text -- ^ "issuer" - The \&quot;issuer\&quot; identifies the principal that issued the JWT assertion (same as \&quot;iss\&quot; claim in JWT).+  , trustedOAuth2JwtGrantIssuerPublicKey :: Maybe TrustedOAuth2JwtGrantJsonWebKey -- ^ "public_key"+  , trustedOAuth2JwtGrantIssuerScope :: Maybe [Text] -- ^ "scope" - The \&quot;scope\&quot; contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])+  , trustedOAuth2JwtGrantIssuerSubject :: Maybe Text -- ^ "subject" - The \&quot;subject\&quot; identifies the principal that is the subject of the JWT.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON TrustedOAuth2JwtGrantIssuer+instance A.FromJSON TrustedOAuth2JwtGrantIssuer where+  parseJSON = A.withObject "TrustedOAuth2JwtGrantIssuer" $ \o ->+    TrustedOAuth2JwtGrantIssuer+      <$> (o .:? "allow_any_subject")+      <*> (o .:? "created_at")+      <*> (o .:? "expires_at")+      <*> (o .:? "id")+      <*> (o .:? "issuer")+      <*> (o .:? "public_key")+      <*> (o .:? "scope")+      <*> (o .:? "subject")++-- | ToJSON TrustedOAuth2JwtGrantIssuer+instance A.ToJSON TrustedOAuth2JwtGrantIssuer where+  toJSON TrustedOAuth2JwtGrantIssuer {..} =+   _omitNulls+      [ "allow_any_subject" .= trustedOAuth2JwtGrantIssuerAllowAnySubject+      , "created_at" .= trustedOAuth2JwtGrantIssuerCreatedAt+      , "expires_at" .= trustedOAuth2JwtGrantIssuerExpiresAt+      , "id" .= trustedOAuth2JwtGrantIssuerId+      , "issuer" .= trustedOAuth2JwtGrantIssuerIssuer+      , "public_key" .= trustedOAuth2JwtGrantIssuerPublicKey+      , "scope" .= trustedOAuth2JwtGrantIssuerScope+      , "subject" .= trustedOAuth2JwtGrantIssuerSubject+      ]+++-- | Construct a value of type 'TrustedOAuth2JwtGrantIssuer' (by applying it's required fields, if any)+mkTrustedOAuth2JwtGrantIssuer+  :: TrustedOAuth2JwtGrantIssuer+mkTrustedOAuth2JwtGrantIssuer =+  TrustedOAuth2JwtGrantIssuer+  { trustedOAuth2JwtGrantIssuerAllowAnySubject = Nothing+  , trustedOAuth2JwtGrantIssuerCreatedAt = Nothing+  , trustedOAuth2JwtGrantIssuerExpiresAt = Nothing+  , trustedOAuth2JwtGrantIssuerId = Nothing+  , trustedOAuth2JwtGrantIssuerIssuer = Nothing+  , trustedOAuth2JwtGrantIssuerPublicKey = Nothing+  , trustedOAuth2JwtGrantIssuerScope = Nothing+  , trustedOAuth2JwtGrantIssuerSubject = Nothing+  }++-- ** TrustedOAuth2JwtGrantJsonWebKey+-- | TrustedOAuth2JwtGrantJsonWebKey+-- OAuth2 JWT Bearer Grant Type Issuer Trusted JSON Web Key+data TrustedOAuth2JwtGrantJsonWebKey = TrustedOAuth2JwtGrantJsonWebKey+  { trustedOAuth2JwtGrantJsonWebKeyKid :: Maybe Text -- ^ "kid" - The \&quot;key_id\&quot; is key unique identifier (same as kid header in jws/jwt).+  , trustedOAuth2JwtGrantJsonWebKeySet :: Maybe Text -- ^ "set" - The \&quot;set\&quot; is basically a name for a group(set) of keys. Will be the same as \&quot;issuer\&quot; in grant.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON TrustedOAuth2JwtGrantJsonWebKey+instance A.FromJSON TrustedOAuth2JwtGrantJsonWebKey where+  parseJSON = A.withObject "TrustedOAuth2JwtGrantJsonWebKey" $ \o ->+    TrustedOAuth2JwtGrantJsonWebKey+      <$> (o .:? "kid")+      <*> (o .:? "set")++-- | ToJSON TrustedOAuth2JwtGrantJsonWebKey+instance A.ToJSON TrustedOAuth2JwtGrantJsonWebKey where+  toJSON TrustedOAuth2JwtGrantJsonWebKey {..} =+   _omitNulls+      [ "kid" .= trustedOAuth2JwtGrantJsonWebKeyKid+      , "set" .= trustedOAuth2JwtGrantJsonWebKeySet+      ]+++-- | Construct a value of type 'TrustedOAuth2JwtGrantJsonWebKey' (by applying it's required fields, if any)+mkTrustedOAuth2JwtGrantJsonWebKey+  :: TrustedOAuth2JwtGrantJsonWebKey+mkTrustedOAuth2JwtGrantJsonWebKey =+  TrustedOAuth2JwtGrantJsonWebKey+  { trustedOAuth2JwtGrantJsonWebKeyKid = Nothing+  , trustedOAuth2JwtGrantJsonWebKeySet = Nothing+  }++-- ** Version+-- | Version+data Version = Version+  { versionVersion :: Maybe Text -- ^ "version" - Version is the service&#39;s version.+  } deriving (P.Show, P.Eq, P.Typeable)++-- | FromJSON Version+instance A.FromJSON Version where+  parseJSON = A.withObject "Version" $ \o ->+    Version+      <$> (o .:? "version")++-- | ToJSON Version+instance A.ToJSON Version where+  toJSON Version {..} =+   _omitNulls+      [ "version" .= versionVersion+      ]+++-- | Construct a value of type 'Version' (by applying it's required fields, if any)+mkVersion+  :: Version+mkVersion =+  Version+  { versionVersion = Nothing+  }+++++-- * Auth Methods++-- ** AuthBasicBasic+data AuthBasicBasic =+  AuthBasicBasic B.ByteString B.ByteString -- ^ username password+  deriving (P.Eq, P.Show, P.Typeable)++instance AuthMethod AuthBasicBasic where+  applyAuthMethod _ a@(AuthBasicBasic user pw) req =+    P.pure $+    if (P.typeOf a `P.elem` rAuthTypes req)+      then req `setHeader` toHeader ("Authorization", T.decodeUtf8 cred)+           & L.over rAuthTypesL (P.filter (/= P.typeOf a))+      else req+    where cred = BC.append "Basic " (B64.encode $ BC.concat [ user, ":", pw ])++-- ** AuthBasicBearer+data AuthBasicBearer =+  AuthBasicBearer B.ByteString B.ByteString -- ^ username password+  deriving (P.Eq, P.Show, P.Typeable)++instance AuthMethod AuthBasicBearer where+  applyAuthMethod _ a@(AuthBasicBearer user pw) req =+    P.pure $+    if (P.typeOf a `P.elem` rAuthTypes req)+      then req `setHeader` toHeader ("Authorization", T.decodeUtf8 cred)+           & L.over rAuthTypesL (P.filter (/= P.typeOf a))+      else req+    where cred = BC.append "Basic " (B64.encode $ BC.concat [ user, ":", pw ])++-- ** AuthOAuthOauth2+data AuthOAuthOauth2 =+  AuthOAuthOauth2 Text -- ^ secret+  deriving (P.Eq, P.Show, P.Typeable)++instance AuthMethod AuthOAuthOauth2 where+  applyAuthMethod _ a@(AuthOAuthOauth2 secret) req =+    P.pure $+    if (P.typeOf a `P.elem` rAuthTypes req)+      then req `setHeader` toHeader ("Authorization", "Bearer " <> secret)+           & L.over rAuthTypesL (P.filter (/= P.typeOf a))+      else req++
+ lib/ORYHydra/ModelLens.hs view
@@ -0,0 +1,1515 @@+{-+   Ory Hydra API++   Documentation for all of Ory Hydra's APIs. ++   OpenAPI Version: 3.0.3+   Ory Hydra API API version: +   Contact: hi@ory.sh+   Generated by OpenAPI Generator (https://openapi-generator.tech)+-}++{-|+Module : ORYHydra.Lens+-}++{-# LANGUAGE KindSignatures #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE RankNTypes #-}+{-# LANGUAGE RecordWildCards #-}+{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-matches -fno-warn-unused-binds -fno-warn-unused-imports #-}++module ORYHydra.ModelLens where++import qualified Data.Aeson as A+import qualified Data.ByteString.Lazy as BL+import qualified Data.Data as P (Data, Typeable)+import qualified Data.Map as Map+import qualified Data.Set as Set+import qualified Data.Time as TI++import Data.Text (Text)++import Prelude (($), (.),(<$>),(<*>),(=<<),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)+import qualified Prelude as P++import ORYHydra.Model+import ORYHydra.Core+++-- * AcceptOAuth2ConsentRequest++-- | 'acceptOAuth2ConsentRequestGrantAccessTokenAudience' Lens+acceptOAuth2ConsentRequestGrantAccessTokenAudienceL :: Lens_' AcceptOAuth2ConsentRequest (Maybe [Text])+acceptOAuth2ConsentRequestGrantAccessTokenAudienceL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestGrantAccessTokenAudience -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestGrantAccessTokenAudience, ..} ) <$> f acceptOAuth2ConsentRequestGrantAccessTokenAudience+{-# INLINE acceptOAuth2ConsentRequestGrantAccessTokenAudienceL #-}++-- | 'acceptOAuth2ConsentRequestGrantScope' Lens+acceptOAuth2ConsentRequestGrantScopeL :: Lens_' AcceptOAuth2ConsentRequest (Maybe [Text])+acceptOAuth2ConsentRequestGrantScopeL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestGrantScope -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestGrantScope, ..} ) <$> f acceptOAuth2ConsentRequestGrantScope+{-# INLINE acceptOAuth2ConsentRequestGrantScopeL #-}++-- | 'acceptOAuth2ConsentRequestHandledAt' Lens+acceptOAuth2ConsentRequestHandledAtL :: Lens_' AcceptOAuth2ConsentRequest (Maybe DateTime)+acceptOAuth2ConsentRequestHandledAtL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestHandledAt -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestHandledAt, ..} ) <$> f acceptOAuth2ConsentRequestHandledAt+{-# INLINE acceptOAuth2ConsentRequestHandledAtL #-}++-- | 'acceptOAuth2ConsentRequestRemember' Lens+acceptOAuth2ConsentRequestRememberL :: Lens_' AcceptOAuth2ConsentRequest (Maybe Bool)+acceptOAuth2ConsentRequestRememberL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestRemember -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestRemember, ..} ) <$> f acceptOAuth2ConsentRequestRemember+{-# INLINE acceptOAuth2ConsentRequestRememberL #-}++-- | 'acceptOAuth2ConsentRequestRememberFor' Lens+acceptOAuth2ConsentRequestRememberForL :: Lens_' AcceptOAuth2ConsentRequest (Maybe Integer)+acceptOAuth2ConsentRequestRememberForL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestRememberFor -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestRememberFor, ..} ) <$> f acceptOAuth2ConsentRequestRememberFor+{-# INLINE acceptOAuth2ConsentRequestRememberForL #-}++-- | 'acceptOAuth2ConsentRequestSession' Lens+acceptOAuth2ConsentRequestSessionL :: Lens_' AcceptOAuth2ConsentRequest (Maybe AcceptOAuth2ConsentRequestSession)+acceptOAuth2ConsentRequestSessionL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestSession -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestSession, ..} ) <$> f acceptOAuth2ConsentRequestSession+{-# INLINE acceptOAuth2ConsentRequestSessionL #-}++++-- * AcceptOAuth2ConsentRequestSession++-- | 'acceptOAuth2ConsentRequestSessionAccessToken' Lens+acceptOAuth2ConsentRequestSessionAccessTokenL :: Lens_' AcceptOAuth2ConsentRequestSession (Maybe AnyType)+acceptOAuth2ConsentRequestSessionAccessTokenL f AcceptOAuth2ConsentRequestSession{..} = (\acceptOAuth2ConsentRequestSessionAccessToken -> AcceptOAuth2ConsentRequestSession { acceptOAuth2ConsentRequestSessionAccessToken, ..} ) <$> f acceptOAuth2ConsentRequestSessionAccessToken+{-# INLINE acceptOAuth2ConsentRequestSessionAccessTokenL #-}++-- | 'acceptOAuth2ConsentRequestSessionIdToken' Lens+acceptOAuth2ConsentRequestSessionIdTokenL :: Lens_' AcceptOAuth2ConsentRequestSession (Maybe AnyType)+acceptOAuth2ConsentRequestSessionIdTokenL f AcceptOAuth2ConsentRequestSession{..} = (\acceptOAuth2ConsentRequestSessionIdToken -> AcceptOAuth2ConsentRequestSession { acceptOAuth2ConsentRequestSessionIdToken, ..} ) <$> f acceptOAuth2ConsentRequestSessionIdToken+{-# INLINE acceptOAuth2ConsentRequestSessionIdTokenL #-}++++-- * AcceptOAuth2LoginRequest++-- | 'acceptOAuth2LoginRequestAcr' Lens+acceptOAuth2LoginRequestAcrL :: Lens_' AcceptOAuth2LoginRequest (Maybe Text)+acceptOAuth2LoginRequestAcrL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestAcr -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestAcr, ..} ) <$> f acceptOAuth2LoginRequestAcr+{-# INLINE acceptOAuth2LoginRequestAcrL #-}++-- | 'acceptOAuth2LoginRequestAmr' Lens+acceptOAuth2LoginRequestAmrL :: Lens_' AcceptOAuth2LoginRequest (Maybe [Text])+acceptOAuth2LoginRequestAmrL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestAmr -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestAmr, ..} ) <$> f acceptOAuth2LoginRequestAmr+{-# INLINE acceptOAuth2LoginRequestAmrL #-}++-- | 'acceptOAuth2LoginRequestContext' Lens+acceptOAuth2LoginRequestContextL :: Lens_' AcceptOAuth2LoginRequest (Maybe AnyType)+acceptOAuth2LoginRequestContextL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestContext -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestContext, ..} ) <$> f acceptOAuth2LoginRequestContext+{-# INLINE acceptOAuth2LoginRequestContextL #-}++-- | 'acceptOAuth2LoginRequestExtendSessionLifespan' Lens+acceptOAuth2LoginRequestExtendSessionLifespanL :: Lens_' AcceptOAuth2LoginRequest (Maybe Bool)+acceptOAuth2LoginRequestExtendSessionLifespanL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestExtendSessionLifespan -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestExtendSessionLifespan, ..} ) <$> f acceptOAuth2LoginRequestExtendSessionLifespan+{-# INLINE acceptOAuth2LoginRequestExtendSessionLifespanL #-}++-- | 'acceptOAuth2LoginRequestForceSubjectIdentifier' Lens+acceptOAuth2LoginRequestForceSubjectIdentifierL :: Lens_' AcceptOAuth2LoginRequest (Maybe Text)+acceptOAuth2LoginRequestForceSubjectIdentifierL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestForceSubjectIdentifier -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestForceSubjectIdentifier, ..} ) <$> f acceptOAuth2LoginRequestForceSubjectIdentifier+{-# INLINE acceptOAuth2LoginRequestForceSubjectIdentifierL #-}++-- | 'acceptOAuth2LoginRequestRemember' Lens+acceptOAuth2LoginRequestRememberL :: Lens_' AcceptOAuth2LoginRequest (Maybe Bool)+acceptOAuth2LoginRequestRememberL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestRemember -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestRemember, ..} ) <$> f acceptOAuth2LoginRequestRemember+{-# INLINE acceptOAuth2LoginRequestRememberL #-}++-- | 'acceptOAuth2LoginRequestRememberFor' Lens+acceptOAuth2LoginRequestRememberForL :: Lens_' AcceptOAuth2LoginRequest (Maybe Integer)+acceptOAuth2LoginRequestRememberForL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestRememberFor -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestRememberFor, ..} ) <$> f acceptOAuth2LoginRequestRememberFor+{-# INLINE acceptOAuth2LoginRequestRememberForL #-}++-- | 'acceptOAuth2LoginRequestSubject' Lens+acceptOAuth2LoginRequestSubjectL :: Lens_' AcceptOAuth2LoginRequest (Text)+acceptOAuth2LoginRequestSubjectL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestSubject -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestSubject, ..} ) <$> f acceptOAuth2LoginRequestSubject+{-# INLINE acceptOAuth2LoginRequestSubjectL #-}++++-- * CreateJsonWebKeySet++-- | 'createJsonWebKeySetAlg' Lens+createJsonWebKeySetAlgL :: Lens_' CreateJsonWebKeySet (Text)+createJsonWebKeySetAlgL f CreateJsonWebKeySet{..} = (\createJsonWebKeySetAlg -> CreateJsonWebKeySet { createJsonWebKeySetAlg, ..} ) <$> f createJsonWebKeySetAlg+{-# INLINE createJsonWebKeySetAlgL #-}++-- | 'createJsonWebKeySetKid' Lens+createJsonWebKeySetKidL :: Lens_' CreateJsonWebKeySet (Text)+createJsonWebKeySetKidL f CreateJsonWebKeySet{..} = (\createJsonWebKeySetKid -> CreateJsonWebKeySet { createJsonWebKeySetKid, ..} ) <$> f createJsonWebKeySetKid+{-# INLINE createJsonWebKeySetKidL #-}++-- | 'createJsonWebKeySetUse' Lens+createJsonWebKeySetUseL :: Lens_' CreateJsonWebKeySet (Text)+createJsonWebKeySetUseL f CreateJsonWebKeySet{..} = (\createJsonWebKeySetUse -> CreateJsonWebKeySet { createJsonWebKeySetUse, ..} ) <$> f createJsonWebKeySetUse+{-# INLINE createJsonWebKeySetUseL #-}++++-- * ErrorOAuth2++-- | 'errorOAuth2Error' Lens+errorOAuth2ErrorL :: Lens_' ErrorOAuth2 (Maybe Text)+errorOAuth2ErrorL f ErrorOAuth2{..} = (\errorOAuth2Error -> ErrorOAuth2 { errorOAuth2Error, ..} ) <$> f errorOAuth2Error+{-# INLINE errorOAuth2ErrorL #-}++-- | 'errorOAuth2ErrorDebug' Lens+errorOAuth2ErrorDebugL :: Lens_' ErrorOAuth2 (Maybe Text)+errorOAuth2ErrorDebugL f ErrorOAuth2{..} = (\errorOAuth2ErrorDebug -> ErrorOAuth2 { errorOAuth2ErrorDebug, ..} ) <$> f errorOAuth2ErrorDebug+{-# INLINE errorOAuth2ErrorDebugL #-}++-- | 'errorOAuth2ErrorDescription' Lens+errorOAuth2ErrorDescriptionL :: Lens_' ErrorOAuth2 (Maybe Text)+errorOAuth2ErrorDescriptionL f ErrorOAuth2{..} = (\errorOAuth2ErrorDescription -> ErrorOAuth2 { errorOAuth2ErrorDescription, ..} ) <$> f errorOAuth2ErrorDescription+{-# INLINE errorOAuth2ErrorDescriptionL #-}++-- | 'errorOAuth2ErrorHint' Lens+errorOAuth2ErrorHintL :: Lens_' ErrorOAuth2 (Maybe Text)+errorOAuth2ErrorHintL f ErrorOAuth2{..} = (\errorOAuth2ErrorHint -> ErrorOAuth2 { errorOAuth2ErrorHint, ..} ) <$> f errorOAuth2ErrorHint+{-# INLINE errorOAuth2ErrorHintL #-}++-- | 'errorOAuth2StatusCode' Lens+errorOAuth2StatusCodeL :: Lens_' ErrorOAuth2 (Maybe Integer)+errorOAuth2StatusCodeL f ErrorOAuth2{..} = (\errorOAuth2StatusCode -> ErrorOAuth2 { errorOAuth2StatusCode, ..} ) <$> f errorOAuth2StatusCode+{-# INLINE errorOAuth2StatusCodeL #-}++++-- * GenericError++-- | 'genericErrorCode' Lens+genericErrorCodeL :: Lens_' GenericError (Maybe Integer)+genericErrorCodeL f GenericError{..} = (\genericErrorCode -> GenericError { genericErrorCode, ..} ) <$> f genericErrorCode+{-# INLINE genericErrorCodeL #-}++-- | 'genericErrorDebug' Lens+genericErrorDebugL :: Lens_' GenericError (Maybe Text)+genericErrorDebugL f GenericError{..} = (\genericErrorDebug -> GenericError { genericErrorDebug, ..} ) <$> f genericErrorDebug+{-# INLINE genericErrorDebugL #-}++-- | 'genericErrorDetails' Lens+genericErrorDetailsL :: Lens_' GenericError (Maybe AnyType)+genericErrorDetailsL f GenericError{..} = (\genericErrorDetails -> GenericError { genericErrorDetails, ..} ) <$> f genericErrorDetails+{-# INLINE genericErrorDetailsL #-}++-- | 'genericErrorId' Lens+genericErrorIdL :: Lens_' GenericError (Maybe Text)+genericErrorIdL f GenericError{..} = (\genericErrorId -> GenericError { genericErrorId, ..} ) <$> f genericErrorId+{-# INLINE genericErrorIdL #-}++-- | 'genericErrorMessage' Lens+genericErrorMessageL :: Lens_' GenericError (Text)+genericErrorMessageL f GenericError{..} = (\genericErrorMessage -> GenericError { genericErrorMessage, ..} ) <$> f genericErrorMessage+{-# INLINE genericErrorMessageL #-}++-- | 'genericErrorReason' Lens+genericErrorReasonL :: Lens_' GenericError (Maybe Text)+genericErrorReasonL f GenericError{..} = (\genericErrorReason -> GenericError { genericErrorReason, ..} ) <$> f genericErrorReason+{-# INLINE genericErrorReasonL #-}++-- | 'genericErrorRequest' Lens+genericErrorRequestL :: Lens_' GenericError (Maybe Text)+genericErrorRequestL f GenericError{..} = (\genericErrorRequest -> GenericError { genericErrorRequest, ..} ) <$> f genericErrorRequest+{-# INLINE genericErrorRequestL #-}++-- | 'genericErrorStatus' Lens+genericErrorStatusL :: Lens_' GenericError (Maybe Text)+genericErrorStatusL f GenericError{..} = (\genericErrorStatus -> GenericError { genericErrorStatus, ..} ) <$> f genericErrorStatus+{-# INLINE genericErrorStatusL #-}++++-- * GetVersion200Response++-- | 'getVersion200ResponseVersion' Lens+getVersion200ResponseVersionL :: Lens_' GetVersion200Response (Maybe Text)+getVersion200ResponseVersionL f GetVersion200Response{..} = (\getVersion200ResponseVersion -> GetVersion200Response { getVersion200ResponseVersion, ..} ) <$> f getVersion200ResponseVersion+{-# INLINE getVersion200ResponseVersionL #-}++++-- * HealthNotReadyStatus++-- | 'healthNotReadyStatusErrors' Lens+healthNotReadyStatusErrorsL :: Lens_' HealthNotReadyStatus (Maybe (Map.Map String Text))+healthNotReadyStatusErrorsL f HealthNotReadyStatus{..} = (\healthNotReadyStatusErrors -> HealthNotReadyStatus { healthNotReadyStatusErrors, ..} ) <$> f healthNotReadyStatusErrors+{-# INLINE healthNotReadyStatusErrorsL #-}++++-- * HealthStatus++-- | 'healthStatusStatus' Lens+healthStatusStatusL :: Lens_' HealthStatus (Maybe Text)+healthStatusStatusL f HealthStatus{..} = (\healthStatusStatus -> HealthStatus { healthStatusStatus, ..} ) <$> f healthStatusStatus+{-# INLINE healthStatusStatusL #-}++++-- * IntrospectedOAuth2Token++-- | 'introspectedOAuth2TokenActive' Lens+introspectedOAuth2TokenActiveL :: Lens_' IntrospectedOAuth2Token (Bool)+introspectedOAuth2TokenActiveL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenActive -> IntrospectedOAuth2Token { introspectedOAuth2TokenActive, ..} ) <$> f introspectedOAuth2TokenActive+{-# INLINE introspectedOAuth2TokenActiveL #-}++-- | 'introspectedOAuth2TokenAud' Lens+introspectedOAuth2TokenAudL :: Lens_' IntrospectedOAuth2Token (Maybe [Text])+introspectedOAuth2TokenAudL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenAud -> IntrospectedOAuth2Token { introspectedOAuth2TokenAud, ..} ) <$> f introspectedOAuth2TokenAud+{-# INLINE introspectedOAuth2TokenAudL #-}++-- | 'introspectedOAuth2TokenClientId' Lens+introspectedOAuth2TokenClientIdL :: Lens_' IntrospectedOAuth2Token (Maybe Text)+introspectedOAuth2TokenClientIdL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenClientId -> IntrospectedOAuth2Token { introspectedOAuth2TokenClientId, ..} ) <$> f introspectedOAuth2TokenClientId+{-# INLINE introspectedOAuth2TokenClientIdL #-}++-- | 'introspectedOAuth2TokenExp' Lens+introspectedOAuth2TokenExpL :: Lens_' IntrospectedOAuth2Token (Maybe Integer)+introspectedOAuth2TokenExpL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenExp -> IntrospectedOAuth2Token { introspectedOAuth2TokenExp, ..} ) <$> f introspectedOAuth2TokenExp+{-# INLINE introspectedOAuth2TokenExpL #-}++-- | 'introspectedOAuth2TokenExt' Lens+introspectedOAuth2TokenExtL :: Lens_' IntrospectedOAuth2Token (Maybe (Map.Map String AnyType))+introspectedOAuth2TokenExtL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenExt -> IntrospectedOAuth2Token { introspectedOAuth2TokenExt, ..} ) <$> f introspectedOAuth2TokenExt+{-# INLINE introspectedOAuth2TokenExtL #-}++-- | 'introspectedOAuth2TokenIat' Lens+introspectedOAuth2TokenIatL :: Lens_' IntrospectedOAuth2Token (Maybe Integer)+introspectedOAuth2TokenIatL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenIat -> IntrospectedOAuth2Token { introspectedOAuth2TokenIat, ..} ) <$> f introspectedOAuth2TokenIat+{-# INLINE introspectedOAuth2TokenIatL #-}++-- | 'introspectedOAuth2TokenIss' Lens+introspectedOAuth2TokenIssL :: Lens_' IntrospectedOAuth2Token (Maybe Text)+introspectedOAuth2TokenIssL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenIss -> IntrospectedOAuth2Token { introspectedOAuth2TokenIss, ..} ) <$> f introspectedOAuth2TokenIss+{-# INLINE introspectedOAuth2TokenIssL #-}++-- | 'introspectedOAuth2TokenNbf' Lens+introspectedOAuth2TokenNbfL :: Lens_' IntrospectedOAuth2Token (Maybe Integer)+introspectedOAuth2TokenNbfL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenNbf -> IntrospectedOAuth2Token { introspectedOAuth2TokenNbf, ..} ) <$> f introspectedOAuth2TokenNbf+{-# INLINE introspectedOAuth2TokenNbfL #-}++-- | 'introspectedOAuth2TokenObfuscatedSubject' Lens+introspectedOAuth2TokenObfuscatedSubjectL :: Lens_' IntrospectedOAuth2Token (Maybe Text)+introspectedOAuth2TokenObfuscatedSubjectL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenObfuscatedSubject -> IntrospectedOAuth2Token { introspectedOAuth2TokenObfuscatedSubject, ..} ) <$> f introspectedOAuth2TokenObfuscatedSubject+{-# INLINE introspectedOAuth2TokenObfuscatedSubjectL #-}++-- | 'introspectedOAuth2TokenScope' Lens+introspectedOAuth2TokenScopeL :: Lens_' IntrospectedOAuth2Token (Maybe Text)+introspectedOAuth2TokenScopeL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenScope -> IntrospectedOAuth2Token { introspectedOAuth2TokenScope, ..} ) <$> f introspectedOAuth2TokenScope+{-# INLINE introspectedOAuth2TokenScopeL #-}++-- | 'introspectedOAuth2TokenSub' Lens+introspectedOAuth2TokenSubL :: Lens_' IntrospectedOAuth2Token (Maybe Text)+introspectedOAuth2TokenSubL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenSub -> IntrospectedOAuth2Token { introspectedOAuth2TokenSub, ..} ) <$> f introspectedOAuth2TokenSub+{-# INLINE introspectedOAuth2TokenSubL #-}++-- | 'introspectedOAuth2TokenTokenType' Lens+introspectedOAuth2TokenTokenTypeL :: Lens_' IntrospectedOAuth2Token (Maybe Text)+introspectedOAuth2TokenTokenTypeL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenTokenType -> IntrospectedOAuth2Token { introspectedOAuth2TokenTokenType, ..} ) <$> f introspectedOAuth2TokenTokenType+{-# INLINE introspectedOAuth2TokenTokenTypeL #-}++-- | 'introspectedOAuth2TokenTokenUse' Lens+introspectedOAuth2TokenTokenUseL :: Lens_' IntrospectedOAuth2Token (Maybe Text)+introspectedOAuth2TokenTokenUseL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenTokenUse -> IntrospectedOAuth2Token { introspectedOAuth2TokenTokenUse, ..} ) <$> f introspectedOAuth2TokenTokenUse+{-# INLINE introspectedOAuth2TokenTokenUseL #-}++-- | 'introspectedOAuth2TokenUsername' Lens+introspectedOAuth2TokenUsernameL :: Lens_' IntrospectedOAuth2Token (Maybe Text)+introspectedOAuth2TokenUsernameL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenUsername -> IntrospectedOAuth2Token { introspectedOAuth2TokenUsername, ..} ) <$> f introspectedOAuth2TokenUsername+{-# INLINE introspectedOAuth2TokenUsernameL #-}++++-- * IsReady200Response++-- | 'isReady200ResponseStatus' Lens+isReady200ResponseStatusL :: Lens_' IsReady200Response (Maybe Text)+isReady200ResponseStatusL f IsReady200Response{..} = (\isReady200ResponseStatus -> IsReady200Response { isReady200ResponseStatus, ..} ) <$> f isReady200ResponseStatus+{-# INLINE isReady200ResponseStatusL #-}++++-- * IsReady503Response++-- | 'isReady503ResponseErrors' Lens+isReady503ResponseErrorsL :: Lens_' IsReady503Response (Maybe (Map.Map String Text))+isReady503ResponseErrorsL f IsReady503Response{..} = (\isReady503ResponseErrors -> IsReady503Response { isReady503ResponseErrors, ..} ) <$> f isReady503ResponseErrors+{-# INLINE isReady503ResponseErrorsL #-}++++-- * JsonPatch++-- | 'jsonPatchFrom' Lens+jsonPatchFromL :: Lens_' JsonPatch (Maybe Text)+jsonPatchFromL f JsonPatch{..} = (\jsonPatchFrom -> JsonPatch { jsonPatchFrom, ..} ) <$> f jsonPatchFrom+{-# INLINE jsonPatchFromL #-}++-- | 'jsonPatchOp' Lens+jsonPatchOpL :: Lens_' JsonPatch (Text)+jsonPatchOpL f JsonPatch{..} = (\jsonPatchOp -> JsonPatch { jsonPatchOp, ..} ) <$> f jsonPatchOp+{-# INLINE jsonPatchOpL #-}++-- | 'jsonPatchPath' Lens+jsonPatchPathL :: Lens_' JsonPatch (Text)+jsonPatchPathL f JsonPatch{..} = (\jsonPatchPath -> JsonPatch { jsonPatchPath, ..} ) <$> f jsonPatchPath+{-# INLINE jsonPatchPathL #-}++-- | 'jsonPatchValue' Lens+jsonPatchValueL :: Lens_' JsonPatch (Maybe AnyType)+jsonPatchValueL f JsonPatch{..} = (\jsonPatchValue -> JsonPatch { jsonPatchValue, ..} ) <$> f jsonPatchValue+{-# INLINE jsonPatchValueL #-}++++-- * JsonWebKey++-- | 'jsonWebKeyAlg' Lens+jsonWebKeyAlgL :: Lens_' JsonWebKey (Text)+jsonWebKeyAlgL f JsonWebKey{..} = (\jsonWebKeyAlg -> JsonWebKey { jsonWebKeyAlg, ..} ) <$> f jsonWebKeyAlg+{-# INLINE jsonWebKeyAlgL #-}++-- | 'jsonWebKeyCrv' Lens+jsonWebKeyCrvL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyCrvL f JsonWebKey{..} = (\jsonWebKeyCrv -> JsonWebKey { jsonWebKeyCrv, ..} ) <$> f jsonWebKeyCrv+{-# INLINE jsonWebKeyCrvL #-}++-- | 'jsonWebKeyD' Lens+jsonWebKeyDL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyDL f JsonWebKey{..} = (\jsonWebKeyD -> JsonWebKey { jsonWebKeyD, ..} ) <$> f jsonWebKeyD+{-# INLINE jsonWebKeyDL #-}++-- | 'jsonWebKeyDp' Lens+jsonWebKeyDpL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyDpL f JsonWebKey{..} = (\jsonWebKeyDp -> JsonWebKey { jsonWebKeyDp, ..} ) <$> f jsonWebKeyDp+{-# INLINE jsonWebKeyDpL #-}++-- | 'jsonWebKeyDq' Lens+jsonWebKeyDqL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyDqL f JsonWebKey{..} = (\jsonWebKeyDq -> JsonWebKey { jsonWebKeyDq, ..} ) <$> f jsonWebKeyDq+{-# INLINE jsonWebKeyDqL #-}++-- | 'jsonWebKeyE' Lens+jsonWebKeyEL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyEL f JsonWebKey{..} = (\jsonWebKeyE -> JsonWebKey { jsonWebKeyE, ..} ) <$> f jsonWebKeyE+{-# INLINE jsonWebKeyEL #-}++-- | 'jsonWebKeyK' Lens+jsonWebKeyKL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyKL f JsonWebKey{..} = (\jsonWebKeyK -> JsonWebKey { jsonWebKeyK, ..} ) <$> f jsonWebKeyK+{-# INLINE jsonWebKeyKL #-}++-- | 'jsonWebKeyKid' Lens+jsonWebKeyKidL :: Lens_' JsonWebKey (Text)+jsonWebKeyKidL f JsonWebKey{..} = (\jsonWebKeyKid -> JsonWebKey { jsonWebKeyKid, ..} ) <$> f jsonWebKeyKid+{-# INLINE jsonWebKeyKidL #-}++-- | 'jsonWebKeyKty' Lens+jsonWebKeyKtyL :: Lens_' JsonWebKey (Text)+jsonWebKeyKtyL f JsonWebKey{..} = (\jsonWebKeyKty -> JsonWebKey { jsonWebKeyKty, ..} ) <$> f jsonWebKeyKty+{-# INLINE jsonWebKeyKtyL #-}++-- | 'jsonWebKeyN' Lens+jsonWebKeyNL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyNL f JsonWebKey{..} = (\jsonWebKeyN -> JsonWebKey { jsonWebKeyN, ..} ) <$> f jsonWebKeyN+{-# INLINE jsonWebKeyNL #-}++-- | 'jsonWebKeyP' Lens+jsonWebKeyPL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyPL f JsonWebKey{..} = (\jsonWebKeyP -> JsonWebKey { jsonWebKeyP, ..} ) <$> f jsonWebKeyP+{-# INLINE jsonWebKeyPL #-}++-- | 'jsonWebKeyQ' Lens+jsonWebKeyQL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyQL f JsonWebKey{..} = (\jsonWebKeyQ -> JsonWebKey { jsonWebKeyQ, ..} ) <$> f jsonWebKeyQ+{-# INLINE jsonWebKeyQL #-}++-- | 'jsonWebKeyQi' Lens+jsonWebKeyQiL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyQiL f JsonWebKey{..} = (\jsonWebKeyQi -> JsonWebKey { jsonWebKeyQi, ..} ) <$> f jsonWebKeyQi+{-# INLINE jsonWebKeyQiL #-}++-- | 'jsonWebKeyUse' Lens+jsonWebKeyUseL :: Lens_' JsonWebKey (Text)+jsonWebKeyUseL f JsonWebKey{..} = (\jsonWebKeyUse -> JsonWebKey { jsonWebKeyUse, ..} ) <$> f jsonWebKeyUse+{-# INLINE jsonWebKeyUseL #-}++-- | 'jsonWebKeyX' Lens+jsonWebKeyXL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyXL f JsonWebKey{..} = (\jsonWebKeyX -> JsonWebKey { jsonWebKeyX, ..} ) <$> f jsonWebKeyX+{-# INLINE jsonWebKeyXL #-}++-- | 'jsonWebKeyX5c' Lens+jsonWebKeyX5cL :: Lens_' JsonWebKey (Maybe [Text])+jsonWebKeyX5cL f JsonWebKey{..} = (\jsonWebKeyX5c -> JsonWebKey { jsonWebKeyX5c, ..} ) <$> f jsonWebKeyX5c+{-# INLINE jsonWebKeyX5cL #-}++-- | 'jsonWebKeyY' Lens+jsonWebKeyYL :: Lens_' JsonWebKey (Maybe Text)+jsonWebKeyYL f JsonWebKey{..} = (\jsonWebKeyY -> JsonWebKey { jsonWebKeyY, ..} ) <$> f jsonWebKeyY+{-# INLINE jsonWebKeyYL #-}++++-- * JsonWebKeySet++-- | 'jsonWebKeySetKeys' Lens+jsonWebKeySetKeysL :: Lens_' JsonWebKeySet (Maybe [JsonWebKey])+jsonWebKeySetKeysL f JsonWebKeySet{..} = (\jsonWebKeySetKeys -> JsonWebKeySet { jsonWebKeySetKeys, ..} ) <$> f jsonWebKeySetKeys+{-# INLINE jsonWebKeySetKeysL #-}++++-- * OAuth2Client++-- | 'oAuth2ClientAccessTokenStrategy' Lens+oAuth2ClientAccessTokenStrategyL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientAccessTokenStrategyL f OAuth2Client{..} = (\oAuth2ClientAccessTokenStrategy -> OAuth2Client { oAuth2ClientAccessTokenStrategy, ..} ) <$> f oAuth2ClientAccessTokenStrategy+{-# INLINE oAuth2ClientAccessTokenStrategyL #-}++-- | 'oAuth2ClientAllowedCorsOrigins' Lens+oAuth2ClientAllowedCorsOriginsL :: Lens_' OAuth2Client (Maybe [Text])+oAuth2ClientAllowedCorsOriginsL f OAuth2Client{..} = (\oAuth2ClientAllowedCorsOrigins -> OAuth2Client { oAuth2ClientAllowedCorsOrigins, ..} ) <$> f oAuth2ClientAllowedCorsOrigins+{-# INLINE oAuth2ClientAllowedCorsOriginsL #-}++-- | 'oAuth2ClientAudience' Lens+oAuth2ClientAudienceL :: Lens_' OAuth2Client (Maybe [Text])+oAuth2ClientAudienceL f OAuth2Client{..} = (\oAuth2ClientAudience -> OAuth2Client { oAuth2ClientAudience, ..} ) <$> f oAuth2ClientAudience+{-# INLINE oAuth2ClientAudienceL #-}++-- | 'oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan' Lens+oAuth2ClientAuthorizationCodeGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientAuthorizationCodeGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan+{-# INLINE oAuth2ClientAuthorizationCodeGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientAuthorizationCodeGrantIdTokenLifespan' Lens+oAuth2ClientAuthorizationCodeGrantIdTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientAuthorizationCodeGrantIdTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientAuthorizationCodeGrantIdTokenLifespan -> OAuth2Client { oAuth2ClientAuthorizationCodeGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientAuthorizationCodeGrantIdTokenLifespan+{-# INLINE oAuth2ClientAuthorizationCodeGrantIdTokenLifespanL #-}++-- | 'oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan' Lens+oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan -> OAuth2Client { oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan, ..} ) <$> f oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan+{-# INLINE oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespanL #-}++-- | 'oAuth2ClientBackchannelLogoutSessionRequired' Lens+oAuth2ClientBackchannelLogoutSessionRequiredL :: Lens_' OAuth2Client (Maybe Bool)+oAuth2ClientBackchannelLogoutSessionRequiredL f OAuth2Client{..} = (\oAuth2ClientBackchannelLogoutSessionRequired -> OAuth2Client { oAuth2ClientBackchannelLogoutSessionRequired, ..} ) <$> f oAuth2ClientBackchannelLogoutSessionRequired+{-# INLINE oAuth2ClientBackchannelLogoutSessionRequiredL #-}++-- | 'oAuth2ClientBackchannelLogoutUri' Lens+oAuth2ClientBackchannelLogoutUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientBackchannelLogoutUriL f OAuth2Client{..} = (\oAuth2ClientBackchannelLogoutUri -> OAuth2Client { oAuth2ClientBackchannelLogoutUri, ..} ) <$> f oAuth2ClientBackchannelLogoutUri+{-# INLINE oAuth2ClientBackchannelLogoutUriL #-}++-- | 'oAuth2ClientClientCredentialsGrantAccessTokenLifespan' Lens+oAuth2ClientClientCredentialsGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientClientCredentialsGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientClientCredentialsGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientClientCredentialsGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientClientCredentialsGrantAccessTokenLifespan+{-# INLINE oAuth2ClientClientCredentialsGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientClientId' Lens+oAuth2ClientClientIdL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientClientIdL f OAuth2Client{..} = (\oAuth2ClientClientId -> OAuth2Client { oAuth2ClientClientId, ..} ) <$> f oAuth2ClientClientId+{-# INLINE oAuth2ClientClientIdL #-}++-- | 'oAuth2ClientClientName' Lens+oAuth2ClientClientNameL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientClientNameL f OAuth2Client{..} = (\oAuth2ClientClientName -> OAuth2Client { oAuth2ClientClientName, ..} ) <$> f oAuth2ClientClientName+{-# INLINE oAuth2ClientClientNameL #-}++-- | 'oAuth2ClientClientSecret' Lens+oAuth2ClientClientSecretL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientClientSecretL f OAuth2Client{..} = (\oAuth2ClientClientSecret -> OAuth2Client { oAuth2ClientClientSecret, ..} ) <$> f oAuth2ClientClientSecret+{-# INLINE oAuth2ClientClientSecretL #-}++-- | 'oAuth2ClientClientSecretExpiresAt' Lens+oAuth2ClientClientSecretExpiresAtL :: Lens_' OAuth2Client (Maybe Integer)+oAuth2ClientClientSecretExpiresAtL f OAuth2Client{..} = (\oAuth2ClientClientSecretExpiresAt -> OAuth2Client { oAuth2ClientClientSecretExpiresAt, ..} ) <$> f oAuth2ClientClientSecretExpiresAt+{-# INLINE oAuth2ClientClientSecretExpiresAtL #-}++-- | 'oAuth2ClientClientUri' Lens+oAuth2ClientClientUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientClientUriL f OAuth2Client{..} = (\oAuth2ClientClientUri -> OAuth2Client { oAuth2ClientClientUri, ..} ) <$> f oAuth2ClientClientUri+{-# INLINE oAuth2ClientClientUriL #-}++-- | 'oAuth2ClientContacts' Lens+oAuth2ClientContactsL :: Lens_' OAuth2Client (Maybe [Text])+oAuth2ClientContactsL f OAuth2Client{..} = (\oAuth2ClientContacts -> OAuth2Client { oAuth2ClientContacts, ..} ) <$> f oAuth2ClientContacts+{-# INLINE oAuth2ClientContactsL #-}++-- | 'oAuth2ClientCreatedAt' Lens+oAuth2ClientCreatedAtL :: Lens_' OAuth2Client (Maybe DateTime)+oAuth2ClientCreatedAtL f OAuth2Client{..} = (\oAuth2ClientCreatedAt -> OAuth2Client { oAuth2ClientCreatedAt, ..} ) <$> f oAuth2ClientCreatedAt+{-# INLINE oAuth2ClientCreatedAtL #-}++-- | 'oAuth2ClientFrontchannelLogoutSessionRequired' Lens+oAuth2ClientFrontchannelLogoutSessionRequiredL :: Lens_' OAuth2Client (Maybe Bool)+oAuth2ClientFrontchannelLogoutSessionRequiredL f OAuth2Client{..} = (\oAuth2ClientFrontchannelLogoutSessionRequired -> OAuth2Client { oAuth2ClientFrontchannelLogoutSessionRequired, ..} ) <$> f oAuth2ClientFrontchannelLogoutSessionRequired+{-# INLINE oAuth2ClientFrontchannelLogoutSessionRequiredL #-}++-- | 'oAuth2ClientFrontchannelLogoutUri' Lens+oAuth2ClientFrontchannelLogoutUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientFrontchannelLogoutUriL f OAuth2Client{..} = (\oAuth2ClientFrontchannelLogoutUri -> OAuth2Client { oAuth2ClientFrontchannelLogoutUri, ..} ) <$> f oAuth2ClientFrontchannelLogoutUri+{-# INLINE oAuth2ClientFrontchannelLogoutUriL #-}++-- | 'oAuth2ClientGrantTypes' Lens+oAuth2ClientGrantTypesL :: Lens_' OAuth2Client (Maybe [Text])+oAuth2ClientGrantTypesL f OAuth2Client{..} = (\oAuth2ClientGrantTypes -> OAuth2Client { oAuth2ClientGrantTypes, ..} ) <$> f oAuth2ClientGrantTypes+{-# INLINE oAuth2ClientGrantTypesL #-}++-- | 'oAuth2ClientImplicitGrantAccessTokenLifespan' Lens+oAuth2ClientImplicitGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientImplicitGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientImplicitGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientImplicitGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientImplicitGrantAccessTokenLifespan+{-# INLINE oAuth2ClientImplicitGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientImplicitGrantIdTokenLifespan' Lens+oAuth2ClientImplicitGrantIdTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientImplicitGrantIdTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientImplicitGrantIdTokenLifespan -> OAuth2Client { oAuth2ClientImplicitGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientImplicitGrantIdTokenLifespan+{-# INLINE oAuth2ClientImplicitGrantIdTokenLifespanL #-}++-- | 'oAuth2ClientJwks' Lens+oAuth2ClientJwksL :: Lens_' OAuth2Client (Maybe AnyType)+oAuth2ClientJwksL f OAuth2Client{..} = (\oAuth2ClientJwks -> OAuth2Client { oAuth2ClientJwks, ..} ) <$> f oAuth2ClientJwks+{-# INLINE oAuth2ClientJwksL #-}++-- | 'oAuth2ClientJwksUri' Lens+oAuth2ClientJwksUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientJwksUriL f OAuth2Client{..} = (\oAuth2ClientJwksUri -> OAuth2Client { oAuth2ClientJwksUri, ..} ) <$> f oAuth2ClientJwksUri+{-# INLINE oAuth2ClientJwksUriL #-}++-- | 'oAuth2ClientJwtBearerGrantAccessTokenLifespan' Lens+oAuth2ClientJwtBearerGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientJwtBearerGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientJwtBearerGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientJwtBearerGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientJwtBearerGrantAccessTokenLifespan+{-# INLINE oAuth2ClientJwtBearerGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientLogoUri' Lens+oAuth2ClientLogoUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientLogoUriL f OAuth2Client{..} = (\oAuth2ClientLogoUri -> OAuth2Client { oAuth2ClientLogoUri, ..} ) <$> f oAuth2ClientLogoUri+{-# INLINE oAuth2ClientLogoUriL #-}++-- | 'oAuth2ClientMetadata' Lens+oAuth2ClientMetadataL :: Lens_' OAuth2Client (Maybe AnyType)+oAuth2ClientMetadataL f OAuth2Client{..} = (\oAuth2ClientMetadata -> OAuth2Client { oAuth2ClientMetadata, ..} ) <$> f oAuth2ClientMetadata+{-# INLINE oAuth2ClientMetadataL #-}++-- | 'oAuth2ClientOwner' Lens+oAuth2ClientOwnerL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientOwnerL f OAuth2Client{..} = (\oAuth2ClientOwner -> OAuth2Client { oAuth2ClientOwner, ..} ) <$> f oAuth2ClientOwner+{-# INLINE oAuth2ClientOwnerL #-}++-- | 'oAuth2ClientPolicyUri' Lens+oAuth2ClientPolicyUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientPolicyUriL f OAuth2Client{..} = (\oAuth2ClientPolicyUri -> OAuth2Client { oAuth2ClientPolicyUri, ..} ) <$> f oAuth2ClientPolicyUri+{-# INLINE oAuth2ClientPolicyUriL #-}++-- | 'oAuth2ClientPostLogoutRedirectUris' Lens+oAuth2ClientPostLogoutRedirectUrisL :: Lens_' OAuth2Client (Maybe [Text])+oAuth2ClientPostLogoutRedirectUrisL f OAuth2Client{..} = (\oAuth2ClientPostLogoutRedirectUris -> OAuth2Client { oAuth2ClientPostLogoutRedirectUris, ..} ) <$> f oAuth2ClientPostLogoutRedirectUris+{-# INLINE oAuth2ClientPostLogoutRedirectUrisL #-}++-- | 'oAuth2ClientRedirectUris' Lens+oAuth2ClientRedirectUrisL :: Lens_' OAuth2Client (Maybe [Text])+oAuth2ClientRedirectUrisL f OAuth2Client{..} = (\oAuth2ClientRedirectUris -> OAuth2Client { oAuth2ClientRedirectUris, ..} ) <$> f oAuth2ClientRedirectUris+{-# INLINE oAuth2ClientRedirectUrisL #-}++-- | 'oAuth2ClientRefreshTokenGrantAccessTokenLifespan' Lens+oAuth2ClientRefreshTokenGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientRefreshTokenGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientRefreshTokenGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientRefreshTokenGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientRefreshTokenGrantAccessTokenLifespan+{-# INLINE oAuth2ClientRefreshTokenGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientRefreshTokenGrantIdTokenLifespan' Lens+oAuth2ClientRefreshTokenGrantIdTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientRefreshTokenGrantIdTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientRefreshTokenGrantIdTokenLifespan -> OAuth2Client { oAuth2ClientRefreshTokenGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientRefreshTokenGrantIdTokenLifespan+{-# INLINE oAuth2ClientRefreshTokenGrantIdTokenLifespanL #-}++-- | 'oAuth2ClientRefreshTokenGrantRefreshTokenLifespan' Lens+oAuth2ClientRefreshTokenGrantRefreshTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientRefreshTokenGrantRefreshTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientRefreshTokenGrantRefreshTokenLifespan -> OAuth2Client { oAuth2ClientRefreshTokenGrantRefreshTokenLifespan, ..} ) <$> f oAuth2ClientRefreshTokenGrantRefreshTokenLifespan+{-# INLINE oAuth2ClientRefreshTokenGrantRefreshTokenLifespanL #-}++-- | 'oAuth2ClientRegistrationAccessToken' Lens+oAuth2ClientRegistrationAccessTokenL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientRegistrationAccessTokenL f OAuth2Client{..} = (\oAuth2ClientRegistrationAccessToken -> OAuth2Client { oAuth2ClientRegistrationAccessToken, ..} ) <$> f oAuth2ClientRegistrationAccessToken+{-# INLINE oAuth2ClientRegistrationAccessTokenL #-}++-- | 'oAuth2ClientRegistrationClientUri' Lens+oAuth2ClientRegistrationClientUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientRegistrationClientUriL f OAuth2Client{..} = (\oAuth2ClientRegistrationClientUri -> OAuth2Client { oAuth2ClientRegistrationClientUri, ..} ) <$> f oAuth2ClientRegistrationClientUri+{-# INLINE oAuth2ClientRegistrationClientUriL #-}++-- | 'oAuth2ClientRequestObjectSigningAlg' Lens+oAuth2ClientRequestObjectSigningAlgL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientRequestObjectSigningAlgL f OAuth2Client{..} = (\oAuth2ClientRequestObjectSigningAlg -> OAuth2Client { oAuth2ClientRequestObjectSigningAlg, ..} ) <$> f oAuth2ClientRequestObjectSigningAlg+{-# INLINE oAuth2ClientRequestObjectSigningAlgL #-}++-- | 'oAuth2ClientRequestUris' Lens+oAuth2ClientRequestUrisL :: Lens_' OAuth2Client (Maybe [Text])+oAuth2ClientRequestUrisL f OAuth2Client{..} = (\oAuth2ClientRequestUris -> OAuth2Client { oAuth2ClientRequestUris, ..} ) <$> f oAuth2ClientRequestUris+{-# INLINE oAuth2ClientRequestUrisL #-}++-- | 'oAuth2ClientResponseTypes' Lens+oAuth2ClientResponseTypesL :: Lens_' OAuth2Client (Maybe [Text])+oAuth2ClientResponseTypesL f OAuth2Client{..} = (\oAuth2ClientResponseTypes -> OAuth2Client { oAuth2ClientResponseTypes, ..} ) <$> f oAuth2ClientResponseTypes+{-# INLINE oAuth2ClientResponseTypesL #-}++-- | 'oAuth2ClientScope' Lens+oAuth2ClientScopeL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientScopeL f OAuth2Client{..} = (\oAuth2ClientScope -> OAuth2Client { oAuth2ClientScope, ..} ) <$> f oAuth2ClientScope+{-# INLINE oAuth2ClientScopeL #-}++-- | 'oAuth2ClientSectorIdentifierUri' Lens+oAuth2ClientSectorIdentifierUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientSectorIdentifierUriL f OAuth2Client{..} = (\oAuth2ClientSectorIdentifierUri -> OAuth2Client { oAuth2ClientSectorIdentifierUri, ..} ) <$> f oAuth2ClientSectorIdentifierUri+{-# INLINE oAuth2ClientSectorIdentifierUriL #-}++-- | 'oAuth2ClientSkipConsent' Lens+oAuth2ClientSkipConsentL :: Lens_' OAuth2Client (Maybe Bool)+oAuth2ClientSkipConsentL f OAuth2Client{..} = (\oAuth2ClientSkipConsent -> OAuth2Client { oAuth2ClientSkipConsent, ..} ) <$> f oAuth2ClientSkipConsent+{-# INLINE oAuth2ClientSkipConsentL #-}++-- | 'oAuth2ClientSubjectType' Lens+oAuth2ClientSubjectTypeL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientSubjectTypeL f OAuth2Client{..} = (\oAuth2ClientSubjectType -> OAuth2Client { oAuth2ClientSubjectType, ..} ) <$> f oAuth2ClientSubjectType+{-# INLINE oAuth2ClientSubjectTypeL #-}++-- | 'oAuth2ClientTokenEndpointAuthMethod' Lens+oAuth2ClientTokenEndpointAuthMethodL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientTokenEndpointAuthMethodL f OAuth2Client{..} = (\oAuth2ClientTokenEndpointAuthMethod -> OAuth2Client { oAuth2ClientTokenEndpointAuthMethod, ..} ) <$> f oAuth2ClientTokenEndpointAuthMethod+{-# INLINE oAuth2ClientTokenEndpointAuthMethodL #-}++-- | 'oAuth2ClientTokenEndpointAuthSigningAlg' Lens+oAuth2ClientTokenEndpointAuthSigningAlgL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientTokenEndpointAuthSigningAlgL f OAuth2Client{..} = (\oAuth2ClientTokenEndpointAuthSigningAlg -> OAuth2Client { oAuth2ClientTokenEndpointAuthSigningAlg, ..} ) <$> f oAuth2ClientTokenEndpointAuthSigningAlg+{-# INLINE oAuth2ClientTokenEndpointAuthSigningAlgL #-}++-- | 'oAuth2ClientTosUri' Lens+oAuth2ClientTosUriL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientTosUriL f OAuth2Client{..} = (\oAuth2ClientTosUri -> OAuth2Client { oAuth2ClientTosUri, ..} ) <$> f oAuth2ClientTosUri+{-# INLINE oAuth2ClientTosUriL #-}++-- | 'oAuth2ClientUpdatedAt' Lens+oAuth2ClientUpdatedAtL :: Lens_' OAuth2Client (Maybe DateTime)+oAuth2ClientUpdatedAtL f OAuth2Client{..} = (\oAuth2ClientUpdatedAt -> OAuth2Client { oAuth2ClientUpdatedAt, ..} ) <$> f oAuth2ClientUpdatedAt+{-# INLINE oAuth2ClientUpdatedAtL #-}++-- | 'oAuth2ClientUserinfoSignedResponseAlg' Lens+oAuth2ClientUserinfoSignedResponseAlgL :: Lens_' OAuth2Client (Maybe Text)+oAuth2ClientUserinfoSignedResponseAlgL f OAuth2Client{..} = (\oAuth2ClientUserinfoSignedResponseAlg -> OAuth2Client { oAuth2ClientUserinfoSignedResponseAlg, ..} ) <$> f oAuth2ClientUserinfoSignedResponseAlg+{-# INLINE oAuth2ClientUserinfoSignedResponseAlgL #-}++++-- * OAuth2ClientTokenLifespans++-- | 'oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan' Lens+oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan' Lens+oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan' Lens+oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan' Lens+oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan' Lens+oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan' Lens+oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan' Lens+oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan' Lens+oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan' Lens+oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespanL #-}++-- | 'oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan' Lens+oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)+oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan+{-# INLINE oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespanL #-}++++-- * OAuth2ConsentRequest++-- | 'oAuth2ConsentRequestAcr' Lens+oAuth2ConsentRequestAcrL :: Lens_' OAuth2ConsentRequest (Maybe Text)+oAuth2ConsentRequestAcrL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestAcr -> OAuth2ConsentRequest { oAuth2ConsentRequestAcr, ..} ) <$> f oAuth2ConsentRequestAcr+{-# INLINE oAuth2ConsentRequestAcrL #-}++-- | 'oAuth2ConsentRequestAmr' Lens+oAuth2ConsentRequestAmrL :: Lens_' OAuth2ConsentRequest (Maybe [Text])+oAuth2ConsentRequestAmrL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestAmr -> OAuth2ConsentRequest { oAuth2ConsentRequestAmr, ..} ) <$> f oAuth2ConsentRequestAmr+{-# INLINE oAuth2ConsentRequestAmrL #-}++-- | 'oAuth2ConsentRequestChallenge' Lens+oAuth2ConsentRequestChallengeL :: Lens_' OAuth2ConsentRequest (Text)+oAuth2ConsentRequestChallengeL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestChallenge -> OAuth2ConsentRequest { oAuth2ConsentRequestChallenge, ..} ) <$> f oAuth2ConsentRequestChallenge+{-# INLINE oAuth2ConsentRequestChallengeL #-}++-- | 'oAuth2ConsentRequestClient' Lens+oAuth2ConsentRequestClientL :: Lens_' OAuth2ConsentRequest (Maybe OAuth2Client)+oAuth2ConsentRequestClientL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestClient -> OAuth2ConsentRequest { oAuth2ConsentRequestClient, ..} ) <$> f oAuth2ConsentRequestClient+{-# INLINE oAuth2ConsentRequestClientL #-}++-- | 'oAuth2ConsentRequestContext' Lens+oAuth2ConsentRequestContextL :: Lens_' OAuth2ConsentRequest (Maybe AnyType)+oAuth2ConsentRequestContextL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestContext -> OAuth2ConsentRequest { oAuth2ConsentRequestContext, ..} ) <$> f oAuth2ConsentRequestContext+{-# INLINE oAuth2ConsentRequestContextL #-}++-- | 'oAuth2ConsentRequestLoginChallenge' Lens+oAuth2ConsentRequestLoginChallengeL :: Lens_' OAuth2ConsentRequest (Maybe Text)+oAuth2ConsentRequestLoginChallengeL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestLoginChallenge -> OAuth2ConsentRequest { oAuth2ConsentRequestLoginChallenge, ..} ) <$> f oAuth2ConsentRequestLoginChallenge+{-# INLINE oAuth2ConsentRequestLoginChallengeL #-}++-- | 'oAuth2ConsentRequestLoginSessionId' Lens+oAuth2ConsentRequestLoginSessionIdL :: Lens_' OAuth2ConsentRequest (Maybe Text)+oAuth2ConsentRequestLoginSessionIdL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestLoginSessionId -> OAuth2ConsentRequest { oAuth2ConsentRequestLoginSessionId, ..} ) <$> f oAuth2ConsentRequestLoginSessionId+{-# INLINE oAuth2ConsentRequestLoginSessionIdL #-}++-- | 'oAuth2ConsentRequestOidcContext' Lens+oAuth2ConsentRequestOidcContextL :: Lens_' OAuth2ConsentRequest (Maybe OAuth2ConsentRequestOpenIDConnectContext)+oAuth2ConsentRequestOidcContextL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestOidcContext -> OAuth2ConsentRequest { oAuth2ConsentRequestOidcContext, ..} ) <$> f oAuth2ConsentRequestOidcContext+{-# INLINE oAuth2ConsentRequestOidcContextL #-}++-- | 'oAuth2ConsentRequestRequestUrl' Lens+oAuth2ConsentRequestRequestUrlL :: Lens_' OAuth2ConsentRequest (Maybe Text)+oAuth2ConsentRequestRequestUrlL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestRequestUrl -> OAuth2ConsentRequest { oAuth2ConsentRequestRequestUrl, ..} ) <$> f oAuth2ConsentRequestRequestUrl+{-# INLINE oAuth2ConsentRequestRequestUrlL #-}++-- | 'oAuth2ConsentRequestRequestedAccessTokenAudience' Lens+oAuth2ConsentRequestRequestedAccessTokenAudienceL :: Lens_' OAuth2ConsentRequest (Maybe [Text])+oAuth2ConsentRequestRequestedAccessTokenAudienceL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestRequestedAccessTokenAudience -> OAuth2ConsentRequest { oAuth2ConsentRequestRequestedAccessTokenAudience, ..} ) <$> f oAuth2ConsentRequestRequestedAccessTokenAudience+{-# INLINE oAuth2ConsentRequestRequestedAccessTokenAudienceL #-}++-- | 'oAuth2ConsentRequestRequestedScope' Lens+oAuth2ConsentRequestRequestedScopeL :: Lens_' OAuth2ConsentRequest (Maybe [Text])+oAuth2ConsentRequestRequestedScopeL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestRequestedScope -> OAuth2ConsentRequest { oAuth2ConsentRequestRequestedScope, ..} ) <$> f oAuth2ConsentRequestRequestedScope+{-# INLINE oAuth2ConsentRequestRequestedScopeL #-}++-- | 'oAuth2ConsentRequestSkip' Lens+oAuth2ConsentRequestSkipL :: Lens_' OAuth2ConsentRequest (Maybe Bool)+oAuth2ConsentRequestSkipL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestSkip -> OAuth2ConsentRequest { oAuth2ConsentRequestSkip, ..} ) <$> f oAuth2ConsentRequestSkip+{-# INLINE oAuth2ConsentRequestSkipL #-}++-- | 'oAuth2ConsentRequestSubject' Lens+oAuth2ConsentRequestSubjectL :: Lens_' OAuth2ConsentRequest (Maybe Text)+oAuth2ConsentRequestSubjectL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestSubject -> OAuth2ConsentRequest { oAuth2ConsentRequestSubject, ..} ) <$> f oAuth2ConsentRequestSubject+{-# INLINE oAuth2ConsentRequestSubjectL #-}++++-- * OAuth2ConsentRequestOpenIDConnectContext++-- | 'oAuth2ConsentRequestOpenIDConnectContextAcrValues' Lens+oAuth2ConsentRequestOpenIDConnectContextAcrValuesL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe [Text])+oAuth2ConsentRequestOpenIDConnectContextAcrValuesL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextAcrValues -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextAcrValues, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextAcrValues+{-# INLINE oAuth2ConsentRequestOpenIDConnectContextAcrValuesL #-}++-- | 'oAuth2ConsentRequestOpenIDConnectContextDisplay' Lens+oAuth2ConsentRequestOpenIDConnectContextDisplayL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe Text)+oAuth2ConsentRequestOpenIDConnectContextDisplayL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextDisplay -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextDisplay, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextDisplay+{-# INLINE oAuth2ConsentRequestOpenIDConnectContextDisplayL #-}++-- | 'oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims' Lens+oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe (Map.Map String AnyType))+oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims+{-# INLINE oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL #-}++-- | 'oAuth2ConsentRequestOpenIDConnectContextLoginHint' Lens+oAuth2ConsentRequestOpenIDConnectContextLoginHintL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe Text)+oAuth2ConsentRequestOpenIDConnectContextLoginHintL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextLoginHint -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextLoginHint, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextLoginHint+{-# INLINE oAuth2ConsentRequestOpenIDConnectContextLoginHintL #-}++-- | 'oAuth2ConsentRequestOpenIDConnectContextUiLocales' Lens+oAuth2ConsentRequestOpenIDConnectContextUiLocalesL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe [Text])+oAuth2ConsentRequestOpenIDConnectContextUiLocalesL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextUiLocales -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextUiLocales, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextUiLocales+{-# INLINE oAuth2ConsentRequestOpenIDConnectContextUiLocalesL #-}++++-- * OAuth2ConsentSession++-- | 'oAuth2ConsentSessionConsentRequest' Lens+oAuth2ConsentSessionConsentRequestL :: Lens_' OAuth2ConsentSession (Maybe OAuth2ConsentRequest)+oAuth2ConsentSessionConsentRequestL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionConsentRequest -> OAuth2ConsentSession { oAuth2ConsentSessionConsentRequest, ..} ) <$> f oAuth2ConsentSessionConsentRequest+{-# INLINE oAuth2ConsentSessionConsentRequestL #-}++-- | 'oAuth2ConsentSessionExpiresAt' Lens+oAuth2ConsentSessionExpiresAtL :: Lens_' OAuth2ConsentSession (Maybe OAuth2ConsentSessionExpiresAt)+oAuth2ConsentSessionExpiresAtL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionExpiresAt -> OAuth2ConsentSession { oAuth2ConsentSessionExpiresAt, ..} ) <$> f oAuth2ConsentSessionExpiresAt+{-# INLINE oAuth2ConsentSessionExpiresAtL #-}++-- | 'oAuth2ConsentSessionGrantAccessTokenAudience' Lens+oAuth2ConsentSessionGrantAccessTokenAudienceL :: Lens_' OAuth2ConsentSession (Maybe [Text])+oAuth2ConsentSessionGrantAccessTokenAudienceL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionGrantAccessTokenAudience -> OAuth2ConsentSession { oAuth2ConsentSessionGrantAccessTokenAudience, ..} ) <$> f oAuth2ConsentSessionGrantAccessTokenAudience+{-# INLINE oAuth2ConsentSessionGrantAccessTokenAudienceL #-}++-- | 'oAuth2ConsentSessionGrantScope' Lens+oAuth2ConsentSessionGrantScopeL :: Lens_' OAuth2ConsentSession (Maybe [Text])+oAuth2ConsentSessionGrantScopeL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionGrantScope -> OAuth2ConsentSession { oAuth2ConsentSessionGrantScope, ..} ) <$> f oAuth2ConsentSessionGrantScope+{-# INLINE oAuth2ConsentSessionGrantScopeL #-}++-- | 'oAuth2ConsentSessionHandledAt' Lens+oAuth2ConsentSessionHandledAtL :: Lens_' OAuth2ConsentSession (Maybe DateTime)+oAuth2ConsentSessionHandledAtL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionHandledAt -> OAuth2ConsentSession { oAuth2ConsentSessionHandledAt, ..} ) <$> f oAuth2ConsentSessionHandledAt+{-# INLINE oAuth2ConsentSessionHandledAtL #-}++-- | 'oAuth2ConsentSessionRemember' Lens+oAuth2ConsentSessionRememberL :: Lens_' OAuth2ConsentSession (Maybe Bool)+oAuth2ConsentSessionRememberL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionRemember -> OAuth2ConsentSession { oAuth2ConsentSessionRemember, ..} ) <$> f oAuth2ConsentSessionRemember+{-# INLINE oAuth2ConsentSessionRememberL #-}++-- | 'oAuth2ConsentSessionRememberFor' Lens+oAuth2ConsentSessionRememberForL :: Lens_' OAuth2ConsentSession (Maybe Integer)+oAuth2ConsentSessionRememberForL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionRememberFor -> OAuth2ConsentSession { oAuth2ConsentSessionRememberFor, ..} ) <$> f oAuth2ConsentSessionRememberFor+{-# INLINE oAuth2ConsentSessionRememberForL #-}++-- | 'oAuth2ConsentSessionSession' Lens+oAuth2ConsentSessionSessionL :: Lens_' OAuth2ConsentSession (Maybe AcceptOAuth2ConsentRequestSession)+oAuth2ConsentSessionSessionL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionSession -> OAuth2ConsentSession { oAuth2ConsentSessionSession, ..} ) <$> f oAuth2ConsentSessionSession+{-# INLINE oAuth2ConsentSessionSessionL #-}++++-- * OAuth2ConsentSessionExpiresAt++-- | 'oAuth2ConsentSessionExpiresAtAccessToken' Lens+oAuth2ConsentSessionExpiresAtAccessTokenL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)+oAuth2ConsentSessionExpiresAtAccessTokenL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtAccessToken -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtAccessToken, ..} ) <$> f oAuth2ConsentSessionExpiresAtAccessToken+{-# INLINE oAuth2ConsentSessionExpiresAtAccessTokenL #-}++-- | 'oAuth2ConsentSessionExpiresAtAuthorizeCode' Lens+oAuth2ConsentSessionExpiresAtAuthorizeCodeL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)+oAuth2ConsentSessionExpiresAtAuthorizeCodeL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtAuthorizeCode -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtAuthorizeCode, ..} ) <$> f oAuth2ConsentSessionExpiresAtAuthorizeCode+{-# INLINE oAuth2ConsentSessionExpiresAtAuthorizeCodeL #-}++-- | 'oAuth2ConsentSessionExpiresAtIdToken' Lens+oAuth2ConsentSessionExpiresAtIdTokenL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)+oAuth2ConsentSessionExpiresAtIdTokenL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtIdToken -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtIdToken, ..} ) <$> f oAuth2ConsentSessionExpiresAtIdToken+{-# INLINE oAuth2ConsentSessionExpiresAtIdTokenL #-}++-- | 'oAuth2ConsentSessionExpiresAtParContext' Lens+oAuth2ConsentSessionExpiresAtParContextL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)+oAuth2ConsentSessionExpiresAtParContextL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtParContext -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtParContext, ..} ) <$> f oAuth2ConsentSessionExpiresAtParContext+{-# INLINE oAuth2ConsentSessionExpiresAtParContextL #-}++-- | 'oAuth2ConsentSessionExpiresAtRefreshToken' Lens+oAuth2ConsentSessionExpiresAtRefreshTokenL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)+oAuth2ConsentSessionExpiresAtRefreshTokenL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtRefreshToken -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtRefreshToken, ..} ) <$> f oAuth2ConsentSessionExpiresAtRefreshToken+{-# INLINE oAuth2ConsentSessionExpiresAtRefreshTokenL #-}++++-- * OAuth2LoginRequest++-- | 'oAuth2LoginRequestChallenge' Lens+oAuth2LoginRequestChallengeL :: Lens_' OAuth2LoginRequest (Text)+oAuth2LoginRequestChallengeL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestChallenge -> OAuth2LoginRequest { oAuth2LoginRequestChallenge, ..} ) <$> f oAuth2LoginRequestChallenge+{-# INLINE oAuth2LoginRequestChallengeL #-}++-- | 'oAuth2LoginRequestClient' Lens+oAuth2LoginRequestClientL :: Lens_' OAuth2LoginRequest (OAuth2Client)+oAuth2LoginRequestClientL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestClient -> OAuth2LoginRequest { oAuth2LoginRequestClient, ..} ) <$> f oAuth2LoginRequestClient+{-# INLINE oAuth2LoginRequestClientL #-}++-- | 'oAuth2LoginRequestOidcContext' Lens+oAuth2LoginRequestOidcContextL :: Lens_' OAuth2LoginRequest (Maybe OAuth2ConsentRequestOpenIDConnectContext)+oAuth2LoginRequestOidcContextL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestOidcContext -> OAuth2LoginRequest { oAuth2LoginRequestOidcContext, ..} ) <$> f oAuth2LoginRequestOidcContext+{-# INLINE oAuth2LoginRequestOidcContextL #-}++-- | 'oAuth2LoginRequestRequestUrl' Lens+oAuth2LoginRequestRequestUrlL :: Lens_' OAuth2LoginRequest (Text)+oAuth2LoginRequestRequestUrlL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestRequestUrl -> OAuth2LoginRequest { oAuth2LoginRequestRequestUrl, ..} ) <$> f oAuth2LoginRequestRequestUrl+{-# INLINE oAuth2LoginRequestRequestUrlL #-}++-- | 'oAuth2LoginRequestRequestedAccessTokenAudience' Lens+oAuth2LoginRequestRequestedAccessTokenAudienceL :: Lens_' OAuth2LoginRequest ([Text])+oAuth2LoginRequestRequestedAccessTokenAudienceL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestRequestedAccessTokenAudience -> OAuth2LoginRequest { oAuth2LoginRequestRequestedAccessTokenAudience, ..} ) <$> f oAuth2LoginRequestRequestedAccessTokenAudience+{-# INLINE oAuth2LoginRequestRequestedAccessTokenAudienceL #-}++-- | 'oAuth2LoginRequestRequestedScope' Lens+oAuth2LoginRequestRequestedScopeL :: Lens_' OAuth2LoginRequest ([Text])+oAuth2LoginRequestRequestedScopeL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestRequestedScope -> OAuth2LoginRequest { oAuth2LoginRequestRequestedScope, ..} ) <$> f oAuth2LoginRequestRequestedScope+{-# INLINE oAuth2LoginRequestRequestedScopeL #-}++-- | 'oAuth2LoginRequestSessionId' Lens+oAuth2LoginRequestSessionIdL :: Lens_' OAuth2LoginRequest (Maybe Text)+oAuth2LoginRequestSessionIdL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestSessionId -> OAuth2LoginRequest { oAuth2LoginRequestSessionId, ..} ) <$> f oAuth2LoginRequestSessionId+{-# INLINE oAuth2LoginRequestSessionIdL #-}++-- | 'oAuth2LoginRequestSkip' Lens+oAuth2LoginRequestSkipL :: Lens_' OAuth2LoginRequest (Bool)+oAuth2LoginRequestSkipL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestSkip -> OAuth2LoginRequest { oAuth2LoginRequestSkip, ..} ) <$> f oAuth2LoginRequestSkip+{-# INLINE oAuth2LoginRequestSkipL #-}++-- | 'oAuth2LoginRequestSubject' Lens+oAuth2LoginRequestSubjectL :: Lens_' OAuth2LoginRequest (Text)+oAuth2LoginRequestSubjectL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestSubject -> OAuth2LoginRequest { oAuth2LoginRequestSubject, ..} ) <$> f oAuth2LoginRequestSubject+{-# INLINE oAuth2LoginRequestSubjectL #-}++++-- * OAuth2LogoutRequest++-- | 'oAuth2LogoutRequestChallenge' Lens+oAuth2LogoutRequestChallengeL :: Lens_' OAuth2LogoutRequest (Maybe Text)+oAuth2LogoutRequestChallengeL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestChallenge -> OAuth2LogoutRequest { oAuth2LogoutRequestChallenge, ..} ) <$> f oAuth2LogoutRequestChallenge+{-# INLINE oAuth2LogoutRequestChallengeL #-}++-- | 'oAuth2LogoutRequestClient' Lens+oAuth2LogoutRequestClientL :: Lens_' OAuth2LogoutRequest (Maybe OAuth2Client)+oAuth2LogoutRequestClientL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestClient -> OAuth2LogoutRequest { oAuth2LogoutRequestClient, ..} ) <$> f oAuth2LogoutRequestClient+{-# INLINE oAuth2LogoutRequestClientL #-}++-- | 'oAuth2LogoutRequestRequestUrl' Lens+oAuth2LogoutRequestRequestUrlL :: Lens_' OAuth2LogoutRequest (Maybe Text)+oAuth2LogoutRequestRequestUrlL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestRequestUrl -> OAuth2LogoutRequest { oAuth2LogoutRequestRequestUrl, ..} ) <$> f oAuth2LogoutRequestRequestUrl+{-# INLINE oAuth2LogoutRequestRequestUrlL #-}++-- | 'oAuth2LogoutRequestRpInitiated' Lens+oAuth2LogoutRequestRpInitiatedL :: Lens_' OAuth2LogoutRequest (Maybe Bool)+oAuth2LogoutRequestRpInitiatedL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestRpInitiated -> OAuth2LogoutRequest { oAuth2LogoutRequestRpInitiated, ..} ) <$> f oAuth2LogoutRequestRpInitiated+{-# INLINE oAuth2LogoutRequestRpInitiatedL #-}++-- | 'oAuth2LogoutRequestSid' Lens+oAuth2LogoutRequestSidL :: Lens_' OAuth2LogoutRequest (Maybe Text)+oAuth2LogoutRequestSidL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestSid -> OAuth2LogoutRequest { oAuth2LogoutRequestSid, ..} ) <$> f oAuth2LogoutRequestSid+{-# INLINE oAuth2LogoutRequestSidL #-}++-- | 'oAuth2LogoutRequestSubject' Lens+oAuth2LogoutRequestSubjectL :: Lens_' OAuth2LogoutRequest (Maybe Text)+oAuth2LogoutRequestSubjectL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestSubject -> OAuth2LogoutRequest { oAuth2LogoutRequestSubject, ..} ) <$> f oAuth2LogoutRequestSubject+{-# INLINE oAuth2LogoutRequestSubjectL #-}++++-- * OAuth2RedirectTo++-- | 'oAuth2RedirectToRedirectTo' Lens+oAuth2RedirectToRedirectToL :: Lens_' OAuth2RedirectTo (Text)+oAuth2RedirectToRedirectToL f OAuth2RedirectTo{..} = (\oAuth2RedirectToRedirectTo -> OAuth2RedirectTo { oAuth2RedirectToRedirectTo, ..} ) <$> f oAuth2RedirectToRedirectTo+{-# INLINE oAuth2RedirectToRedirectToL #-}++++-- * OAuth2TokenExchange++-- | 'oAuth2TokenExchangeAccessToken' Lens+oAuth2TokenExchangeAccessTokenL :: Lens_' OAuth2TokenExchange (Maybe Text)+oAuth2TokenExchangeAccessTokenL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeAccessToken -> OAuth2TokenExchange { oAuth2TokenExchangeAccessToken, ..} ) <$> f oAuth2TokenExchangeAccessToken+{-# INLINE oAuth2TokenExchangeAccessTokenL #-}++-- | 'oAuth2TokenExchangeExpiresIn' Lens+oAuth2TokenExchangeExpiresInL :: Lens_' OAuth2TokenExchange (Maybe Integer)+oAuth2TokenExchangeExpiresInL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeExpiresIn -> OAuth2TokenExchange { oAuth2TokenExchangeExpiresIn, ..} ) <$> f oAuth2TokenExchangeExpiresIn+{-# INLINE oAuth2TokenExchangeExpiresInL #-}++-- | 'oAuth2TokenExchangeIdToken' Lens+oAuth2TokenExchangeIdTokenL :: Lens_' OAuth2TokenExchange (Maybe Integer)+oAuth2TokenExchangeIdTokenL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeIdToken -> OAuth2TokenExchange { oAuth2TokenExchangeIdToken, ..} ) <$> f oAuth2TokenExchangeIdToken+{-# INLINE oAuth2TokenExchangeIdTokenL #-}++-- | 'oAuth2TokenExchangeRefreshToken' Lens+oAuth2TokenExchangeRefreshTokenL :: Lens_' OAuth2TokenExchange (Maybe Text)+oAuth2TokenExchangeRefreshTokenL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeRefreshToken -> OAuth2TokenExchange { oAuth2TokenExchangeRefreshToken, ..} ) <$> f oAuth2TokenExchangeRefreshToken+{-# INLINE oAuth2TokenExchangeRefreshTokenL #-}++-- | 'oAuth2TokenExchangeScope' Lens+oAuth2TokenExchangeScopeL :: Lens_' OAuth2TokenExchange (Maybe Text)+oAuth2TokenExchangeScopeL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeScope -> OAuth2TokenExchange { oAuth2TokenExchangeScope, ..} ) <$> f oAuth2TokenExchangeScope+{-# INLINE oAuth2TokenExchangeScopeL #-}++-- | 'oAuth2TokenExchangeTokenType' Lens+oAuth2TokenExchangeTokenTypeL :: Lens_' OAuth2TokenExchange (Maybe Text)+oAuth2TokenExchangeTokenTypeL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeTokenType -> OAuth2TokenExchange { oAuth2TokenExchangeTokenType, ..} ) <$> f oAuth2TokenExchangeTokenType+{-# INLINE oAuth2TokenExchangeTokenTypeL #-}++++-- * OidcConfiguration++-- | 'oidcConfigurationAuthorizationEndpoint' Lens+oidcConfigurationAuthorizationEndpointL :: Lens_' OidcConfiguration (Text)+oidcConfigurationAuthorizationEndpointL f OidcConfiguration{..} = (\oidcConfigurationAuthorizationEndpoint -> OidcConfiguration { oidcConfigurationAuthorizationEndpoint, ..} ) <$> f oidcConfigurationAuthorizationEndpoint+{-# INLINE oidcConfigurationAuthorizationEndpointL #-}++-- | 'oidcConfigurationBackchannelLogoutSessionSupported' Lens+oidcConfigurationBackchannelLogoutSessionSupportedL :: Lens_' OidcConfiguration (Maybe Bool)+oidcConfigurationBackchannelLogoutSessionSupportedL f OidcConfiguration{..} = (\oidcConfigurationBackchannelLogoutSessionSupported -> OidcConfiguration { oidcConfigurationBackchannelLogoutSessionSupported, ..} ) <$> f oidcConfigurationBackchannelLogoutSessionSupported+{-# INLINE oidcConfigurationBackchannelLogoutSessionSupportedL #-}++-- | 'oidcConfigurationBackchannelLogoutSupported' Lens+oidcConfigurationBackchannelLogoutSupportedL :: Lens_' OidcConfiguration (Maybe Bool)+oidcConfigurationBackchannelLogoutSupportedL f OidcConfiguration{..} = (\oidcConfigurationBackchannelLogoutSupported -> OidcConfiguration { oidcConfigurationBackchannelLogoutSupported, ..} ) <$> f oidcConfigurationBackchannelLogoutSupported+{-# INLINE oidcConfigurationBackchannelLogoutSupportedL #-}++-- | 'oidcConfigurationClaimsParameterSupported' Lens+oidcConfigurationClaimsParameterSupportedL :: Lens_' OidcConfiguration (Maybe Bool)+oidcConfigurationClaimsParameterSupportedL f OidcConfiguration{..} = (\oidcConfigurationClaimsParameterSupported -> OidcConfiguration { oidcConfigurationClaimsParameterSupported, ..} ) <$> f oidcConfigurationClaimsParameterSupported+{-# INLINE oidcConfigurationClaimsParameterSupportedL #-}++-- | 'oidcConfigurationClaimsSupported' Lens+oidcConfigurationClaimsSupportedL :: Lens_' OidcConfiguration (Maybe [Text])+oidcConfigurationClaimsSupportedL f OidcConfiguration{..} = (\oidcConfigurationClaimsSupported -> OidcConfiguration { oidcConfigurationClaimsSupported, ..} ) <$> f oidcConfigurationClaimsSupported+{-# INLINE oidcConfigurationClaimsSupportedL #-}++-- | 'oidcConfigurationCodeChallengeMethodsSupported' Lens+oidcConfigurationCodeChallengeMethodsSupportedL :: Lens_' OidcConfiguration (Maybe [Text])+oidcConfigurationCodeChallengeMethodsSupportedL f OidcConfiguration{..} = (\oidcConfigurationCodeChallengeMethodsSupported -> OidcConfiguration { oidcConfigurationCodeChallengeMethodsSupported, ..} ) <$> f oidcConfigurationCodeChallengeMethodsSupported+{-# INLINE oidcConfigurationCodeChallengeMethodsSupportedL #-}++-- | 'oidcConfigurationEndSessionEndpoint' Lens+oidcConfigurationEndSessionEndpointL :: Lens_' OidcConfiguration (Maybe Text)+oidcConfigurationEndSessionEndpointL f OidcConfiguration{..} = (\oidcConfigurationEndSessionEndpoint -> OidcConfiguration { oidcConfigurationEndSessionEndpoint, ..} ) <$> f oidcConfigurationEndSessionEndpoint+{-# INLINE oidcConfigurationEndSessionEndpointL #-}++-- | 'oidcConfigurationFrontchannelLogoutSessionSupported' Lens+oidcConfigurationFrontchannelLogoutSessionSupportedL :: Lens_' OidcConfiguration (Maybe Bool)+oidcConfigurationFrontchannelLogoutSessionSupportedL f OidcConfiguration{..} = (\oidcConfigurationFrontchannelLogoutSessionSupported -> OidcConfiguration { oidcConfigurationFrontchannelLogoutSessionSupported, ..} ) <$> f oidcConfigurationFrontchannelLogoutSessionSupported+{-# INLINE oidcConfigurationFrontchannelLogoutSessionSupportedL #-}++-- | 'oidcConfigurationFrontchannelLogoutSupported' Lens+oidcConfigurationFrontchannelLogoutSupportedL :: Lens_' OidcConfiguration (Maybe Bool)+oidcConfigurationFrontchannelLogoutSupportedL f OidcConfiguration{..} = (\oidcConfigurationFrontchannelLogoutSupported -> OidcConfiguration { oidcConfigurationFrontchannelLogoutSupported, ..} ) <$> f oidcConfigurationFrontchannelLogoutSupported+{-# INLINE oidcConfigurationFrontchannelLogoutSupportedL #-}++-- | 'oidcConfigurationGrantTypesSupported' Lens+oidcConfigurationGrantTypesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])+oidcConfigurationGrantTypesSupportedL f OidcConfiguration{..} = (\oidcConfigurationGrantTypesSupported -> OidcConfiguration { oidcConfigurationGrantTypesSupported, ..} ) <$> f oidcConfigurationGrantTypesSupported+{-# INLINE oidcConfigurationGrantTypesSupportedL #-}++-- | 'oidcConfigurationIdTokenSignedResponseAlg' Lens+oidcConfigurationIdTokenSignedResponseAlgL :: Lens_' OidcConfiguration ([Text])+oidcConfigurationIdTokenSignedResponseAlgL f OidcConfiguration{..} = (\oidcConfigurationIdTokenSignedResponseAlg -> OidcConfiguration { oidcConfigurationIdTokenSignedResponseAlg, ..} ) <$> f oidcConfigurationIdTokenSignedResponseAlg+{-# INLINE oidcConfigurationIdTokenSignedResponseAlgL #-}++-- | 'oidcConfigurationIdTokenSigningAlgValuesSupported' Lens+oidcConfigurationIdTokenSigningAlgValuesSupportedL :: Lens_' OidcConfiguration ([Text])+oidcConfigurationIdTokenSigningAlgValuesSupportedL f OidcConfiguration{..} = (\oidcConfigurationIdTokenSigningAlgValuesSupported -> OidcConfiguration { oidcConfigurationIdTokenSigningAlgValuesSupported, ..} ) <$> f oidcConfigurationIdTokenSigningAlgValuesSupported+{-# INLINE oidcConfigurationIdTokenSigningAlgValuesSupportedL #-}++-- | 'oidcConfigurationIssuer' Lens+oidcConfigurationIssuerL :: Lens_' OidcConfiguration (Text)+oidcConfigurationIssuerL f OidcConfiguration{..} = (\oidcConfigurationIssuer -> OidcConfiguration { oidcConfigurationIssuer, ..} ) <$> f oidcConfigurationIssuer+{-# INLINE oidcConfigurationIssuerL #-}++-- | 'oidcConfigurationJwksUri' Lens+oidcConfigurationJwksUriL :: Lens_' OidcConfiguration (Text)+oidcConfigurationJwksUriL f OidcConfiguration{..} = (\oidcConfigurationJwksUri -> OidcConfiguration { oidcConfigurationJwksUri, ..} ) <$> f oidcConfigurationJwksUri+{-# INLINE oidcConfigurationJwksUriL #-}++-- | 'oidcConfigurationRegistrationEndpoint' Lens+oidcConfigurationRegistrationEndpointL :: Lens_' OidcConfiguration (Maybe Text)+oidcConfigurationRegistrationEndpointL f OidcConfiguration{..} = (\oidcConfigurationRegistrationEndpoint -> OidcConfiguration { oidcConfigurationRegistrationEndpoint, ..} ) <$> f oidcConfigurationRegistrationEndpoint+{-# INLINE oidcConfigurationRegistrationEndpointL #-}++-- | 'oidcConfigurationRequestObjectSigningAlgValuesSupported' Lens+oidcConfigurationRequestObjectSigningAlgValuesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])+oidcConfigurationRequestObjectSigningAlgValuesSupportedL f OidcConfiguration{..} = (\oidcConfigurationRequestObjectSigningAlgValuesSupported -> OidcConfiguration { oidcConfigurationRequestObjectSigningAlgValuesSupported, ..} ) <$> f oidcConfigurationRequestObjectSigningAlgValuesSupported+{-# INLINE oidcConfigurationRequestObjectSigningAlgValuesSupportedL #-}++-- | 'oidcConfigurationRequestParameterSupported' Lens+oidcConfigurationRequestParameterSupportedL :: Lens_' OidcConfiguration (Maybe Bool)+oidcConfigurationRequestParameterSupportedL f OidcConfiguration{..} = (\oidcConfigurationRequestParameterSupported -> OidcConfiguration { oidcConfigurationRequestParameterSupported, ..} ) <$> f oidcConfigurationRequestParameterSupported+{-# INLINE oidcConfigurationRequestParameterSupportedL #-}++-- | 'oidcConfigurationRequestUriParameterSupported' Lens+oidcConfigurationRequestUriParameterSupportedL :: Lens_' OidcConfiguration (Maybe Bool)+oidcConfigurationRequestUriParameterSupportedL f OidcConfiguration{..} = (\oidcConfigurationRequestUriParameterSupported -> OidcConfiguration { oidcConfigurationRequestUriParameterSupported, ..} ) <$> f oidcConfigurationRequestUriParameterSupported+{-# INLINE oidcConfigurationRequestUriParameterSupportedL #-}++-- | 'oidcConfigurationRequireRequestUriRegistration' Lens+oidcConfigurationRequireRequestUriRegistrationL :: Lens_' OidcConfiguration (Maybe Bool)+oidcConfigurationRequireRequestUriRegistrationL f OidcConfiguration{..} = (\oidcConfigurationRequireRequestUriRegistration -> OidcConfiguration { oidcConfigurationRequireRequestUriRegistration, ..} ) <$> f oidcConfigurationRequireRequestUriRegistration+{-# INLINE oidcConfigurationRequireRequestUriRegistrationL #-}++-- | 'oidcConfigurationResponseModesSupported' Lens+oidcConfigurationResponseModesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])+oidcConfigurationResponseModesSupportedL f OidcConfiguration{..} = (\oidcConfigurationResponseModesSupported -> OidcConfiguration { oidcConfigurationResponseModesSupported, ..} ) <$> f oidcConfigurationResponseModesSupported+{-# INLINE oidcConfigurationResponseModesSupportedL #-}++-- | 'oidcConfigurationResponseTypesSupported' Lens+oidcConfigurationResponseTypesSupportedL :: Lens_' OidcConfiguration ([Text])+oidcConfigurationResponseTypesSupportedL f OidcConfiguration{..} = (\oidcConfigurationResponseTypesSupported -> OidcConfiguration { oidcConfigurationResponseTypesSupported, ..} ) <$> f oidcConfigurationResponseTypesSupported+{-# INLINE oidcConfigurationResponseTypesSupportedL #-}++-- | 'oidcConfigurationRevocationEndpoint' Lens+oidcConfigurationRevocationEndpointL :: Lens_' OidcConfiguration (Maybe Text)+oidcConfigurationRevocationEndpointL f OidcConfiguration{..} = (\oidcConfigurationRevocationEndpoint -> OidcConfiguration { oidcConfigurationRevocationEndpoint, ..} ) <$> f oidcConfigurationRevocationEndpoint+{-# INLINE oidcConfigurationRevocationEndpointL #-}++-- | 'oidcConfigurationScopesSupported' Lens+oidcConfigurationScopesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])+oidcConfigurationScopesSupportedL f OidcConfiguration{..} = (\oidcConfigurationScopesSupported -> OidcConfiguration { oidcConfigurationScopesSupported, ..} ) <$> f oidcConfigurationScopesSupported+{-# INLINE oidcConfigurationScopesSupportedL #-}++-- | 'oidcConfigurationSubjectTypesSupported' Lens+oidcConfigurationSubjectTypesSupportedL :: Lens_' OidcConfiguration ([Text])+oidcConfigurationSubjectTypesSupportedL f OidcConfiguration{..} = (\oidcConfigurationSubjectTypesSupported -> OidcConfiguration { oidcConfigurationSubjectTypesSupported, ..} ) <$> f oidcConfigurationSubjectTypesSupported+{-# INLINE oidcConfigurationSubjectTypesSupportedL #-}++-- | 'oidcConfigurationTokenEndpoint' Lens+oidcConfigurationTokenEndpointL :: Lens_' OidcConfiguration (Text)+oidcConfigurationTokenEndpointL f OidcConfiguration{..} = (\oidcConfigurationTokenEndpoint -> OidcConfiguration { oidcConfigurationTokenEndpoint, ..} ) <$> f oidcConfigurationTokenEndpoint+{-# INLINE oidcConfigurationTokenEndpointL #-}++-- | 'oidcConfigurationTokenEndpointAuthMethodsSupported' Lens+oidcConfigurationTokenEndpointAuthMethodsSupportedL :: Lens_' OidcConfiguration (Maybe [Text])+oidcConfigurationTokenEndpointAuthMethodsSupportedL f OidcConfiguration{..} = (\oidcConfigurationTokenEndpointAuthMethodsSupported -> OidcConfiguration { oidcConfigurationTokenEndpointAuthMethodsSupported, ..} ) <$> f oidcConfigurationTokenEndpointAuthMethodsSupported+{-# INLINE oidcConfigurationTokenEndpointAuthMethodsSupportedL #-}++-- | 'oidcConfigurationUserinfoEndpoint' Lens+oidcConfigurationUserinfoEndpointL :: Lens_' OidcConfiguration (Maybe Text)+oidcConfigurationUserinfoEndpointL f OidcConfiguration{..} = (\oidcConfigurationUserinfoEndpoint -> OidcConfiguration { oidcConfigurationUserinfoEndpoint, ..} ) <$> f oidcConfigurationUserinfoEndpoint+{-# INLINE oidcConfigurationUserinfoEndpointL #-}++-- | 'oidcConfigurationUserinfoSignedResponseAlg' Lens+oidcConfigurationUserinfoSignedResponseAlgL :: Lens_' OidcConfiguration ([Text])+oidcConfigurationUserinfoSignedResponseAlgL f OidcConfiguration{..} = (\oidcConfigurationUserinfoSignedResponseAlg -> OidcConfiguration { oidcConfigurationUserinfoSignedResponseAlg, ..} ) <$> f oidcConfigurationUserinfoSignedResponseAlg+{-# INLINE oidcConfigurationUserinfoSignedResponseAlgL #-}++-- | 'oidcConfigurationUserinfoSigningAlgValuesSupported' Lens+oidcConfigurationUserinfoSigningAlgValuesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])+oidcConfigurationUserinfoSigningAlgValuesSupportedL f OidcConfiguration{..} = (\oidcConfigurationUserinfoSigningAlgValuesSupported -> OidcConfiguration { oidcConfigurationUserinfoSigningAlgValuesSupported, ..} ) <$> f oidcConfigurationUserinfoSigningAlgValuesSupported+{-# INLINE oidcConfigurationUserinfoSigningAlgValuesSupportedL #-}++++-- * OidcUserInfo++-- | 'oidcUserInfoBirthdate' Lens+oidcUserInfoBirthdateL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoBirthdateL f OidcUserInfo{..} = (\oidcUserInfoBirthdate -> OidcUserInfo { oidcUserInfoBirthdate, ..} ) <$> f oidcUserInfoBirthdate+{-# INLINE oidcUserInfoBirthdateL #-}++-- | 'oidcUserInfoEmail' Lens+oidcUserInfoEmailL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoEmailL f OidcUserInfo{..} = (\oidcUserInfoEmail -> OidcUserInfo { oidcUserInfoEmail, ..} ) <$> f oidcUserInfoEmail+{-# INLINE oidcUserInfoEmailL #-}++-- | 'oidcUserInfoEmailVerified' Lens+oidcUserInfoEmailVerifiedL :: Lens_' OidcUserInfo (Maybe Bool)+oidcUserInfoEmailVerifiedL f OidcUserInfo{..} = (\oidcUserInfoEmailVerified -> OidcUserInfo { oidcUserInfoEmailVerified, ..} ) <$> f oidcUserInfoEmailVerified+{-# INLINE oidcUserInfoEmailVerifiedL #-}++-- | 'oidcUserInfoFamilyName' Lens+oidcUserInfoFamilyNameL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoFamilyNameL f OidcUserInfo{..} = (\oidcUserInfoFamilyName -> OidcUserInfo { oidcUserInfoFamilyName, ..} ) <$> f oidcUserInfoFamilyName+{-# INLINE oidcUserInfoFamilyNameL #-}++-- | 'oidcUserInfoGender' Lens+oidcUserInfoGenderL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoGenderL f OidcUserInfo{..} = (\oidcUserInfoGender -> OidcUserInfo { oidcUserInfoGender, ..} ) <$> f oidcUserInfoGender+{-# INLINE oidcUserInfoGenderL #-}++-- | 'oidcUserInfoGivenName' Lens+oidcUserInfoGivenNameL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoGivenNameL f OidcUserInfo{..} = (\oidcUserInfoGivenName -> OidcUserInfo { oidcUserInfoGivenName, ..} ) <$> f oidcUserInfoGivenName+{-# INLINE oidcUserInfoGivenNameL #-}++-- | 'oidcUserInfoLocale' Lens+oidcUserInfoLocaleL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoLocaleL f OidcUserInfo{..} = (\oidcUserInfoLocale -> OidcUserInfo { oidcUserInfoLocale, ..} ) <$> f oidcUserInfoLocale+{-# INLINE oidcUserInfoLocaleL #-}++-- | 'oidcUserInfoMiddleName' Lens+oidcUserInfoMiddleNameL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoMiddleNameL f OidcUserInfo{..} = (\oidcUserInfoMiddleName -> OidcUserInfo { oidcUserInfoMiddleName, ..} ) <$> f oidcUserInfoMiddleName+{-# INLINE oidcUserInfoMiddleNameL #-}++-- | 'oidcUserInfoName' Lens+oidcUserInfoNameL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoNameL f OidcUserInfo{..} = (\oidcUserInfoName -> OidcUserInfo { oidcUserInfoName, ..} ) <$> f oidcUserInfoName+{-# INLINE oidcUserInfoNameL #-}++-- | 'oidcUserInfoNickname' Lens+oidcUserInfoNicknameL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoNicknameL f OidcUserInfo{..} = (\oidcUserInfoNickname -> OidcUserInfo { oidcUserInfoNickname, ..} ) <$> f oidcUserInfoNickname+{-# INLINE oidcUserInfoNicknameL #-}++-- | 'oidcUserInfoPhoneNumber' Lens+oidcUserInfoPhoneNumberL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoPhoneNumberL f OidcUserInfo{..} = (\oidcUserInfoPhoneNumber -> OidcUserInfo { oidcUserInfoPhoneNumber, ..} ) <$> f oidcUserInfoPhoneNumber+{-# INLINE oidcUserInfoPhoneNumberL #-}++-- | 'oidcUserInfoPhoneNumberVerified' Lens+oidcUserInfoPhoneNumberVerifiedL :: Lens_' OidcUserInfo (Maybe Bool)+oidcUserInfoPhoneNumberVerifiedL f OidcUserInfo{..} = (\oidcUserInfoPhoneNumberVerified -> OidcUserInfo { oidcUserInfoPhoneNumberVerified, ..} ) <$> f oidcUserInfoPhoneNumberVerified+{-# INLINE oidcUserInfoPhoneNumberVerifiedL #-}++-- | 'oidcUserInfoPicture' Lens+oidcUserInfoPictureL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoPictureL f OidcUserInfo{..} = (\oidcUserInfoPicture -> OidcUserInfo { oidcUserInfoPicture, ..} ) <$> f oidcUserInfoPicture+{-# INLINE oidcUserInfoPictureL #-}++-- | 'oidcUserInfoPreferredUsername' Lens+oidcUserInfoPreferredUsernameL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoPreferredUsernameL f OidcUserInfo{..} = (\oidcUserInfoPreferredUsername -> OidcUserInfo { oidcUserInfoPreferredUsername, ..} ) <$> f oidcUserInfoPreferredUsername+{-# INLINE oidcUserInfoPreferredUsernameL #-}++-- | 'oidcUserInfoProfile' Lens+oidcUserInfoProfileL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoProfileL f OidcUserInfo{..} = (\oidcUserInfoProfile -> OidcUserInfo { oidcUserInfoProfile, ..} ) <$> f oidcUserInfoProfile+{-# INLINE oidcUserInfoProfileL #-}++-- | 'oidcUserInfoSub' Lens+oidcUserInfoSubL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoSubL f OidcUserInfo{..} = (\oidcUserInfoSub -> OidcUserInfo { oidcUserInfoSub, ..} ) <$> f oidcUserInfoSub+{-# INLINE oidcUserInfoSubL #-}++-- | 'oidcUserInfoUpdatedAt' Lens+oidcUserInfoUpdatedAtL :: Lens_' OidcUserInfo (Maybe Integer)+oidcUserInfoUpdatedAtL f OidcUserInfo{..} = (\oidcUserInfoUpdatedAt -> OidcUserInfo { oidcUserInfoUpdatedAt, ..} ) <$> f oidcUserInfoUpdatedAt+{-# INLINE oidcUserInfoUpdatedAtL #-}++-- | 'oidcUserInfoWebsite' Lens+oidcUserInfoWebsiteL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoWebsiteL f OidcUserInfo{..} = (\oidcUserInfoWebsite -> OidcUserInfo { oidcUserInfoWebsite, ..} ) <$> f oidcUserInfoWebsite+{-# INLINE oidcUserInfoWebsiteL #-}++-- | 'oidcUserInfoZoneinfo' Lens+oidcUserInfoZoneinfoL :: Lens_' OidcUserInfo (Maybe Text)+oidcUserInfoZoneinfoL f OidcUserInfo{..} = (\oidcUserInfoZoneinfo -> OidcUserInfo { oidcUserInfoZoneinfo, ..} ) <$> f oidcUserInfoZoneinfo+{-# INLINE oidcUserInfoZoneinfoL #-}++++-- * Pagination++-- | 'paginationPageSize' Lens+paginationPageSizeL :: Lens_' Pagination (Maybe Integer)+paginationPageSizeL f Pagination{..} = (\paginationPageSize -> Pagination { paginationPageSize, ..} ) <$> f paginationPageSize+{-# INLINE paginationPageSizeL #-}++-- | 'paginationPageToken' Lens+paginationPageTokenL :: Lens_' Pagination (Maybe Text)+paginationPageTokenL f Pagination{..} = (\paginationPageToken -> Pagination { paginationPageToken, ..} ) <$> f paginationPageToken+{-# INLINE paginationPageTokenL #-}++++-- * PaginationHeaders++-- | 'paginationHeadersLink' Lens+paginationHeadersLinkL :: Lens_' PaginationHeaders (Maybe Text)+paginationHeadersLinkL f PaginationHeaders{..} = (\paginationHeadersLink -> PaginationHeaders { paginationHeadersLink, ..} ) <$> f paginationHeadersLink+{-# INLINE paginationHeadersLinkL #-}++-- | 'paginationHeadersXTotalCount' Lens+paginationHeadersXTotalCountL :: Lens_' PaginationHeaders (Maybe Text)+paginationHeadersXTotalCountL f PaginationHeaders{..} = (\paginationHeadersXTotalCount -> PaginationHeaders { paginationHeadersXTotalCount, ..} ) <$> f paginationHeadersXTotalCount+{-# INLINE paginationHeadersXTotalCountL #-}++++-- * RejectOAuth2Request++-- | 'rejectOAuth2RequestError' Lens+rejectOAuth2RequestErrorL :: Lens_' RejectOAuth2Request (Maybe Text)+rejectOAuth2RequestErrorL f RejectOAuth2Request{..} = (\rejectOAuth2RequestError -> RejectOAuth2Request { rejectOAuth2RequestError, ..} ) <$> f rejectOAuth2RequestError+{-# INLINE rejectOAuth2RequestErrorL #-}++-- | 'rejectOAuth2RequestErrorDebug' Lens+rejectOAuth2RequestErrorDebugL :: Lens_' RejectOAuth2Request (Maybe Text)+rejectOAuth2RequestErrorDebugL f RejectOAuth2Request{..} = (\rejectOAuth2RequestErrorDebug -> RejectOAuth2Request { rejectOAuth2RequestErrorDebug, ..} ) <$> f rejectOAuth2RequestErrorDebug+{-# INLINE rejectOAuth2RequestErrorDebugL #-}++-- | 'rejectOAuth2RequestErrorDescription' Lens+rejectOAuth2RequestErrorDescriptionL :: Lens_' RejectOAuth2Request (Maybe Text)+rejectOAuth2RequestErrorDescriptionL f RejectOAuth2Request{..} = (\rejectOAuth2RequestErrorDescription -> RejectOAuth2Request { rejectOAuth2RequestErrorDescription, ..} ) <$> f rejectOAuth2RequestErrorDescription+{-# INLINE rejectOAuth2RequestErrorDescriptionL #-}++-- | 'rejectOAuth2RequestErrorHint' Lens+rejectOAuth2RequestErrorHintL :: Lens_' RejectOAuth2Request (Maybe Text)+rejectOAuth2RequestErrorHintL f RejectOAuth2Request{..} = (\rejectOAuth2RequestErrorHint -> RejectOAuth2Request { rejectOAuth2RequestErrorHint, ..} ) <$> f rejectOAuth2RequestErrorHint+{-# INLINE rejectOAuth2RequestErrorHintL #-}++-- | 'rejectOAuth2RequestStatusCode' Lens+rejectOAuth2RequestStatusCodeL :: Lens_' RejectOAuth2Request (Maybe Integer)+rejectOAuth2RequestStatusCodeL f RejectOAuth2Request{..} = (\rejectOAuth2RequestStatusCode -> RejectOAuth2Request { rejectOAuth2RequestStatusCode, ..} ) <$> f rejectOAuth2RequestStatusCode+{-# INLINE rejectOAuth2RequestStatusCodeL #-}++++-- * TokenPagination++-- | 'tokenPaginationPageSize' Lens+tokenPaginationPageSizeL :: Lens_' TokenPagination (Maybe Integer)+tokenPaginationPageSizeL f TokenPagination{..} = (\tokenPaginationPageSize -> TokenPagination { tokenPaginationPageSize, ..} ) <$> f tokenPaginationPageSize+{-# INLINE tokenPaginationPageSizeL #-}++-- | 'tokenPaginationPageToken' Lens+tokenPaginationPageTokenL :: Lens_' TokenPagination (Maybe Text)+tokenPaginationPageTokenL f TokenPagination{..} = (\tokenPaginationPageToken -> TokenPagination { tokenPaginationPageToken, ..} ) <$> f tokenPaginationPageToken+{-# INLINE tokenPaginationPageTokenL #-}++++-- * TokenPaginationHeaders++-- | 'tokenPaginationHeadersLink' Lens+tokenPaginationHeadersLinkL :: Lens_' TokenPaginationHeaders (Maybe Text)+tokenPaginationHeadersLinkL f TokenPaginationHeaders{..} = (\tokenPaginationHeadersLink -> TokenPaginationHeaders { tokenPaginationHeadersLink, ..} ) <$> f tokenPaginationHeadersLink+{-# INLINE tokenPaginationHeadersLinkL #-}++-- | 'tokenPaginationHeadersXTotalCount' Lens+tokenPaginationHeadersXTotalCountL :: Lens_' TokenPaginationHeaders (Maybe Text)+tokenPaginationHeadersXTotalCountL f TokenPaginationHeaders{..} = (\tokenPaginationHeadersXTotalCount -> TokenPaginationHeaders { tokenPaginationHeadersXTotalCount, ..} ) <$> f tokenPaginationHeadersXTotalCount+{-# INLINE tokenPaginationHeadersXTotalCountL #-}++++-- * TokenPaginationRequestParameters++-- | 'tokenPaginationRequestParametersPageSize' Lens+tokenPaginationRequestParametersPageSizeL :: Lens_' TokenPaginationRequestParameters (Maybe Integer)+tokenPaginationRequestParametersPageSizeL f TokenPaginationRequestParameters{..} = (\tokenPaginationRequestParametersPageSize -> TokenPaginationRequestParameters { tokenPaginationRequestParametersPageSize, ..} ) <$> f tokenPaginationRequestParametersPageSize+{-# INLINE tokenPaginationRequestParametersPageSizeL #-}++-- | 'tokenPaginationRequestParametersPageToken' Lens+tokenPaginationRequestParametersPageTokenL :: Lens_' TokenPaginationRequestParameters (Maybe Text)+tokenPaginationRequestParametersPageTokenL f TokenPaginationRequestParameters{..} = (\tokenPaginationRequestParametersPageToken -> TokenPaginationRequestParameters { tokenPaginationRequestParametersPageToken, ..} ) <$> f tokenPaginationRequestParametersPageToken+{-# INLINE tokenPaginationRequestParametersPageTokenL #-}++++-- * TokenPaginationResponseHeaders++-- | 'tokenPaginationResponseHeadersLink' Lens+tokenPaginationResponseHeadersLinkL :: Lens_' TokenPaginationResponseHeaders (Maybe Text)+tokenPaginationResponseHeadersLinkL f TokenPaginationResponseHeaders{..} = (\tokenPaginationResponseHeadersLink -> TokenPaginationResponseHeaders { tokenPaginationResponseHeadersLink, ..} ) <$> f tokenPaginationResponseHeadersLink+{-# INLINE tokenPaginationResponseHeadersLinkL #-}++-- | 'tokenPaginationResponseHeadersXTotalCount' Lens+tokenPaginationResponseHeadersXTotalCountL :: Lens_' TokenPaginationResponseHeaders (Maybe Integer)+tokenPaginationResponseHeadersXTotalCountL f TokenPaginationResponseHeaders{..} = (\tokenPaginationResponseHeadersXTotalCount -> TokenPaginationResponseHeaders { tokenPaginationResponseHeadersXTotalCount, ..} ) <$> f tokenPaginationResponseHeadersXTotalCount+{-# INLINE tokenPaginationResponseHeadersXTotalCountL #-}++++-- * TrustOAuth2JwtGrantIssuer++-- | 'trustOAuth2JwtGrantIssuerAllowAnySubject' Lens+trustOAuth2JwtGrantIssuerAllowAnySubjectL :: Lens_' TrustOAuth2JwtGrantIssuer (Maybe Bool)+trustOAuth2JwtGrantIssuerAllowAnySubjectL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerAllowAnySubject -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerAllowAnySubject, ..} ) <$> f trustOAuth2JwtGrantIssuerAllowAnySubject+{-# INLINE trustOAuth2JwtGrantIssuerAllowAnySubjectL #-}++-- | 'trustOAuth2JwtGrantIssuerExpiresAt' Lens+trustOAuth2JwtGrantIssuerExpiresAtL :: Lens_' TrustOAuth2JwtGrantIssuer (DateTime)+trustOAuth2JwtGrantIssuerExpiresAtL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerExpiresAt -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerExpiresAt, ..} ) <$> f trustOAuth2JwtGrantIssuerExpiresAt+{-# INLINE trustOAuth2JwtGrantIssuerExpiresAtL #-}++-- | 'trustOAuth2JwtGrantIssuerIssuer' Lens+trustOAuth2JwtGrantIssuerIssuerL :: Lens_' TrustOAuth2JwtGrantIssuer (Text)+trustOAuth2JwtGrantIssuerIssuerL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerIssuer -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerIssuer, ..} ) <$> f trustOAuth2JwtGrantIssuerIssuer+{-# INLINE trustOAuth2JwtGrantIssuerIssuerL #-}++-- | 'trustOAuth2JwtGrantIssuerJwk' Lens+trustOAuth2JwtGrantIssuerJwkL :: Lens_' TrustOAuth2JwtGrantIssuer (JsonWebKey)+trustOAuth2JwtGrantIssuerJwkL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerJwk -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerJwk, ..} ) <$> f trustOAuth2JwtGrantIssuerJwk+{-# INLINE trustOAuth2JwtGrantIssuerJwkL #-}++-- | 'trustOAuth2JwtGrantIssuerScope' Lens+trustOAuth2JwtGrantIssuerScopeL :: Lens_' TrustOAuth2JwtGrantIssuer ([Text])+trustOAuth2JwtGrantIssuerScopeL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerScope -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerScope, ..} ) <$> f trustOAuth2JwtGrantIssuerScope+{-# INLINE trustOAuth2JwtGrantIssuerScopeL #-}++-- | 'trustOAuth2JwtGrantIssuerSubject' Lens+trustOAuth2JwtGrantIssuerSubjectL :: Lens_' TrustOAuth2JwtGrantIssuer (Maybe Text)+trustOAuth2JwtGrantIssuerSubjectL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerSubject -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerSubject, ..} ) <$> f trustOAuth2JwtGrantIssuerSubject+{-# INLINE trustOAuth2JwtGrantIssuerSubjectL #-}++++-- * TrustedOAuth2JwtGrantIssuer++-- | 'trustedOAuth2JwtGrantIssuerAllowAnySubject' Lens+trustedOAuth2JwtGrantIssuerAllowAnySubjectL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe Bool)+trustedOAuth2JwtGrantIssuerAllowAnySubjectL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerAllowAnySubject -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerAllowAnySubject, ..} ) <$> f trustedOAuth2JwtGrantIssuerAllowAnySubject+{-# INLINE trustedOAuth2JwtGrantIssuerAllowAnySubjectL #-}++-- | 'trustedOAuth2JwtGrantIssuerCreatedAt' Lens+trustedOAuth2JwtGrantIssuerCreatedAtL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe DateTime)+trustedOAuth2JwtGrantIssuerCreatedAtL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerCreatedAt -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerCreatedAt, ..} ) <$> f trustedOAuth2JwtGrantIssuerCreatedAt+{-# INLINE trustedOAuth2JwtGrantIssuerCreatedAtL #-}++-- | 'trustedOAuth2JwtGrantIssuerExpiresAt' Lens+trustedOAuth2JwtGrantIssuerExpiresAtL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe DateTime)+trustedOAuth2JwtGrantIssuerExpiresAtL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerExpiresAt -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerExpiresAt, ..} ) <$> f trustedOAuth2JwtGrantIssuerExpiresAt+{-# INLINE trustedOAuth2JwtGrantIssuerExpiresAtL #-}++-- | 'trustedOAuth2JwtGrantIssuerId' Lens+trustedOAuth2JwtGrantIssuerIdL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe Text)+trustedOAuth2JwtGrantIssuerIdL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerId -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerId, ..} ) <$> f trustedOAuth2JwtGrantIssuerId+{-# INLINE trustedOAuth2JwtGrantIssuerIdL #-}++-- | 'trustedOAuth2JwtGrantIssuerIssuer' Lens+trustedOAuth2JwtGrantIssuerIssuerL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe Text)+trustedOAuth2JwtGrantIssuerIssuerL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerIssuer -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerIssuer, ..} ) <$> f trustedOAuth2JwtGrantIssuerIssuer+{-# INLINE trustedOAuth2JwtGrantIssuerIssuerL #-}++-- | 'trustedOAuth2JwtGrantIssuerPublicKey' Lens+trustedOAuth2JwtGrantIssuerPublicKeyL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe TrustedOAuth2JwtGrantJsonWebKey)+trustedOAuth2JwtGrantIssuerPublicKeyL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerPublicKey -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerPublicKey, ..} ) <$> f trustedOAuth2JwtGrantIssuerPublicKey+{-# INLINE trustedOAuth2JwtGrantIssuerPublicKeyL #-}++-- | 'trustedOAuth2JwtGrantIssuerScope' Lens+trustedOAuth2JwtGrantIssuerScopeL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe [Text])+trustedOAuth2JwtGrantIssuerScopeL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerScope -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerScope, ..} ) <$> f trustedOAuth2JwtGrantIssuerScope+{-# INLINE trustedOAuth2JwtGrantIssuerScopeL #-}++-- | 'trustedOAuth2JwtGrantIssuerSubject' Lens+trustedOAuth2JwtGrantIssuerSubjectL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe Text)+trustedOAuth2JwtGrantIssuerSubjectL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerSubject -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerSubject, ..} ) <$> f trustedOAuth2JwtGrantIssuerSubject+{-# INLINE trustedOAuth2JwtGrantIssuerSubjectL #-}++++-- * TrustedOAuth2JwtGrantJsonWebKey++-- | 'trustedOAuth2JwtGrantJsonWebKeyKid' Lens+trustedOAuth2JwtGrantJsonWebKeyKidL :: Lens_' TrustedOAuth2JwtGrantJsonWebKey (Maybe Text)+trustedOAuth2JwtGrantJsonWebKeyKidL f TrustedOAuth2JwtGrantJsonWebKey{..} = (\trustedOAuth2JwtGrantJsonWebKeyKid -> TrustedOAuth2JwtGrantJsonWebKey { trustedOAuth2JwtGrantJsonWebKeyKid, ..} ) <$> f trustedOAuth2JwtGrantJsonWebKeyKid+{-# INLINE trustedOAuth2JwtGrantJsonWebKeyKidL #-}++-- | 'trustedOAuth2JwtGrantJsonWebKeySet' Lens+trustedOAuth2JwtGrantJsonWebKeySetL :: Lens_' TrustedOAuth2JwtGrantJsonWebKey (Maybe Text)+trustedOAuth2JwtGrantJsonWebKeySetL f TrustedOAuth2JwtGrantJsonWebKey{..} = (\trustedOAuth2JwtGrantJsonWebKeySet -> TrustedOAuth2JwtGrantJsonWebKey { trustedOAuth2JwtGrantJsonWebKeySet, ..} ) <$> f trustedOAuth2JwtGrantJsonWebKeySet+{-# INLINE trustedOAuth2JwtGrantJsonWebKeySetL #-}++++-- * Version++-- | 'versionVersion' Lens+versionVersionL :: Lens_' Version (Maybe Text)+versionVersionL f Version{..} = (\versionVersion -> Version { versionVersion, ..} ) <$> f versionVersion+{-# INLINE versionVersionL #-}++
− lib/OryHydra.hs 
@@ -1,31 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra--}--module OryHydra-  (  module OryHydra.Client-  , module OryHydra.Core-  , module OryHydra.Logging-  , module OryHydra.MimeTypes-  , module OryHydra.Model-  , module OryHydra.ModelLens-  ) where---import OryHydra.Client-import OryHydra.Core-import OryHydra.Logging-import OryHydra.MimeTypes-import OryHydra.Model-import OryHydra.ModelLens
− lib/OryHydra/API/Jwk.hs 
@@ -1,213 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.API.Jwk--}--{-# LANGUAGE FlexibleContexts #-}-{-# LANGUAGE FlexibleInstances #-}-{-# LANGUAGE MonoLocalBinds #-}-{-# LANGUAGE MultiParamTypeClasses #-}-{-# LANGUAGE OverloadedStrings #-}-{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.API.Jwk where--import OryHydra.Core-import OryHydra.MimeTypes-import OryHydra.Model as M--import qualified Data.Aeson as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Lazy as BL-import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)-import qualified Data.Foldable as P-import qualified Data.Map as Map-import qualified Data.Maybe as P-import qualified Data.Proxy as P (Proxy(..))-import qualified Data.Set as Set-import qualified Data.String as P-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Data.Text.Lazy as TL-import qualified Data.Text.Lazy.Encoding as TL-import qualified Data.Time as TI-import qualified Network.HTTP.Client.MultipartFormData as NH-import qualified Network.HTTP.Media as ME-import qualified Network.HTTP.Types as NH-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Data.Text (Text)-import GHC.Base ((<|>))--import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)-import qualified Prelude as P---- * Operations----- ** Jwk---- *** createJsonWebKeySet0---- | @POST \/admin\/keys\/{set}@--- --- Create JSON Web Key--- --- This endpoint is capable of generating JSON Web Key Sets for you. There a different strategies available, such as symmetric cryptographic keys (HS256, HS512) and asymetric cryptographic keys (RS256, ECDSA). If the specified JSON Web Key Set does not exist, it will be created.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.--- -createJsonWebKeySet0-  :: (Consumes CreateJsonWebKeySet0 MimeJSON, MimeRender MimeJSON CreateJsonWebKeySet)-  => CreateJsonWebKeySet -- ^ "createJsonWebKeySet"-  -> Set -- ^ "set" -  The JSON Web Key Set ID-  -> OryHydraRequest CreateJsonWebKeySet0 MimeJSON JsonWebKeySet MimeJSON-createJsonWebKeySet0 createJsonWebKeySet (Set set) =-  _mkRequest "POST" ["/admin/keys/",toPath set]-    `setBodyParam` createJsonWebKeySet--data CreateJsonWebKeySet0 -instance HasBodyParam CreateJsonWebKeySet0 CreateJsonWebKeySet ---- | @application/json@-instance Consumes CreateJsonWebKeySet0 MimeJSON---- | @application/json@-instance Produces CreateJsonWebKeySet0 MimeJSON----- *** deleteJsonWebKey---- | @DELETE \/admin\/keys\/{set}\/{kid}@--- --- Delete JSON Web Key--- --- Use this endpoint to delete a single JSON Web Key.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.--- -deleteJsonWebKey-  :: Set -- ^ "set" -  The JSON Web Key Set-  -> Kid -- ^ "kid" -  The JSON Web Key ID (kid)-  -> OryHydraRequest DeleteJsonWebKey MimeNoContent NoContent MimeNoContent-deleteJsonWebKey (Set set) (Kid kid) =-  _mkRequest "DELETE" ["/admin/keys/",toPath set,"/",toPath kid]--data DeleteJsonWebKey  -instance Produces DeleteJsonWebKey MimeNoContent----- *** deleteJsonWebKeySet---- | @DELETE \/admin\/keys\/{set}@--- --- Delete JSON Web Key Set--- --- Use this endpoint to delete a complete JSON Web Key Set and all the keys in that set.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.--- -deleteJsonWebKeySet-  :: Set -- ^ "set" -  The JSON Web Key Set-  -> OryHydraRequest DeleteJsonWebKeySet MimeNoContent NoContent MimeNoContent-deleteJsonWebKeySet (Set set) =-  _mkRequest "DELETE" ["/admin/keys/",toPath set]--data DeleteJsonWebKeySet  -instance Produces DeleteJsonWebKeySet MimeNoContent----- *** getJsonWebKey---- | @GET \/admin\/keys\/{set}\/{kid}@--- --- Get JSON Web Key--- --- This endpoint returns a singular JSON Web Key contained in a set. It is identified by the set and the specific key ID (kid).--- -getJsonWebKey-  :: Set -- ^ "set" -  JSON Web Key Set ID-  -> Kid -- ^ "kid" -  JSON Web Key ID-  -> OryHydraRequest GetJsonWebKey MimeNoContent JsonWebKeySet MimeJSON-getJsonWebKey (Set set) (Kid kid) =-  _mkRequest "GET" ["/admin/keys/",toPath set,"/",toPath kid]--data GetJsonWebKey  --- | @application/json@-instance Produces GetJsonWebKey MimeJSON----- *** getJsonWebKeySet---- | @GET \/admin\/keys\/{set}@--- --- Retrieve a JSON Web Key Set--- --- This endpoint can be used to retrieve JWK Sets stored in ORY Hydra.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.--- -getJsonWebKeySet-  :: Set -- ^ "set" -  JSON Web Key Set ID-  -> OryHydraRequest GetJsonWebKeySet MimeNoContent JsonWebKeySet MimeJSON-getJsonWebKeySet (Set set) =-  _mkRequest "GET" ["/admin/keys/",toPath set]--data GetJsonWebKeySet  --- | @application/json@-instance Produces GetJsonWebKeySet MimeJSON----- *** setJsonWebKey---- | @PUT \/admin\/keys\/{set}\/{kid}@--- --- Set JSON Web Key--- --- Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your own.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.--- -setJsonWebKey-  :: (Consumes SetJsonWebKey MimeJSON)-  => Set -- ^ "set" -  The JSON Web Key Set ID-  -> Kid -- ^ "kid" -  JSON Web Key ID-  -> OryHydraRequest SetJsonWebKey MimeJSON JsonWebKey MimeJSON-setJsonWebKey (Set set) (Kid kid) =-  _mkRequest "PUT" ["/admin/keys/",toPath set,"/",toPath kid]--data SetJsonWebKey -instance HasBodyParam SetJsonWebKey JsonWebKey ---- | @application/json@-instance Consumes SetJsonWebKey MimeJSON---- | @application/json@-instance Produces SetJsonWebKey MimeJSON----- *** setJsonWebKeySet---- | @PUT \/admin\/keys\/{set}@--- --- Update a JSON Web Key Set--- --- Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your own.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.--- -setJsonWebKeySet-  :: (Consumes SetJsonWebKeySet MimeJSON)-  => Set -- ^ "set" -  The JSON Web Key Set ID-  -> OryHydraRequest SetJsonWebKeySet MimeJSON JsonWebKeySet MimeJSON-setJsonWebKeySet (Set set) =-  _mkRequest "PUT" ["/admin/keys/",toPath set]--data SetJsonWebKeySet -instance HasBodyParam SetJsonWebKeySet JsonWebKeySet ---- | @application/json@-instance Consumes SetJsonWebKeySet MimeJSON---- | @application/json@-instance Produces SetJsonWebKeySet MimeJSON-
− lib/OryHydra/API/Metadata.hs 
@@ -1,113 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.API.Metadata--}--{-# LANGUAGE FlexibleContexts #-}-{-# LANGUAGE FlexibleInstances #-}-{-# LANGUAGE MonoLocalBinds #-}-{-# LANGUAGE MultiParamTypeClasses #-}-{-# LANGUAGE OverloadedStrings #-}-{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.API.Metadata where--import OryHydra.Core-import OryHydra.MimeTypes-import OryHydra.Model as M--import qualified Data.Aeson as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Lazy as BL-import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)-import qualified Data.Foldable as P-import qualified Data.Map as Map-import qualified Data.Maybe as P-import qualified Data.Proxy as P (Proxy(..))-import qualified Data.Set as Set-import qualified Data.String as P-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Data.Text.Lazy as TL-import qualified Data.Text.Lazy.Encoding as TL-import qualified Data.Time as TI-import qualified Network.HTTP.Client.MultipartFormData as NH-import qualified Network.HTTP.Media as ME-import qualified Network.HTTP.Types as NH-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Data.Text (Text)-import GHC.Base ((<|>))--import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)-import qualified Prelude as P---- * Operations----- ** Metadata---- *** getVersion---- | @GET \/version@--- --- Return Running Software Version.--- --- This endpoint returns the version of Ory Hydra.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the version will never refer to the cluster state, only to a single instance.--- -getVersion-  :: OryHydraRequest GetVersion MimeNoContent GetVersion200Response MimeJSON-getVersion =-  _mkRequest "GET" ["/version"]--data GetVersion  --- | @application/json@-instance Produces GetVersion MimeJSON----- *** isAlive---- | @GET \/health\/alive@--- --- Check HTTP Server Status--- --- This endpoint returns a HTTP 200 status code when Ory Hydra is accepting incoming HTTP requests. This status does currently not include checks whether the database connection is working.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.--- -isAlive-  :: OryHydraRequest IsAlive MimeNoContent HealthStatus MimeJSON-isAlive =-  _mkRequest "GET" ["/health/alive"]--data IsAlive  --- | @application/json@-instance Produces IsAlive MimeJSON----- *** isReady---- | @GET \/health\/ready@--- --- Check HTTP Server and Database Status--- --- This endpoint returns a HTTP 200 status code when Ory Hydra is up running and the environment dependencies (e.g. the database) are responsive as well.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of Ory Hydra, the health status will never refer to the cluster state, only to a single instance.--- -isReady-  :: OryHydraRequest IsReady MimeNoContent IsReady200Response MimeJSON-isReady =-  _mkRequest "GET" ["/health/ready"]--data IsReady  --- | @application/json@-instance Produces IsReady MimeJSON-
− lib/OryHydra/API/OAuth2.hs 
@@ -1,763 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.API.OAuth2--}--{-# LANGUAGE FlexibleContexts #-}-{-# LANGUAGE FlexibleInstances #-}-{-# LANGUAGE MonoLocalBinds #-}-{-# LANGUAGE MultiParamTypeClasses #-}-{-# LANGUAGE OverloadedStrings #-}-{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.API.OAuth2 where--import OryHydra.Core-import OryHydra.MimeTypes-import OryHydra.Model as M--import qualified Data.Aeson as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Lazy as BL-import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)-import qualified Data.Foldable as P-import qualified Data.Map as Map-import qualified Data.Maybe as P-import qualified Data.Proxy as P (Proxy(..))-import qualified Data.Set as Set-import qualified Data.String as P-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Data.Text.Lazy as TL-import qualified Data.Text.Lazy.Encoding as TL-import qualified Data.Time as TI-import qualified Network.HTTP.Client.MultipartFormData as NH-import qualified Network.HTTP.Media as ME-import qualified Network.HTTP.Types as NH-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Data.Text (Text)-import GHC.Base ((<|>))--import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)-import qualified Prelude as P---- * Operations----- ** OAuth2---- *** acceptOAuth2ConsentRequest0---- | @PUT \/admin\/oauth2\/auth\/requests\/consent\/accept@--- --- Accept OAuth 2.0 Consent Request--- --- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell Ory now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.  The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells Ory if the subject accepted or rejected the request.  This endpoint tells Ory that the subject has authorized the OAuth 2.0 client to access resources on his/her behalf. The consent provider includes additional information, such as session data for access and ID tokens, and if the consent request should be used as basis for future requests.  The response contains a redirect URL which the consent provider should redirect the user-agent to.  The default consent provider is available via the Ory Managed Account Experience. To customize the consent provider, please head over to the OAuth 2.0 documentation.--- -acceptOAuth2ConsentRequest0-  :: (Consumes AcceptOAuth2ConsentRequest0 MimeJSON)-  => ConsentChallenge -- ^ "consentChallenge" -  OAuth 2.0 Consent Request Challenge-  -> OryHydraRequest AcceptOAuth2ConsentRequest0 MimeJSON OAuth2RedirectTo MimeJSON-acceptOAuth2ConsentRequest0 (ConsentChallenge consentChallenge) =-  _mkRequest "PUT" ["/admin/oauth2/auth/requests/consent/accept"]-    `addQuery` toQuery ("consent_challenge", Just consentChallenge)--data AcceptOAuth2ConsentRequest0 -instance HasBodyParam AcceptOAuth2ConsentRequest0 AcceptOAuth2ConsentRequest ---- | @application/json@-instance Consumes AcceptOAuth2ConsentRequest0 MimeJSON---- | @application/json@-instance Produces AcceptOAuth2ConsentRequest0 MimeJSON----- *** acceptOAuth2LoginRequest0---- | @PUT \/admin\/oauth2\/auth\/requests\/login\/accept@--- --- Accept OAuth 2.0 Login Request--- --- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell the Ory OAuth2 Service about it.  The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.  This endpoint tells Ory that the subject has successfully authenticated and includes additional information such as the subject's ID and if Ory should remember the subject's subject agent for future authentication attempts by setting a cookie.  The response contains a redirect URL which the login provider should redirect the user-agent to.--- -acceptOAuth2LoginRequest0-  :: (Consumes AcceptOAuth2LoginRequest0 MimeJSON)-  => LoginChallenge -- ^ "loginChallenge" -  OAuth 2.0 Login Request Challenge-  -> OryHydraRequest AcceptOAuth2LoginRequest0 MimeJSON OAuth2RedirectTo MimeJSON-acceptOAuth2LoginRequest0 (LoginChallenge loginChallenge) =-  _mkRequest "PUT" ["/admin/oauth2/auth/requests/login/accept"]-    `addQuery` toQuery ("login_challenge", Just loginChallenge)--data AcceptOAuth2LoginRequest0 -instance HasBodyParam AcceptOAuth2LoginRequest0 AcceptOAuth2LoginRequest ---- | @application/json@-instance Consumes AcceptOAuth2LoginRequest0 MimeJSON---- | @application/json@-instance Produces AcceptOAuth2LoginRequest0 MimeJSON----- *** acceptOAuth2LogoutRequest---- | @PUT \/admin\/oauth2\/auth\/requests\/logout\/accept@--- --- Accept OAuth 2.0 Session Logout Request--- --- When a user or an application requests Ory OAuth 2.0 to remove the session state of a subject, this endpoint is used to confirm that logout request.  The response contains a redirect URL which the consent provider should redirect the user-agent to.--- -acceptOAuth2LogoutRequest-  :: LogoutChallenge -- ^ "logoutChallenge" -  OAuth 2.0 Logout Request Challenge-  -> OryHydraRequest AcceptOAuth2LogoutRequest MimeNoContent OAuth2RedirectTo MimeJSON-acceptOAuth2LogoutRequest (LogoutChallenge logoutChallenge) =-  _mkRequest "PUT" ["/admin/oauth2/auth/requests/logout/accept"]-    `addQuery` toQuery ("logout_challenge", Just logoutChallenge)--data AcceptOAuth2LogoutRequest  --- | @application/json@-instance Produces AcceptOAuth2LogoutRequest MimeJSON----- *** createOAuth2Client---- | @POST \/admin\/clients@--- --- Create OAuth 2.0 Client--- --- Create a new OAuth 2.0 client. If you pass `client_secret` the secret is used, otherwise a random secret is generated. The secret is echoed in the response. It is not possible to retrieve it later on.--- -createOAuth2Client-  :: (Consumes CreateOAuth2Client MimeJSON, MimeRender MimeJSON OAuth2Client)-  => OAuth2Client -- ^ "oAuth2Client" -  OAuth 2.0 Client Request Body-  -> OryHydraRequest CreateOAuth2Client MimeJSON OAuth2Client MimeJSON-createOAuth2Client oAuth2Client =-  _mkRequest "POST" ["/admin/clients"]-    `setBodyParam` oAuth2Client--data CreateOAuth2Client ---- | /Body Param/ "OAuth2Client" - OAuth 2.0 Client Request Body-instance HasBodyParam CreateOAuth2Client OAuth2Client ---- | @application/json@-instance Consumes CreateOAuth2Client MimeJSON---- | @application/json@-instance Produces CreateOAuth2Client MimeJSON----- *** deleteOAuth2Client---- | @DELETE \/admin\/clients\/{id}@--- --- Delete OAuth 2.0 Client--- --- Delete an existing OAuth 2.0 Client by its ID.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.  Make sure that this endpoint is well protected and only callable by first-party components.--- -deleteOAuth2Client-  :: Id -- ^ "id" -  The id of the OAuth 2.0 Client.-  -> OryHydraRequest DeleteOAuth2Client MimeNoContent NoContent MimeNoContent-deleteOAuth2Client (Id id) =-  _mkRequest "DELETE" ["/admin/clients/",toPath id]--data DeleteOAuth2Client  -instance Produces DeleteOAuth2Client MimeNoContent----- *** deleteOAuth2Token---- | @DELETE \/admin\/oauth2\/tokens@--- --- Delete OAuth 2.0 Access Tokens from specific OAuth 2.0 Client--- --- This endpoint deletes OAuth2 access tokens issued to an OAuth 2.0 Client from the database.--- -deleteOAuth2Token-  :: ClientId -- ^ "clientId" -  OAuth 2.0 Client ID-  -> OryHydraRequest DeleteOAuth2Token MimeNoContent NoContent MimeNoContent-deleteOAuth2Token (ClientId clientId) =-  _mkRequest "DELETE" ["/admin/oauth2/tokens"]-    `addQuery` toQuery ("client_id", Just clientId)--data DeleteOAuth2Token  -instance Produces DeleteOAuth2Token MimeNoContent----- *** deleteTrustedOAuth2JwtGrantIssuer---- | @DELETE \/admin\/trust\/grants\/jwt-bearer\/issuers\/{id}@--- --- Delete Trusted OAuth2 JWT Bearer Grant Type Issuer--- --- Use this endpoint to delete trusted JWT Bearer Grant Type Issuer. The ID is the one returned when you created the trust relationship.  Once deleted, the associated issuer will no longer be able to perform the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grant.--- -deleteTrustedOAuth2JwtGrantIssuer-  :: Id -- ^ "id" -  The id of the desired grant-  -> OryHydraRequest DeleteTrustedOAuth2JwtGrantIssuer MimeNoContent NoContent MimeNoContent-deleteTrustedOAuth2JwtGrantIssuer (Id id) =-  _mkRequest "DELETE" ["/admin/trust/grants/jwt-bearer/issuers/",toPath id]--data DeleteTrustedOAuth2JwtGrantIssuer  -instance Produces DeleteTrustedOAuth2JwtGrantIssuer MimeNoContent----- *** getOAuth2Client---- | @GET \/admin\/clients\/{id}@--- --- Get an OAuth 2.0 Client--- --- Get an OAuth 2.0 client by its ID. This endpoint never returns the client secret.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.--- -getOAuth2Client-  :: Id -- ^ "id" -  The id of the OAuth 2.0 Client.-  -> OryHydraRequest GetOAuth2Client MimeNoContent OAuth2Client MimeJSON-getOAuth2Client (Id id) =-  _mkRequest "GET" ["/admin/clients/",toPath id]--data GetOAuth2Client  --- | @application/json@-instance Produces GetOAuth2Client MimeJSON----- *** getOAuth2ConsentRequest---- | @GET \/admin\/oauth2\/auth\/requests\/consent@--- --- Get OAuth 2.0 Consent Request--- --- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell Ory now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.  The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells Ory if the subject accepted or rejected the request.  The default consent provider is available via the Ory Managed Account Experience. To customize the consent provider, please head over to the OAuth 2.0 documentation.--- -getOAuth2ConsentRequest-  :: ConsentChallenge -- ^ "consentChallenge" -  OAuth 2.0 Consent Request Challenge-  -> OryHydraRequest GetOAuth2ConsentRequest MimeNoContent OAuth2ConsentRequest MimeJSON-getOAuth2ConsentRequest (ConsentChallenge consentChallenge) =-  _mkRequest "GET" ["/admin/oauth2/auth/requests/consent"]-    `addQuery` toQuery ("consent_challenge", Just consentChallenge)--data GetOAuth2ConsentRequest  --- | @application/json@-instance Produces GetOAuth2ConsentRequest MimeJSON----- *** getOAuth2LoginRequest---- | @GET \/admin\/oauth2\/auth\/requests\/login@--- --- Get OAuth 2.0 Login Request--- --- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell the Ory OAuth2 Service about it.  Per default, the login provider is Ory itself. You may use a different login provider which needs to be a web-app you write and host, and it must be able to authenticate (\"show the subject a login screen\") a subject (in OAuth2 the proper name for subject is \"resource owner\").  The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.--- -getOAuth2LoginRequest-  :: LoginChallenge -- ^ "loginChallenge" -  OAuth 2.0 Login Request Challenge-  -> OryHydraRequest GetOAuth2LoginRequest MimeNoContent OAuth2LoginRequest MimeJSON-getOAuth2LoginRequest (LoginChallenge loginChallenge) =-  _mkRequest "GET" ["/admin/oauth2/auth/requests/login"]-    `addQuery` toQuery ("login_challenge", Just loginChallenge)--data GetOAuth2LoginRequest  --- | @application/json@-instance Produces GetOAuth2LoginRequest MimeJSON----- *** getOAuth2LogoutRequest---- | @GET \/admin\/oauth2\/auth\/requests\/logout@--- --- Get OAuth 2.0 Session Logout Request--- --- Use this endpoint to fetch an Ory OAuth 2.0 logout request.--- -getOAuth2LogoutRequest-  :: LogoutChallenge -- ^ "logoutChallenge"-  -> OryHydraRequest GetOAuth2LogoutRequest MimeNoContent OAuth2LogoutRequest MimeJSON-getOAuth2LogoutRequest (LogoutChallenge logoutChallenge) =-  _mkRequest "GET" ["/admin/oauth2/auth/requests/logout"]-    `addQuery` toQuery ("logout_challenge", Just logoutChallenge)--data GetOAuth2LogoutRequest  --- | @application/json@-instance Produces GetOAuth2LogoutRequest MimeJSON----- *** getTrustedOAuth2JwtGrantIssuer---- | @GET \/admin\/trust\/grants\/jwt-bearer\/issuers\/{id}@--- --- Get Trusted OAuth2 JWT Bearer Grant Type Issuer--- --- Use this endpoint to get a trusted JWT Bearer Grant Type Issuer. The ID is the one returned when you created the trust relationship.--- -getTrustedOAuth2JwtGrantIssuer-  :: Id -- ^ "id" -  The id of the desired grant-  -> OryHydraRequest GetTrustedOAuth2JwtGrantIssuer MimeNoContent TrustedOAuth2JwtGrantIssuer MimeJSON-getTrustedOAuth2JwtGrantIssuer (Id id) =-  _mkRequest "GET" ["/admin/trust/grants/jwt-bearer/issuers/",toPath id]--data GetTrustedOAuth2JwtGrantIssuer  --- | @application/json@-instance Produces GetTrustedOAuth2JwtGrantIssuer MimeJSON----- *** introspectOAuth2Token---- | @POST \/admin\/oauth2\/introspect@--- --- Introspect OAuth2 Access and Refresh Tokens--- --- The introspection endpoint allows to check if a token (both refresh and access) is active or not. An active token is neither expired nor revoked. If a token is active, additional information on the token will be included. You can set additional data for a token by setting `session.access_token` during the consent flow.--- -introspectOAuth2Token-  :: (Consumes IntrospectOAuth2Token MimeFormUrlEncoded)-  => Token -- ^ "token" -  The string value of the token. For access tokens, this is the \\\"access_token\\\" value returned from the token endpoint defined in OAuth 2.0. For refresh tokens, this is the \\\"refresh_token\\\" value returned.-  -> OryHydraRequest IntrospectOAuth2Token MimeFormUrlEncoded IntrospectedOAuth2Token MimeJSON-introspectOAuth2Token (Token token) =-  _mkRequest "POST" ["/admin/oauth2/introspect"]-    `addForm` toForm ("token", token)--data IntrospectOAuth2Token  ---- | /Optional Param/ "scope" - An optional, space separated list of required scopes. If the access token was not granted one of the scopes, the result of active will be false.-instance HasOptionalParam IntrospectOAuth2Token Scope where-  applyOptionalParam req (Scope xs) =-    req `addForm` toForm ("scope", xs)---- | @application/x-www-form-urlencoded@-instance Consumes IntrospectOAuth2Token MimeFormUrlEncoded---- | @application/json@-instance Produces IntrospectOAuth2Token MimeJSON----- *** listOAuth2Clients---- | @GET \/admin\/clients@--- --- List OAuth 2.0 Clients--- --- This endpoint lists all clients in the database, and never returns client secrets. As a default it lists the first 100 clients.--- -listOAuth2Clients-  :: OryHydraRequest ListOAuth2Clients MimeNoContent [OAuth2Client] MimeJSON-listOAuth2Clients =-  _mkRequest "GET" ["/admin/clients"]--data ListOAuth2Clients  ---- | /Optional Param/ "page_size" - Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-instance HasOptionalParam ListOAuth2Clients PageSize where-  applyOptionalParam req (PageSize xs) =-    req `addQuery` toQuery ("page_size", Just xs)---- | /Optional Param/ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-instance HasOptionalParam ListOAuth2Clients PageToken where-  applyOptionalParam req (PageToken xs) =-    req `addQuery` toQuery ("page_token", Just xs)---- | /Optional Param/ "client_name" - The name of the clients to filter by.-instance HasOptionalParam ListOAuth2Clients ClientName where-  applyOptionalParam req (ClientName xs) =-    req `addQuery` toQuery ("client_name", Just xs)---- | /Optional Param/ "owner" - The owner of the clients to filter by.-instance HasOptionalParam ListOAuth2Clients Owner where-  applyOptionalParam req (Owner xs) =-    req `addQuery` toQuery ("owner", Just xs)--- | @application/json@-instance Produces ListOAuth2Clients MimeJSON----- *** listOAuth2ConsentSessions---- | @GET \/admin\/oauth2\/auth\/sessions\/consent@--- --- List OAuth 2.0 Consent Sessions of a Subject--- --- This endpoint lists all subject's granted consent sessions, including client and granted scope. If the subject is unknown or has not granted any consent sessions yet, the endpoint returns an empty JSON array with status code 200 OK.--- -listOAuth2ConsentSessions-  :: Subject -- ^ "subject" -  The subject to list the consent sessions for.-  -> OryHydraRequest ListOAuth2ConsentSessions MimeNoContent [OAuth2ConsentSession] MimeJSON-listOAuth2ConsentSessions (Subject subject) =-  _mkRequest "GET" ["/admin/oauth2/auth/sessions/consent"]-    `addQuery` toQuery ("subject", Just subject)--data ListOAuth2ConsentSessions  ---- | /Optional Param/ "page_size" - Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-instance HasOptionalParam ListOAuth2ConsentSessions PageSize where-  applyOptionalParam req (PageSize xs) =-    req `addQuery` toQuery ("page_size", Just xs)---- | /Optional Param/ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-instance HasOptionalParam ListOAuth2ConsentSessions PageToken where-  applyOptionalParam req (PageToken xs) =-    req `addQuery` toQuery ("page_token", Just xs)---- | /Optional Param/ "login_session_id" - The login session id to list the consent sessions for.-instance HasOptionalParam ListOAuth2ConsentSessions LoginSessionId where-  applyOptionalParam req (LoginSessionId xs) =-    req `addQuery` toQuery ("login_session_id", Just xs)--- | @application/json@-instance Produces ListOAuth2ConsentSessions MimeJSON----- *** listTrustedOAuth2JwtGrantIssuers---- | @GET \/admin\/trust\/grants\/jwt-bearer\/issuers@--- --- List Trusted OAuth2 JWT Bearer Grant Type Issuers--- --- Use this endpoint to list all trusted JWT Bearer Grant Type Issuers.--- -listTrustedOAuth2JwtGrantIssuers-  :: OryHydraRequest ListTrustedOAuth2JwtGrantIssuers MimeNoContent [TrustedOAuth2JwtGrantIssuer] MimeJSON-listTrustedOAuth2JwtGrantIssuers =-  _mkRequest "GET" ["/admin/trust/grants/jwt-bearer/issuers"]--data ListTrustedOAuth2JwtGrantIssuers  -instance HasOptionalParam ListTrustedOAuth2JwtGrantIssuers MaxItems where-  applyOptionalParam req (MaxItems xs) =-    req `addQuery` toQuery ("MaxItems", Just xs)-instance HasOptionalParam ListTrustedOAuth2JwtGrantIssuers DefaultItems where-  applyOptionalParam req (DefaultItems xs) =-    req `addQuery` toQuery ("DefaultItems", Just xs)---- | /Optional Param/ "issuer" - If optional \"issuer\" is supplied, only jwt-bearer grants with this issuer will be returned.-instance HasOptionalParam ListTrustedOAuth2JwtGrantIssuers Issuer where-  applyOptionalParam req (Issuer xs) =-    req `addQuery` toQuery ("issuer", Just xs)--- | @application/json@-instance Produces ListTrustedOAuth2JwtGrantIssuers MimeJSON----- *** oAuth2Authorize---- | @GET \/oauth2\/auth@--- --- OAuth 2.0 Authorize Endpoint--- --- Use open source libraries to perform OAuth 2.0 and OpenID Connect available for any programming language. You can find a list of libraries at https://oauth.net/code/  The Ory SDK is not yet able to this endpoint properly.--- -oAuth2Authorize-  :: OryHydraRequest OAuth2Authorize MimeNoContent ErrorOAuth2 MimeJSON-oAuth2Authorize =-  _mkRequest "GET" ["/oauth2/auth"]--data OAuth2Authorize  --- | @application/json@-instance Produces OAuth2Authorize MimeJSON----- *** oauth2TokenExchange---- | @POST \/oauth2\/token@--- --- The OAuth 2.0 Token Endpoint--- --- Use open source libraries to perform OAuth 2.0 and OpenID Connect available for any programming language. You can find a list of libraries here https://oauth.net/code/  The Ory SDK is not yet able to this endpoint properly.--- --- AuthMethod: 'AuthBasicBasic', 'AuthOAuthOauth2'--- -oauth2TokenExchange-  :: (Consumes Oauth2TokenExchange MimeFormUrlEncoded)-  => GrantType -- ^ "grantType"-  -> OryHydraRequest Oauth2TokenExchange MimeFormUrlEncoded OAuth2TokenExchange MimeJSON-oauth2TokenExchange (GrantType grantType) =-  _mkRequest "POST" ["/oauth2/token"]-    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBasic)-    `_hasAuthType` (P.Proxy :: P.Proxy AuthOAuthOauth2)-    `addForm` toForm ("grant_type", grantType)--data Oauth2TokenExchange  -instance HasOptionalParam Oauth2TokenExchange ClientId where-  applyOptionalParam req (ClientId xs) =-    req `addForm` toForm ("client_id", xs)-instance HasOptionalParam Oauth2TokenExchange Code where-  applyOptionalParam req (Code xs) =-    req `addForm` toForm ("code", xs)-instance HasOptionalParam Oauth2TokenExchange RedirectUri where-  applyOptionalParam req (RedirectUri xs) =-    req `addForm` toForm ("redirect_uri", xs)-instance HasOptionalParam Oauth2TokenExchange RefreshToken where-  applyOptionalParam req (RefreshToken xs) =-    req `addForm` toForm ("refresh_token", xs)---- | @application/x-www-form-urlencoded@-instance Consumes Oauth2TokenExchange MimeFormUrlEncoded---- | @application/json@-instance Produces Oauth2TokenExchange MimeJSON----- *** patchOAuth2Client---- | @PATCH \/admin\/clients\/{id}@--- --- Patch OAuth 2.0 Client--- --- Patch an existing OAuth 2.0 Client using JSON Patch. If you pass `client_secret` the secret will be updated and returned via the API. This is the only time you will be able to retrieve the client secret, so write it down and keep it safe.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.--- -patchOAuth2Client-  :: (Consumes PatchOAuth2Client MimeJSON, MimeRender MimeJSON JsonPatch2)-  => JsonPatch2 -- ^ "jsonPatch" -  OAuth 2.0 Client JSON Patch Body-  -> Id -- ^ "id" -  The id of the OAuth 2.0 Client.-  -> OryHydraRequest PatchOAuth2Client MimeJSON OAuth2Client MimeJSON-patchOAuth2Client jsonPatch (Id id) =-  _mkRequest "PATCH" ["/admin/clients/",toPath id]-    `setBodyParam` jsonPatch--data PatchOAuth2Client ---- | /Body Param/ "JsonPatch" - OAuth 2.0 Client JSON Patch Body-instance HasBodyParam PatchOAuth2Client JsonPatch2 ---- | @application/json@-instance Consumes PatchOAuth2Client MimeJSON---- | @application/json@-instance Produces PatchOAuth2Client MimeJSON----- *** rejectOAuth2ConsentRequest---- | @PUT \/admin\/oauth2\/auth\/requests\/consent\/reject@--- --- Reject OAuth 2.0 Consent Request--- --- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell Ory now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.  The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells Ory if the subject accepted or rejected the request.  This endpoint tells Ory that the subject has not authorized the OAuth 2.0 client to access resources on his/her behalf. The consent provider must include a reason why the consent was not granted.  The response contains a redirect URL which the consent provider should redirect the user-agent to.  The default consent provider is available via the Ory Managed Account Experience. To customize the consent provider, please head over to the OAuth 2.0 documentation.--- -rejectOAuth2ConsentRequest-  :: (Consumes RejectOAuth2ConsentRequest MimeJSON)-  => ConsentChallenge -- ^ "consentChallenge" -  OAuth 2.0 Consent Request Challenge-  -> OryHydraRequest RejectOAuth2ConsentRequest MimeJSON OAuth2RedirectTo MimeJSON-rejectOAuth2ConsentRequest (ConsentChallenge consentChallenge) =-  _mkRequest "PUT" ["/admin/oauth2/auth/requests/consent/reject"]-    `addQuery` toQuery ("consent_challenge", Just consentChallenge)--data RejectOAuth2ConsentRequest -instance HasBodyParam RejectOAuth2ConsentRequest RejectOAuth2Request ---- | @application/json@-instance Consumes RejectOAuth2ConsentRequest MimeJSON---- | @application/json@-instance Produces RejectOAuth2ConsentRequest MimeJSON----- *** rejectOAuth2LoginRequest---- | @PUT \/admin\/oauth2\/auth\/requests\/login\/reject@--- --- Reject OAuth 2.0 Login Request--- --- When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell the Ory OAuth2 Service about it.  The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.  This endpoint tells Ory that the subject has not authenticated and includes a reason why the authentication was denied.  The response contains a redirect URL which the login provider should redirect the user-agent to.--- -rejectOAuth2LoginRequest-  :: (Consumes RejectOAuth2LoginRequest MimeJSON)-  => LoginChallenge -- ^ "loginChallenge" -  OAuth 2.0 Login Request Challenge-  -> OryHydraRequest RejectOAuth2LoginRequest MimeJSON OAuth2RedirectTo MimeJSON-rejectOAuth2LoginRequest (LoginChallenge loginChallenge) =-  _mkRequest "PUT" ["/admin/oauth2/auth/requests/login/reject"]-    `addQuery` toQuery ("login_challenge", Just loginChallenge)--data RejectOAuth2LoginRequest -instance HasBodyParam RejectOAuth2LoginRequest RejectOAuth2Request ---- | @application/json@-instance Consumes RejectOAuth2LoginRequest MimeJSON---- | @application/json@-instance Produces RejectOAuth2LoginRequest MimeJSON----- *** rejectOAuth2LogoutRequest---- | @PUT \/admin\/oauth2\/auth\/requests\/logout\/reject@--- --- Reject OAuth 2.0 Session Logout Request--- --- When a user or an application requests Ory OAuth 2.0 to remove the session state of a subject, this endpoint is used to deny that logout request. No HTTP request body is required.  The response is empty as the logout provider has to chose what action to perform next.--- -rejectOAuth2LogoutRequest-  :: LogoutChallenge -- ^ "logoutChallenge"-  -> OryHydraRequest RejectOAuth2LogoutRequest MimeNoContent NoContent MimeNoContent-rejectOAuth2LogoutRequest (LogoutChallenge logoutChallenge) =-  _mkRequest "PUT" ["/admin/oauth2/auth/requests/logout/reject"]-    `addQuery` toQuery ("logout_challenge", Just logoutChallenge)--data RejectOAuth2LogoutRequest  -instance Produces RejectOAuth2LogoutRequest MimeNoContent----- *** revokeOAuth2ConsentSessions---- | @DELETE \/admin\/oauth2\/auth\/sessions\/consent@--- --- Revoke OAuth 2.0 Consent Sessions of a Subject--- --- This endpoint revokes a subject's granted consent sessions and invalidates all associated OAuth 2.0 Access Tokens. You may also only revoke sessions for a specific OAuth 2.0 Client ID.--- -revokeOAuth2ConsentSessions-  :: Subject -- ^ "subject" -  OAuth 2.0 Consent Subject  The subject whose consent sessions should be deleted.-  -> OryHydraRequest RevokeOAuth2ConsentSessions MimeNoContent NoContent MimeNoContent-revokeOAuth2ConsentSessions (Subject subject) =-  _mkRequest "DELETE" ["/admin/oauth2/auth/sessions/consent"]-    `addQuery` toQuery ("subject", Just subject)--data RevokeOAuth2ConsentSessions  ---- | /Optional Param/ "client" - OAuth 2.0 Client ID  If set, deletes only those consent sessions that have been granted to the specified OAuth 2.0 Client ID.-instance HasOptionalParam RevokeOAuth2ConsentSessions Client where-  applyOptionalParam req (Client xs) =-    req `addQuery` toQuery ("client", Just xs)---- | /Optional Param/ "all" - Revoke All Consent Sessions  If set to `true` deletes all consent sessions by the Subject that have been granted.-instance HasOptionalParam RevokeOAuth2ConsentSessions All where-  applyOptionalParam req (All xs) =-    req `addQuery` toQuery ("all", Just xs)-instance Produces RevokeOAuth2ConsentSessions MimeNoContent----- *** revokeOAuth2LoginSessions---- | @DELETE \/admin\/oauth2\/auth\/sessions\/login@--- --- Revokes All OAuth 2.0 Login Sessions of a Subject--- --- This endpoint invalidates a subject's authentication session. After revoking the authentication session, the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens and does not work with OpenID Connect Front- or Back-channel logout.--- -revokeOAuth2LoginSessions-  :: Subject -- ^ "subject" -  OAuth 2.0 Subject  The subject to revoke authentication sessions for.-  -> OryHydraRequest RevokeOAuth2LoginSessions MimeNoContent NoContent MimeNoContent-revokeOAuth2LoginSessions (Subject subject) =-  _mkRequest "DELETE" ["/admin/oauth2/auth/sessions/login"]-    `addQuery` toQuery ("subject", Just subject)--data RevokeOAuth2LoginSessions  -instance Produces RevokeOAuth2LoginSessions MimeNoContent----- *** revokeOAuth2Token---- | @POST \/oauth2\/revoke@--- --- Revoke OAuth 2.0 Access or Refresh Token--- --- Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access token can no longer be used to make access requests, and a revoked refresh token can no longer be used to refresh an access token. Revoking a refresh token also invalidates the access token that was created with it. A token may only be revoked by the client the token was generated for.--- --- AuthMethod: 'AuthBasicBasic', 'AuthOAuthOauth2'--- -revokeOAuth2Token-  :: (Consumes RevokeOAuth2Token MimeFormUrlEncoded)-  => Token -- ^ "token"-  -> OryHydraRequest RevokeOAuth2Token MimeFormUrlEncoded NoContent MimeNoContent-revokeOAuth2Token (Token token) =-  _mkRequest "POST" ["/oauth2/revoke"]-    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBasic)-    `_hasAuthType` (P.Proxy :: P.Proxy AuthOAuthOauth2)-    `addForm` toForm ("token", token)--data RevokeOAuth2Token  -instance HasOptionalParam RevokeOAuth2Token ClientId where-  applyOptionalParam req (ClientId xs) =-    req `addForm` toForm ("client_id", xs)-instance HasOptionalParam RevokeOAuth2Token ClientSecret where-  applyOptionalParam req (ClientSecret xs) =-    req `addForm` toForm ("client_secret", xs)---- | @application/x-www-form-urlencoded@-instance Consumes RevokeOAuth2Token MimeFormUrlEncoded--instance Produces RevokeOAuth2Token MimeNoContent----- *** setOAuth2Client---- | @PUT \/admin\/clients\/{id}@--- --- Set OAuth 2.0 Client--- --- Replaces an existing OAuth 2.0 Client with the payload you send. If you pass `client_secret` the secret is used, otherwise the existing secret is used.  If set, the secret is echoed in the response. It is not possible to retrieve it later on.  OAuth 2.0 Clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.--- -setOAuth2Client-  :: (Consumes SetOAuth2Client MimeJSON, MimeRender MimeJSON OAuth2Client)-  => OAuth2Client -- ^ "oAuth2Client" -  OAuth 2.0 Client Request Body-  -> Id -- ^ "id" -  OAuth 2.0 Client ID-  -> OryHydraRequest SetOAuth2Client MimeJSON OAuth2Client MimeJSON-setOAuth2Client oAuth2Client (Id id) =-  _mkRequest "PUT" ["/admin/clients/",toPath id]-    `setBodyParam` oAuth2Client--data SetOAuth2Client ---- | /Body Param/ "OAuth2Client" - OAuth 2.0 Client Request Body-instance HasBodyParam SetOAuth2Client OAuth2Client ---- | @application/json@-instance Consumes SetOAuth2Client MimeJSON---- | @application/json@-instance Produces SetOAuth2Client MimeJSON----- *** setOAuth2ClientLifespans---- | @PUT \/admin\/clients\/{id}\/lifespans@--- --- Set OAuth2 Client Token Lifespans--- --- Set lifespans of different token types issued for this OAuth 2.0 client. Does not modify other fields.--- -setOAuth2ClientLifespans-  :: (Consumes SetOAuth2ClientLifespans MimeJSON)-  => Id -- ^ "id" -  OAuth 2.0 Client ID-  -> OryHydraRequest SetOAuth2ClientLifespans MimeJSON OAuth2Client MimeJSON-setOAuth2ClientLifespans (Id id) =-  _mkRequest "PUT" ["/admin/clients/",toPath id,"/lifespans"]--data SetOAuth2ClientLifespans -instance HasBodyParam SetOAuth2ClientLifespans OAuth2ClientTokenLifespans ---- | @application/json@-instance Consumes SetOAuth2ClientLifespans MimeJSON---- | @application/json@-instance Produces SetOAuth2ClientLifespans MimeJSON----- *** trustOAuth2JwtGrantIssuer0---- | @POST \/admin\/trust\/grants\/jwt-bearer\/issuers@--- --- Trust OAuth2 JWT Bearer Grant Type Issuer--- --- Use this endpoint to establish a trust relationship for a JWT issuer to perform JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants [RFC7523](https://datatracker.ietf.org/doc/html/rfc7523).--- -trustOAuth2JwtGrantIssuer0-  :: (Consumes TrustOAuth2JwtGrantIssuer0 MimeJSON)-  => OryHydraRequest TrustOAuth2JwtGrantIssuer0 MimeJSON TrustedOAuth2JwtGrantIssuer MimeJSON-trustOAuth2JwtGrantIssuer0 =-  _mkRequest "POST" ["/admin/trust/grants/jwt-bearer/issuers"]--data TrustOAuth2JwtGrantIssuer0 -instance HasBodyParam TrustOAuth2JwtGrantIssuer0 TrustOAuth2JwtGrantIssuer ---- | @application/json@-instance Consumes TrustOAuth2JwtGrantIssuer0 MimeJSON---- | @application/json@-instance Produces TrustOAuth2JwtGrantIssuer0 MimeJSON-
− lib/OryHydra/API/Oidc.hs 
@@ -1,218 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.API.Oidc--}--{-# LANGUAGE FlexibleContexts #-}-{-# LANGUAGE FlexibleInstances #-}-{-# LANGUAGE MonoLocalBinds #-}-{-# LANGUAGE MultiParamTypeClasses #-}-{-# LANGUAGE OverloadedStrings #-}-{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.API.Oidc where--import OryHydra.Core-import OryHydra.MimeTypes-import OryHydra.Model as M--import qualified Data.Aeson as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Lazy as BL-import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)-import qualified Data.Foldable as P-import qualified Data.Map as Map-import qualified Data.Maybe as P-import qualified Data.Proxy as P (Proxy(..))-import qualified Data.Set as Set-import qualified Data.String as P-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Data.Text.Lazy as TL-import qualified Data.Text.Lazy.Encoding as TL-import qualified Data.Time as TI-import qualified Network.HTTP.Client.MultipartFormData as NH-import qualified Network.HTTP.Media as ME-import qualified Network.HTTP.Types as NH-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Data.Text (Text)-import GHC.Base ((<|>))--import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)-import qualified Prelude as P---- * Operations----- ** Oidc---- *** createOidcDynamicClient---- | @POST \/oauth2\/register@--- --- Register OAuth2 Client using OpenID Dynamic Client Registration--- --- This endpoint behaves like the administrative counterpart (`createOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol. This feature needs to be enabled in the configuration. This endpoint is disabled by default. It can be enabled by an administrator.  Please note that using this endpoint you are not able to choose the `client_secret` nor the `client_id` as those values will be server generated when specifying `token_endpoint_auth_method` as `client_secret_basic` or `client_secret_post`.  The `client_secret` will be returned in the response and you will not be able to retrieve it later on. Write the secret down and keep it somewhere safe.--- -createOidcDynamicClient-  :: (Consumes CreateOidcDynamicClient MimeJSON, MimeRender MimeJSON OAuth2Client)-  => OAuth2Client -- ^ "oAuth2Client" -  Dynamic Client Registration Request Body-  -> OryHydraRequest CreateOidcDynamicClient MimeJSON OAuth2Client MimeJSON-createOidcDynamicClient oAuth2Client =-  _mkRequest "POST" ["/oauth2/register"]-    `setBodyParam` oAuth2Client--data CreateOidcDynamicClient ---- | /Body Param/ "OAuth2Client" - Dynamic Client Registration Request Body-instance HasBodyParam CreateOidcDynamicClient OAuth2Client ---- | @application/json@-instance Consumes CreateOidcDynamicClient MimeJSON---- | @application/json@-instance Produces CreateOidcDynamicClient MimeJSON----- *** deleteOidcDynamicClient---- | @DELETE \/oauth2\/register\/{id}@--- --- Delete OAuth 2.0 Client using the OpenID Dynamic Client Registration Management Protocol--- --- This endpoint behaves like the administrative counterpart (`deleteOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol. This feature needs to be enabled in the configuration. This endpoint is disabled by default. It can be enabled by an administrator.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.--- --- AuthMethod: 'AuthBasicBearer'--- -deleteOidcDynamicClient-  :: Id -- ^ "id" -  The id of the OAuth 2.0 Client.-  -> OryHydraRequest DeleteOidcDynamicClient MimeNoContent NoContent MimeNoContent-deleteOidcDynamicClient (Id id) =-  _mkRequest "DELETE" ["/oauth2/register/",toPath id]-    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBearer)--data DeleteOidcDynamicClient  -instance Produces DeleteOidcDynamicClient MimeNoContent----- *** discoverOidcConfiguration---- | @GET \/.well-known\/openid-configuration@--- --- OpenID Connect Discovery--- --- A mechanism for an OpenID Connect Relying Party to discover the End-User's OpenID Provider and obtain information needed to interact with it, including its OAuth 2.0 endpoint locations.  Popular libraries for OpenID Connect clients include oidc-client-js (JavaScript), go-oidc (Golang), and others. For a full list of clients go here: https://openid.net/developers/certified/--- -discoverOidcConfiguration-  :: OryHydraRequest DiscoverOidcConfiguration MimeNoContent OidcConfiguration MimeJSON-discoverOidcConfiguration =-  _mkRequest "GET" ["/.well-known/openid-configuration"]--data DiscoverOidcConfiguration  --- | @application/json@-instance Produces DiscoverOidcConfiguration MimeJSON----- *** getOidcDynamicClient---- | @GET \/oauth2\/register\/{id}@--- --- Get OAuth2 Client using OpenID Dynamic Client Registration--- --- This endpoint behaves like the administrative counterpart (`getOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.--- --- AuthMethod: 'AuthBasicBearer'--- -getOidcDynamicClient-  :: Id -- ^ "id" -  The id of the OAuth 2.0 Client.-  -> OryHydraRequest GetOidcDynamicClient MimeNoContent OAuth2Client MimeJSON-getOidcDynamicClient (Id id) =-  _mkRequest "GET" ["/oauth2/register/",toPath id]-    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBearer)--data GetOidcDynamicClient  --- | @application/json@-instance Produces GetOidcDynamicClient MimeJSON----- *** getOidcUserInfo---- | @GET \/userinfo@--- --- OpenID Connect Userinfo--- --- This endpoint returns the payload of the ID Token, including `session.id_token` values, of the provided OAuth 2.0 Access Token's consent request.  In the case of authentication error, a WWW-Authenticate header might be set in the response with more information about the error. See [the spec](https://datatracker.ietf.org/doc/html/rfc6750#section-3) for more details about header format.--- --- AuthMethod: 'AuthOAuthOauth2'--- -getOidcUserInfo-  :: OryHydraRequest GetOidcUserInfo MimeNoContent OidcUserInfo MimeJSON-getOidcUserInfo =-  _mkRequest "GET" ["/userinfo"]-    `_hasAuthType` (P.Proxy :: P.Proxy AuthOAuthOauth2)--data GetOidcUserInfo  --- | @application/json@-instance Produces GetOidcUserInfo MimeJSON----- *** revokeOidcSession---- | @GET \/oauth2\/sessions\/logout@--- --- OpenID Connect Front- and Back-channel Enabled Logout--- --- This endpoint initiates and completes user logout at the Ory OAuth2 & OpenID provider and initiates OpenID Connect Front- / Back-channel logout:  https://openid.net/specs/openid-connect-frontchannel-1_0.html https://openid.net/specs/openid-connect-backchannel-1_0.html  Back-channel logout is performed asynchronously and does not affect logout flow.--- -revokeOidcSession-  :: OryHydraRequest RevokeOidcSession MimeNoContent NoContent MimeNoContent-revokeOidcSession =-  _mkRequest "GET" ["/oauth2/sessions/logout"]--data RevokeOidcSession  -instance Produces RevokeOidcSession MimeNoContent----- *** setOidcDynamicClient---- | @PUT \/oauth2\/register\/{id}@--- --- Set OAuth2 Client using OpenID Dynamic Client Registration--- --- This endpoint behaves like the administrative counterpart (`setOAuth2Client`) but is capable of facing the public internet directly to be used by third parties. It implements the OpenID Connect Dynamic Client Registration Protocol.  This feature is disabled per default. It can be enabled by a system administrator.  If you pass `client_secret` the secret is used, otherwise the existing secret is used. If set, the secret is echoed in the response. It is not possible to retrieve it later on.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.--- --- AuthMethod: 'AuthBasicBearer'--- -setOidcDynamicClient-  :: (Consumes SetOidcDynamicClient MimeJSON, MimeRender MimeJSON OAuth2Client)-  => OAuth2Client -- ^ "oAuth2Client" -  OAuth 2.0 Client Request Body-  -> Id -- ^ "id" -  OAuth 2.0 Client ID-  -> OryHydraRequest SetOidcDynamicClient MimeJSON OAuth2Client MimeJSON-setOidcDynamicClient oAuth2Client (Id id) =-  _mkRequest "PUT" ["/oauth2/register/",toPath id]-    `_hasAuthType` (P.Proxy :: P.Proxy AuthBasicBearer)-    `setBodyParam` oAuth2Client--data SetOidcDynamicClient ---- | /Body Param/ "OAuth2Client" - OAuth 2.0 Client Request Body-instance HasBodyParam SetOidcDynamicClient OAuth2Client ---- | @application/json@-instance Consumes SetOidcDynamicClient MimeJSON---- | @application/json@-instance Produces SetOidcDynamicClient MimeJSON-
− lib/OryHydra/API/Wellknown.hs 
@@ -1,77 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.API.Wellknown--}--{-# LANGUAGE FlexibleContexts #-}-{-# LANGUAGE FlexibleInstances #-}-{-# LANGUAGE MonoLocalBinds #-}-{-# LANGUAGE MultiParamTypeClasses #-}-{-# LANGUAGE OverloadedStrings #-}-{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.API.Wellknown where--import OryHydra.Core-import OryHydra.MimeTypes-import OryHydra.Model as M--import qualified Data.Aeson as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Lazy as BL-import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)-import qualified Data.Foldable as P-import qualified Data.Map as Map-import qualified Data.Maybe as P-import qualified Data.Proxy as P (Proxy(..))-import qualified Data.Set as Set-import qualified Data.String as P-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Data.Text.Lazy as TL-import qualified Data.Text.Lazy.Encoding as TL-import qualified Data.Time as TI-import qualified Network.HTTP.Client.MultipartFormData as NH-import qualified Network.HTTP.Media as ME-import qualified Network.HTTP.Types as NH-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Data.Text (Text)-import GHC.Base ((<|>))--import Prelude ((==),(/=),($), (.),(<$>),(<*>),(>>=),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)-import qualified Prelude as P---- * Operations----- ** Wellknown---- *** discoverJsonWebKeys---- | @GET \/.well-known\/jwks.json@--- --- Discover Well-Known JSON Web Keys--- --- This endpoint returns JSON Web Keys required to verifying OpenID Connect ID Tokens and, if enabled, OAuth 2.0 JWT Access Tokens. This endpoint can be used with client libraries like [node-jwks-rsa](https://github.com/auth0/node-jwks-rsa) among others.--- -discoverJsonWebKeys-  :: OryHydraRequest DiscoverJsonWebKeys MimeNoContent JsonWebKeySet MimeJSON-discoverJsonWebKeys =-  _mkRequest "GET" ["/.well-known/jwks.json"]--data DiscoverJsonWebKeys  --- | @application/json@-instance Produces DiscoverJsonWebKeys MimeJSON-
− lib/OryHydra/Client.hs 
@@ -1,224 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.Client--}--{-# LANGUAGE OverloadedStrings #-}-{-# LANGUAGE RankNTypes #-}-{-# LANGUAGE RecordWildCards #-}-{-# LANGUAGE FlexibleContexts #-}-{-# LANGUAGE ScopedTypeVariables #-}-{-# LANGUAGE DeriveFunctor #-}-{-# LANGUAGE DeriveFoldable #-}-{-# LANGUAGE DeriveTraversable #-}-{-# OPTIONS_GHC -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.Client where--import OryHydra.Core-import OryHydra.Logging-import OryHydra.MimeTypes--import qualified Control.Exception.Safe as E-import qualified Control.Monad.IO.Class as P-import qualified Control.Monad as P-import qualified Data.Aeson.Types as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Char8 as BC-import qualified Data.ByteString.Lazy as BL-import qualified Data.ByteString.Lazy.Char8 as BCL-import qualified Data.Proxy as P (Proxy(..))-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Network.HTTP.Client as NH-import qualified Network.HTTP.Client.MultipartFormData as NH-import qualified Network.HTTP.Types as NH-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Data.Function ((&))-import Data.Monoid ((<>))-import Data.Text (Text)-import GHC.Exts (IsString(..))---- * Dispatch---- ** Lbs---- | send a request returning the raw http response-dispatchLbs-  :: (Produces req accept, MimeType contentType)-  => NH.Manager -- ^ http-client Connection manager-  -> OryHydraConfig -- ^ config-  -> OryHydraRequest req contentType res accept -- ^ request-  -> IO (NH.Response BCL.ByteString) -- ^ response-dispatchLbs manager config request  = do-  initReq <- _toInitRequest config request-  dispatchInitUnsafe manager config initReq---- ** Mime---- | pair of decoded http body and http response-data MimeResult res =-  MimeResult { mimeResult :: Either MimeError res -- ^ decoded http body-             , mimeResultResponse :: NH.Response BCL.ByteString -- ^ http response-             }-  deriving (Show, Functor, Foldable, Traversable)---- | pair of unrender/parser error and http response-data MimeError =-  MimeError {-    mimeError :: String -- ^ unrender/parser error-  , mimeErrorResponse :: NH.Response BCL.ByteString -- ^ http response-  } deriving (Show)---- | send a request returning the 'MimeResult'-dispatchMime-  :: forall req contentType res accept. (Produces req accept, MimeUnrender accept res, MimeType contentType)-  => NH.Manager -- ^ http-client Connection manager-  -> OryHydraConfig -- ^ config-  -> OryHydraRequest req contentType res accept -- ^ request-  -> IO (MimeResult res) -- ^ response-dispatchMime manager config request = do-  httpResponse <- dispatchLbs manager config request-  let statusCode = NH.statusCode . NH.responseStatus $ httpResponse-  parsedResult <--    runConfigLogWithExceptions "Client" config $-    do if (statusCode >= 400 && statusCode < 600)-         then do-           let s = "error statusCode: " ++ show statusCode-           _log "Client" levelError (T.pack s)-           pure (Left (MimeError s httpResponse))-         else case mimeUnrender (P.Proxy :: P.Proxy accept) (NH.responseBody httpResponse) of-           Left s -> do-             _log "Client" levelError (T.pack s)-             pure (Left (MimeError s httpResponse))-           Right r -> pure (Right r)-  return (MimeResult parsedResult httpResponse)---- | like 'dispatchMime', but only returns the decoded http body-dispatchMime'-  :: (Produces req accept, MimeUnrender accept res, MimeType contentType)-  => NH.Manager -- ^ http-client Connection manager-  -> OryHydraConfig -- ^ config-  -> OryHydraRequest req contentType res accept -- ^ request-  -> IO (Either MimeError res) -- ^ response-dispatchMime' manager config request  = do-    MimeResult parsedResult _ <- dispatchMime manager config request-    return parsedResult---- ** Unsafe---- | like 'dispatchReqLbs', but does not validate the operation is a 'Producer' of the "accept" 'MimeType'.  (Useful if the server's response is undocumented)-dispatchLbsUnsafe-  :: (MimeType accept, MimeType contentType)-  => NH.Manager -- ^ http-client Connection manager-  -> OryHydraConfig -- ^ config-  -> OryHydraRequest req contentType res accept -- ^ request-  -> IO (NH.Response BCL.ByteString) -- ^ response-dispatchLbsUnsafe manager config request  = do-  initReq <- _toInitRequest config request-  dispatchInitUnsafe manager config initReq---- | dispatch an InitRequest-dispatchInitUnsafe-  :: NH.Manager -- ^ http-client Connection manager-  -> OryHydraConfig -- ^ config-  -> InitRequest req contentType res accept -- ^ init request-  -> IO (NH.Response BCL.ByteString) -- ^ response-dispatchInitUnsafe manager config (InitRequest req) = do-  runConfigLogWithExceptions src config $-    do _log src levelInfo requestLogMsg-       _log src levelDebug requestDbgLogMsg-       res <- P.liftIO $ NH.httpLbs req manager-       _log src levelInfo (responseLogMsg res)-       _log src levelDebug ((T.pack . show) res)-       return res-  where-    src = "Client"-    endpoint =-      T.pack $-      BC.unpack $-      NH.method req <> " " <> NH.host req <> NH.path req <> NH.queryString req-    requestLogMsg = "REQ:" <> endpoint-    requestDbgLogMsg =-      "Headers=" <> (T.pack . show) (NH.requestHeaders req) <> " Body=" <>-      (case NH.requestBody req of-         NH.RequestBodyLBS xs -> T.decodeUtf8 (BL.toStrict xs)-         _ -> "<RequestBody>")-    responseStatusCode = (T.pack . show) . NH.statusCode . NH.responseStatus-    responseLogMsg res =-      "RES:statusCode=" <> responseStatusCode res <> " (" <> endpoint <> ")"---- * InitRequest---- | wraps an http-client 'Request' with request/response type parameters-newtype InitRequest req contentType res accept = InitRequest-  { unInitRequest :: NH.Request-  } deriving (Show)---- |  Build an http-client 'Request' record from the supplied config and request-_toInitRequest-  :: (MimeType accept, MimeType contentType)-  => OryHydraConfig -- ^ config-  -> OryHydraRequest req contentType res accept -- ^ request-  -> IO (InitRequest req contentType res accept) -- ^ initialized request-_toInitRequest config req0  =-  runConfigLogWithExceptions "Client" config $ do-    parsedReq <- P.liftIO $ NH.parseRequest $ BCL.unpack $ BCL.append (configHost config) (BCL.concat (rUrlPath req0))-    req1 <- P.liftIO $ _applyAuthMethods req0 config-    P.when-        (configValidateAuthMethods config && (not . null . rAuthTypes) req1)-        (E.throw $ AuthMethodException $ "AuthMethod not configured: " <> (show . head . rAuthTypes) req1)-    let req2 = req1 & _setContentTypeHeader & _setAcceptHeader-        params = rParams req2-        reqHeaders = ("User-Agent", WH.toHeader (configUserAgent config)) : paramsHeaders params-        reqQuery = let query = paramsQuery params-                       queryExtraUnreserved = configQueryExtraUnreserved config-                   in if B.null queryExtraUnreserved-                        then NH.renderQuery True query-                        else NH.renderQueryPartialEscape True (toPartialEscapeQuery queryExtraUnreserved query)-        pReq = parsedReq { NH.method = rMethod req2-                        , NH.requestHeaders = reqHeaders-                        , NH.queryString = reqQuery-                        }-    outReq <- case paramsBody params of-        ParamBodyNone -> pure (pReq { NH.requestBody = mempty })-        ParamBodyB bs -> pure (pReq { NH.requestBody = NH.RequestBodyBS bs })-        ParamBodyBL bl -> pure (pReq { NH.requestBody = NH.RequestBodyLBS bl })-        ParamBodyFormUrlEncoded form -> pure (pReq { NH.requestBody = NH.RequestBodyLBS (WH.urlEncodeForm form) })-        ParamBodyMultipartFormData parts -> NH.formDataBody parts pReq--    pure (InitRequest outReq)---- | modify the underlying Request-modifyInitRequest :: InitRequest req contentType res accept -> (NH.Request -> NH.Request) -> InitRequest req contentType res accept-modifyInitRequest (InitRequest req) f = InitRequest (f req)---- | modify the underlying Request (monadic)-modifyInitRequestM :: Monad m => InitRequest req contentType res accept -> (NH.Request -> m NH.Request) -> m (InitRequest req contentType res accept)-modifyInitRequestM (InitRequest req) f = fmap InitRequest (f req)---- ** Logging---- | Run a block using the configured logger instance-runConfigLog-  :: P.MonadIO m-  => OryHydraConfig -> LogExec m a-runConfigLog config = configLogExecWithContext config (configLogContext config)---- | Run a block using the configured logger instance (logs exceptions)-runConfigLogWithExceptions-  :: (E.MonadCatch m, P.MonadIO m)-  => T.Text -> OryHydraConfig -> LogExec m a-runConfigLogWithExceptions src config = runConfigLog config . logExceptions src
− lib/OryHydra/Core.hs 
@@ -1,582 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.Core--}--{-# LANGUAGE DeriveDataTypeable #-}-{-# LANGUAGE ExistentialQuantification #-}-{-# LANGUAGE GeneralizedNewtypeDeriving #-}-{-# LANGUAGE MultiParamTypeClasses #-}-{-# LANGUAGE NamedFieldPuns #-}-{-# LANGUAGE OverloadedStrings #-}-{-# LANGUAGE RankNTypes #-}-{-# LANGUAGE RecordWildCards #-}-{-# LANGUAGE ScopedTypeVariables #-}-{-# LANGUAGE TupleSections #-}-{-# LANGUAGE TypeFamilies #-}-{-# LANGUAGE CPP #-}-{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.Core where--import OryHydra.MimeTypes-import OryHydra.Logging--import qualified Control.Arrow as P (left)-import qualified Control.DeepSeq as NF-import qualified Control.Exception.Safe as E-import qualified Data.Aeson as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Base64.Lazy as BL64-import qualified Data.ByteString.Builder as BB-import qualified Data.ByteString.Char8 as BC-import qualified Data.ByteString.Lazy as BL-import qualified Data.ByteString.Lazy.Char8 as BCL-import qualified Data.CaseInsensitive as CI-import qualified Data.Data as P (Data, Typeable, TypeRep, typeRep)-import qualified Data.Foldable as P-import qualified Data.Ix as P-import qualified Data.Kind as K (Type)-import qualified Data.Maybe as P-import qualified Data.Proxy as P (Proxy(..))-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Data.Time as TI-import qualified Data.Time.ISO8601 as TI-import qualified GHC.Base as P (Alternative)-import qualified Lens.Micro as L-import qualified Network.HTTP.Client.MultipartFormData as NH-import qualified Network.HTTP.Types as NH-import qualified Prelude as P-import qualified Text.Printf as T-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Control.Applicative ((<|>))-import Control.Applicative (Alternative)-import Control.Monad.Fail (MonadFail)-import Data.Function ((&))-import Data.Foldable(foldlM)-import Data.Monoid ((<>))-import Data.Text (Text)-import Prelude (($), (.), (&&), (<$>), (<*>), Maybe(..), Bool(..), Char, String, fmap, mempty, pure, return, show, IO, Monad, Functor, maybe)---- * OryHydraConfig---- |-data OryHydraConfig = OryHydraConfig-  { configHost  :: BCL.ByteString -- ^ host supplied in the Request-  , configUserAgent :: Text -- ^ user-agent supplied in the Request-  , configLogExecWithContext :: LogExecWithContext -- ^ Run a block using a Logger instance-  , configLogContext :: LogContext -- ^ Configures the logger-  , configAuthMethods :: [AnyAuthMethod] -- ^ List of configured auth methods-  , configValidateAuthMethods :: Bool -- ^ throw exceptions if auth methods are not configured-  , configQueryExtraUnreserved :: B.ByteString -- ^ Configures additional querystring characters which must not be URI encoded, e.g. '+' or ':'-  }---- | display the config-instance P.Show OryHydraConfig where-  show c =-    T.printf-      "{ configHost = %v, configUserAgent = %v, ..}"-      (show (configHost c))-      (show (configUserAgent c))---- | constructs a default OryHydraConfig------ configHost:------ @http://localhost@------ configUserAgent:------ @"ory-hydra-client/0.1.0.0"@----newConfig :: IO OryHydraConfig-newConfig = do-    logCxt <- initLogContext-    return $ OryHydraConfig-        { configHost = "http://localhost"-        , configUserAgent = "ory-hydra-client/0.1.0.0"-        , configLogExecWithContext = runDefaultLogExecWithContext-        , configLogContext = logCxt-        , configAuthMethods = []-        , configValidateAuthMethods = True-        , configQueryExtraUnreserved = ""-        }---- | updates config use AuthMethod on matching requests-addAuthMethod :: AuthMethod auth => OryHydraConfig -> auth -> OryHydraConfig-addAuthMethod config@OryHydraConfig {configAuthMethods = as} a =-  config { configAuthMethods = AnyAuthMethod a : as}---- | updates the config to use stdout logging-withStdoutLogging :: OryHydraConfig -> IO OryHydraConfig-withStdoutLogging p = do-    logCxt <- stdoutLoggingContext (configLogContext p)-    return $ p { configLogExecWithContext = stdoutLoggingExec, configLogContext = logCxt }---- | updates the config to use stderr logging-withStderrLogging :: OryHydraConfig -> IO OryHydraConfig-withStderrLogging p = do-    logCxt <- stderrLoggingContext (configLogContext p)-    return $ p { configLogExecWithContext = stderrLoggingExec, configLogContext = logCxt }---- | updates the config to disable logging-withNoLogging :: OryHydraConfig -> OryHydraConfig-withNoLogging p = p { configLogExecWithContext =  runNullLogExec}---- * OryHydraRequest---- | Represents a request.------   Type Variables:------   * req - request operation---   * contentType - 'MimeType' associated with request body---   * res - response model---   * accept - 'MimeType' associated with response body-data OryHydraRequest req contentType res accept = OryHydraRequest-  { rMethod  :: NH.Method   -- ^ Method of OryHydraRequest-  , rUrlPath :: [BCL.ByteString] -- ^ Endpoint of OryHydraRequest-  , rParams   :: Params -- ^ params of OryHydraRequest-  , rAuthTypes :: [P.TypeRep] -- ^ types of auth methods-  }-  deriving (P.Show)---- | 'rMethod' Lens-rMethodL :: Lens_' (OryHydraRequest req contentType res accept) NH.Method-rMethodL f OryHydraRequest{..} = (\rMethod -> OryHydraRequest { rMethod, ..} ) <$> f rMethod-{-# INLINE rMethodL #-}---- | 'rUrlPath' Lens-rUrlPathL :: Lens_' (OryHydraRequest req contentType res accept) [BCL.ByteString]-rUrlPathL f OryHydraRequest{..} = (\rUrlPath -> OryHydraRequest { rUrlPath, ..} ) <$> f rUrlPath-{-# INLINE rUrlPathL #-}---- | 'rParams' Lens-rParamsL :: Lens_' (OryHydraRequest req contentType res accept) Params-rParamsL f OryHydraRequest{..} = (\rParams -> OryHydraRequest { rParams, ..} ) <$> f rParams-{-# INLINE rParamsL #-}---- | 'rParams' Lens-rAuthTypesL :: Lens_' (OryHydraRequest req contentType res accept) [P.TypeRep]-rAuthTypesL f OryHydraRequest{..} = (\rAuthTypes -> OryHydraRequest { rAuthTypes, ..} ) <$> f rAuthTypes-{-# INLINE rAuthTypesL #-}---- * HasBodyParam---- | Designates the body parameter of a request-class HasBodyParam req param where-  setBodyParam :: forall contentType res accept. (Consumes req contentType, MimeRender contentType param) => OryHydraRequest req contentType res accept -> param -> OryHydraRequest req contentType res accept-  setBodyParam req xs =-    req `_setBodyLBS` mimeRender (P.Proxy :: P.Proxy contentType) xs & _setContentTypeHeader---- * HasOptionalParam---- | Designates the optional parameters of a request-class HasOptionalParam req param where-  {-# MINIMAL applyOptionalParam | (-&-) #-}--  -- | Apply an optional parameter to a request-  applyOptionalParam :: OryHydraRequest req contentType res accept -> param -> OryHydraRequest req contentType res accept-  applyOptionalParam = (-&-)-  {-# INLINE applyOptionalParam #-}--  -- | infix operator \/ alias for 'addOptionalParam'-  (-&-) :: OryHydraRequest req contentType res accept -> param -> OryHydraRequest req contentType res accept-  (-&-) = applyOptionalParam-  {-# INLINE (-&-) #-}--infixl 2 -&----- | Request Params-data Params = Params-  { paramsQuery :: NH.Query-  , paramsHeaders :: NH.RequestHeaders-  , paramsBody :: ParamBody-  }-  deriving (P.Show)---- | 'paramsQuery' Lens-paramsQueryL :: Lens_' Params NH.Query-paramsQueryL f Params{..} = (\paramsQuery -> Params { paramsQuery, ..} ) <$> f paramsQuery-{-# INLINE paramsQueryL #-}---- | 'paramsHeaders' Lens-paramsHeadersL :: Lens_' Params NH.RequestHeaders-paramsHeadersL f Params{..} = (\paramsHeaders -> Params { paramsHeaders, ..} ) <$> f paramsHeaders-{-# INLINE paramsHeadersL #-}---- | 'paramsBody' Lens-paramsBodyL :: Lens_' Params ParamBody-paramsBodyL f Params{..} = (\paramsBody -> Params { paramsBody, ..} ) <$> f paramsBody-{-# INLINE paramsBodyL #-}---- | Request Body-data ParamBody-  = ParamBodyNone-  | ParamBodyB B.ByteString-  | ParamBodyBL BL.ByteString-  | ParamBodyFormUrlEncoded WH.Form-  | ParamBodyMultipartFormData [NH.Part]-  deriving (P.Show)---- ** OryHydraRequest Utils--_mkRequest :: NH.Method -- ^ Method-          -> [BCL.ByteString] -- ^ Endpoint-          -> OryHydraRequest req contentType res accept -- ^ req: Request Type, res: Response Type-_mkRequest m u = OryHydraRequest m u _mkParams []--_mkParams :: Params-_mkParams = Params [] [] ParamBodyNone--setHeader ::-     OryHydraRequest req contentType res accept-  -> [NH.Header]-  -> OryHydraRequest req contentType res accept-setHeader req header =-  req `removeHeader` P.fmap P.fst header-  & (`addHeader` header)--addHeader ::-     OryHydraRequest req contentType res accept-  -> [NH.Header]-  -> OryHydraRequest req contentType res accept-addHeader req header = L.over (rParamsL . paramsHeadersL) (header P.++) req--removeHeader :: OryHydraRequest req contentType res accept -> [NH.HeaderName] -> OryHydraRequest req contentType res accept-removeHeader req header =-  req &-  L.over-    (rParamsL . paramsHeadersL)-    (P.filter (\h -> cifst h `P.notElem` P.fmap CI.mk header))-  where-    cifst = CI.mk . P.fst---_setContentTypeHeader :: forall req contentType res accept. MimeType contentType => OryHydraRequest req contentType res accept -> OryHydraRequest req contentType res accept-_setContentTypeHeader req =-    case mimeType (P.Proxy :: P.Proxy contentType) of-        Just m -> req `setHeader` [("content-type", BC.pack $ P.show m)]-        Nothing -> req `removeHeader` ["content-type"]--_setAcceptHeader :: forall req contentType res accept. MimeType accept => OryHydraRequest req contentType res accept -> OryHydraRequest req contentType res accept-_setAcceptHeader req =-    case mimeType (P.Proxy :: P.Proxy accept) of-        Just m -> req `setHeader` [("accept", BC.pack $ P.show m)]-        Nothing -> req `removeHeader` ["accept"]--setQuery ::-     OryHydraRequest req contentType res accept-  -> [NH.QueryItem]-  -> OryHydraRequest req contentType res accept-setQuery req query =-  req &-  L.over-    (rParamsL . paramsQueryL)-    (P.filter (\q -> cifst q `P.notElem` P.fmap cifst query)) &-  (`addQuery` query)-  where-    cifst = CI.mk . P.fst--addQuery ::-     OryHydraRequest req contentType res accept-  -> [NH.QueryItem]-  -> OryHydraRequest req contentType res accept-addQuery req query = req & L.over (rParamsL . paramsQueryL) (query P.++)--addForm :: OryHydraRequest req contentType res accept -> WH.Form -> OryHydraRequest req contentType res accept-addForm req newform =-    let form = case paramsBody (rParams req) of-            ParamBodyFormUrlEncoded _form -> _form-            _ -> mempty-    in req & L.set (rParamsL . paramsBodyL) (ParamBodyFormUrlEncoded (newform <> form))--_addMultiFormPart :: OryHydraRequest req contentType res accept -> NH.Part -> OryHydraRequest req contentType res accept-_addMultiFormPart req newpart =-    let parts = case paramsBody (rParams req) of-            ParamBodyMultipartFormData _parts -> _parts-            _ -> []-    in req & L.set (rParamsL . paramsBodyL) (ParamBodyMultipartFormData (newpart : parts))--_setBodyBS :: OryHydraRequest req contentType res accept -> B.ByteString -> OryHydraRequest req contentType res accept-_setBodyBS req body =-    req & L.set (rParamsL . paramsBodyL) (ParamBodyB body)--_setBodyLBS :: OryHydraRequest req contentType res accept -> BL.ByteString -> OryHydraRequest req contentType res accept-_setBodyLBS req body =-    req & L.set (rParamsL . paramsBodyL) (ParamBodyBL body)--_hasAuthType :: AuthMethod authMethod => OryHydraRequest req contentType res accept -> P.Proxy authMethod -> OryHydraRequest req contentType res accept-_hasAuthType req proxy =-  req & L.over rAuthTypesL (P.typeRep proxy :)---- ** Params Utils--toPath-  :: WH.ToHttpApiData a-  => a -> BCL.ByteString-toPath = BB.toLazyByteString . WH.toEncodedUrlPiece--toHeader :: WH.ToHttpApiData a => (NH.HeaderName, a) -> [NH.Header]-toHeader x = [fmap WH.toHeader x]--toForm :: WH.ToHttpApiData v => (BC.ByteString, v) -> WH.Form-toForm (k,v) = WH.toForm [(BC.unpack k,v)]--toQuery :: WH.ToHttpApiData a => (BC.ByteString, Maybe a) -> [NH.QueryItem]-toQuery x = [(fmap . fmap) toQueryParam x]-  where toQueryParam = T.encodeUtf8 . WH.toQueryParam--toPartialEscapeQuery :: B.ByteString -> NH.Query -> NH.PartialEscapeQuery-toPartialEscapeQuery extraUnreserved query = fmap (\(k, v) -> (k, maybe [] go v)) query-  where go :: B.ByteString -> [NH.EscapeItem]-        go v = v & B.groupBy (\a b -> a `B.notElem` extraUnreserved && b `B.notElem` extraUnreserved)-                 & fmap (\xs -> if B.null xs then NH.QN xs-                                  else if B.head xs `B.elem` extraUnreserved-                                          then NH.QN xs -- Not Encoded-                                          else NH.QE xs -- Encoded-                        )---- *** OpenAPI `CollectionFormat` Utils---- | Determines the format of the array if type array is used.-data CollectionFormat-  = CommaSeparated -- ^ CSV format for multiple parameters.-  | SpaceSeparated -- ^ Also called "SSV"-  | TabSeparated -- ^ Also called "TSV"-  | PipeSeparated -- ^ `value1|value2|value2`-  | MultiParamArray -- ^ Using multiple GET parameters, e.g. `foo=bar&foo=baz`. This is valid only for parameters in "query" ('NH.Query') or "formData" ('WH.Form')--toHeaderColl :: WH.ToHttpApiData a => CollectionFormat -> (NH.HeaderName, [a]) -> [NH.Header]-toHeaderColl c xs = _toColl c toHeader xs--toFormColl :: WH.ToHttpApiData v => CollectionFormat -> (BC.ByteString, [v]) -> WH.Form-toFormColl c xs = WH.toForm $ fmap unpack $ _toColl c toHeader $ pack xs-  where-    pack (k,v) = (CI.mk k, v)-    unpack (k,v) = (BC.unpack (CI.original k), BC.unpack v)--toQueryColl :: WH.ToHttpApiData a => CollectionFormat -> (BC.ByteString, Maybe [a]) -> NH.Query-toQueryColl c xs = _toCollA c toQuery xs--_toColl :: P.Traversable f => CollectionFormat -> (f a -> [(b, BC.ByteString)]) -> f [a] -> [(b, BC.ByteString)]-_toColl c encode xs = fmap (fmap P.fromJust) (_toCollA' c fencode BC.singleton (fmap Just xs))-  where fencode = fmap (fmap Just) . encode . fmap P.fromJust-        {-# INLINE fencode #-}--_toCollA :: (P.Traversable f, P.Traversable t, P.Alternative t) => CollectionFormat -> (f (t a) -> [(b, t BC.ByteString)]) -> f (t [a]) -> [(b, t BC.ByteString)]-_toCollA c encode xs = _toCollA' c encode BC.singleton xs--_toCollA' :: (P.Monoid c, P.Traversable f, P.Traversable t, P.Alternative t) => CollectionFormat -> (f (t a) -> [(b, t c)]) -> (Char -> c) -> f (t [a]) -> [(b, t c)]-_toCollA' c encode one xs = case c of-  CommaSeparated -> go (one ',')-  SpaceSeparated -> go (one ' ')-  TabSeparated -> go (one '\t')-  PipeSeparated -> go (one '|')-  MultiParamArray -> expandList-  where-    go sep =-      [P.foldl1 (\(sk, sv) (_, v) -> (sk, (combine sep <$> sv <*> v) <|> sv <|> v)) expandList]-    combine sep x y = x <> sep <> y-    expandList = (P.concatMap encode . (P.traverse . P.traverse) P.toList) xs-    {-# INLINE go #-}-    {-# INLINE expandList #-}-    {-# INLINE combine #-}---- * AuthMethods---- | Provides a method to apply auth methods to requests-class P.Typeable a =>-      AuthMethod a  where-  applyAuthMethod-    :: OryHydraConfig-    -> a-    -> OryHydraRequest req contentType res accept-    -> IO (OryHydraRequest req contentType res accept)---- | An existential wrapper for any AuthMethod-data AnyAuthMethod = forall a. AuthMethod a => AnyAuthMethod a deriving (P.Typeable)--instance AuthMethod AnyAuthMethod where applyAuthMethod config (AnyAuthMethod a) req = applyAuthMethod config a req---- | indicates exceptions related to AuthMethods-data AuthMethodException = AuthMethodException String deriving (P.Show, P.Typeable)--instance E.Exception AuthMethodException---- | apply all matching AuthMethods in config to request-_applyAuthMethods-  :: OryHydraRequest req contentType res accept-  -> OryHydraConfig-  -> IO (OryHydraRequest req contentType res accept)-_applyAuthMethods req config@(OryHydraConfig {configAuthMethods = as}) =-  foldlM go req as-  where-    go r (AnyAuthMethod a) = applyAuthMethod config a r---- * Utils---- | Removes Null fields.  (OpenAPI-Specification 2.0 does not allow Null in JSON)-#if MIN_VERSION_aeson(2,0,0)-_omitNulls :: [(A.Key, A.Value)] -> A.Value-#else-_omitNulls :: [(Text, A.Value)] -> A.Value-#endif-_omitNulls = A.object . P.filter notNull-  where-    notNull (_, A.Null) = False-    notNull _ = True---- | Encodes fields using WH.toQueryParam-_toFormItem :: (WH.ToHttpApiData a, Functor f) => t -> f a -> f (t, [Text])-_toFormItem name x = (name,) . (:[]) . WH.toQueryParam <$> x---- | Collapse (Just "") to Nothing-_emptyToNothing :: Maybe String -> Maybe String-_emptyToNothing (Just "") = Nothing-_emptyToNothing x = x-{-# INLINE _emptyToNothing #-}---- | Collapse (Just mempty) to Nothing-_memptyToNothing :: (P.Monoid a, P.Eq a) => Maybe a -> Maybe a-_memptyToNothing (Just x) | x P.== P.mempty = Nothing-_memptyToNothing x = x-{-# INLINE _memptyToNothing #-}---- * DateTime Formatting--newtype DateTime = DateTime { unDateTime :: TI.UTCTime }-  deriving (P.Eq,P.Data,P.Ord,P.Typeable,NF.NFData)-instance A.FromJSON DateTime where-  parseJSON = A.withText "DateTime" (_readDateTime . T.unpack)-instance A.ToJSON DateTime where-  toJSON (DateTime t) = A.toJSON (_showDateTime t)-instance WH.FromHttpApiData DateTime where-  parseUrlPiece = P.maybe (P.Left "parseUrlPiece @DateTime") P.Right . _readDateTime . T.unpack-instance WH.ToHttpApiData DateTime where-  toUrlPiece (DateTime t) = T.pack (_showDateTime t)-instance P.Show DateTime where-  show (DateTime t) = _showDateTime t-instance MimeRender MimeMultipartFormData DateTime where-  mimeRender _ = mimeRenderDefaultMultipartFormData---- | @_parseISO8601@-_readDateTime :: (MonadFail m, Alternative m) => String -> m DateTime-_readDateTime s =-  DateTime <$> _parseISO8601 s-{-# INLINE _readDateTime #-}---- | @TI.formatISO8601Millis@-_showDateTime :: (t ~ TI.UTCTime, TI.FormatTime t) => t -> String-_showDateTime =-  TI.formatISO8601Millis-{-# INLINE _showDateTime #-}---- | parse an ISO8601 date-time string-_parseISO8601 :: (TI.ParseTime t, MonadFail m, Alternative m) => String -> m t-_parseISO8601 t =-  P.asum $-  P.flip (TI.parseTimeM True TI.defaultTimeLocale) t <$>-  ["%FT%T%QZ", "%FT%T%Q%z", "%FT%T%Q%Z"]-{-# INLINE _parseISO8601 #-}---- * Date Formatting--newtype Date = Date { unDate :: TI.Day }-  deriving (P.Enum,P.Eq,P.Data,P.Ord,P.Ix,NF.NFData)-instance A.FromJSON Date where-  parseJSON = A.withText "Date" (_readDate . T.unpack)-instance A.ToJSON Date where-  toJSON (Date t) = A.toJSON (_showDate t)-instance WH.FromHttpApiData Date where-  parseUrlPiece = P.maybe (P.Left "parseUrlPiece @Date") P.Right . _readDate . T.unpack-instance WH.ToHttpApiData Date where-  toUrlPiece (Date t) = T.pack (_showDate t)-instance P.Show Date where-  show (Date t) = _showDate t-instance MimeRender MimeMultipartFormData Date where-  mimeRender _ = mimeRenderDefaultMultipartFormData---- | @TI.parseTimeM True TI.defaultTimeLocale "%Y-%m-%d"@-_readDate :: MonadFail m => String -> m Date-_readDate s = Date <$> TI.parseTimeM True TI.defaultTimeLocale "%Y-%m-%d" s-{-# INLINE _readDate #-}---- | @TI.formatTime TI.defaultTimeLocale "%Y-%m-%d"@-_showDate :: TI.FormatTime t => t -> String-_showDate =-  TI.formatTime TI.defaultTimeLocale "%Y-%m-%d"-{-# INLINE _showDate #-}---- * Byte/Binary Formatting----- | base64 encoded characters-newtype ByteArray = ByteArray { unByteArray :: BL.ByteString }-  deriving (P.Eq,P.Data,P.Ord,P.Typeable,NF.NFData)--instance A.FromJSON ByteArray where-  parseJSON = A.withText "ByteArray" _readByteArray-instance A.ToJSON ByteArray where-  toJSON = A.toJSON . _showByteArray-instance WH.FromHttpApiData ByteArray where-  parseUrlPiece = P.maybe (P.Left "parseUrlPiece @ByteArray") P.Right . _readByteArray-instance WH.ToHttpApiData ByteArray where-  toUrlPiece = _showByteArray-instance P.Show ByteArray where-  show = T.unpack . _showByteArray-instance MimeRender MimeMultipartFormData ByteArray where-  mimeRender _ = mimeRenderDefaultMultipartFormData---- | read base64 encoded characters-_readByteArray :: MonadFail m => Text -> m ByteArray-_readByteArray = P.either P.fail (pure . ByteArray) . BL64.decode . BL.fromStrict . T.encodeUtf8-{-# INLINE _readByteArray #-}---- | show base64 encoded characters-_showByteArray :: ByteArray -> Text-_showByteArray = T.decodeUtf8 . BL.toStrict . BL64.encode . unByteArray-{-# INLINE _showByteArray #-}---- | any sequence of octets-newtype Binary = Binary { unBinary :: BL.ByteString }-  deriving (P.Eq,P.Data,P.Ord,P.Typeable,NF.NFData)--instance A.FromJSON Binary where-  parseJSON = A.withText "Binary" _readBinaryBase64-instance A.ToJSON Binary where-  toJSON = A.toJSON . _showBinaryBase64-instance WH.FromHttpApiData Binary where-  parseUrlPiece = P.maybe (P.Left "parseUrlPiece @Binary") P.Right . _readBinaryBase64-instance WH.ToHttpApiData Binary where-  toUrlPiece = _showBinaryBase64-instance P.Show Binary where-  show = T.unpack . _showBinaryBase64-instance MimeRender MimeMultipartFormData Binary where-  mimeRender _ = unBinary--_readBinaryBase64 :: MonadFail m => Text -> m Binary-_readBinaryBase64 = P.either P.fail (pure . Binary) . BL64.decode . BL.fromStrict . T.encodeUtf8-{-# INLINE _readBinaryBase64 #-}--_showBinaryBase64 :: Binary -> Text-_showBinaryBase64 = T.decodeUtf8 . BL.toStrict . BL64.encode . unBinary-{-# INLINE _showBinaryBase64 #-}---- * Lens Type Aliases--type Lens_' s a = Lens_ s s a a-type Lens_ s t a b = forall (f :: K.Type -> K.Type). Functor f => (a -> f b) -> s -> f t
− lib/OryHydra/Logging.hs 
@@ -1,34 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.Logging-Logging functions--}-{-# LANGUAGE CPP #-}--#ifdef USE_KATIP--module OryHydra.Logging-  ( module OryHydra.LoggingKatip-  ) where--import OryHydra.LoggingKatip--#else--module OryHydra.Logging-  ( module OryHydra.LoggingMonadLogger-  ) where--import OryHydra.LoggingMonadLogger--#endif
− lib/OryHydra/LoggingKatip.hs 
@@ -1,118 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.LoggingKatip-Katip Logging functions--}--{-# LANGUAGE OverloadedStrings #-}-{-# LANGUAGE RankNTypes #-}-{-# LANGUAGE ScopedTypeVariables #-}--module OryHydra.LoggingKatip where--import qualified Control.Exception.Safe as E-import qualified Control.Monad.IO.Class as P-import qualified Control.Monad.Trans.Reader as P-import qualified Data.Text as T-import qualified Lens.Micro as L-import qualified System.IO as IO--import Data.Text (Text)-import GHC.Exts (IsString(..))--import qualified Katip as LG---- * Type Aliases (for compatibility)---- | Runs a Katip logging block with the Log environment-type LogExecWithContext = forall m a. P.MonadIO m =>-                                      LogContext -> LogExec m a---- | A Katip logging block-type LogExec m a = LG.KatipT m a -> m a---- | A Katip Log environment-type LogContext = LG.LogEnv---- | A Katip Log severity-type LogLevel = LG.Severity---- * default logger---- | the default log environment-initLogContext :: IO LogContext-initLogContext = LG.initLogEnv "OryHydra" "dev"---- | Runs a Katip logging block with the Log environment-runDefaultLogExecWithContext :: LogExecWithContext-runDefaultLogExecWithContext = LG.runKatipT---- * stdout logger---- | Runs a Katip logging block with the Log environment-stdoutLoggingExec :: LogExecWithContext-stdoutLoggingExec = runDefaultLogExecWithContext---- | A Katip Log environment which targets stdout-stdoutLoggingContext :: LogContext -> IO LogContext-stdoutLoggingContext cxt = do-    handleScribe <- LG.mkHandleScribe LG.ColorIfTerminal IO.stdout (LG.permitItem LG.InfoS) LG.V2-    LG.registerScribe "stdout" handleScribe LG.defaultScribeSettings cxt---- * stderr logger---- | Runs a Katip logging block with the Log environment-stderrLoggingExec :: LogExecWithContext-stderrLoggingExec = runDefaultLogExecWithContext---- | A Katip Log environment which targets stderr-stderrLoggingContext :: LogContext -> IO LogContext-stderrLoggingContext cxt = do-    handleScribe <- LG.mkHandleScribe LG.ColorIfTerminal IO.stderr (LG.permitItem LG.InfoS) LG.V2-    LG.registerScribe "stderr" handleScribe LG.defaultScribeSettings cxt---- * Null logger---- | Disables Katip logging-runNullLogExec :: LogExecWithContext-runNullLogExec le (LG.KatipT f) = P.runReaderT f (L.set LG.logEnvScribes mempty le)---- * Log Msg---- | Log a katip message-_log :: (Applicative m, LG.Katip m) => Text -> LogLevel -> Text -> m ()-_log src level msg = do-  LG.logMsg (fromString $ T.unpack src) level (LG.logStr msg)---- * Log Exceptions---- | re-throws exceptions after logging them-logExceptions-  :: (LG.Katip m, E.MonadCatch m, Applicative m)-  => Text -> m a -> m a-logExceptions src =-  E.handle-    (\(e :: E.SomeException) -> do-       _log src LG.ErrorS ((T.pack . show) e)-       E.throw e)---- * Log Level--levelInfo :: LogLevel-levelInfo = LG.InfoS--levelError :: LogLevel-levelError = LG.ErrorS--levelDebug :: LogLevel-levelDebug = LG.DebugS
− lib/OryHydra/LoggingMonadLogger.hs 
@@ -1,127 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.LoggingMonadLogger-monad-logger Logging functions--}--{-# LANGUAGE OverloadedStrings #-}-{-# LANGUAGE RankNTypes #-}-{-# LANGUAGE ScopedTypeVariables #-}--module OryHydra.LoggingMonadLogger where--import qualified Control.Exception.Safe as E-import qualified Control.Monad.IO.Class as P-import qualified Data.Text as T-import qualified Data.Time as TI--import Data.Text (Text)--import qualified Control.Monad.Logger as LG---- * Type Aliases (for compatibility)---- | Runs a monad-logger  block with the filter predicate-type LogExecWithContext = forall m a. P.MonadIO m =>-                                      LogContext -> LogExec m a---- | A monad-logger block-type LogExec m a = LG.LoggingT m a -> m a---- | A monad-logger filter predicate-type LogContext = LG.LogSource -> LG.LogLevel -> Bool---- | A monad-logger log level-type LogLevel = LG.LogLevel---- * default logger---- | the default log environment-initLogContext :: IO LogContext-initLogContext = pure infoLevelFilter---- | Runs a monad-logger block with the filter predicate-runDefaultLogExecWithContext :: LogExecWithContext-runDefaultLogExecWithContext = runNullLogExec---- * stdout logger---- | Runs a monad-logger block targeting stdout, with the filter predicate-stdoutLoggingExec :: LogExecWithContext-stdoutLoggingExec cxt = LG.runStdoutLoggingT . LG.filterLogger cxt---- | @pure@-stdoutLoggingContext :: LogContext -> IO LogContext-stdoutLoggingContext = pure---- * stderr logger---- | Runs a monad-logger block targeting stderr, with the filter predicate-stderrLoggingExec :: LogExecWithContext-stderrLoggingExec cxt = LG.runStderrLoggingT . LG.filterLogger cxt---- | @pure@-stderrLoggingContext :: LogContext -> IO LogContext-stderrLoggingContext = pure---- * Null logger---- | Disables monad-logger logging-runNullLogExec :: LogExecWithContext-runNullLogExec = const (`LG.runLoggingT` nullLogger)---- | monad-logger which does nothing-nullLogger :: LG.Loc -> LG.LogSource -> LG.LogLevel -> LG.LogStr -> IO ()-nullLogger _ _ _ _ = return ()---- * Log Msg---- | Log a message using the current time-_log :: (P.MonadIO m, LG.MonadLogger m) => Text -> LG.LogLevel -> Text -> m ()-_log src level msg = do-  now <- P.liftIO (formatTimeLog <$> TI.getCurrentTime)-  LG.logOtherNS ("OryHydra." <> src) level ("[" <> now <> "] " <> msg)- where-  formatTimeLog =-    T.pack . TI.formatTime TI.defaultTimeLocale "%Y-%m-%dT%H:%M:%S%Z"---- * Log Exceptions---- | re-throws exceptions after logging them-logExceptions-   :: (LG.MonadLogger m, E.MonadCatch m, P.MonadIO m)-   => Text -> m a -> m a-logExceptions src =-   E.handle-     (\(e :: E.SomeException) -> do-        _log src LG.LevelError ((T.pack . show) e)-        E.throw e)---- * Log Level--levelInfo :: LogLevel-levelInfo = LG.LevelInfo--levelError :: LogLevel-levelError = LG.LevelError--levelDebug :: LogLevel-levelDebug = LG.LevelDebug---- * Level Filter--minLevelFilter :: LG.LogLevel -> LG.LogSource -> LG.LogLevel -> Bool-minLevelFilter l _ l' = l' >= l--infoLevelFilter :: LG.LogSource -> LG.LogLevel -> Bool-infoLevelFilter = minLevelFilter LG.LevelInfo
− lib/OryHydra/MimeTypes.hs 
@@ -1,204 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.MimeTypes--}--{-# LANGUAGE ConstraintKinds #-}-{-# LANGUAGE ExistentialQuantification #-}-{-# LANGUAGE FlexibleContexts #-}-{-# LANGUAGE FlexibleInstances #-}-{-# LANGUAGE MultiParamTypeClasses #-}-{-# LANGUAGE OverloadedStrings #-}-{-# LANGUAGE ScopedTypeVariables #-}-{-# OPTIONS_GHC -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.MimeTypes where--import qualified Control.Arrow as P (left)-import qualified Data.Aeson as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Builder as BB-import qualified Data.ByteString.Char8 as BC-import qualified Data.ByteString.Lazy as BL-import qualified Data.ByteString.Lazy.Char8 as BCL-import qualified Data.Data as P (Typeable)-import qualified Data.Proxy as P (Proxy(..))-import qualified Data.String as P-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Network.HTTP.Media as ME-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Prelude (($), (.),(<$>),(<*>),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty)-import qualified Prelude as P---- * ContentType MimeType--data ContentType a = MimeType a => ContentType { unContentType :: a }---- * Accept MimeType--data Accept a = MimeType a => Accept { unAccept :: a }---- * Consumes Class--class MimeType mtype => Consumes req mtype where---- * Produces Class--class MimeType mtype => Produces req mtype where---- * Default Mime Types--data MimeJSON = MimeJSON deriving (P.Typeable)-data MimeXML = MimeXML deriving (P.Typeable)-data MimePlainText = MimePlainText deriving (P.Typeable)-data MimeFormUrlEncoded = MimeFormUrlEncoded deriving (P.Typeable)-data MimeMultipartFormData = MimeMultipartFormData deriving (P.Typeable)-data MimeOctetStream = MimeOctetStream deriving (P.Typeable)-data MimeNoContent = MimeNoContent deriving (P.Typeable)-data MimeAny = MimeAny deriving (P.Typeable)---- | A type for responses without content-body.-data NoContent = NoContent-  deriving (P.Show, P.Eq, P.Typeable)----- * MimeType Class--class P.Typeable mtype => MimeType mtype  where-  {-# MINIMAL mimeType | mimeTypes #-}--  mimeTypes :: P.Proxy mtype -> [ME.MediaType]-  mimeTypes p =-    case mimeType p of-      Just x -> [x]-      Nothing -> []--  mimeType :: P.Proxy mtype -> Maybe ME.MediaType-  mimeType p =-    case mimeTypes p of-      [] -> Nothing-      (x:_) -> Just x--  mimeType' :: mtype -> Maybe ME.MediaType-  mimeType' _ = mimeType (P.Proxy :: P.Proxy mtype)-  mimeTypes' :: mtype -> [ME.MediaType]-  mimeTypes' _ = mimeTypes (P.Proxy :: P.Proxy mtype)---- Default MimeType Instances---- | @application/json; charset=utf-8@-instance MimeType MimeJSON where-  mimeType _ = Just $ P.fromString "application/json"--- | @application/xml; charset=utf-8@-instance MimeType MimeXML where-  mimeType _ = Just $ P.fromString "application/xml"--- | @application/x-www-form-urlencoded@-instance MimeType MimeFormUrlEncoded where-  mimeType _ = Just $ P.fromString "application/x-www-form-urlencoded"--- | @multipart/form-data@-instance MimeType MimeMultipartFormData where-  mimeType _ = Just $ P.fromString "multipart/form-data"--- | @text/plain; charset=utf-8@-instance MimeType MimePlainText where-  mimeType _ = Just $ P.fromString "text/plain"--- | @application/octet-stream@-instance MimeType MimeOctetStream where-  mimeType _ = Just $ P.fromString "application/octet-stream"--- | @"*/*"@-instance MimeType MimeAny where-  mimeType _ = Just $ P.fromString "*/*"-instance MimeType MimeNoContent where-  mimeType _ = Nothing---- * MimeRender Class--class MimeType mtype => MimeRender mtype x where-    mimeRender  :: P.Proxy mtype -> x -> BL.ByteString-    mimeRender' :: mtype -> x -> BL.ByteString-    mimeRender' _ x = mimeRender (P.Proxy :: P.Proxy mtype) x---mimeRenderDefaultMultipartFormData :: WH.ToHttpApiData a => a -> BL.ByteString-mimeRenderDefaultMultipartFormData = BL.fromStrict . T.encodeUtf8 . WH.toQueryParam---- Default MimeRender Instances---- | `A.encode`-instance A.ToJSON a => MimeRender MimeJSON a where mimeRender _ = A.encode--- | @WH.urlEncodeAsForm@-instance WH.ToForm a => MimeRender MimeFormUrlEncoded a where mimeRender _ = WH.urlEncodeAsForm---- | @P.id@-instance MimeRender MimePlainText BL.ByteString where mimeRender _ = P.id--- | @BL.fromStrict . T.encodeUtf8@-instance MimeRender MimePlainText T.Text where mimeRender _ = BL.fromStrict . T.encodeUtf8--- | @BCL.pack@-instance MimeRender MimePlainText String where mimeRender _ = BCL.pack---- | @P.id@-instance MimeRender MimeOctetStream BL.ByteString where mimeRender _ = P.id--- | @BL.fromStrict . T.encodeUtf8@-instance MimeRender MimeOctetStream T.Text where mimeRender _ = BL.fromStrict . T.encodeUtf8--- | @BCL.pack@-instance MimeRender MimeOctetStream String where mimeRender _ = BCL.pack--instance MimeRender MimeMultipartFormData BL.ByteString where mimeRender _ = P.id--instance MimeRender MimeMultipartFormData Bool where mimeRender _ = mimeRenderDefaultMultipartFormData-instance MimeRender MimeMultipartFormData Char where mimeRender _ = mimeRenderDefaultMultipartFormData-instance MimeRender MimeMultipartFormData Double where mimeRender _ = mimeRenderDefaultMultipartFormData-instance MimeRender MimeMultipartFormData Float where mimeRender _ = mimeRenderDefaultMultipartFormData-instance MimeRender MimeMultipartFormData Int where mimeRender _ = mimeRenderDefaultMultipartFormData-instance MimeRender MimeMultipartFormData Integer where mimeRender _ = mimeRenderDefaultMultipartFormData-instance MimeRender MimeMultipartFormData String where mimeRender _ = mimeRenderDefaultMultipartFormData-instance MimeRender MimeMultipartFormData T.Text where mimeRender _ = mimeRenderDefaultMultipartFormData---- | @P.Right . P.const NoContent@-instance MimeRender MimeNoContent NoContent where mimeRender _ = P.const BCL.empty----- * MimeUnrender Class--class MimeType mtype => MimeUnrender mtype o where-    mimeUnrender :: P.Proxy mtype -> BL.ByteString -> P.Either String o-    mimeUnrender' :: mtype -> BL.ByteString -> P.Either String o-    mimeUnrender' _ x = mimeUnrender (P.Proxy :: P.Proxy mtype) x---- Default MimeUnrender Instances---- | @A.eitherDecode@-instance A.FromJSON a => MimeUnrender MimeJSON a where mimeUnrender _ = A.eitherDecode--- | @P.left T.unpack . WH.urlDecodeAsForm@-instance WH.FromForm a => MimeUnrender MimeFormUrlEncoded a where mimeUnrender _ = P.left T.unpack . WH.urlDecodeAsForm--- | @P.Right . P.id@--instance MimeUnrender MimePlainText BL.ByteString where mimeUnrender _ = P.Right . P.id--- | @P.left P.show . TL.decodeUtf8'@-instance MimeUnrender MimePlainText T.Text where mimeUnrender _ = P.left P.show . T.decodeUtf8' . BL.toStrict--- | @P.Right . BCL.unpack@-instance MimeUnrender MimePlainText String where mimeUnrender _ = P.Right . BCL.unpack---- | @P.Right . P.id@-instance MimeUnrender MimeOctetStream BL.ByteString where mimeUnrender _ = P.Right . P.id--- | @P.left P.show . T.decodeUtf8' . BL.toStrict@-instance MimeUnrender MimeOctetStream T.Text where mimeUnrender _ = P.left P.show . T.decodeUtf8' . BL.toStrict--- | @P.Right . BCL.unpack@-instance MimeUnrender MimeOctetStream String where mimeUnrender _ = P.Right . BCL.unpack---- | @P.Right . P.const NoContent@-instance MimeUnrender MimeNoContent NoContent where mimeUnrender _ = P.Right . P.const NoContent--
− lib/OryHydra/Model.hs 
@@ -1,2238 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.Model--}--{-# LANGUAGE DeriveDataTypeable #-}-{-# LANGUAGE DeriveFoldable #-}-{-# LANGUAGE DeriveGeneric #-}-{-# LANGUAGE DeriveTraversable #-}-{-# LANGUAGE GeneralizedNewtypeDeriving #-}-{-# LANGUAGE LambdaCase #-}-{-# LANGUAGE MultiParamTypeClasses #-}-{-# LANGUAGE NamedFieldPuns #-}-{-# LANGUAGE OverloadedStrings #-}-{-# LANGUAGE RecordWildCards #-}-{-# LANGUAGE TupleSections #-}-{-# LANGUAGE TypeFamilies #-}-{-# OPTIONS_GHC -fno-warn-unused-matches -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.Model where--import OryHydra.Core-import OryHydra.MimeTypes--import Data.Aeson ((.:),(.:!),(.:?),(.=))--import qualified Control.Arrow as P (left)-import qualified Data.Aeson as A-import qualified Data.ByteString as B-import qualified Data.ByteString.Base64 as B64-import qualified Data.ByteString.Char8 as BC-import qualified Data.ByteString.Lazy as BL-import qualified Data.Data as P (Typeable, TypeRep, typeOf, typeRep)-import qualified Data.Foldable as P-import qualified Data.HashMap.Lazy as HM-import qualified Data.Map as Map-import qualified Data.Maybe as P-import qualified Data.Set as Set-import qualified Data.Text as T-import qualified Data.Text.Encoding as T-import qualified Data.Time as TI-import qualified Lens.Micro as L-import qualified Web.FormUrlEncoded as WH-import qualified Web.HttpApiData as WH--import Control.Applicative ((<|>))-import Control.Applicative (Alternative)-import Data.Function ((&))-import Data.Monoid ((<>))-import Data.Text (Text)-import Prelude (($),(/=),(.),(<$>),(<*>),(>>=),(=<<),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)--import qualified Prelude as P------ * Parameter newtypes----- ** All-newtype All = All { unAll :: Bool } deriving (P.Eq, P.Show)---- ** Client-newtype Client = Client { unClient :: Text } deriving (P.Eq, P.Show)---- ** ClientId-newtype ClientId = ClientId { unClientId :: Text } deriving (P.Eq, P.Show)---- ** ClientName-newtype ClientName = ClientName { unClientName :: Text } deriving (P.Eq, P.Show)---- ** ClientSecret-newtype ClientSecret = ClientSecret { unClientSecret :: Text } deriving (P.Eq, P.Show)---- ** Code-newtype Code = Code { unCode :: Text } deriving (P.Eq, P.Show)---- ** ConsentChallenge-newtype ConsentChallenge = ConsentChallenge { unConsentChallenge :: Text } deriving (P.Eq, P.Show)---- ** DefaultItems-newtype DefaultItems = DefaultItems { unDefaultItems :: Integer } deriving (P.Eq, P.Show)---- ** GrantType-newtype GrantType = GrantType { unGrantType :: Text } deriving (P.Eq, P.Show)---- ** Id-newtype Id = Id { unId :: Text } deriving (P.Eq, P.Show)---- ** Issuer-newtype Issuer = Issuer { unIssuer :: Text } deriving (P.Eq, P.Show)---- ** JsonPatch2-newtype JsonPatch2 = JsonPatch2 { unJsonPatch2 :: [JsonPatch] } deriving (P.Eq, P.Show, A.ToJSON)---- ** Kid-newtype Kid = Kid { unKid :: Text } deriving (P.Eq, P.Show)---- ** LoginChallenge-newtype LoginChallenge = LoginChallenge { unLoginChallenge :: Text } deriving (P.Eq, P.Show)---- ** LoginSessionId-newtype LoginSessionId = LoginSessionId { unLoginSessionId :: Text } deriving (P.Eq, P.Show)---- ** LogoutChallenge-newtype LogoutChallenge = LogoutChallenge { unLogoutChallenge :: Text } deriving (P.Eq, P.Show)---- ** MaxItems-newtype MaxItems = MaxItems { unMaxItems :: Integer } deriving (P.Eq, P.Show)---- ** Owner-newtype Owner = Owner { unOwner :: Text } deriving (P.Eq, P.Show)---- ** PageSize-newtype PageSize = PageSize { unPageSize :: Integer } deriving (P.Eq, P.Show)---- ** PageToken-newtype PageToken = PageToken { unPageToken :: Text } deriving (P.Eq, P.Show)---- ** RedirectUri-newtype RedirectUri = RedirectUri { unRedirectUri :: Text } deriving (P.Eq, P.Show)---- ** RefreshToken-newtype RefreshToken = RefreshToken { unRefreshToken :: Text } deriving (P.Eq, P.Show)---- ** Scope-newtype Scope = Scope { unScope :: Text } deriving (P.Eq, P.Show)---- ** Set-newtype Set = Set { unSet :: Text } deriving (P.Eq, P.Show)---- ** Subject-newtype Subject = Subject { unSubject :: Text } deriving (P.Eq, P.Show)---- ** Token-newtype Token = Token { unToken :: Text } deriving (P.Eq, P.Show)---- * Models----- ** AcceptOAuth2ConsentRequest--- | AcceptOAuth2ConsentRequest--- The request payload used to accept a consent request.--- -data AcceptOAuth2ConsentRequest = AcceptOAuth2ConsentRequest-  { acceptOAuth2ConsentRequestGrantAccessTokenAudience :: Maybe [Text] -- ^ "grant_access_token_audience"-  , acceptOAuth2ConsentRequestGrantScope :: Maybe [Text] -- ^ "grant_scope"-  , acceptOAuth2ConsentRequestHandledAt :: Maybe DateTime -- ^ "handled_at"-  , acceptOAuth2ConsentRequestRemember :: Maybe Bool -- ^ "remember" - Remember, if set to true, tells ORY Hydra to remember this consent authorization and reuse it if the same client asks the same user for the same, or a subset of, scope.-  , acceptOAuth2ConsentRequestRememberFor :: Maybe Integer -- ^ "remember_for" - RememberFor sets how long the consent authorization should be remembered for in seconds. If set to &#x60;0&#x60;, the authorization will be remembered indefinitely.-  , acceptOAuth2ConsentRequestSession :: Maybe AcceptOAuth2ConsentRequestSession -- ^ "session"-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON AcceptOAuth2ConsentRequest-instance A.FromJSON AcceptOAuth2ConsentRequest where-  parseJSON = A.withObject "AcceptOAuth2ConsentRequest" $ \o ->-    AcceptOAuth2ConsentRequest-      <$> (o .:? "grant_access_token_audience")-      <*> (o .:? "grant_scope")-      <*> (o .:? "handled_at")-      <*> (o .:? "remember")-      <*> (o .:? "remember_for")-      <*> (o .:? "session")---- | ToJSON AcceptOAuth2ConsentRequest-instance A.ToJSON AcceptOAuth2ConsentRequest where-  toJSON AcceptOAuth2ConsentRequest {..} =-   _omitNulls-      [ "grant_access_token_audience" .= acceptOAuth2ConsentRequestGrantAccessTokenAudience-      , "grant_scope" .= acceptOAuth2ConsentRequestGrantScope-      , "handled_at" .= acceptOAuth2ConsentRequestHandledAt-      , "remember" .= acceptOAuth2ConsentRequestRemember-      , "remember_for" .= acceptOAuth2ConsentRequestRememberFor-      , "session" .= acceptOAuth2ConsentRequestSession-      ]----- | Construct a value of type 'AcceptOAuth2ConsentRequest' (by applying it's required fields, if any)-mkAcceptOAuth2ConsentRequest-  :: AcceptOAuth2ConsentRequest-mkAcceptOAuth2ConsentRequest =-  AcceptOAuth2ConsentRequest-  { acceptOAuth2ConsentRequestGrantAccessTokenAudience = Nothing-  , acceptOAuth2ConsentRequestGrantScope = Nothing-  , acceptOAuth2ConsentRequestHandledAt = Nothing-  , acceptOAuth2ConsentRequestRemember = Nothing-  , acceptOAuth2ConsentRequestRememberFor = Nothing-  , acceptOAuth2ConsentRequestSession = Nothing-  }---- ** AcceptOAuth2ConsentRequestSession--- | AcceptOAuth2ConsentRequestSession--- Pass session data to a consent request.--- -data AcceptOAuth2ConsentRequestSession = AcceptOAuth2ConsentRequestSession-  { acceptOAuth2ConsentRequestSessionAccessToken :: Maybe A.Value -- ^ "access_token" - AccessToken sets session data for the access and refresh token, as well as any future tokens issued by the refresh grant. Keep in mind that this data will be available to anyone performing OAuth 2.0 Challenge Introspection. If only your services can perform OAuth 2.0 Challenge Introspection, this is usually fine. But if third parties can access that endpoint as well, sensitive data from the session might be exposed to them. Use with care!-  , acceptOAuth2ConsentRequestSessionIdToken :: Maybe A.Value -- ^ "id_token" - IDToken sets session data for the OpenID Connect ID token. Keep in mind that the session&#39;id payloads are readable by anyone that has access to the ID Challenge. Use with care!-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON AcceptOAuth2ConsentRequestSession-instance A.FromJSON AcceptOAuth2ConsentRequestSession where-  parseJSON = A.withObject "AcceptOAuth2ConsentRequestSession" $ \o ->-    AcceptOAuth2ConsentRequestSession-      <$> (o .:? "access_token")-      <*> (o .:? "id_token")---- | ToJSON AcceptOAuth2ConsentRequestSession-instance A.ToJSON AcceptOAuth2ConsentRequestSession where-  toJSON AcceptOAuth2ConsentRequestSession {..} =-   _omitNulls-      [ "access_token" .= acceptOAuth2ConsentRequestSessionAccessToken-      , "id_token" .= acceptOAuth2ConsentRequestSessionIdToken-      ]----- | Construct a value of type 'AcceptOAuth2ConsentRequestSession' (by applying it's required fields, if any)-mkAcceptOAuth2ConsentRequestSession-  :: AcceptOAuth2ConsentRequestSession-mkAcceptOAuth2ConsentRequestSession =-  AcceptOAuth2ConsentRequestSession-  { acceptOAuth2ConsentRequestSessionAccessToken = Nothing-  , acceptOAuth2ConsentRequestSessionIdToken = Nothing-  }---- ** AcceptOAuth2LoginRequest--- | AcceptOAuth2LoginRequest--- HandledLoginRequest is the request payload used to accept a login request.--- -data AcceptOAuth2LoginRequest = AcceptOAuth2LoginRequest-  { acceptOAuth2LoginRequestAcr :: Maybe Text -- ^ "acr" - ACR sets the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it to express that, for example, a user authenticated using two factor authentication.-  , acceptOAuth2LoginRequestAmr :: Maybe [Text] -- ^ "amr"-  , acceptOAuth2LoginRequestContext :: Maybe A.Value -- ^ "context"-  , acceptOAuth2LoginRequestForceSubjectIdentifier :: Maybe Text -- ^ "force_subject_identifier" - ForceSubjectIdentifier forces the \&quot;pairwise\&quot; user ID of the end-user that authenticated. The \&quot;pairwise\&quot; user ID refers to the (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID Connect specification. It allows you to set an obfuscated subject (\&quot;user\&quot;) identifier that is unique to the client.  Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not change the sub claim in the OAuth 2.0 Introspection.  Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself you can use this field. Please note that setting this field has no effect if &#x60;pairwise&#x60; is not configured in ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via &#x60;subject_type&#x60; key in the client&#39;s configuration).  Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies that you have to compute this value on every authentication process (probably depending on the client ID or some other unique value).  If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail.-  , acceptOAuth2LoginRequestRemember :: Maybe Bool -- ^ "remember" - Remember, if set to true, tells ORY Hydra to remember this user by telling the user agent (browser) to store a cookie with authentication data. If the same user performs another OAuth 2.0 Authorization Request, he/she will not be asked to log in again.-  , acceptOAuth2LoginRequestRememberFor :: Maybe Integer -- ^ "remember_for" - RememberFor sets how long the authentication should be remembered for in seconds. If set to &#x60;0&#x60;, the authorization will be remembered for the duration of the browser session (using a session cookie).-  , acceptOAuth2LoginRequestSubject :: Text -- ^ /Required/ "subject" - Subject is the user ID of the end-user that authenticated.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON AcceptOAuth2LoginRequest-instance A.FromJSON AcceptOAuth2LoginRequest where-  parseJSON = A.withObject "AcceptOAuth2LoginRequest" $ \o ->-    AcceptOAuth2LoginRequest-      <$> (o .:? "acr")-      <*> (o .:? "amr")-      <*> (o .:? "context")-      <*> (o .:? "force_subject_identifier")-      <*> (o .:? "remember")-      <*> (o .:? "remember_for")-      <*> (o .:  "subject")---- | ToJSON AcceptOAuth2LoginRequest-instance A.ToJSON AcceptOAuth2LoginRequest where-  toJSON AcceptOAuth2LoginRequest {..} =-   _omitNulls-      [ "acr" .= acceptOAuth2LoginRequestAcr-      , "amr" .= acceptOAuth2LoginRequestAmr-      , "context" .= acceptOAuth2LoginRequestContext-      , "force_subject_identifier" .= acceptOAuth2LoginRequestForceSubjectIdentifier-      , "remember" .= acceptOAuth2LoginRequestRemember-      , "remember_for" .= acceptOAuth2LoginRequestRememberFor-      , "subject" .= acceptOAuth2LoginRequestSubject-      ]----- | Construct a value of type 'AcceptOAuth2LoginRequest' (by applying it's required fields, if any)-mkAcceptOAuth2LoginRequest-  :: Text -- ^ 'acceptOAuth2LoginRequestSubject': Subject is the user ID of the end-user that authenticated.-  -> AcceptOAuth2LoginRequest-mkAcceptOAuth2LoginRequest acceptOAuth2LoginRequestSubject =-  AcceptOAuth2LoginRequest-  { acceptOAuth2LoginRequestAcr = Nothing-  , acceptOAuth2LoginRequestAmr = Nothing-  , acceptOAuth2LoginRequestContext = Nothing-  , acceptOAuth2LoginRequestForceSubjectIdentifier = Nothing-  , acceptOAuth2LoginRequestRemember = Nothing-  , acceptOAuth2LoginRequestRememberFor = Nothing-  , acceptOAuth2LoginRequestSubject-  }---- ** CreateJsonWebKeySet--- | CreateJsonWebKeySet--- Create JSON Web Key Set Request Body-data CreateJsonWebKeySet = CreateJsonWebKeySet-  { createJsonWebKeySetAlg :: Text -- ^ /Required/ "alg" - JSON Web Key Algorithm  The algorithm to be used for creating the key. Supports &#x60;RS256&#x60;, &#x60;ES256&#x60;, &#x60;ES512&#x60;, &#x60;HS512&#x60;, and &#x60;HS256&#x60;.-  , createJsonWebKeySetKid :: Text -- ^ /Required/ "kid" - JSON Web Key ID  The Key ID of the key to be created.-  , createJsonWebKeySetUse :: Text -- ^ /Required/ "use" - JSON Web Key Use  The \&quot;use\&quot; (public key use) parameter identifies the intended use of the public key. The \&quot;use\&quot; parameter is employed to indicate whether a public key is used for encrypting data or verifying the signature on data. Valid values are \&quot;enc\&quot; and \&quot;sig\&quot;.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON CreateJsonWebKeySet-instance A.FromJSON CreateJsonWebKeySet where-  parseJSON = A.withObject "CreateJsonWebKeySet" $ \o ->-    CreateJsonWebKeySet-      <$> (o .:  "alg")-      <*> (o .:  "kid")-      <*> (o .:  "use")---- | ToJSON CreateJsonWebKeySet-instance A.ToJSON CreateJsonWebKeySet where-  toJSON CreateJsonWebKeySet {..} =-   _omitNulls-      [ "alg" .= createJsonWebKeySetAlg-      , "kid" .= createJsonWebKeySetKid-      , "use" .= createJsonWebKeySetUse-      ]----- | Construct a value of type 'CreateJsonWebKeySet' (by applying it's required fields, if any)-mkCreateJsonWebKeySet-  :: Text -- ^ 'createJsonWebKeySetAlg': JSON Web Key Algorithm  The algorithm to be used for creating the key. Supports `RS256`, `ES256`, `ES512`, `HS512`, and `HS256`.-  -> Text -- ^ 'createJsonWebKeySetKid': JSON Web Key ID  The Key ID of the key to be created.-  -> Text -- ^ 'createJsonWebKeySetUse': JSON Web Key Use  The \"use\" (public key use) parameter identifies the intended use of the public key. The \"use\" parameter is employed to indicate whether a public key is used for encrypting data or verifying the signature on data. Valid values are \"enc\" and \"sig\".-  -> CreateJsonWebKeySet-mkCreateJsonWebKeySet createJsonWebKeySetAlg createJsonWebKeySetKid createJsonWebKeySetUse =-  CreateJsonWebKeySet-  { createJsonWebKeySetAlg-  , createJsonWebKeySetKid-  , createJsonWebKeySetUse-  }---- ** ErrorOAuth2--- | ErrorOAuth2--- Error-data ErrorOAuth2 = ErrorOAuth2-  { errorOAuth2Error :: Maybe Text -- ^ "error" - Error-  , errorOAuth2ErrorDebug :: Maybe Text -- ^ "error_debug" - Error Debug Information  Only available in dev mode.-  , errorOAuth2ErrorDescription :: Maybe Text -- ^ "error_description" - Error Description-  , errorOAuth2ErrorHint :: Maybe Text -- ^ "error_hint" - Error Hint  Helps the user identify the error cause.-  , errorOAuth2StatusCode :: Maybe Integer -- ^ "status_code" - HTTP Status Code-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON ErrorOAuth2-instance A.FromJSON ErrorOAuth2 where-  parseJSON = A.withObject "ErrorOAuth2" $ \o ->-    ErrorOAuth2-      <$> (o .:? "error")-      <*> (o .:? "error_debug")-      <*> (o .:? "error_description")-      <*> (o .:? "error_hint")-      <*> (o .:? "status_code")---- | ToJSON ErrorOAuth2-instance A.ToJSON ErrorOAuth2 where-  toJSON ErrorOAuth2 {..} =-   _omitNulls-      [ "error" .= errorOAuth2Error-      , "error_debug" .= errorOAuth2ErrorDebug-      , "error_description" .= errorOAuth2ErrorDescription-      , "error_hint" .= errorOAuth2ErrorHint-      , "status_code" .= errorOAuth2StatusCode-      ]----- | Construct a value of type 'ErrorOAuth2' (by applying it's required fields, if any)-mkErrorOAuth2-  :: ErrorOAuth2-mkErrorOAuth2 =-  ErrorOAuth2-  { errorOAuth2Error = Nothing-  , errorOAuth2ErrorDebug = Nothing-  , errorOAuth2ErrorDescription = Nothing-  , errorOAuth2ErrorHint = Nothing-  , errorOAuth2StatusCode = Nothing-  }---- ** GenericError--- | GenericError-data GenericError = GenericError-  { genericErrorCode :: Maybe Integer -- ^ "code" - The status code-  , genericErrorDebug :: Maybe Text -- ^ "debug" - Debug information  This field is often not exposed to protect against leaking sensitive information.-  , genericErrorDetails :: Maybe A.Value -- ^ "details" - Further error details-  , genericErrorId :: Maybe Text -- ^ "id" - The error ID  Useful when trying to identify various errors in application logic.-  , genericErrorMessage :: Text -- ^ /Required/ "message" - Error message  The error&#39;s message.-  , genericErrorReason :: Maybe Text -- ^ "reason" - A human-readable reason for the error-  , genericErrorRequest :: Maybe Text -- ^ "request" - The request ID  The request ID is often exposed internally in order to trace errors across service architectures. This is often a UUID.-  , genericErrorStatus :: Maybe Text -- ^ "status" - The status description-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON GenericError-instance A.FromJSON GenericError where-  parseJSON = A.withObject "GenericError" $ \o ->-    GenericError-      <$> (o .:? "code")-      <*> (o .:? "debug")-      <*> (o .:? "details")-      <*> (o .:? "id")-      <*> (o .:  "message")-      <*> (o .:? "reason")-      <*> (o .:? "request")-      <*> (o .:? "status")---- | ToJSON GenericError-instance A.ToJSON GenericError where-  toJSON GenericError {..} =-   _omitNulls-      [ "code" .= genericErrorCode-      , "debug" .= genericErrorDebug-      , "details" .= genericErrorDetails-      , "id" .= genericErrorId-      , "message" .= genericErrorMessage-      , "reason" .= genericErrorReason-      , "request" .= genericErrorRequest-      , "status" .= genericErrorStatus-      ]----- | Construct a value of type 'GenericError' (by applying it's required fields, if any)-mkGenericError-  :: Text -- ^ 'genericErrorMessage': Error message  The error's message.-  -> GenericError-mkGenericError genericErrorMessage =-  GenericError-  { genericErrorCode = Nothing-  , genericErrorDebug = Nothing-  , genericErrorDetails = Nothing-  , genericErrorId = Nothing-  , genericErrorMessage-  , genericErrorReason = Nothing-  , genericErrorRequest = Nothing-  , genericErrorStatus = Nothing-  }---- ** GetVersion200Response--- | GetVersion200Response-data GetVersion200Response = GetVersion200Response-  { getVersion200ResponseVersion :: Maybe Text -- ^ "version" - The version of Ory Hydra.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON GetVersion200Response-instance A.FromJSON GetVersion200Response where-  parseJSON = A.withObject "GetVersion200Response" $ \o ->-    GetVersion200Response-      <$> (o .:? "version")---- | ToJSON GetVersion200Response-instance A.ToJSON GetVersion200Response where-  toJSON GetVersion200Response {..} =-   _omitNulls-      [ "version" .= getVersion200ResponseVersion-      ]----- | Construct a value of type 'GetVersion200Response' (by applying it's required fields, if any)-mkGetVersion200Response-  :: GetVersion200Response-mkGetVersion200Response =-  GetVersion200Response-  { getVersion200ResponseVersion = Nothing-  }---- ** HealthNotReadyStatus--- | HealthNotReadyStatus-data HealthNotReadyStatus = HealthNotReadyStatus-  { healthNotReadyStatusErrors :: Maybe (Map.Map String Text) -- ^ "errors" - Errors contains a list of errors that caused the not ready status.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON HealthNotReadyStatus-instance A.FromJSON HealthNotReadyStatus where-  parseJSON = A.withObject "HealthNotReadyStatus" $ \o ->-    HealthNotReadyStatus-      <$> (o .:? "errors")---- | ToJSON HealthNotReadyStatus-instance A.ToJSON HealthNotReadyStatus where-  toJSON HealthNotReadyStatus {..} =-   _omitNulls-      [ "errors" .= healthNotReadyStatusErrors-      ]----- | Construct a value of type 'HealthNotReadyStatus' (by applying it's required fields, if any)-mkHealthNotReadyStatus-  :: HealthNotReadyStatus-mkHealthNotReadyStatus =-  HealthNotReadyStatus-  { healthNotReadyStatusErrors = Nothing-  }---- ** HealthStatus--- | HealthStatus-data HealthStatus = HealthStatus-  { healthStatusStatus :: Maybe Text -- ^ "status" - Status always contains \&quot;ok\&quot;.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON HealthStatus-instance A.FromJSON HealthStatus where-  parseJSON = A.withObject "HealthStatus" $ \o ->-    HealthStatus-      <$> (o .:? "status")---- | ToJSON HealthStatus-instance A.ToJSON HealthStatus where-  toJSON HealthStatus {..} =-   _omitNulls-      [ "status" .= healthStatusStatus-      ]----- | Construct a value of type 'HealthStatus' (by applying it's required fields, if any)-mkHealthStatus-  :: HealthStatus-mkHealthStatus =-  HealthStatus-  { healthStatusStatus = Nothing-  }---- ** IntrospectedOAuth2Token--- | IntrospectedOAuth2Token--- Introspection contains an access token's session data as specified by [IETF RFC 7662](https://tools.ietf.org/html/rfc7662)-data IntrospectedOAuth2Token = IntrospectedOAuth2Token-  { introspectedOAuth2TokenActive :: Bool -- ^ /Required/ "active" - Active is a boolean indicator of whether or not the presented token is currently active.  The specifics of a token&#39;s \&quot;active\&quot; state will vary depending on the implementation of the authorization server and the information it keeps about its tokens, but a \&quot;true\&quot; value return for the \&quot;active\&quot; property will generally indicate that a given token has been issued by this authorization server, has not been revoked by the resource owner, and is within its given time window of validity (e.g., after its issuance time and before its expiration time).-  , introspectedOAuth2TokenAud :: Maybe [Text] -- ^ "aud" - Audience contains a list of the token&#39;s intended audiences.-  , introspectedOAuth2TokenClientId :: Maybe Text -- ^ "client_id" - ID is aclient identifier for the OAuth 2.0 client that requested this token.-  , introspectedOAuth2TokenExp :: Maybe Integer -- ^ "exp" - Expires at is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token will expire.-  , introspectedOAuth2TokenExt :: Maybe (Map.Map String A.Value) -- ^ "ext" - Extra is arbitrary data set by the session.-  , introspectedOAuth2TokenIat :: Maybe Integer -- ^ "iat" - Issued at is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token was originally issued.-  , introspectedOAuth2TokenIss :: Maybe Text -- ^ "iss" - IssuerURL is a string representing the issuer of this token-  , introspectedOAuth2TokenNbf :: Maybe Integer -- ^ "nbf" - NotBefore is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token is not to be used before.-  , introspectedOAuth2TokenObfuscatedSubject :: Maybe Text -- ^ "obfuscated_subject" - ObfuscatedSubject is set when the subject identifier algorithm was set to \&quot;pairwise\&quot; during authorization. It is the &#x60;sub&#x60; value of the ID Token that was issued.-  , introspectedOAuth2TokenScope :: Maybe Text -- ^ "scope" - Scope is a JSON string containing a space-separated list of scopes associated with this token.-  , introspectedOAuth2TokenSub :: Maybe Text -- ^ "sub" - Subject of the token, as defined in JWT [RFC7519]. Usually a machine-readable identifier of the resource owner who authorized this token.-  , introspectedOAuth2TokenTokenType :: Maybe Text -- ^ "token_type" - TokenType is the introspected token&#39;s type, typically &#x60;Bearer&#x60;.-  , introspectedOAuth2TokenTokenUse :: Maybe Text -- ^ "token_use" - TokenUse is the introspected token&#39;s use, for example &#x60;access_token&#x60; or &#x60;refresh_token&#x60;.-  , introspectedOAuth2TokenUsername :: Maybe Text -- ^ "username" - Username is a human-readable identifier for the resource owner who authorized this token.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON IntrospectedOAuth2Token-instance A.FromJSON IntrospectedOAuth2Token where-  parseJSON = A.withObject "IntrospectedOAuth2Token" $ \o ->-    IntrospectedOAuth2Token-      <$> (o .:  "active")-      <*> (o .:? "aud")-      <*> (o .:? "client_id")-      <*> (o .:? "exp")-      <*> (o .:? "ext")-      <*> (o .:? "iat")-      <*> (o .:? "iss")-      <*> (o .:? "nbf")-      <*> (o .:? "obfuscated_subject")-      <*> (o .:? "scope")-      <*> (o .:? "sub")-      <*> (o .:? "token_type")-      <*> (o .:? "token_use")-      <*> (o .:? "username")---- | ToJSON IntrospectedOAuth2Token-instance A.ToJSON IntrospectedOAuth2Token where-  toJSON IntrospectedOAuth2Token {..} =-   _omitNulls-      [ "active" .= introspectedOAuth2TokenActive-      , "aud" .= introspectedOAuth2TokenAud-      , "client_id" .= introspectedOAuth2TokenClientId-      , "exp" .= introspectedOAuth2TokenExp-      , "ext" .= introspectedOAuth2TokenExt-      , "iat" .= introspectedOAuth2TokenIat-      , "iss" .= introspectedOAuth2TokenIss-      , "nbf" .= introspectedOAuth2TokenNbf-      , "obfuscated_subject" .= introspectedOAuth2TokenObfuscatedSubject-      , "scope" .= introspectedOAuth2TokenScope-      , "sub" .= introspectedOAuth2TokenSub-      , "token_type" .= introspectedOAuth2TokenTokenType-      , "token_use" .= introspectedOAuth2TokenTokenUse-      , "username" .= introspectedOAuth2TokenUsername-      ]----- | Construct a value of type 'IntrospectedOAuth2Token' (by applying it's required fields, if any)-mkIntrospectedOAuth2Token-  :: Bool -- ^ 'introspectedOAuth2TokenActive': Active is a boolean indicator of whether or not the presented token is currently active.  The specifics of a token's \"active\" state will vary depending on the implementation of the authorization server and the information it keeps about its tokens, but a \"true\" value return for the \"active\" property will generally indicate that a given token has been issued by this authorization server, has not been revoked by the resource owner, and is within its given time window of validity (e.g., after its issuance time and before its expiration time).-  -> IntrospectedOAuth2Token-mkIntrospectedOAuth2Token introspectedOAuth2TokenActive =-  IntrospectedOAuth2Token-  { introspectedOAuth2TokenActive-  , introspectedOAuth2TokenAud = Nothing-  , introspectedOAuth2TokenClientId = Nothing-  , introspectedOAuth2TokenExp = Nothing-  , introspectedOAuth2TokenExt = Nothing-  , introspectedOAuth2TokenIat = Nothing-  , introspectedOAuth2TokenIss = Nothing-  , introspectedOAuth2TokenNbf = Nothing-  , introspectedOAuth2TokenObfuscatedSubject = Nothing-  , introspectedOAuth2TokenScope = Nothing-  , introspectedOAuth2TokenSub = Nothing-  , introspectedOAuth2TokenTokenType = Nothing-  , introspectedOAuth2TokenTokenUse = Nothing-  , introspectedOAuth2TokenUsername = Nothing-  }---- ** IsReady200Response--- | IsReady200Response-data IsReady200Response = IsReady200Response-  { isReady200ResponseStatus :: Maybe Text -- ^ "status" - Always \&quot;ok\&quot;.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON IsReady200Response-instance A.FromJSON IsReady200Response where-  parseJSON = A.withObject "IsReady200Response" $ \o ->-    IsReady200Response-      <$> (o .:? "status")---- | ToJSON IsReady200Response-instance A.ToJSON IsReady200Response where-  toJSON IsReady200Response {..} =-   _omitNulls-      [ "status" .= isReady200ResponseStatus-      ]----- | Construct a value of type 'IsReady200Response' (by applying it's required fields, if any)-mkIsReady200Response-  :: IsReady200Response-mkIsReady200Response =-  IsReady200Response-  { isReady200ResponseStatus = Nothing-  }---- ** IsReady503Response--- | IsReady503Response-data IsReady503Response = IsReady503Response-  { isReady503ResponseErrors :: Maybe (Map.Map String Text) -- ^ "errors" - Errors contains a list of errors that caused the not ready status.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON IsReady503Response-instance A.FromJSON IsReady503Response where-  parseJSON = A.withObject "IsReady503Response" $ \o ->-    IsReady503Response-      <$> (o .:? "errors")---- | ToJSON IsReady503Response-instance A.ToJSON IsReady503Response where-  toJSON IsReady503Response {..} =-   _omitNulls-      [ "errors" .= isReady503ResponseErrors-      ]----- | Construct a value of type 'IsReady503Response' (by applying it's required fields, if any)-mkIsReady503Response-  :: IsReady503Response-mkIsReady503Response =-  IsReady503Response-  { isReady503ResponseErrors = Nothing-  }---- ** JsonPatch--- | JsonPatch--- A JSONPatch document as defined by RFC 6902-data JsonPatch = JsonPatch-  { jsonPatchFrom :: Maybe Text -- ^ "from" - This field is used together with operation \&quot;move\&quot; and uses JSON Pointer notation.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).-  , jsonPatchOp :: Text -- ^ /Required/ "op" - The operation to be performed. One of \&quot;add\&quot;, \&quot;remove\&quot;, \&quot;replace\&quot;, \&quot;move\&quot;, \&quot;copy\&quot;, or \&quot;test\&quot;.-  , jsonPatchPath :: Text -- ^ /Required/ "path" - The path to the target path. Uses JSON pointer notation.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).-  , jsonPatchValue :: Maybe A.Value -- ^ "value" - The value to be used within the operations.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON JsonPatch-instance A.FromJSON JsonPatch where-  parseJSON = A.withObject "JsonPatch" $ \o ->-    JsonPatch-      <$> (o .:? "from")-      <*> (o .:  "op")-      <*> (o .:  "path")-      <*> (o .:? "value")---- | ToJSON JsonPatch-instance A.ToJSON JsonPatch where-  toJSON JsonPatch {..} =-   _omitNulls-      [ "from" .= jsonPatchFrom-      , "op" .= jsonPatchOp-      , "path" .= jsonPatchPath-      , "value" .= jsonPatchValue-      ]----- | Construct a value of type 'JsonPatch' (by applying it's required fields, if any)-mkJsonPatch-  :: Text -- ^ 'jsonPatchOp': The operation to be performed. One of \"add\", \"remove\", \"replace\", \"move\", \"copy\", or \"test\".-  -> Text -- ^ 'jsonPatchPath': The path to the target path. Uses JSON pointer notation.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).-  -> JsonPatch-mkJsonPatch jsonPatchOp jsonPatchPath =-  JsonPatch-  { jsonPatchFrom = Nothing-  , jsonPatchOp-  , jsonPatchPath-  , jsonPatchValue = Nothing-  }---- ** JsonWebKey--- | JsonWebKey-data JsonWebKey = JsonWebKey-  { jsonWebKeyAlg :: Text -- ^ /Required/ "alg" - The \&quot;alg\&quot; (algorithm) parameter identifies the algorithm intended for use with the key.  The values used should either be registered in the IANA \&quot;JSON Web Signature and Encryption Algorithms\&quot; registry established by [JWA] or be a value that contains a Collision- Resistant Name.-  , jsonWebKeyCrv :: Maybe Text -- ^ "crv"-  , jsonWebKeyD :: Maybe Text -- ^ "d"-  , jsonWebKeyDp :: Maybe Text -- ^ "dp"-  , jsonWebKeyDq :: Maybe Text -- ^ "dq"-  , jsonWebKeyE :: Maybe Text -- ^ "e"-  , jsonWebKeyK :: Maybe Text -- ^ "k"-  , jsonWebKeyKid :: Text -- ^ /Required/ "kid" - The \&quot;kid\&quot; (key ID) parameter is used to match a specific key.  This is used, for instance, to choose among a set of keys within a JWK Set during key rollover.  The structure of the \&quot;kid\&quot; value is unspecified.  When \&quot;kid\&quot; values are used within a JWK Set, different keys within the JWK Set SHOULD use distinct \&quot;kid\&quot; values.  (One example in which different keys might use the same \&quot;kid\&quot; value is if they have different \&quot;kty\&quot; (key type) values but are considered to be equivalent alternatives by the application using them.)  The \&quot;kid\&quot; value is a case-sensitive string.-  , jsonWebKeyKty :: Text -- ^ /Required/ "kty" - The \&quot;kty\&quot; (key type) parameter identifies the cryptographic algorithm family used with the key, such as \&quot;RSA\&quot; or \&quot;EC\&quot;. \&quot;kty\&quot; values should either be registered in the IANA \&quot;JSON Web Key Types\&quot; registry established by [JWA] or be a value that contains a Collision- Resistant Name.  The \&quot;kty\&quot; value is a case-sensitive string.-  , jsonWebKeyN :: Maybe Text -- ^ "n"-  , jsonWebKeyP :: Maybe Text -- ^ "p"-  , jsonWebKeyQ :: Maybe Text -- ^ "q"-  , jsonWebKeyQi :: Maybe Text -- ^ "qi"-  , jsonWebKeyUse :: Text -- ^ /Required/ "use" - Use (\&quot;public key use\&quot;) identifies the intended use of the public key. The \&quot;use\&quot; parameter is employed to indicate whether a public key is used for encrypting data or verifying the signature on data. Values are commonly \&quot;sig\&quot; (signature) or \&quot;enc\&quot; (encryption).-  , jsonWebKeyX :: Maybe Text -- ^ "x"-  , jsonWebKeyX5c :: Maybe [Text] -- ^ "x5c" - The \&quot;x5c\&quot; (X.509 certificate chain) parameter contains a chain of one or more PKIX certificates [RFC5280].  The certificate chain is represented as a JSON array of certificate value strings.  Each string in the array is a base64-encoded (Section 4 of [RFC4648] -- not base64url-encoded) DER [ITU.X690.1994] PKIX certificate value. The PKIX certificate containing the key value MUST be the first certificate.-  , jsonWebKeyY :: Maybe Text -- ^ "y"-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON JsonWebKey-instance A.FromJSON JsonWebKey where-  parseJSON = A.withObject "JsonWebKey" $ \o ->-    JsonWebKey-      <$> (o .:  "alg")-      <*> (o .:? "crv")-      <*> (o .:? "d")-      <*> (o .:? "dp")-      <*> (o .:? "dq")-      <*> (o .:? "e")-      <*> (o .:? "k")-      <*> (o .:  "kid")-      <*> (o .:  "kty")-      <*> (o .:? "n")-      <*> (o .:? "p")-      <*> (o .:? "q")-      <*> (o .:? "qi")-      <*> (o .:  "use")-      <*> (o .:? "x")-      <*> (o .:? "x5c")-      <*> (o .:? "y")---- | ToJSON JsonWebKey-instance A.ToJSON JsonWebKey where-  toJSON JsonWebKey {..} =-   _omitNulls-      [ "alg" .= jsonWebKeyAlg-      , "crv" .= jsonWebKeyCrv-      , "d" .= jsonWebKeyD-      , "dp" .= jsonWebKeyDp-      , "dq" .= jsonWebKeyDq-      , "e" .= jsonWebKeyE-      , "k" .= jsonWebKeyK-      , "kid" .= jsonWebKeyKid-      , "kty" .= jsonWebKeyKty-      , "n" .= jsonWebKeyN-      , "p" .= jsonWebKeyP-      , "q" .= jsonWebKeyQ-      , "qi" .= jsonWebKeyQi-      , "use" .= jsonWebKeyUse-      , "x" .= jsonWebKeyX-      , "x5c" .= jsonWebKeyX5c-      , "y" .= jsonWebKeyY-      ]----- | Construct a value of type 'JsonWebKey' (by applying it's required fields, if any)-mkJsonWebKey-  :: Text -- ^ 'jsonWebKeyAlg': The \"alg\" (algorithm) parameter identifies the algorithm intended for use with the key.  The values used should either be registered in the IANA \"JSON Web Signature and Encryption Algorithms\" registry established by [JWA] or be a value that contains a Collision- Resistant Name.-  -> Text -- ^ 'jsonWebKeyKid': The \"kid\" (key ID) parameter is used to match a specific key.  This is used, for instance, to choose among a set of keys within a JWK Set during key rollover.  The structure of the \"kid\" value is unspecified.  When \"kid\" values are used within a JWK Set, different keys within the JWK Set SHOULD use distinct \"kid\" values.  (One example in which different keys might use the same \"kid\" value is if they have different \"kty\" (key type) values but are considered to be equivalent alternatives by the application using them.)  The \"kid\" value is a case-sensitive string.-  -> Text -- ^ 'jsonWebKeyKty': The \"kty\" (key type) parameter identifies the cryptographic algorithm family used with the key, such as \"RSA\" or \"EC\". \"kty\" values should either be registered in the IANA \"JSON Web Key Types\" registry established by [JWA] or be a value that contains a Collision- Resistant Name.  The \"kty\" value is a case-sensitive string.-  -> Text -- ^ 'jsonWebKeyUse': Use (\"public key use\") identifies the intended use of the public key. The \"use\" parameter is employed to indicate whether a public key is used for encrypting data or verifying the signature on data. Values are commonly \"sig\" (signature) or \"enc\" (encryption).-  -> JsonWebKey-mkJsonWebKey jsonWebKeyAlg jsonWebKeyKid jsonWebKeyKty jsonWebKeyUse =-  JsonWebKey-  { jsonWebKeyAlg-  , jsonWebKeyCrv = Nothing-  , jsonWebKeyD = Nothing-  , jsonWebKeyDp = Nothing-  , jsonWebKeyDq = Nothing-  , jsonWebKeyE = Nothing-  , jsonWebKeyK = Nothing-  , jsonWebKeyKid-  , jsonWebKeyKty-  , jsonWebKeyN = Nothing-  , jsonWebKeyP = Nothing-  , jsonWebKeyQ = Nothing-  , jsonWebKeyQi = Nothing-  , jsonWebKeyUse-  , jsonWebKeyX = Nothing-  , jsonWebKeyX5c = Nothing-  , jsonWebKeyY = Nothing-  }---- ** JsonWebKeySet--- | JsonWebKeySet--- JSON Web Key Set-data JsonWebKeySet = JsonWebKeySet-  { jsonWebKeySetKeys :: Maybe [JsonWebKey] -- ^ "keys" - List of JSON Web Keys  The value of the \&quot;keys\&quot; parameter is an array of JSON Web Key (JWK) values. By default, the order of the JWK values within the array does not imply an order of preference among them, although applications of JWK Sets can choose to assign a meaning to the order for their purposes, if desired.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON JsonWebKeySet-instance A.FromJSON JsonWebKeySet where-  parseJSON = A.withObject "JsonWebKeySet" $ \o ->-    JsonWebKeySet-      <$> (o .:? "keys")---- | ToJSON JsonWebKeySet-instance A.ToJSON JsonWebKeySet where-  toJSON JsonWebKeySet {..} =-   _omitNulls-      [ "keys" .= jsonWebKeySetKeys-      ]----- | Construct a value of type 'JsonWebKeySet' (by applying it's required fields, if any)-mkJsonWebKeySet-  :: JsonWebKeySet-mkJsonWebKeySet =-  JsonWebKeySet-  { jsonWebKeySetKeys = Nothing-  }---- ** OAuth2Client--- | OAuth2Client--- OAuth 2.0 Client--- --- OAuth 2.0 Clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.-data OAuth2Client = OAuth2Client-  { oAuth2ClientAllowedCorsOrigins :: Maybe [Text] -- ^ "allowed_cors_origins"-  , oAuth2ClientAudience :: Maybe [Text] -- ^ "audience"-  , oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientAuthorizationCodeGrantIdTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_refresh_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientBackchannelLogoutSessionRequired :: Maybe Bool -- ^ "backchannel_logout_session_required" - OpenID Connect Back-Channel Logout Session Required  Boolean value specifying whether the RP requires that a sid (session ID) Claim be included in the Logout Token to identify the RP session with the OP when the backchannel_logout_uri is used. If omitted, the default value is false.-  , oAuth2ClientBackchannelLogoutUri :: Maybe Text -- ^ "backchannel_logout_uri" - OpenID Connect Back-Channel Logout URI  RP URL that will cause the RP to log itself out when sent a Logout Token by the OP.-  , oAuth2ClientClientCredentialsGrantAccessTokenLifespan :: Maybe Text -- ^ "client_credentials_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientClientId :: Maybe Text -- ^ "client_id" - OAuth 2.0 Client ID  The ID is autogenerated and immutable.-  , oAuth2ClientClientName :: Maybe Text -- ^ "client_name" - OAuth 2.0 Client Name  The human-readable name of the client to be presented to the end-user during authorization.-  , oAuth2ClientClientSecret :: Maybe Text -- ^ "client_secret" - OAuth 2.0 Client Secret  The secret will be included in the create request as cleartext, and then never again. The secret is kept in hashed format and is not recoverable once lost.-  , oAuth2ClientClientSecretExpiresAt :: Maybe Integer -- ^ "client_secret_expires_at" - OAuth 2.0 Client Secret Expires At  The field is currently not supported and its value is always 0.-  , oAuth2ClientClientUri :: Maybe Text -- ^ "client_uri" - OAuth 2.0 Client URI  ClientURI is a URL string of a web page providing information about the client. If present, the server SHOULD display this URL to the end-user in a clickable fashion.-  , oAuth2ClientContacts :: Maybe [Text] -- ^ "contacts"-  , oAuth2ClientCreatedAt :: Maybe DateTime -- ^ "created_at" - OAuth 2.0 Client Creation Date  CreatedAt returns the timestamp of the client&#39;s creation.-  , oAuth2ClientFrontchannelLogoutSessionRequired :: Maybe Bool -- ^ "frontchannel_logout_session_required" - OpenID Connect Front-Channel Logout Session Required  Boolean value specifying whether the RP requires that iss (issuer) and sid (session ID) query parameters be included to identify the RP session with the OP when the frontchannel_logout_uri is used. If omitted, the default value is false.-  , oAuth2ClientFrontchannelLogoutUri :: Maybe Text -- ^ "frontchannel_logout_uri" - OpenID Connect Front-Channel Logout URI  RP URL that will cause the RP to log itself out when rendered in an iframe by the OP. An iss (issuer) query parameter and a sid (session ID) query parameter MAY be included by the OP to enable the RP to validate the request and to determine which of the potentially multiple sessions is to be logged out; if either is included, both MUST be.-  , oAuth2ClientGrantTypes :: Maybe [Text] -- ^ "grant_types"-  , oAuth2ClientImplicitGrantAccessTokenLifespan :: Maybe Text -- ^ "implicit_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientImplicitGrantIdTokenLifespan :: Maybe Text -- ^ "implicit_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientJwks :: Maybe A.Value -- ^ "jwks" - OAuth 2.0 Client JSON Web Key Set  Client&#39;s JSON Web Key Set [JWK] document, passed by value. The semantics of the jwks parameter are the same as the jwks_uri parameter, other than that the JWK Set is passed by value, rather than by reference. This parameter is intended only to be used by Clients that, for some reason, are unable to use the jwks_uri parameter, for instance, by native applications that might not have a location to host the contents of the JWK Set. If a Client can use jwks_uri, it MUST NOT use jwks. One significant downside of jwks is that it does not enable key rotation (which jwks_uri does, as described in Section 10 of OpenID Connect Core 1.0 [OpenID.Core]). The jwks_uri and jwks parameters MUST NOT be used together.-  , oAuth2ClientJwksUri :: Maybe Text -- ^ "jwks_uri" - OAuth 2.0 Client JSON Web Key Set URL  URL for the Client&#39;s JSON Web Key Set [JWK] document. If the Client signs requests to the Server, it contains the signing key(s) the Server uses to validate signatures from the Client. The JWK Set MAY also contain the Client&#39;s encryption keys(s), which are used by the Server to encrypt responses to the Client. When both signing and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key&#39;s intended usage. Although some algorithms allow the same key to be used for both signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.-  , oAuth2ClientJwtBearerGrantAccessTokenLifespan :: Maybe Text -- ^ "jwt_bearer_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientLogoUri :: Maybe Text -- ^ "logo_uri" - OAuth 2.0 Client Logo URI  A URL string referencing the client&#39;s logo.-  , oAuth2ClientMetadata :: Maybe A.Value -- ^ "metadata"-  , oAuth2ClientOwner :: Maybe Text -- ^ "owner" - OAuth 2.0 Client Owner  Owner is a string identifying the owner of the OAuth 2.0 Client.-  , oAuth2ClientPolicyUri :: Maybe Text -- ^ "policy_uri" - OAuth 2.0 Client Policy URI  PolicyURI is a URL string that points to a human-readable privacy policy document that describes how the deployment organization collects, uses, retains, and discloses personal data.-  , oAuth2ClientPostLogoutRedirectUris :: Maybe [Text] -- ^ "post_logout_redirect_uris"-  , oAuth2ClientRedirectUris :: Maybe [Text] -- ^ "redirect_uris"-  , oAuth2ClientRefreshTokenGrantAccessTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientRefreshTokenGrantIdTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientRefreshTokenGrantRefreshTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_refresh_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientRegistrationAccessToken :: Maybe Text -- ^ "registration_access_token" - OpenID Connect Dynamic Client Registration Access Token  RegistrationAccessToken can be used to update, get, or delete the OAuth2 Client. It is sent when creating a client using Dynamic Client Registration.-  , oAuth2ClientRegistrationClientUri :: Maybe Text -- ^ "registration_client_uri" - OpenID Connect Dynamic Client Registration URL  RegistrationClientURI is the URL used to update, get, or delete the OAuth2 Client.-  , oAuth2ClientRequestObjectSigningAlg :: Maybe Text -- ^ "request_object_signing_alg" - OpenID Connect Request Object Signing Algorithm  JWS [JWS] alg algorithm [JWA] that MUST be used for signing Request Objects sent to the OP. All Request Objects from this Client MUST be rejected, if not signed with this algorithm.-  , oAuth2ClientRequestUris :: Maybe [Text] -- ^ "request_uris"-  , oAuth2ClientResponseTypes :: Maybe [Text] -- ^ "response_types"-  , oAuth2ClientScope :: Maybe Text -- ^ "scope" - OAuth 2.0 Client Scope  Scope is a string containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens.-  , oAuth2ClientSectorIdentifierUri :: Maybe Text -- ^ "sector_identifier_uri" - OpenID Connect Sector Identifier URI  URL using the https scheme to be used in calculating Pseudonymous Identifiers by the OP. The URL references a file with a single JSON array of redirect_uri values.-  , oAuth2ClientSubjectType :: Maybe Text -- ^ "subject_type" - OpenID Connect Subject Type  The &#x60;subject_types_supported&#x60; Discovery parameter contains a list of the supported subject_type values for this server. Valid types include &#x60;pairwise&#x60; and &#x60;public&#x60;.-  , oAuth2ClientTokenEndpointAuthMethod :: Maybe Text -- ^ "token_endpoint_auth_method" - OAuth 2.0 Token Endpoint Authentication Method  Requested Client Authentication method for the Token Endpoint. The options are:  &#x60;client_secret_post&#x60;: (default) Send &#x60;client_id&#x60; and &#x60;client_secret&#x60; as &#x60;application/x-www-form-urlencoded&#x60; in the HTTP body. &#x60;client_secret_basic&#x60;: Send &#x60;client_id&#x60; and &#x60;client_secret&#x60; as &#x60;application/x-www-form-urlencoded&#x60; encoded in the HTTP Authorization header. &#x60;private_key_jwt&#x60;: Use JSON Web Tokens to authenticate the client. &#x60;none&#x60;: Used for public clients (native apps, mobile apps) which can not have secrets.-  , oAuth2ClientTokenEndpointAuthSigningAlg :: Maybe Text -- ^ "token_endpoint_auth_signing_alg" - OAuth 2.0 Token Endpoint Signing Algorithm  Requested Client Authentication signing algorithm for the Token Endpoint.-  , oAuth2ClientTosUri :: Maybe Text -- ^ "tos_uri" - OAuth 2.0 Client Terms of Service URI  A URL string pointing to a human-readable terms of service document for the client that describes a contractual relationship between the end-user and the client that the end-user accepts when authorizing the client.-  , oAuth2ClientUpdatedAt :: Maybe DateTime -- ^ "updated_at" - OAuth 2.0 Client Last Update Date  UpdatedAt returns the timestamp of the last update.-  , oAuth2ClientUserinfoSignedResponseAlg :: Maybe Text -- ^ "userinfo_signed_response_alg" - OpenID Connect Request Userinfo Signed Response Algorithm  JWS alg algorithm [JWA] REQUIRED for signing UserInfo Responses. If this is specified, the response will be JWT [JWT] serialized, and signed using JWS. The default, if omitted, is for the UserInfo Response to return the Claims as a UTF-8 encoded JSON object using the application/json content-type.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2Client-instance A.FromJSON OAuth2Client where-  parseJSON = A.withObject "OAuth2Client" $ \o ->-    OAuth2Client-      <$> (o .:? "allowed_cors_origins")-      <*> (o .:? "audience")-      <*> (o .:? "authorization_code_grant_access_token_lifespan")-      <*> (o .:? "authorization_code_grant_id_token_lifespan")-      <*> (o .:? "authorization_code_grant_refresh_token_lifespan")-      <*> (o .:? "backchannel_logout_session_required")-      <*> (o .:? "backchannel_logout_uri")-      <*> (o .:? "client_credentials_grant_access_token_lifespan")-      <*> (o .:? "client_id")-      <*> (o .:? "client_name")-      <*> (o .:? "client_secret")-      <*> (o .:? "client_secret_expires_at")-      <*> (o .:? "client_uri")-      <*> (o .:? "contacts")-      <*> (o .:? "created_at")-      <*> (o .:? "frontchannel_logout_session_required")-      <*> (o .:? "frontchannel_logout_uri")-      <*> (o .:? "grant_types")-      <*> (o .:? "implicit_grant_access_token_lifespan")-      <*> (o .:? "implicit_grant_id_token_lifespan")-      <*> (o .:? "jwks")-      <*> (o .:? "jwks_uri")-      <*> (o .:? "jwt_bearer_grant_access_token_lifespan")-      <*> (o .:? "logo_uri")-      <*> (o .:? "metadata")-      <*> (o .:? "owner")-      <*> (o .:? "policy_uri")-      <*> (o .:? "post_logout_redirect_uris")-      <*> (o .:? "redirect_uris")-      <*> (o .:? "refresh_token_grant_access_token_lifespan")-      <*> (o .:? "refresh_token_grant_id_token_lifespan")-      <*> (o .:? "refresh_token_grant_refresh_token_lifespan")-      <*> (o .:? "registration_access_token")-      <*> (o .:? "registration_client_uri")-      <*> (o .:? "request_object_signing_alg")-      <*> (o .:? "request_uris")-      <*> (o .:? "response_types")-      <*> (o .:? "scope")-      <*> (o .:? "sector_identifier_uri")-      <*> (o .:? "subject_type")-      <*> (o .:? "token_endpoint_auth_method")-      <*> (o .:? "token_endpoint_auth_signing_alg")-      <*> (o .:? "tos_uri")-      <*> (o .:? "updated_at")-      <*> (o .:? "userinfo_signed_response_alg")---- | ToJSON OAuth2Client-instance A.ToJSON OAuth2Client where-  toJSON OAuth2Client {..} =-   _omitNulls-      [ "allowed_cors_origins" .= oAuth2ClientAllowedCorsOrigins-      , "audience" .= oAuth2ClientAudience-      , "authorization_code_grant_access_token_lifespan" .= oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan-      , "authorization_code_grant_id_token_lifespan" .= oAuth2ClientAuthorizationCodeGrantIdTokenLifespan-      , "authorization_code_grant_refresh_token_lifespan" .= oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan-      , "backchannel_logout_session_required" .= oAuth2ClientBackchannelLogoutSessionRequired-      , "backchannel_logout_uri" .= oAuth2ClientBackchannelLogoutUri-      , "client_credentials_grant_access_token_lifespan" .= oAuth2ClientClientCredentialsGrantAccessTokenLifespan-      , "client_id" .= oAuth2ClientClientId-      , "client_name" .= oAuth2ClientClientName-      , "client_secret" .= oAuth2ClientClientSecret-      , "client_secret_expires_at" .= oAuth2ClientClientSecretExpiresAt-      , "client_uri" .= oAuth2ClientClientUri-      , "contacts" .= oAuth2ClientContacts-      , "created_at" .= oAuth2ClientCreatedAt-      , "frontchannel_logout_session_required" .= oAuth2ClientFrontchannelLogoutSessionRequired-      , "frontchannel_logout_uri" .= oAuth2ClientFrontchannelLogoutUri-      , "grant_types" .= oAuth2ClientGrantTypes-      , "implicit_grant_access_token_lifespan" .= oAuth2ClientImplicitGrantAccessTokenLifespan-      , "implicit_grant_id_token_lifespan" .= oAuth2ClientImplicitGrantIdTokenLifespan-      , "jwks" .= oAuth2ClientJwks-      , "jwks_uri" .= oAuth2ClientJwksUri-      , "jwt_bearer_grant_access_token_lifespan" .= oAuth2ClientJwtBearerGrantAccessTokenLifespan-      , "logo_uri" .= oAuth2ClientLogoUri-      , "metadata" .= oAuth2ClientMetadata-      , "owner" .= oAuth2ClientOwner-      , "policy_uri" .= oAuth2ClientPolicyUri-      , "post_logout_redirect_uris" .= oAuth2ClientPostLogoutRedirectUris-      , "redirect_uris" .= oAuth2ClientRedirectUris-      , "refresh_token_grant_access_token_lifespan" .= oAuth2ClientRefreshTokenGrantAccessTokenLifespan-      , "refresh_token_grant_id_token_lifespan" .= oAuth2ClientRefreshTokenGrantIdTokenLifespan-      , "refresh_token_grant_refresh_token_lifespan" .= oAuth2ClientRefreshTokenGrantRefreshTokenLifespan-      , "registration_access_token" .= oAuth2ClientRegistrationAccessToken-      , "registration_client_uri" .= oAuth2ClientRegistrationClientUri-      , "request_object_signing_alg" .= oAuth2ClientRequestObjectSigningAlg-      , "request_uris" .= oAuth2ClientRequestUris-      , "response_types" .= oAuth2ClientResponseTypes-      , "scope" .= oAuth2ClientScope-      , "sector_identifier_uri" .= oAuth2ClientSectorIdentifierUri-      , "subject_type" .= oAuth2ClientSubjectType-      , "token_endpoint_auth_method" .= oAuth2ClientTokenEndpointAuthMethod-      , "token_endpoint_auth_signing_alg" .= oAuth2ClientTokenEndpointAuthSigningAlg-      , "tos_uri" .= oAuth2ClientTosUri-      , "updated_at" .= oAuth2ClientUpdatedAt-      , "userinfo_signed_response_alg" .= oAuth2ClientUserinfoSignedResponseAlg-      ]----- | Construct a value of type 'OAuth2Client' (by applying it's required fields, if any)-mkOAuth2Client-  :: OAuth2Client-mkOAuth2Client =-  OAuth2Client-  { oAuth2ClientAllowedCorsOrigins = Nothing-  , oAuth2ClientAudience = Nothing-  , oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan = Nothing-  , oAuth2ClientAuthorizationCodeGrantIdTokenLifespan = Nothing-  , oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan = Nothing-  , oAuth2ClientBackchannelLogoutSessionRequired = Nothing-  , oAuth2ClientBackchannelLogoutUri = Nothing-  , oAuth2ClientClientCredentialsGrantAccessTokenLifespan = Nothing-  , oAuth2ClientClientId = Nothing-  , oAuth2ClientClientName = Nothing-  , oAuth2ClientClientSecret = Nothing-  , oAuth2ClientClientSecretExpiresAt = Nothing-  , oAuth2ClientClientUri = Nothing-  , oAuth2ClientContacts = Nothing-  , oAuth2ClientCreatedAt = Nothing-  , oAuth2ClientFrontchannelLogoutSessionRequired = Nothing-  , oAuth2ClientFrontchannelLogoutUri = Nothing-  , oAuth2ClientGrantTypes = Nothing-  , oAuth2ClientImplicitGrantAccessTokenLifespan = Nothing-  , oAuth2ClientImplicitGrantIdTokenLifespan = Nothing-  , oAuth2ClientJwks = Nothing-  , oAuth2ClientJwksUri = Nothing-  , oAuth2ClientJwtBearerGrantAccessTokenLifespan = Nothing-  , oAuth2ClientLogoUri = Nothing-  , oAuth2ClientMetadata = Nothing-  , oAuth2ClientOwner = Nothing-  , oAuth2ClientPolicyUri = Nothing-  , oAuth2ClientPostLogoutRedirectUris = Nothing-  , oAuth2ClientRedirectUris = Nothing-  , oAuth2ClientRefreshTokenGrantAccessTokenLifespan = Nothing-  , oAuth2ClientRefreshTokenGrantIdTokenLifespan = Nothing-  , oAuth2ClientRefreshTokenGrantRefreshTokenLifespan = Nothing-  , oAuth2ClientRegistrationAccessToken = Nothing-  , oAuth2ClientRegistrationClientUri = Nothing-  , oAuth2ClientRequestObjectSigningAlg = Nothing-  , oAuth2ClientRequestUris = Nothing-  , oAuth2ClientResponseTypes = Nothing-  , oAuth2ClientScope = Nothing-  , oAuth2ClientSectorIdentifierUri = Nothing-  , oAuth2ClientSubjectType = Nothing-  , oAuth2ClientTokenEndpointAuthMethod = Nothing-  , oAuth2ClientTokenEndpointAuthSigningAlg = Nothing-  , oAuth2ClientTosUri = Nothing-  , oAuth2ClientUpdatedAt = Nothing-  , oAuth2ClientUserinfoSignedResponseAlg = Nothing-  }---- ** OAuth2ClientTokenLifespans--- | OAuth2ClientTokenLifespans--- OAuth 2.0 Client Token Lifespans--- --- Lifespans of different token types issued for this OAuth 2.0 Client.-data OAuth2ClientTokenLifespans = OAuth2ClientTokenLifespans-  { oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan :: Maybe Text -- ^ "authorization_code_grant_refresh_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan :: Maybe Text -- ^ "client_credentials_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan :: Maybe Text -- ^ "implicit_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan :: Maybe Text -- ^ "implicit_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan :: Maybe Text -- ^ "jwt_bearer_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan :: Maybe Text -- ^ "refresh_token_grant_refresh_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2ClientTokenLifespans-instance A.FromJSON OAuth2ClientTokenLifespans where-  parseJSON = A.withObject "OAuth2ClientTokenLifespans" $ \o ->-    OAuth2ClientTokenLifespans-      <$> (o .:? "authorization_code_grant_access_token_lifespan")-      <*> (o .:? "authorization_code_grant_id_token_lifespan")-      <*> (o .:? "authorization_code_grant_refresh_token_lifespan")-      <*> (o .:? "client_credentials_grant_access_token_lifespan")-      <*> (o .:? "implicit_grant_access_token_lifespan")-      <*> (o .:? "implicit_grant_id_token_lifespan")-      <*> (o .:? "jwt_bearer_grant_access_token_lifespan")-      <*> (o .:? "refresh_token_grant_access_token_lifespan")-      <*> (o .:? "refresh_token_grant_id_token_lifespan")-      <*> (o .:? "refresh_token_grant_refresh_token_lifespan")---- | ToJSON OAuth2ClientTokenLifespans-instance A.ToJSON OAuth2ClientTokenLifespans where-  toJSON OAuth2ClientTokenLifespans {..} =-   _omitNulls-      [ "authorization_code_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan-      , "authorization_code_grant_id_token_lifespan" .= oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan-      , "authorization_code_grant_refresh_token_lifespan" .= oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan-      , "client_credentials_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan-      , "implicit_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan-      , "implicit_grant_id_token_lifespan" .= oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan-      , "jwt_bearer_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan-      , "refresh_token_grant_access_token_lifespan" .= oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan-      , "refresh_token_grant_id_token_lifespan" .= oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan-      , "refresh_token_grant_refresh_token_lifespan" .= oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan-      ]----- | Construct a value of type 'OAuth2ClientTokenLifespans' (by applying it's required fields, if any)-mkOAuth2ClientTokenLifespans-  :: OAuth2ClientTokenLifespans-mkOAuth2ClientTokenLifespans =-  OAuth2ClientTokenLifespans-  { oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan = Nothing-  , oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan = Nothing-  }---- ** OAuth2ConsentRequest--- | OAuth2ConsentRequest--- Contains information on an ongoing consent request.--- -data OAuth2ConsentRequest = OAuth2ConsentRequest-  { oAuth2ConsentRequestAcr :: Maybe Text -- ^ "acr" - ACR represents the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it to express that, for example, a user authenticated using two factor authentication.-  , oAuth2ConsentRequestAmr :: Maybe [Text] -- ^ "amr"-  , oAuth2ConsentRequestChallenge :: Text -- ^ /Required/ "challenge" - ID is the identifier (\&quot;authorization challenge\&quot;) of the consent authorization request. It is used to identify the session.-  , oAuth2ConsentRequestClient :: Maybe OAuth2Client -- ^ "client"-  , oAuth2ConsentRequestContext :: Maybe A.Value -- ^ "context"-  , oAuth2ConsentRequestLoginChallenge :: Maybe Text -- ^ "login_challenge" - LoginChallenge is the login challenge this consent challenge belongs to. It can be used to associate a login and consent request in the login &amp; consent app.-  , oAuth2ConsentRequestLoginSessionId :: Maybe Text -- ^ "login_session_id" - LoginSessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag) this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false) this will be a new random value. This value is used as the \&quot;sid\&quot; parameter in the ID Token and in OIDC Front-/Back- channel logout. It&#39;s value can generally be used to associate consecutive login requests by a certain user.-  , oAuth2ConsentRequestOidcContext :: Maybe OAuth2ConsentRequestOpenIDConnectContext -- ^ "oidc_context"-  , oAuth2ConsentRequestRequestUrl :: Maybe Text -- ^ "request_url" - RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but might come in handy if you want to deal with additional request parameters.-  , oAuth2ConsentRequestRequestedAccessTokenAudience :: Maybe [Text] -- ^ "requested_access_token_audience"-  , oAuth2ConsentRequestRequestedScope :: Maybe [Text] -- ^ "requested_scope"-  , oAuth2ConsentRequestSkip :: Maybe Bool -- ^ "skip" - Skip, if true, implies that the client has requested the same scopes from the same user previously. If true, you must not ask the user to grant the requested scopes. You must however either allow or deny the consent request using the usual API call.-  , oAuth2ConsentRequestSubject :: Maybe Text -- ^ "subject" - Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope requested by the OAuth 2.0 client.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2ConsentRequest-instance A.FromJSON OAuth2ConsentRequest where-  parseJSON = A.withObject "OAuth2ConsentRequest" $ \o ->-    OAuth2ConsentRequest-      <$> (o .:? "acr")-      <*> (o .:? "amr")-      <*> (o .:  "challenge")-      <*> (o .:? "client")-      <*> (o .:? "context")-      <*> (o .:? "login_challenge")-      <*> (o .:? "login_session_id")-      <*> (o .:? "oidc_context")-      <*> (o .:? "request_url")-      <*> (o .:? "requested_access_token_audience")-      <*> (o .:? "requested_scope")-      <*> (o .:? "skip")-      <*> (o .:? "subject")---- | ToJSON OAuth2ConsentRequest-instance A.ToJSON OAuth2ConsentRequest where-  toJSON OAuth2ConsentRequest {..} =-   _omitNulls-      [ "acr" .= oAuth2ConsentRequestAcr-      , "amr" .= oAuth2ConsentRequestAmr-      , "challenge" .= oAuth2ConsentRequestChallenge-      , "client" .= oAuth2ConsentRequestClient-      , "context" .= oAuth2ConsentRequestContext-      , "login_challenge" .= oAuth2ConsentRequestLoginChallenge-      , "login_session_id" .= oAuth2ConsentRequestLoginSessionId-      , "oidc_context" .= oAuth2ConsentRequestOidcContext-      , "request_url" .= oAuth2ConsentRequestRequestUrl-      , "requested_access_token_audience" .= oAuth2ConsentRequestRequestedAccessTokenAudience-      , "requested_scope" .= oAuth2ConsentRequestRequestedScope-      , "skip" .= oAuth2ConsentRequestSkip-      , "subject" .= oAuth2ConsentRequestSubject-      ]----- | Construct a value of type 'OAuth2ConsentRequest' (by applying it's required fields, if any)-mkOAuth2ConsentRequest-  :: Text -- ^ 'oAuth2ConsentRequestChallenge': ID is the identifier (\"authorization challenge\") of the consent authorization request. It is used to identify the session.-  -> OAuth2ConsentRequest-mkOAuth2ConsentRequest oAuth2ConsentRequestChallenge =-  OAuth2ConsentRequest-  { oAuth2ConsentRequestAcr = Nothing-  , oAuth2ConsentRequestAmr = Nothing-  , oAuth2ConsentRequestChallenge-  , oAuth2ConsentRequestClient = Nothing-  , oAuth2ConsentRequestContext = Nothing-  , oAuth2ConsentRequestLoginChallenge = Nothing-  , oAuth2ConsentRequestLoginSessionId = Nothing-  , oAuth2ConsentRequestOidcContext = Nothing-  , oAuth2ConsentRequestRequestUrl = Nothing-  , oAuth2ConsentRequestRequestedAccessTokenAudience = Nothing-  , oAuth2ConsentRequestRequestedScope = Nothing-  , oAuth2ConsentRequestSkip = Nothing-  , oAuth2ConsentRequestSubject = Nothing-  }---- ** OAuth2ConsentRequestOpenIDConnectContext--- | OAuth2ConsentRequestOpenIDConnectContext--- Contains optional information about the OpenID Connect request.--- -data OAuth2ConsentRequestOpenIDConnectContext = OAuth2ConsentRequestOpenIDConnectContext-  { oAuth2ConsentRequestOpenIDConnectContextAcrValues :: Maybe [Text] -- ^ "acr_values" - ACRValues is the Authentication AuthorizationContext Class Reference requested in the OAuth 2.0 Authorization request. It is a parameter defined by OpenID Connect and expresses which level of authentication (e.g. 2FA) is required.  OpenID Connect defines it as follows: &gt; Requested Authentication AuthorizationContext Class Reference values. Space-separated string that specifies the acr values that the Authorization Server is being requested to use for processing this Authentication Request, with the values appearing in order of preference. The Authentication AuthorizationContext Class satisfied by the authentication performed is returned as the acr Claim Value, as specified in Section 2. The acr Claim is requested as a Voluntary Claim by this parameter.-  , oAuth2ConsentRequestOpenIDConnectContextDisplay :: Maybe Text -- ^ "display" - Display is a string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User. The defined values are: page: The Authorization Server SHOULD display the authentication and consent UI consistent with a full User Agent page view. If the display parameter is not specified, this is the default display mode. popup: The Authorization Server SHOULD display the authentication and consent UI consistent with a popup User Agent window. The popup User Agent window should be of an appropriate size for a login-focused dialog and should not obscure the entire window that it is popping up over. touch: The Authorization Server SHOULD display the authentication and consent UI consistent with a device that leverages a touch interface. wap: The Authorization Server SHOULD display the authentication and consent UI consistent with a \&quot;feature phone\&quot; type display.  The Authorization Server MAY also attempt to detect the capabilities of the User Agent and present an appropriate display.-  , oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims :: Maybe (Map.Map String A.Value) -- ^ "id_token_hint_claims" - IDTokenHintClaims are the claims of the ID Token previously issued by the Authorization Server being passed as a hint about the End-User&#39;s current or past authenticated session with the Client.-  , oAuth2ConsentRequestOpenIDConnectContextLoginHint :: Maybe Text -- ^ "login_hint" - LoginHint hints about the login identifier the End-User might use to log in (if necessary). This hint can be used by an RP if it first asks the End-User for their e-mail address (or other identifier) and then wants to pass that value as a hint to the discovered authorization service. This value MAY also be a phone number in the format specified for the phone_number Claim. The use of this parameter is optional.-  , oAuth2ConsentRequestOpenIDConnectContextUiLocales :: Maybe [Text] -- ^ "ui_locales" - UILocales is the End-User&#39;id preferred languages and scripts for the user interface, represented as a space-separated list of BCP47 [RFC5646] language tag values, ordered by preference. For instance, the value \&quot;fr-CA fr en\&quot; represents a preference for French as spoken in Canada, then French (without a region designation), followed by English (without a region designation). An error SHOULD NOT result if some or all of the requested locales are not supported by the OpenID Provider.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2ConsentRequestOpenIDConnectContext-instance A.FromJSON OAuth2ConsentRequestOpenIDConnectContext where-  parseJSON = A.withObject "OAuth2ConsentRequestOpenIDConnectContext" $ \o ->-    OAuth2ConsentRequestOpenIDConnectContext-      <$> (o .:? "acr_values")-      <*> (o .:? "display")-      <*> (o .:? "id_token_hint_claims")-      <*> (o .:? "login_hint")-      <*> (o .:? "ui_locales")---- | ToJSON OAuth2ConsentRequestOpenIDConnectContext-instance A.ToJSON OAuth2ConsentRequestOpenIDConnectContext where-  toJSON OAuth2ConsentRequestOpenIDConnectContext {..} =-   _omitNulls-      [ "acr_values" .= oAuth2ConsentRequestOpenIDConnectContextAcrValues-      , "display" .= oAuth2ConsentRequestOpenIDConnectContextDisplay-      , "id_token_hint_claims" .= oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims-      , "login_hint" .= oAuth2ConsentRequestOpenIDConnectContextLoginHint-      , "ui_locales" .= oAuth2ConsentRequestOpenIDConnectContextUiLocales-      ]----- | Construct a value of type 'OAuth2ConsentRequestOpenIDConnectContext' (by applying it's required fields, if any)-mkOAuth2ConsentRequestOpenIDConnectContext-  :: OAuth2ConsentRequestOpenIDConnectContext-mkOAuth2ConsentRequestOpenIDConnectContext =-  OAuth2ConsentRequestOpenIDConnectContext-  { oAuth2ConsentRequestOpenIDConnectContextAcrValues = Nothing-  , oAuth2ConsentRequestOpenIDConnectContextDisplay = Nothing-  , oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims = Nothing-  , oAuth2ConsentRequestOpenIDConnectContextLoginHint = Nothing-  , oAuth2ConsentRequestOpenIDConnectContextUiLocales = Nothing-  }---- ** OAuth2ConsentSession--- | OAuth2ConsentSession--- OAuth 2.0 Consent Session--- --- A completed OAuth 2.0 Consent Session.-data OAuth2ConsentSession = OAuth2ConsentSession-  { oAuth2ConsentSessionConsentRequest :: Maybe OAuth2ConsentRequest -- ^ "consent_request"-  , oAuth2ConsentSessionExpiresAt :: Maybe OAuth2ConsentSessionExpiresAt -- ^ "expires_at"-  , oAuth2ConsentSessionGrantAccessTokenAudience :: Maybe [Text] -- ^ "grant_access_token_audience"-  , oAuth2ConsentSessionGrantScope :: Maybe [Text] -- ^ "grant_scope"-  , oAuth2ConsentSessionHandledAt :: Maybe DateTime -- ^ "handled_at"-  , oAuth2ConsentSessionRemember :: Maybe Bool -- ^ "remember" - Remember Consent  Remember, if set to true, tells ORY Hydra to remember this consent authorization and reuse it if the same client asks the same user for the same, or a subset of, scope.-  , oAuth2ConsentSessionRememberFor :: Maybe Integer -- ^ "remember_for" - Remember Consent For  RememberFor sets how long the consent authorization should be remembered for in seconds. If set to &#x60;0&#x60;, the authorization will be remembered indefinitely.-  , oAuth2ConsentSessionSession :: Maybe AcceptOAuth2ConsentRequestSession -- ^ "session"-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2ConsentSession-instance A.FromJSON OAuth2ConsentSession where-  parseJSON = A.withObject "OAuth2ConsentSession" $ \o ->-    OAuth2ConsentSession-      <$> (o .:? "consent_request")-      <*> (o .:? "expires_at")-      <*> (o .:? "grant_access_token_audience")-      <*> (o .:? "grant_scope")-      <*> (o .:? "handled_at")-      <*> (o .:? "remember")-      <*> (o .:? "remember_for")-      <*> (o .:? "session")---- | ToJSON OAuth2ConsentSession-instance A.ToJSON OAuth2ConsentSession where-  toJSON OAuth2ConsentSession {..} =-   _omitNulls-      [ "consent_request" .= oAuth2ConsentSessionConsentRequest-      , "expires_at" .= oAuth2ConsentSessionExpiresAt-      , "grant_access_token_audience" .= oAuth2ConsentSessionGrantAccessTokenAudience-      , "grant_scope" .= oAuth2ConsentSessionGrantScope-      , "handled_at" .= oAuth2ConsentSessionHandledAt-      , "remember" .= oAuth2ConsentSessionRemember-      , "remember_for" .= oAuth2ConsentSessionRememberFor-      , "session" .= oAuth2ConsentSessionSession-      ]----- | Construct a value of type 'OAuth2ConsentSession' (by applying it's required fields, if any)-mkOAuth2ConsentSession-  :: OAuth2ConsentSession-mkOAuth2ConsentSession =-  OAuth2ConsentSession-  { oAuth2ConsentSessionConsentRequest = Nothing-  , oAuth2ConsentSessionExpiresAt = Nothing-  , oAuth2ConsentSessionGrantAccessTokenAudience = Nothing-  , oAuth2ConsentSessionGrantScope = Nothing-  , oAuth2ConsentSessionHandledAt = Nothing-  , oAuth2ConsentSessionRemember = Nothing-  , oAuth2ConsentSessionRememberFor = Nothing-  , oAuth2ConsentSessionSession = Nothing-  }---- ** OAuth2ConsentSessionExpiresAt--- | OAuth2ConsentSessionExpiresAt-data OAuth2ConsentSessionExpiresAt = OAuth2ConsentSessionExpiresAt-  { oAuth2ConsentSessionExpiresAtAccessToken :: Maybe DateTime -- ^ "access_token"-  , oAuth2ConsentSessionExpiresAtAuthorizeCode :: Maybe DateTime -- ^ "authorize_code"-  , oAuth2ConsentSessionExpiresAtIdToken :: Maybe DateTime -- ^ "id_token"-  , oAuth2ConsentSessionExpiresAtParContext :: Maybe DateTime -- ^ "par_context"-  , oAuth2ConsentSessionExpiresAtRefreshToken :: Maybe DateTime -- ^ "refresh_token"-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2ConsentSessionExpiresAt-instance A.FromJSON OAuth2ConsentSessionExpiresAt where-  parseJSON = A.withObject "OAuth2ConsentSessionExpiresAt" $ \o ->-    OAuth2ConsentSessionExpiresAt-      <$> (o .:? "access_token")-      <*> (o .:? "authorize_code")-      <*> (o .:? "id_token")-      <*> (o .:? "par_context")-      <*> (o .:? "refresh_token")---- | ToJSON OAuth2ConsentSessionExpiresAt-instance A.ToJSON OAuth2ConsentSessionExpiresAt where-  toJSON OAuth2ConsentSessionExpiresAt {..} =-   _omitNulls-      [ "access_token" .= oAuth2ConsentSessionExpiresAtAccessToken-      , "authorize_code" .= oAuth2ConsentSessionExpiresAtAuthorizeCode-      , "id_token" .= oAuth2ConsentSessionExpiresAtIdToken-      , "par_context" .= oAuth2ConsentSessionExpiresAtParContext-      , "refresh_token" .= oAuth2ConsentSessionExpiresAtRefreshToken-      ]----- | Construct a value of type 'OAuth2ConsentSessionExpiresAt' (by applying it's required fields, if any)-mkOAuth2ConsentSessionExpiresAt-  :: OAuth2ConsentSessionExpiresAt-mkOAuth2ConsentSessionExpiresAt =-  OAuth2ConsentSessionExpiresAt-  { oAuth2ConsentSessionExpiresAtAccessToken = Nothing-  , oAuth2ConsentSessionExpiresAtAuthorizeCode = Nothing-  , oAuth2ConsentSessionExpiresAtIdToken = Nothing-  , oAuth2ConsentSessionExpiresAtParContext = Nothing-  , oAuth2ConsentSessionExpiresAtRefreshToken = Nothing-  }---- ** OAuth2LoginRequest--- | OAuth2LoginRequest--- Contains information on an ongoing login request.--- -data OAuth2LoginRequest = OAuth2LoginRequest-  { oAuth2LoginRequestChallenge :: Text -- ^ /Required/ "challenge" - ID is the identifier (\&quot;login challenge\&quot;) of the login request. It is used to identify the session.-  , oAuth2LoginRequestClient :: OAuth2Client -- ^ /Required/ "client"-  , oAuth2LoginRequestOidcContext :: Maybe OAuth2ConsentRequestOpenIDConnectContext -- ^ "oidc_context"-  , oAuth2LoginRequestRequestUrl :: Text -- ^ /Required/ "request_url" - RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but might come in handy if you want to deal with additional request parameters.-  , oAuth2LoginRequestRequestedAccessTokenAudience :: [Text] -- ^ /Required/ "requested_access_token_audience"-  , oAuth2LoginRequestRequestedScope :: [Text] -- ^ /Required/ "requested_scope"-  , oAuth2LoginRequestSessionId :: Maybe Text -- ^ "session_id" - SessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag) this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false) this will be a new random value. This value is used as the \&quot;sid\&quot; parameter in the ID Token and in OIDC Front-/Back- channel logout. It&#39;s value can generally be used to associate consecutive login requests by a certain user.-  , oAuth2LoginRequestSkip :: Bool -- ^ /Required/ "skip" - Skip, if true, implies that the client has requested the same scopes from the same user previously. If true, you can skip asking the user to grant the requested scopes, and simply forward the user to the redirect URL.  This feature allows you to update / set session information.-  , oAuth2LoginRequestSubject :: Text -- ^ /Required/ "subject" - Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope requested by the OAuth 2.0 client. If this value is set and &#x60;skip&#x60; is true, you MUST include this subject type when accepting the login request, or the request will fail.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2LoginRequest-instance A.FromJSON OAuth2LoginRequest where-  parseJSON = A.withObject "OAuth2LoginRequest" $ \o ->-    OAuth2LoginRequest-      <$> (o .:  "challenge")-      <*> (o .:  "client")-      <*> (o .:? "oidc_context")-      <*> (o .:  "request_url")-      <*> (o .:  "requested_access_token_audience")-      <*> (o .:  "requested_scope")-      <*> (o .:? "session_id")-      <*> (o .:  "skip")-      <*> (o .:  "subject")---- | ToJSON OAuth2LoginRequest-instance A.ToJSON OAuth2LoginRequest where-  toJSON OAuth2LoginRequest {..} =-   _omitNulls-      [ "challenge" .= oAuth2LoginRequestChallenge-      , "client" .= oAuth2LoginRequestClient-      , "oidc_context" .= oAuth2LoginRequestOidcContext-      , "request_url" .= oAuth2LoginRequestRequestUrl-      , "requested_access_token_audience" .= oAuth2LoginRequestRequestedAccessTokenAudience-      , "requested_scope" .= oAuth2LoginRequestRequestedScope-      , "session_id" .= oAuth2LoginRequestSessionId-      , "skip" .= oAuth2LoginRequestSkip-      , "subject" .= oAuth2LoginRequestSubject-      ]----- | Construct a value of type 'OAuth2LoginRequest' (by applying it's required fields, if any)-mkOAuth2LoginRequest-  :: Text -- ^ 'oAuth2LoginRequestChallenge': ID is the identifier (\"login challenge\") of the login request. It is used to identify the session.-  -> OAuth2Client -- ^ 'oAuth2LoginRequestClient' -  -> Text -- ^ 'oAuth2LoginRequestRequestUrl': RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but might come in handy if you want to deal with additional request parameters.-  -> [Text] -- ^ 'oAuth2LoginRequestRequestedAccessTokenAudience' -  -> [Text] -- ^ 'oAuth2LoginRequestRequestedScope' -  -> Bool -- ^ 'oAuth2LoginRequestSkip': Skip, if true, implies that the client has requested the same scopes from the same user previously. If true, you can skip asking the user to grant the requested scopes, and simply forward the user to the redirect URL.  This feature allows you to update / set session information.-  -> Text -- ^ 'oAuth2LoginRequestSubject': Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope requested by the OAuth 2.0 client. If this value is set and `skip` is true, you MUST include this subject type when accepting the login request, or the request will fail.-  -> OAuth2LoginRequest-mkOAuth2LoginRequest oAuth2LoginRequestChallenge oAuth2LoginRequestClient oAuth2LoginRequestRequestUrl oAuth2LoginRequestRequestedAccessTokenAudience oAuth2LoginRequestRequestedScope oAuth2LoginRequestSkip oAuth2LoginRequestSubject =-  OAuth2LoginRequest-  { oAuth2LoginRequestChallenge-  , oAuth2LoginRequestClient-  , oAuth2LoginRequestOidcContext = Nothing-  , oAuth2LoginRequestRequestUrl-  , oAuth2LoginRequestRequestedAccessTokenAudience-  , oAuth2LoginRequestRequestedScope-  , oAuth2LoginRequestSessionId = Nothing-  , oAuth2LoginRequestSkip-  , oAuth2LoginRequestSubject-  }---- ** OAuth2LogoutRequest--- | OAuth2LogoutRequest--- Contains information about an ongoing logout request.--- -data OAuth2LogoutRequest = OAuth2LogoutRequest-  { oAuth2LogoutRequestChallenge :: Maybe Text -- ^ "challenge" - Challenge is the identifier (\&quot;logout challenge\&quot;) of the logout authentication request. It is used to identify the session.-  , oAuth2LogoutRequestClient :: Maybe OAuth2Client -- ^ "client"-  , oAuth2LogoutRequestRequestUrl :: Maybe Text -- ^ "request_url" - RequestURL is the original Logout URL requested.-  , oAuth2LogoutRequestRpInitiated :: Maybe Bool -- ^ "rp_initiated" - RPInitiated is set to true if the request was initiated by a Relying Party (RP), also known as an OAuth 2.0 Client.-  , oAuth2LogoutRequestSid :: Maybe Text -- ^ "sid" - SessionID is the login session ID that was requested to log out.-  , oAuth2LogoutRequestSubject :: Maybe Text -- ^ "subject" - Subject is the user for whom the logout was request.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2LogoutRequest-instance A.FromJSON OAuth2LogoutRequest where-  parseJSON = A.withObject "OAuth2LogoutRequest" $ \o ->-    OAuth2LogoutRequest-      <$> (o .:? "challenge")-      <*> (o .:? "client")-      <*> (o .:? "request_url")-      <*> (o .:? "rp_initiated")-      <*> (o .:? "sid")-      <*> (o .:? "subject")---- | ToJSON OAuth2LogoutRequest-instance A.ToJSON OAuth2LogoutRequest where-  toJSON OAuth2LogoutRequest {..} =-   _omitNulls-      [ "challenge" .= oAuth2LogoutRequestChallenge-      , "client" .= oAuth2LogoutRequestClient-      , "request_url" .= oAuth2LogoutRequestRequestUrl-      , "rp_initiated" .= oAuth2LogoutRequestRpInitiated-      , "sid" .= oAuth2LogoutRequestSid-      , "subject" .= oAuth2LogoutRequestSubject-      ]----- | Construct a value of type 'OAuth2LogoutRequest' (by applying it's required fields, if any)-mkOAuth2LogoutRequest-  :: OAuth2LogoutRequest-mkOAuth2LogoutRequest =-  OAuth2LogoutRequest-  { oAuth2LogoutRequestChallenge = Nothing-  , oAuth2LogoutRequestClient = Nothing-  , oAuth2LogoutRequestRequestUrl = Nothing-  , oAuth2LogoutRequestRpInitiated = Nothing-  , oAuth2LogoutRequestSid = Nothing-  , oAuth2LogoutRequestSubject = Nothing-  }---- ** OAuth2RedirectTo--- | OAuth2RedirectTo--- OAuth 2.0 Redirect Browser To--- --- Contains a redirect URL used to complete a login, consent, or logout request.-data OAuth2RedirectTo = OAuth2RedirectTo-  { oAuth2RedirectToRedirectTo :: Text -- ^ /Required/ "redirect_to" - RedirectURL is the URL which you should redirect the user&#39;s browser to once the authentication process is completed.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2RedirectTo-instance A.FromJSON OAuth2RedirectTo where-  parseJSON = A.withObject "OAuth2RedirectTo" $ \o ->-    OAuth2RedirectTo-      <$> (o .:  "redirect_to")---- | ToJSON OAuth2RedirectTo-instance A.ToJSON OAuth2RedirectTo where-  toJSON OAuth2RedirectTo {..} =-   _omitNulls-      [ "redirect_to" .= oAuth2RedirectToRedirectTo-      ]----- | Construct a value of type 'OAuth2RedirectTo' (by applying it's required fields, if any)-mkOAuth2RedirectTo-  :: Text -- ^ 'oAuth2RedirectToRedirectTo': RedirectURL is the URL which you should redirect the user's browser to once the authentication process is completed.-  -> OAuth2RedirectTo-mkOAuth2RedirectTo oAuth2RedirectToRedirectTo =-  OAuth2RedirectTo-  { oAuth2RedirectToRedirectTo-  }---- ** OAuth2TokenExchange--- | OAuth2TokenExchange--- OAuth2 Token Exchange Result-data OAuth2TokenExchange = OAuth2TokenExchange-  { oAuth2TokenExchangeAccessToken :: Maybe Text -- ^ "access_token" - The access token issued by the authorization server.-  , oAuth2TokenExchangeExpiresIn :: Maybe Integer -- ^ "expires_in" - The lifetime in seconds of the access token. For example, the value \&quot;3600\&quot; denotes that the access token will expire in one hour from the time the response was generated.-  , oAuth2TokenExchangeIdToken :: Maybe Integer -- ^ "id_token" - To retrieve a refresh token request the id_token scope.-  , oAuth2TokenExchangeRefreshToken :: Maybe Text -- ^ "refresh_token" - The refresh token, which can be used to obtain new access tokens. To retrieve it add the scope \&quot;offline\&quot; to your access token request.-  , oAuth2TokenExchangeScope :: Maybe Text -- ^ "scope" - The scope of the access token-  , oAuth2TokenExchangeTokenType :: Maybe Text -- ^ "token_type" - The type of the token issued-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OAuth2TokenExchange-instance A.FromJSON OAuth2TokenExchange where-  parseJSON = A.withObject "OAuth2TokenExchange" $ \o ->-    OAuth2TokenExchange-      <$> (o .:? "access_token")-      <*> (o .:? "expires_in")-      <*> (o .:? "id_token")-      <*> (o .:? "refresh_token")-      <*> (o .:? "scope")-      <*> (o .:? "token_type")---- | ToJSON OAuth2TokenExchange-instance A.ToJSON OAuth2TokenExchange where-  toJSON OAuth2TokenExchange {..} =-   _omitNulls-      [ "access_token" .= oAuth2TokenExchangeAccessToken-      , "expires_in" .= oAuth2TokenExchangeExpiresIn-      , "id_token" .= oAuth2TokenExchangeIdToken-      , "refresh_token" .= oAuth2TokenExchangeRefreshToken-      , "scope" .= oAuth2TokenExchangeScope-      , "token_type" .= oAuth2TokenExchangeTokenType-      ]----- | Construct a value of type 'OAuth2TokenExchange' (by applying it's required fields, if any)-mkOAuth2TokenExchange-  :: OAuth2TokenExchange-mkOAuth2TokenExchange =-  OAuth2TokenExchange-  { oAuth2TokenExchangeAccessToken = Nothing-  , oAuth2TokenExchangeExpiresIn = Nothing-  , oAuth2TokenExchangeIdToken = Nothing-  , oAuth2TokenExchangeRefreshToken = Nothing-  , oAuth2TokenExchangeScope = Nothing-  , oAuth2TokenExchangeTokenType = Nothing-  }---- ** OidcConfiguration--- | OidcConfiguration--- OpenID Connect Discovery Metadata--- --- Includes links to several endpoints (for example `/oauth2/token`) and exposes information on supported signature algorithms among others.-data OidcConfiguration = OidcConfiguration-  { oidcConfigurationAuthorizationEndpoint :: Text -- ^ /Required/ "authorization_endpoint" - OAuth 2.0 Authorization Endpoint URL-  , oidcConfigurationBackchannelLogoutSessionSupported :: Maybe Bool -- ^ "backchannel_logout_session_supported" - OpenID Connect Back-Channel Logout Session Required  Boolean value specifying whether the OP can pass a sid (session ID) Claim in the Logout Token to identify the RP session with the OP. If supported, the sid Claim is also included in ID Tokens issued by the OP-  , oidcConfigurationBackchannelLogoutSupported :: Maybe Bool -- ^ "backchannel_logout_supported" - OpenID Connect Back-Channel Logout Supported  Boolean value specifying whether the OP supports back-channel logout, with true indicating support.-  , oidcConfigurationClaimsParameterSupported :: Maybe Bool -- ^ "claims_parameter_supported" - OpenID Connect Claims Parameter Parameter Supported  Boolean value specifying whether the OP supports use of the claims parameter, with true indicating support.-  , oidcConfigurationClaimsSupported :: Maybe [Text] -- ^ "claims_supported" - OpenID Connect Supported Claims  JSON array containing a list of the Claim Names of the Claims that the OpenID Provider MAY be able to supply values for. Note that for privacy or other reasons, this might not be an exhaustive list.-  , oidcConfigurationCodeChallengeMethodsSupported :: Maybe [Text] -- ^ "code_challenge_methods_supported" - OAuth 2.0 PKCE Supported Code Challenge Methods  JSON array containing a list of Proof Key for Code Exchange (PKCE) [RFC7636] code challenge methods supported by this authorization server.-  , oidcConfigurationEndSessionEndpoint :: Maybe Text -- ^ "end_session_endpoint" - OpenID Connect End-Session Endpoint  URL at the OP to which an RP can perform a redirect to request that the End-User be logged out at the OP.-  , oidcConfigurationFrontchannelLogoutSessionSupported :: Maybe Bool -- ^ "frontchannel_logout_session_supported" - OpenID Connect Front-Channel Logout Session Required  Boolean value specifying whether the OP can pass iss (issuer) and sid (session ID) query parameters to identify the RP session with the OP when the frontchannel_logout_uri is used. If supported, the sid Claim is also included in ID Tokens issued by the OP.-  , oidcConfigurationFrontchannelLogoutSupported :: Maybe Bool -- ^ "frontchannel_logout_supported" - OpenID Connect Front-Channel Logout Supported  Boolean value specifying whether the OP supports HTTP-based logout, with true indicating support.-  , oidcConfigurationGrantTypesSupported :: Maybe [Text] -- ^ "grant_types_supported" - OAuth 2.0 Supported Grant Types  JSON array containing a list of the OAuth 2.0 Grant Type values that this OP supports.-  , oidcConfigurationIdTokenSignedResponseAlg :: [Text] -- ^ /Required/ "id_token_signed_response_alg" - OpenID Connect Default ID Token Signing Algorithms  Algorithm used to sign OpenID Connect ID Tokens.-  , oidcConfigurationIdTokenSigningAlgValuesSupported :: [Text] -- ^ /Required/ "id_token_signing_alg_values_supported" - OpenID Connect Supported ID Token Signing Algorithms  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID Token to encode the Claims in a JWT.-  , oidcConfigurationIssuer :: Text -- ^ /Required/ "issuer" - OpenID Connect Issuer URL  An URL using the https scheme with no query or fragment component that the OP asserts as its IssuerURL Identifier. If IssuerURL discovery is supported , this value MUST be identical to the issuer value returned by WebFinger. This also MUST be identical to the iss Claim value in ID Tokens issued from this IssuerURL.-  , oidcConfigurationJwksUri :: Text -- ^ /Required/ "jwks_uri" - OpenID Connect Well-Known JSON Web Keys URL  URL of the OP&#39;s JSON Web Key Set [JWK] document. This contains the signing key(s) the RP uses to validate signatures from the OP. The JWK Set MAY also contain the Server&#39;s encryption key(s), which are used by RPs to encrypt requests to the Server. When both signing and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key&#39;s intended usage. Although some algorithms allow the same key to be used for both signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.-  , oidcConfigurationRegistrationEndpoint :: Maybe Text -- ^ "registration_endpoint" - OpenID Connect Dynamic Client Registration Endpoint URL-  , oidcConfigurationRequestObjectSigningAlgValuesSupported :: Maybe [Text] -- ^ "request_object_signing_alg_values_supported" - OpenID Connect Supported Request Object Signing Algorithms  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for Request Objects, which are described in Section 6.1 of OpenID Connect Core 1.0 [OpenID.Core]. These algorithms are used both when the Request Object is passed by value (using the request parameter) and when it is passed by reference (using the request_uri parameter).-  , oidcConfigurationRequestParameterSupported :: Maybe Bool -- ^ "request_parameter_supported" - OpenID Connect Request Parameter Supported  Boolean value specifying whether the OP supports use of the request parameter, with true indicating support.-  , oidcConfigurationRequestUriParameterSupported :: Maybe Bool -- ^ "request_uri_parameter_supported" - OpenID Connect Request URI Parameter Supported  Boolean value specifying whether the OP supports use of the request_uri parameter, with true indicating support.-  , oidcConfigurationRequireRequestUriRegistration :: Maybe Bool -- ^ "require_request_uri_registration" - OpenID Connect Requires Request URI Registration  Boolean value specifying whether the OP requires any request_uri values used to be pre-registered using the request_uris registration parameter.-  , oidcConfigurationResponseModesSupported :: Maybe [Text] -- ^ "response_modes_supported" - OAuth 2.0 Supported Response Modes  JSON array containing a list of the OAuth 2.0 response_mode values that this OP supports.-  , oidcConfigurationResponseTypesSupported :: [Text] -- ^ /Required/ "response_types_supported" - OAuth 2.0 Supported Response Types  JSON array containing a list of the OAuth 2.0 response_type values that this OP supports. Dynamic OpenID Providers MUST support the code, id_token, and the token id_token Response Type values.-  , oidcConfigurationRevocationEndpoint :: Maybe Text -- ^ "revocation_endpoint" - OAuth 2.0 Token Revocation URL  URL of the authorization server&#39;s OAuth 2.0 revocation endpoint.-  , oidcConfigurationScopesSupported :: Maybe [Text] -- ^ "scopes_supported" - OAuth 2.0 Supported Scope Values  JSON array containing a list of the OAuth 2.0 [RFC6749] scope values that this server supports. The server MUST support the openid scope value. Servers MAY choose not to advertise some supported scope values even when this parameter is used-  , oidcConfigurationSubjectTypesSupported :: [Text] -- ^ /Required/ "subject_types_supported" - OpenID Connect Supported Subject Types  JSON array containing a list of the Subject Identifier types that this OP supports. Valid types include pairwise and public.-  , oidcConfigurationTokenEndpoint :: Text -- ^ /Required/ "token_endpoint" - OAuth 2.0 Token Endpoint URL-  , oidcConfigurationTokenEndpointAuthMethodsSupported :: Maybe [Text] -- ^ "token_endpoint_auth_methods_supported" - OAuth 2.0 Supported Client Authentication Methods  JSON array containing a list of Client Authentication methods supported by this Token Endpoint. The options are client_secret_post, client_secret_basic, client_secret_jwt, and private_key_jwt, as described in Section 9 of OpenID Connect Core 1.0-  , oidcConfigurationUserinfoEndpoint :: Maybe Text -- ^ "userinfo_endpoint" - OpenID Connect Userinfo URL  URL of the OP&#39;s UserInfo Endpoint.-  , oidcConfigurationUserinfoSignedResponseAlg :: [Text] -- ^ /Required/ "userinfo_signed_response_alg" - OpenID Connect User Userinfo Signing Algorithm  Algorithm used to sign OpenID Connect Userinfo Responses.-  , oidcConfigurationUserinfoSigningAlgValuesSupported :: Maybe [Text] -- ^ "userinfo_signing_alg_values_supported" - OpenID Connect Supported Userinfo Signing Algorithm  JSON array containing a list of the JWS [JWS] signing algorithms (alg values) [JWA] supported by the UserInfo Endpoint to encode the Claims in a JWT [JWT].-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OidcConfiguration-instance A.FromJSON OidcConfiguration where-  parseJSON = A.withObject "OidcConfiguration" $ \o ->-    OidcConfiguration-      <$> (o .:  "authorization_endpoint")-      <*> (o .:? "backchannel_logout_session_supported")-      <*> (o .:? "backchannel_logout_supported")-      <*> (o .:? "claims_parameter_supported")-      <*> (o .:? "claims_supported")-      <*> (o .:? "code_challenge_methods_supported")-      <*> (o .:? "end_session_endpoint")-      <*> (o .:? "frontchannel_logout_session_supported")-      <*> (o .:? "frontchannel_logout_supported")-      <*> (o .:? "grant_types_supported")-      <*> (o .:  "id_token_signed_response_alg")-      <*> (o .:  "id_token_signing_alg_values_supported")-      <*> (o .:  "issuer")-      <*> (o .:  "jwks_uri")-      <*> (o .:? "registration_endpoint")-      <*> (o .:? "request_object_signing_alg_values_supported")-      <*> (o .:? "request_parameter_supported")-      <*> (o .:? "request_uri_parameter_supported")-      <*> (o .:? "require_request_uri_registration")-      <*> (o .:? "response_modes_supported")-      <*> (o .:  "response_types_supported")-      <*> (o .:? "revocation_endpoint")-      <*> (o .:? "scopes_supported")-      <*> (o .:  "subject_types_supported")-      <*> (o .:  "token_endpoint")-      <*> (o .:? "token_endpoint_auth_methods_supported")-      <*> (o .:? "userinfo_endpoint")-      <*> (o .:  "userinfo_signed_response_alg")-      <*> (o .:? "userinfo_signing_alg_values_supported")---- | ToJSON OidcConfiguration-instance A.ToJSON OidcConfiguration where-  toJSON OidcConfiguration {..} =-   _omitNulls-      [ "authorization_endpoint" .= oidcConfigurationAuthorizationEndpoint-      , "backchannel_logout_session_supported" .= oidcConfigurationBackchannelLogoutSessionSupported-      , "backchannel_logout_supported" .= oidcConfigurationBackchannelLogoutSupported-      , "claims_parameter_supported" .= oidcConfigurationClaimsParameterSupported-      , "claims_supported" .= oidcConfigurationClaimsSupported-      , "code_challenge_methods_supported" .= oidcConfigurationCodeChallengeMethodsSupported-      , "end_session_endpoint" .= oidcConfigurationEndSessionEndpoint-      , "frontchannel_logout_session_supported" .= oidcConfigurationFrontchannelLogoutSessionSupported-      , "frontchannel_logout_supported" .= oidcConfigurationFrontchannelLogoutSupported-      , "grant_types_supported" .= oidcConfigurationGrantTypesSupported-      , "id_token_signed_response_alg" .= oidcConfigurationIdTokenSignedResponseAlg-      , "id_token_signing_alg_values_supported" .= oidcConfigurationIdTokenSigningAlgValuesSupported-      , "issuer" .= oidcConfigurationIssuer-      , "jwks_uri" .= oidcConfigurationJwksUri-      , "registration_endpoint" .= oidcConfigurationRegistrationEndpoint-      , "request_object_signing_alg_values_supported" .= oidcConfigurationRequestObjectSigningAlgValuesSupported-      , "request_parameter_supported" .= oidcConfigurationRequestParameterSupported-      , "request_uri_parameter_supported" .= oidcConfigurationRequestUriParameterSupported-      , "require_request_uri_registration" .= oidcConfigurationRequireRequestUriRegistration-      , "response_modes_supported" .= oidcConfigurationResponseModesSupported-      , "response_types_supported" .= oidcConfigurationResponseTypesSupported-      , "revocation_endpoint" .= oidcConfigurationRevocationEndpoint-      , "scopes_supported" .= oidcConfigurationScopesSupported-      , "subject_types_supported" .= oidcConfigurationSubjectTypesSupported-      , "token_endpoint" .= oidcConfigurationTokenEndpoint-      , "token_endpoint_auth_methods_supported" .= oidcConfigurationTokenEndpointAuthMethodsSupported-      , "userinfo_endpoint" .= oidcConfigurationUserinfoEndpoint-      , "userinfo_signed_response_alg" .= oidcConfigurationUserinfoSignedResponseAlg-      , "userinfo_signing_alg_values_supported" .= oidcConfigurationUserinfoSigningAlgValuesSupported-      ]----- | Construct a value of type 'OidcConfiguration' (by applying it's required fields, if any)-mkOidcConfiguration-  :: Text -- ^ 'oidcConfigurationAuthorizationEndpoint': OAuth 2.0 Authorization Endpoint URL-  -> [Text] -- ^ 'oidcConfigurationIdTokenSignedResponseAlg': OpenID Connect Default ID Token Signing Algorithms  Algorithm used to sign OpenID Connect ID Tokens.-  -> [Text] -- ^ 'oidcConfigurationIdTokenSigningAlgValuesSupported': OpenID Connect Supported ID Token Signing Algorithms  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID Token to encode the Claims in a JWT.-  -> Text -- ^ 'oidcConfigurationIssuer': OpenID Connect Issuer URL  An URL using the https scheme with no query or fragment component that the OP asserts as its IssuerURL Identifier. If IssuerURL discovery is supported , this value MUST be identical to the issuer value returned by WebFinger. This also MUST be identical to the iss Claim value in ID Tokens issued from this IssuerURL.-  -> Text -- ^ 'oidcConfigurationJwksUri': OpenID Connect Well-Known JSON Web Keys URL  URL of the OP's JSON Web Key Set [JWK] document. This contains the signing key(s) the RP uses to validate signatures from the OP. The JWK Set MAY also contain the Server's encryption key(s), which are used by RPs to encrypt requests to the Server. When both signing and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key's intended usage. Although some algorithms allow the same key to be used for both signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.-  -> [Text] -- ^ 'oidcConfigurationResponseTypesSupported': OAuth 2.0 Supported Response Types  JSON array containing a list of the OAuth 2.0 response_type values that this OP supports. Dynamic OpenID Providers MUST support the code, id_token, and the token id_token Response Type values.-  -> [Text] -- ^ 'oidcConfigurationSubjectTypesSupported': OpenID Connect Supported Subject Types  JSON array containing a list of the Subject Identifier types that this OP supports. Valid types include pairwise and public.-  -> Text -- ^ 'oidcConfigurationTokenEndpoint': OAuth 2.0 Token Endpoint URL-  -> [Text] -- ^ 'oidcConfigurationUserinfoSignedResponseAlg': OpenID Connect User Userinfo Signing Algorithm  Algorithm used to sign OpenID Connect Userinfo Responses.-  -> OidcConfiguration-mkOidcConfiguration oidcConfigurationAuthorizationEndpoint oidcConfigurationIdTokenSignedResponseAlg oidcConfigurationIdTokenSigningAlgValuesSupported oidcConfigurationIssuer oidcConfigurationJwksUri oidcConfigurationResponseTypesSupported oidcConfigurationSubjectTypesSupported oidcConfigurationTokenEndpoint oidcConfigurationUserinfoSignedResponseAlg =-  OidcConfiguration-  { oidcConfigurationAuthorizationEndpoint-  , oidcConfigurationBackchannelLogoutSessionSupported = Nothing-  , oidcConfigurationBackchannelLogoutSupported = Nothing-  , oidcConfigurationClaimsParameterSupported = Nothing-  , oidcConfigurationClaimsSupported = Nothing-  , oidcConfigurationCodeChallengeMethodsSupported = Nothing-  , oidcConfigurationEndSessionEndpoint = Nothing-  , oidcConfigurationFrontchannelLogoutSessionSupported = Nothing-  , oidcConfigurationFrontchannelLogoutSupported = Nothing-  , oidcConfigurationGrantTypesSupported = Nothing-  , oidcConfigurationIdTokenSignedResponseAlg-  , oidcConfigurationIdTokenSigningAlgValuesSupported-  , oidcConfigurationIssuer-  , oidcConfigurationJwksUri-  , oidcConfigurationRegistrationEndpoint = Nothing-  , oidcConfigurationRequestObjectSigningAlgValuesSupported = Nothing-  , oidcConfigurationRequestParameterSupported = Nothing-  , oidcConfigurationRequestUriParameterSupported = Nothing-  , oidcConfigurationRequireRequestUriRegistration = Nothing-  , oidcConfigurationResponseModesSupported = Nothing-  , oidcConfigurationResponseTypesSupported-  , oidcConfigurationRevocationEndpoint = Nothing-  , oidcConfigurationScopesSupported = Nothing-  , oidcConfigurationSubjectTypesSupported-  , oidcConfigurationTokenEndpoint-  , oidcConfigurationTokenEndpointAuthMethodsSupported = Nothing-  , oidcConfigurationUserinfoEndpoint = Nothing-  , oidcConfigurationUserinfoSignedResponseAlg-  , oidcConfigurationUserinfoSigningAlgValuesSupported = Nothing-  }---- ** OidcUserInfo--- | OidcUserInfo--- OpenID Connect Userinfo-data OidcUserInfo = OidcUserInfo-  { oidcUserInfoBirthdate :: Maybe Text -- ^ "birthdate" - End-User&#39;s birthday, represented as an ISO 8601:2004 [ISO8601‑2004] YYYY-MM-DD format. The year MAY be 0000, indicating that it is omitted. To represent only the year, YYYY format is allowed. Note that depending on the underlying platform&#39;s date related function, providing just year can result in varying month and day, so the implementers need to take this factor into account to correctly process the dates.-  , oidcUserInfoEmail :: Maybe Text -- ^ "email" - End-User&#39;s preferred e-mail address. Its value MUST conform to the RFC 5322 [RFC5322] addr-spec syntax. The RP MUST NOT rely upon this value being unique, as discussed in Section 5.7.-  , oidcUserInfoEmailVerified :: Maybe Bool -- ^ "email_verified" - True if the End-User&#39;s e-mail address has been verified; otherwise false. When this Claim Value is true, this means that the OP took affirmative steps to ensure that this e-mail address was controlled by the End-User at the time the verification was performed. The means by which an e-mail address is verified is context-specific, and dependent upon the trust framework or contractual agreements within which the parties are operating.-  , oidcUserInfoFamilyName :: Maybe Text -- ^ "family_name" - Surname(s) or last name(s) of the End-User. Note that in some cultures, people can have multiple family names or no family name; all can be present, with the names being separated by space characters.-  , oidcUserInfoGender :: Maybe Text -- ^ "gender" - End-User&#39;s gender. Values defined by this specification are female and male. Other values MAY be used when neither of the defined values are applicable.-  , oidcUserInfoGivenName :: Maybe Text -- ^ "given_name" - Given name(s) or first name(s) of the End-User. Note that in some cultures, people can have multiple given names; all can be present, with the names being separated by space characters.-  , oidcUserInfoLocale :: Maybe Text -- ^ "locale" - End-User&#39;s locale, represented as a BCP47 [RFC5646] language tag. This is typically an ISO 639-1 Alpha-2 [ISO639‑1] language code in lowercase and an ISO 3166-1 Alpha-2 [ISO3166‑1] country code in uppercase, separated by a dash. For example, en-US or fr-CA. As a compatibility note, some implementations have used an underscore as the separator rather than a dash, for example, en_US; Relying Parties MAY choose to accept this locale syntax as well.-  , oidcUserInfoMiddleName :: Maybe Text -- ^ "middle_name" - Middle name(s) of the End-User. Note that in some cultures, people can have multiple middle names; all can be present, with the names being separated by space characters. Also note that in some cultures, middle names are not used.-  , oidcUserInfoName :: Maybe Text -- ^ "name" - End-User&#39;s full name in displayable form including all name parts, possibly including titles and suffixes, ordered according to the End-User&#39;s locale and preferences.-  , oidcUserInfoNickname :: Maybe Text -- ^ "nickname" - Casual name of the End-User that may or may not be the same as the given_name. For instance, a nickname value of Mike might be returned alongside a given_name value of Michael.-  , oidcUserInfoPhoneNumber :: Maybe Text -- ^ "phone_number" - End-User&#39;s preferred telephone number. E.164 [E.164] is RECOMMENDED as the format of this Claim, for example, +1 (425) 555-1212 or +56 (2) 687 2400. If the phone number contains an extension, it is RECOMMENDED that the extension be represented using the RFC 3966 [RFC3966] extension syntax, for example, +1 (604) 555-1234;ext&#x3D;5678.-  , oidcUserInfoPhoneNumberVerified :: Maybe Bool -- ^ "phone_number_verified" - True if the End-User&#39;s phone number has been verified; otherwise false. When this Claim Value is true, this means that the OP took affirmative steps to ensure that this phone number was controlled by the End-User at the time the verification was performed. The means by which a phone number is verified is context-specific, and dependent upon the trust framework or contractual agreements within which the parties are operating. When true, the phone_number Claim MUST be in E.164 format and any extensions MUST be represented in RFC 3966 format.-  , oidcUserInfoPicture :: Maybe Text -- ^ "picture" - URL of the End-User&#39;s profile picture. This URL MUST refer to an image file (for example, a PNG, JPEG, or GIF image file), rather than to a Web page containing an image. Note that this URL SHOULD specifically reference a profile photo of the End-User suitable for displaying when describing the End-User, rather than an arbitrary photo taken by the End-User.-  , oidcUserInfoPreferredUsername :: Maybe Text -- ^ "preferred_username" - Non-unique shorthand name by which the End-User wishes to be referred to at the RP, such as janedoe or j.doe. This value MAY be any valid JSON string including special characters such as @, /, or whitespace.-  , oidcUserInfoProfile :: Maybe Text -- ^ "profile" - URL of the End-User&#39;s profile page. The contents of this Web page SHOULD be about the End-User.-  , oidcUserInfoSub :: Maybe Text -- ^ "sub" - Subject - Identifier for the End-User at the IssuerURL.-  , oidcUserInfoUpdatedAt :: Maybe Integer -- ^ "updated_at" - Time the End-User&#39;s information was last updated. Its value is a JSON number representing the number of seconds from 1970-01-01T0:0:0Z as measured in UTC until the date/time.-  , oidcUserInfoWebsite :: Maybe Text -- ^ "website" - URL of the End-User&#39;s Web page or blog. This Web page SHOULD contain information published by the End-User or an organization that the End-User is affiliated with.-  , oidcUserInfoZoneinfo :: Maybe Text -- ^ "zoneinfo" - String from zoneinfo [zoneinfo] time zone database representing the End-User&#39;s time zone. For example, Europe/Paris or America/Los_Angeles.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON OidcUserInfo-instance A.FromJSON OidcUserInfo where-  parseJSON = A.withObject "OidcUserInfo" $ \o ->-    OidcUserInfo-      <$> (o .:? "birthdate")-      <*> (o .:? "email")-      <*> (o .:? "email_verified")-      <*> (o .:? "family_name")-      <*> (o .:? "gender")-      <*> (o .:? "given_name")-      <*> (o .:? "locale")-      <*> (o .:? "middle_name")-      <*> (o .:? "name")-      <*> (o .:? "nickname")-      <*> (o .:? "phone_number")-      <*> (o .:? "phone_number_verified")-      <*> (o .:? "picture")-      <*> (o .:? "preferred_username")-      <*> (o .:? "profile")-      <*> (o .:? "sub")-      <*> (o .:? "updated_at")-      <*> (o .:? "website")-      <*> (o .:? "zoneinfo")---- | ToJSON OidcUserInfo-instance A.ToJSON OidcUserInfo where-  toJSON OidcUserInfo {..} =-   _omitNulls-      [ "birthdate" .= oidcUserInfoBirthdate-      , "email" .= oidcUserInfoEmail-      , "email_verified" .= oidcUserInfoEmailVerified-      , "family_name" .= oidcUserInfoFamilyName-      , "gender" .= oidcUserInfoGender-      , "given_name" .= oidcUserInfoGivenName-      , "locale" .= oidcUserInfoLocale-      , "middle_name" .= oidcUserInfoMiddleName-      , "name" .= oidcUserInfoName-      , "nickname" .= oidcUserInfoNickname-      , "phone_number" .= oidcUserInfoPhoneNumber-      , "phone_number_verified" .= oidcUserInfoPhoneNumberVerified-      , "picture" .= oidcUserInfoPicture-      , "preferred_username" .= oidcUserInfoPreferredUsername-      , "profile" .= oidcUserInfoProfile-      , "sub" .= oidcUserInfoSub-      , "updated_at" .= oidcUserInfoUpdatedAt-      , "website" .= oidcUserInfoWebsite-      , "zoneinfo" .= oidcUserInfoZoneinfo-      ]----- | Construct a value of type 'OidcUserInfo' (by applying it's required fields, if any)-mkOidcUserInfo-  :: OidcUserInfo-mkOidcUserInfo =-  OidcUserInfo-  { oidcUserInfoBirthdate = Nothing-  , oidcUserInfoEmail = Nothing-  , oidcUserInfoEmailVerified = Nothing-  , oidcUserInfoFamilyName = Nothing-  , oidcUserInfoGender = Nothing-  , oidcUserInfoGivenName = Nothing-  , oidcUserInfoLocale = Nothing-  , oidcUserInfoMiddleName = Nothing-  , oidcUserInfoName = Nothing-  , oidcUserInfoNickname = Nothing-  , oidcUserInfoPhoneNumber = Nothing-  , oidcUserInfoPhoneNumberVerified = Nothing-  , oidcUserInfoPicture = Nothing-  , oidcUserInfoPreferredUsername = Nothing-  , oidcUserInfoProfile = Nothing-  , oidcUserInfoSub = Nothing-  , oidcUserInfoUpdatedAt = Nothing-  , oidcUserInfoWebsite = Nothing-  , oidcUserInfoZoneinfo = Nothing-  }---- ** Pagination--- | Pagination-data Pagination = Pagination-  { paginationPageSize :: Maybe Integer -- ^ "page_size" - Items per page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-  , paginationPageToken :: Maybe Text -- ^ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON Pagination-instance A.FromJSON Pagination where-  parseJSON = A.withObject "Pagination" $ \o ->-    Pagination-      <$> (o .:? "page_size")-      <*> (o .:? "page_token")---- | ToJSON Pagination-instance A.ToJSON Pagination where-  toJSON Pagination {..} =-   _omitNulls-      [ "page_size" .= paginationPageSize-      , "page_token" .= paginationPageToken-      ]----- | Construct a value of type 'Pagination' (by applying it's required fields, if any)-mkPagination-  :: Pagination-mkPagination =-  Pagination-  { paginationPageSize = Nothing-  , paginationPageToken = Nothing-  }---- ** PaginationHeaders--- | PaginationHeaders-data PaginationHeaders = PaginationHeaders-  { paginationHeadersLink :: Maybe Text -- ^ "link" - The link header contains pagination links.  For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).  in: header-  , paginationHeadersXTotalCount :: Maybe Text -- ^ "x-total-count" - The total number of clients.  in: header-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON PaginationHeaders-instance A.FromJSON PaginationHeaders where-  parseJSON = A.withObject "PaginationHeaders" $ \o ->-    PaginationHeaders-      <$> (o .:? "link")-      <*> (o .:? "x-total-count")---- | ToJSON PaginationHeaders-instance A.ToJSON PaginationHeaders where-  toJSON PaginationHeaders {..} =-   _omitNulls-      [ "link" .= paginationHeadersLink-      , "x-total-count" .= paginationHeadersXTotalCount-      ]----- | Construct a value of type 'PaginationHeaders' (by applying it's required fields, if any)-mkPaginationHeaders-  :: PaginationHeaders-mkPaginationHeaders =-  PaginationHeaders-  { paginationHeadersLink = Nothing-  , paginationHeadersXTotalCount = Nothing-  }---- ** RejectOAuth2Request--- | RejectOAuth2Request--- The request payload used to accept a login or consent request.--- -data RejectOAuth2Request = RejectOAuth2Request-  { rejectOAuth2RequestError :: Maybe Text -- ^ "error" - The error should follow the OAuth2 error format (e.g. &#x60;invalid_request&#x60;, &#x60;login_required&#x60;).  Defaults to &#x60;request_denied&#x60;.-  , rejectOAuth2RequestErrorDebug :: Maybe Text -- ^ "error_debug" - Debug contains information to help resolve the problem as a developer. Usually not exposed to the public but only in the server logs.-  , rejectOAuth2RequestErrorDescription :: Maybe Text -- ^ "error_description" - Description of the error in a human readable format.-  , rejectOAuth2RequestErrorHint :: Maybe Text -- ^ "error_hint" - Hint to help resolve the error.-  , rejectOAuth2RequestStatusCode :: Maybe Integer -- ^ "status_code" - Represents the HTTP status code of the error (e.g. 401 or 403)  Defaults to 400-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON RejectOAuth2Request-instance A.FromJSON RejectOAuth2Request where-  parseJSON = A.withObject "RejectOAuth2Request" $ \o ->-    RejectOAuth2Request-      <$> (o .:? "error")-      <*> (o .:? "error_debug")-      <*> (o .:? "error_description")-      <*> (o .:? "error_hint")-      <*> (o .:? "status_code")---- | ToJSON RejectOAuth2Request-instance A.ToJSON RejectOAuth2Request where-  toJSON RejectOAuth2Request {..} =-   _omitNulls-      [ "error" .= rejectOAuth2RequestError-      , "error_debug" .= rejectOAuth2RequestErrorDebug-      , "error_description" .= rejectOAuth2RequestErrorDescription-      , "error_hint" .= rejectOAuth2RequestErrorHint-      , "status_code" .= rejectOAuth2RequestStatusCode-      ]----- | Construct a value of type 'RejectOAuth2Request' (by applying it's required fields, if any)-mkRejectOAuth2Request-  :: RejectOAuth2Request-mkRejectOAuth2Request =-  RejectOAuth2Request-  { rejectOAuth2RequestError = Nothing-  , rejectOAuth2RequestErrorDebug = Nothing-  , rejectOAuth2RequestErrorDescription = Nothing-  , rejectOAuth2RequestErrorHint = Nothing-  , rejectOAuth2RequestStatusCode = Nothing-  }---- ** TokenPagination--- | TokenPagination-data TokenPagination = TokenPagination-  { tokenPaginationPageSize :: Maybe Integer -- ^ "page_size" - Items per page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-  , tokenPaginationPageToken :: Maybe Text -- ^ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON TokenPagination-instance A.FromJSON TokenPagination where-  parseJSON = A.withObject "TokenPagination" $ \o ->-    TokenPagination-      <$> (o .:? "page_size")-      <*> (o .:? "page_token")---- | ToJSON TokenPagination-instance A.ToJSON TokenPagination where-  toJSON TokenPagination {..} =-   _omitNulls-      [ "page_size" .= tokenPaginationPageSize-      , "page_token" .= tokenPaginationPageToken-      ]----- | Construct a value of type 'TokenPagination' (by applying it's required fields, if any)-mkTokenPagination-  :: TokenPagination-mkTokenPagination =-  TokenPagination-  { tokenPaginationPageSize = Nothing-  , tokenPaginationPageToken = Nothing-  }---- ** TokenPaginationHeaders--- | TokenPaginationHeaders-data TokenPaginationHeaders = TokenPaginationHeaders-  { tokenPaginationHeadersLink :: Maybe Text -- ^ "link" - The link header contains pagination links.  For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).  in: header-  , tokenPaginationHeadersXTotalCount :: Maybe Text -- ^ "x-total-count" - The total number of clients.  in: header-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON TokenPaginationHeaders-instance A.FromJSON TokenPaginationHeaders where-  parseJSON = A.withObject "TokenPaginationHeaders" $ \o ->-    TokenPaginationHeaders-      <$> (o .:? "link")-      <*> (o .:? "x-total-count")---- | ToJSON TokenPaginationHeaders-instance A.ToJSON TokenPaginationHeaders where-  toJSON TokenPaginationHeaders {..} =-   _omitNulls-      [ "link" .= tokenPaginationHeadersLink-      , "x-total-count" .= tokenPaginationHeadersXTotalCount-      ]----- | Construct a value of type 'TokenPaginationHeaders' (by applying it's required fields, if any)-mkTokenPaginationHeaders-  :: TokenPaginationHeaders-mkTokenPaginationHeaders =-  TokenPaginationHeaders-  { tokenPaginationHeadersLink = Nothing-  , tokenPaginationHeadersXTotalCount = Nothing-  }---- ** TokenPaginationRequestParameters--- | TokenPaginationRequestParameters--- Pagination Request Parameters--- --- The `Link` HTTP header contains multiple links (`first`, `next`, `last`, `previous`) formatted as: `<https://{project-slug}.projects.oryapis.com/admin/clients?page_size={limit}&page_token={offset}>; rel=\"{page}\"`  For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-data TokenPaginationRequestParameters = TokenPaginationRequestParameters-  { tokenPaginationRequestParametersPageSize :: Maybe Integer -- ^ "page_size" - Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-  , tokenPaginationRequestParametersPageToken :: Maybe Text -- ^ "page_token" - Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON TokenPaginationRequestParameters-instance A.FromJSON TokenPaginationRequestParameters where-  parseJSON = A.withObject "TokenPaginationRequestParameters" $ \o ->-    TokenPaginationRequestParameters-      <$> (o .:? "page_size")-      <*> (o .:? "page_token")---- | ToJSON TokenPaginationRequestParameters-instance A.ToJSON TokenPaginationRequestParameters where-  toJSON TokenPaginationRequestParameters {..} =-   _omitNulls-      [ "page_size" .= tokenPaginationRequestParametersPageSize-      , "page_token" .= tokenPaginationRequestParametersPageToken-      ]----- | Construct a value of type 'TokenPaginationRequestParameters' (by applying it's required fields, if any)-mkTokenPaginationRequestParameters-  :: TokenPaginationRequestParameters-mkTokenPaginationRequestParameters =-  TokenPaginationRequestParameters-  { tokenPaginationRequestParametersPageSize = Nothing-  , tokenPaginationRequestParametersPageToken = Nothing-  }---- ** TokenPaginationResponseHeaders--- | TokenPaginationResponseHeaders--- Pagination Response Header--- --- The `Link` HTTP header contains multiple links (`first`, `next`, `last`, `previous`) formatted as: `<https://{project-slug}.projects.oryapis.com/admin/clients?page_size={limit}&page_token={offset}>; rel=\"{page}\"`  For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).-data TokenPaginationResponseHeaders = TokenPaginationResponseHeaders-  { tokenPaginationResponseHeadersLink :: Maybe Text -- ^ "link" - The Link HTTP Header  The &#x60;Link&#x60; header contains a comma-delimited list of links to the following pages:  first: The first page of results. next: The next page of results. prev: The previous page of results. last: The last page of results.  Pages are omitted if they do not exist. For example, if there is no next page, the &#x60;next&#x60; link is omitted. Examples:  &lt;/clients?page_size&#x3D;5&amp;page_token&#x3D;0&gt;; rel&#x3D;\&quot;first\&quot;,&lt;/clients?page_size&#x3D;5&amp;page_token&#x3D;15&gt;; rel&#x3D;\&quot;next\&quot;,&lt;/clients?page_size&#x3D;5&amp;page_token&#x3D;5&gt;; rel&#x3D;\&quot;prev\&quot;,&lt;/clients?page_size&#x3D;5&amp;page_token&#x3D;20&gt;; rel&#x3D;\&quot;last\&quot;-  , tokenPaginationResponseHeadersXTotalCount :: Maybe Integer -- ^ "x-total-count" - The X-Total-Count HTTP Header  The &#x60;X-Total-Count&#x60; header contains the total number of items in the collection.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON TokenPaginationResponseHeaders-instance A.FromJSON TokenPaginationResponseHeaders where-  parseJSON = A.withObject "TokenPaginationResponseHeaders" $ \o ->-    TokenPaginationResponseHeaders-      <$> (o .:? "link")-      <*> (o .:? "x-total-count")---- | ToJSON TokenPaginationResponseHeaders-instance A.ToJSON TokenPaginationResponseHeaders where-  toJSON TokenPaginationResponseHeaders {..} =-   _omitNulls-      [ "link" .= tokenPaginationResponseHeadersLink-      , "x-total-count" .= tokenPaginationResponseHeadersXTotalCount-      ]----- | Construct a value of type 'TokenPaginationResponseHeaders' (by applying it's required fields, if any)-mkTokenPaginationResponseHeaders-  :: TokenPaginationResponseHeaders-mkTokenPaginationResponseHeaders =-  TokenPaginationResponseHeaders-  { tokenPaginationResponseHeadersLink = Nothing-  , tokenPaginationResponseHeadersXTotalCount = Nothing-  }---- ** TrustOAuth2JwtGrantIssuer--- | TrustOAuth2JwtGrantIssuer--- Trust OAuth2 JWT Bearer Grant Type Issuer Request Body-data TrustOAuth2JwtGrantIssuer = TrustOAuth2JwtGrantIssuer-  { trustOAuth2JwtGrantIssuerAllowAnySubject :: Maybe Bool -- ^ "allow_any_subject" - The \&quot;allow_any_subject\&quot; indicates that the issuer is allowed to have any principal as the subject of the JWT.-  , trustOAuth2JwtGrantIssuerExpiresAt :: DateTime -- ^ /Required/ "expires_at" - The \&quot;expires_at\&quot; indicates, when grant will expire, so we will reject assertion from \&quot;issuer\&quot; targeting \&quot;subject\&quot;.-  , trustOAuth2JwtGrantIssuerIssuer :: Text -- ^ /Required/ "issuer" - The \&quot;issuer\&quot; identifies the principal that issued the JWT assertion (same as \&quot;iss\&quot; claim in JWT).-  , trustOAuth2JwtGrantIssuerJwk :: JsonWebKey -- ^ /Required/ "jwk"-  , trustOAuth2JwtGrantIssuerScope :: [Text] -- ^ /Required/ "scope" - The \&quot;scope\&quot; contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])-  , trustOAuth2JwtGrantIssuerSubject :: Maybe Text -- ^ "subject" - The \&quot;subject\&quot; identifies the principal that is the subject of the JWT.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON TrustOAuth2JwtGrantIssuer-instance A.FromJSON TrustOAuth2JwtGrantIssuer where-  parseJSON = A.withObject "TrustOAuth2JwtGrantIssuer" $ \o ->-    TrustOAuth2JwtGrantIssuer-      <$> (o .:? "allow_any_subject")-      <*> (o .:  "expires_at")-      <*> (o .:  "issuer")-      <*> (o .:  "jwk")-      <*> (o .:  "scope")-      <*> (o .:? "subject")---- | ToJSON TrustOAuth2JwtGrantIssuer-instance A.ToJSON TrustOAuth2JwtGrantIssuer where-  toJSON TrustOAuth2JwtGrantIssuer {..} =-   _omitNulls-      [ "allow_any_subject" .= trustOAuth2JwtGrantIssuerAllowAnySubject-      , "expires_at" .= trustOAuth2JwtGrantIssuerExpiresAt-      , "issuer" .= trustOAuth2JwtGrantIssuerIssuer-      , "jwk" .= trustOAuth2JwtGrantIssuerJwk-      , "scope" .= trustOAuth2JwtGrantIssuerScope-      , "subject" .= trustOAuth2JwtGrantIssuerSubject-      ]----- | Construct a value of type 'TrustOAuth2JwtGrantIssuer' (by applying it's required fields, if any)-mkTrustOAuth2JwtGrantIssuer-  :: DateTime -- ^ 'trustOAuth2JwtGrantIssuerExpiresAt': The \"expires_at\" indicates, when grant will expire, so we will reject assertion from \"issuer\" targeting \"subject\".-  -> Text -- ^ 'trustOAuth2JwtGrantIssuerIssuer': The \"issuer\" identifies the principal that issued the JWT assertion (same as \"iss\" claim in JWT).-  -> JsonWebKey -- ^ 'trustOAuth2JwtGrantIssuerJwk' -  -> [Text] -- ^ 'trustOAuth2JwtGrantIssuerScope': The \"scope\" contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])-  -> TrustOAuth2JwtGrantIssuer-mkTrustOAuth2JwtGrantIssuer trustOAuth2JwtGrantIssuerExpiresAt trustOAuth2JwtGrantIssuerIssuer trustOAuth2JwtGrantIssuerJwk trustOAuth2JwtGrantIssuerScope =-  TrustOAuth2JwtGrantIssuer-  { trustOAuth2JwtGrantIssuerAllowAnySubject = Nothing-  , trustOAuth2JwtGrantIssuerExpiresAt-  , trustOAuth2JwtGrantIssuerIssuer-  , trustOAuth2JwtGrantIssuerJwk-  , trustOAuth2JwtGrantIssuerScope-  , trustOAuth2JwtGrantIssuerSubject = Nothing-  }---- ** TrustedOAuth2JwtGrantIssuer--- | TrustedOAuth2JwtGrantIssuer--- OAuth2 JWT Bearer Grant Type Issuer Trust Relationship-data TrustedOAuth2JwtGrantIssuer = TrustedOAuth2JwtGrantIssuer-  { trustedOAuth2JwtGrantIssuerAllowAnySubject :: Maybe Bool -- ^ "allow_any_subject" - The \&quot;allow_any_subject\&quot; indicates that the issuer is allowed to have any principal as the subject of the JWT.-  , trustedOAuth2JwtGrantIssuerCreatedAt :: Maybe DateTime -- ^ "created_at" - The \&quot;created_at\&quot; indicates, when grant was created.-  , trustedOAuth2JwtGrantIssuerExpiresAt :: Maybe DateTime -- ^ "expires_at" - The \&quot;expires_at\&quot; indicates, when grant will expire, so we will reject assertion from \&quot;issuer\&quot; targeting \&quot;subject\&quot;.-  , trustedOAuth2JwtGrantIssuerId :: Maybe Text -- ^ "id"-  , trustedOAuth2JwtGrantIssuerIssuer :: Maybe Text -- ^ "issuer" - The \&quot;issuer\&quot; identifies the principal that issued the JWT assertion (same as \&quot;iss\&quot; claim in JWT).-  , trustedOAuth2JwtGrantIssuerPublicKey :: Maybe TrustedOAuth2JwtGrantJsonWebKey -- ^ "public_key"-  , trustedOAuth2JwtGrantIssuerScope :: Maybe [Text] -- ^ "scope" - The \&quot;scope\&quot; contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])-  , trustedOAuth2JwtGrantIssuerSubject :: Maybe Text -- ^ "subject" - The \&quot;subject\&quot; identifies the principal that is the subject of the JWT.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON TrustedOAuth2JwtGrantIssuer-instance A.FromJSON TrustedOAuth2JwtGrantIssuer where-  parseJSON = A.withObject "TrustedOAuth2JwtGrantIssuer" $ \o ->-    TrustedOAuth2JwtGrantIssuer-      <$> (o .:? "allow_any_subject")-      <*> (o .:? "created_at")-      <*> (o .:? "expires_at")-      <*> (o .:? "id")-      <*> (o .:? "issuer")-      <*> (o .:? "public_key")-      <*> (o .:? "scope")-      <*> (o .:? "subject")---- | ToJSON TrustedOAuth2JwtGrantIssuer-instance A.ToJSON TrustedOAuth2JwtGrantIssuer where-  toJSON TrustedOAuth2JwtGrantIssuer {..} =-   _omitNulls-      [ "allow_any_subject" .= trustedOAuth2JwtGrantIssuerAllowAnySubject-      , "created_at" .= trustedOAuth2JwtGrantIssuerCreatedAt-      , "expires_at" .= trustedOAuth2JwtGrantIssuerExpiresAt-      , "id" .= trustedOAuth2JwtGrantIssuerId-      , "issuer" .= trustedOAuth2JwtGrantIssuerIssuer-      , "public_key" .= trustedOAuth2JwtGrantIssuerPublicKey-      , "scope" .= trustedOAuth2JwtGrantIssuerScope-      , "subject" .= trustedOAuth2JwtGrantIssuerSubject-      ]----- | Construct a value of type 'TrustedOAuth2JwtGrantIssuer' (by applying it's required fields, if any)-mkTrustedOAuth2JwtGrantIssuer-  :: TrustedOAuth2JwtGrantIssuer-mkTrustedOAuth2JwtGrantIssuer =-  TrustedOAuth2JwtGrantIssuer-  { trustedOAuth2JwtGrantIssuerAllowAnySubject = Nothing-  , trustedOAuth2JwtGrantIssuerCreatedAt = Nothing-  , trustedOAuth2JwtGrantIssuerExpiresAt = Nothing-  , trustedOAuth2JwtGrantIssuerId = Nothing-  , trustedOAuth2JwtGrantIssuerIssuer = Nothing-  , trustedOAuth2JwtGrantIssuerPublicKey = Nothing-  , trustedOAuth2JwtGrantIssuerScope = Nothing-  , trustedOAuth2JwtGrantIssuerSubject = Nothing-  }---- ** TrustedOAuth2JwtGrantJsonWebKey--- | TrustedOAuth2JwtGrantJsonWebKey--- OAuth2 JWT Bearer Grant Type Issuer Trusted JSON Web Key-data TrustedOAuth2JwtGrantJsonWebKey = TrustedOAuth2JwtGrantJsonWebKey-  { trustedOAuth2JwtGrantJsonWebKeyKid :: Maybe Text -- ^ "kid" - The \&quot;key_id\&quot; is key unique identifier (same as kid header in jws/jwt).-  , trustedOAuth2JwtGrantJsonWebKeySet :: Maybe Text -- ^ "set" - The \&quot;set\&quot; is basically a name for a group(set) of keys. Will be the same as \&quot;issuer\&quot; in grant.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON TrustedOAuth2JwtGrantJsonWebKey-instance A.FromJSON TrustedOAuth2JwtGrantJsonWebKey where-  parseJSON = A.withObject "TrustedOAuth2JwtGrantJsonWebKey" $ \o ->-    TrustedOAuth2JwtGrantJsonWebKey-      <$> (o .:? "kid")-      <*> (o .:? "set")---- | ToJSON TrustedOAuth2JwtGrantJsonWebKey-instance A.ToJSON TrustedOAuth2JwtGrantJsonWebKey where-  toJSON TrustedOAuth2JwtGrantJsonWebKey {..} =-   _omitNulls-      [ "kid" .= trustedOAuth2JwtGrantJsonWebKeyKid-      , "set" .= trustedOAuth2JwtGrantJsonWebKeySet-      ]----- | Construct a value of type 'TrustedOAuth2JwtGrantJsonWebKey' (by applying it's required fields, if any)-mkTrustedOAuth2JwtGrantJsonWebKey-  :: TrustedOAuth2JwtGrantJsonWebKey-mkTrustedOAuth2JwtGrantJsonWebKey =-  TrustedOAuth2JwtGrantJsonWebKey-  { trustedOAuth2JwtGrantJsonWebKeyKid = Nothing-  , trustedOAuth2JwtGrantJsonWebKeySet = Nothing-  }---- ** Version--- | Version-data Version = Version-  { versionVersion :: Maybe Text -- ^ "version" - Version is the service&#39;s version.-  } deriving (P.Show, P.Eq, P.Typeable)---- | FromJSON Version-instance A.FromJSON Version where-  parseJSON = A.withObject "Version" $ \o ->-    Version-      <$> (o .:? "version")---- | ToJSON Version-instance A.ToJSON Version where-  toJSON Version {..} =-   _omitNulls-      [ "version" .= versionVersion-      ]----- | Construct a value of type 'Version' (by applying it's required fields, if any)-mkVersion-  :: Version-mkVersion =-  Version-  { versionVersion = Nothing-  }------- * Auth Methods---- ** AuthBasicBasic-data AuthBasicBasic =-  AuthBasicBasic B.ByteString B.ByteString -- ^ username password-  deriving (P.Eq, P.Show, P.Typeable)--instance AuthMethod AuthBasicBasic where-  applyAuthMethod _ a@(AuthBasicBasic user pw) req =-    P.pure $-    if (P.typeOf a `P.elem` rAuthTypes req)-      then req `setHeader` toHeader ("Authorization", T.decodeUtf8 cred)-           & L.over rAuthTypesL (P.filter (/= P.typeOf a))-      else req-    where cred = BC.append "Basic " (B64.encode $ BC.concat [ user, ":", pw ])---- ** AuthBasicBearer-data AuthBasicBearer =-  AuthBasicBearer B.ByteString B.ByteString -- ^ username password-  deriving (P.Eq, P.Show, P.Typeable)--instance AuthMethod AuthBasicBearer where-  applyAuthMethod _ a@(AuthBasicBearer user pw) req =-    P.pure $-    if (P.typeOf a `P.elem` rAuthTypes req)-      then req `setHeader` toHeader ("Authorization", T.decodeUtf8 cred)-           & L.over rAuthTypesL (P.filter (/= P.typeOf a))-      else req-    where cred = BC.append "Basic " (B64.encode $ BC.concat [ user, ":", pw ])---- ** AuthOAuthOauth2-data AuthOAuthOauth2 =-  AuthOAuthOauth2 Text -- ^ secret-  deriving (P.Eq, P.Show, P.Typeable)--instance AuthMethod AuthOAuthOauth2 where-  applyAuthMethod _ a@(AuthOAuthOauth2 secret) req =-    P.pure $-    if (P.typeOf a `P.elem` rAuthTypes req)-      then req `setHeader` toHeader ("Authorization", "Bearer " <> secret)-           & L.over rAuthTypesL (P.filter (/= P.typeOf a))-      else req--
− lib/OryHydra/ModelLens.hs 
@@ -1,1500 +0,0 @@-{--   Ory Hydra API--   Documentation for all of Ory Hydra's APIs. --   OpenAPI Version: 3.0.3-   Ory Hydra API API version: -   Contact: hi@ory.sh-   Generated by OpenAPI Generator (https://openapi-generator.tech)--}--{-|-Module : OryHydra.Lens--}--{-# LANGUAGE KindSignatures #-}-{-# LANGUAGE NamedFieldPuns #-}-{-# LANGUAGE RankNTypes #-}-{-# LANGUAGE RecordWildCards #-}-{-# OPTIONS_GHC -fno-warn-name-shadowing -fno-warn-unused-matches -fno-warn-unused-binds -fno-warn-unused-imports #-}--module OryHydra.ModelLens where--import qualified Data.Aeson as A-import qualified Data.ByteString.Lazy as BL-import qualified Data.Data as P (Data, Typeable)-import qualified Data.Map as Map-import qualified Data.Set as Set-import qualified Data.Time as TI--import Data.Text (Text)--import Prelude (($), (.),(<$>),(<*>),(=<<),Maybe(..),Bool(..),Char,Double,FilePath,Float,Int,Integer,String,fmap,undefined,mempty,maybe,pure,Monad,Applicative,Functor)-import qualified Prelude as P--import OryHydra.Model-import OryHydra.Core----- * AcceptOAuth2ConsentRequest---- | 'acceptOAuth2ConsentRequestGrantAccessTokenAudience' Lens-acceptOAuth2ConsentRequestGrantAccessTokenAudienceL :: Lens_' AcceptOAuth2ConsentRequest (Maybe [Text])-acceptOAuth2ConsentRequestGrantAccessTokenAudienceL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestGrantAccessTokenAudience -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestGrantAccessTokenAudience, ..} ) <$> f acceptOAuth2ConsentRequestGrantAccessTokenAudience-{-# INLINE acceptOAuth2ConsentRequestGrantAccessTokenAudienceL #-}---- | 'acceptOAuth2ConsentRequestGrantScope' Lens-acceptOAuth2ConsentRequestGrantScopeL :: Lens_' AcceptOAuth2ConsentRequest (Maybe [Text])-acceptOAuth2ConsentRequestGrantScopeL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestGrantScope -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestGrantScope, ..} ) <$> f acceptOAuth2ConsentRequestGrantScope-{-# INLINE acceptOAuth2ConsentRequestGrantScopeL #-}---- | 'acceptOAuth2ConsentRequestHandledAt' Lens-acceptOAuth2ConsentRequestHandledAtL :: Lens_' AcceptOAuth2ConsentRequest (Maybe DateTime)-acceptOAuth2ConsentRequestHandledAtL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestHandledAt -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestHandledAt, ..} ) <$> f acceptOAuth2ConsentRequestHandledAt-{-# INLINE acceptOAuth2ConsentRequestHandledAtL #-}---- | 'acceptOAuth2ConsentRequestRemember' Lens-acceptOAuth2ConsentRequestRememberL :: Lens_' AcceptOAuth2ConsentRequest (Maybe Bool)-acceptOAuth2ConsentRequestRememberL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestRemember -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestRemember, ..} ) <$> f acceptOAuth2ConsentRequestRemember-{-# INLINE acceptOAuth2ConsentRequestRememberL #-}---- | 'acceptOAuth2ConsentRequestRememberFor' Lens-acceptOAuth2ConsentRequestRememberForL :: Lens_' AcceptOAuth2ConsentRequest (Maybe Integer)-acceptOAuth2ConsentRequestRememberForL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestRememberFor -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestRememberFor, ..} ) <$> f acceptOAuth2ConsentRequestRememberFor-{-# INLINE acceptOAuth2ConsentRequestRememberForL #-}---- | 'acceptOAuth2ConsentRequestSession' Lens-acceptOAuth2ConsentRequestSessionL :: Lens_' AcceptOAuth2ConsentRequest (Maybe AcceptOAuth2ConsentRequestSession)-acceptOAuth2ConsentRequestSessionL f AcceptOAuth2ConsentRequest{..} = (\acceptOAuth2ConsentRequestSession -> AcceptOAuth2ConsentRequest { acceptOAuth2ConsentRequestSession, ..} ) <$> f acceptOAuth2ConsentRequestSession-{-# INLINE acceptOAuth2ConsentRequestSessionL #-}------ * AcceptOAuth2ConsentRequestSession---- | 'acceptOAuth2ConsentRequestSessionAccessToken' Lens-acceptOAuth2ConsentRequestSessionAccessTokenL :: Lens_' AcceptOAuth2ConsentRequestSession (Maybe A.Value)-acceptOAuth2ConsentRequestSessionAccessTokenL f AcceptOAuth2ConsentRequestSession{..} = (\acceptOAuth2ConsentRequestSessionAccessToken -> AcceptOAuth2ConsentRequestSession { acceptOAuth2ConsentRequestSessionAccessToken, ..} ) <$> f acceptOAuth2ConsentRequestSessionAccessToken-{-# INLINE acceptOAuth2ConsentRequestSessionAccessTokenL #-}---- | 'acceptOAuth2ConsentRequestSessionIdToken' Lens-acceptOAuth2ConsentRequestSessionIdTokenL :: Lens_' AcceptOAuth2ConsentRequestSession (Maybe A.Value)-acceptOAuth2ConsentRequestSessionIdTokenL f AcceptOAuth2ConsentRequestSession{..} = (\acceptOAuth2ConsentRequestSessionIdToken -> AcceptOAuth2ConsentRequestSession { acceptOAuth2ConsentRequestSessionIdToken, ..} ) <$> f acceptOAuth2ConsentRequestSessionIdToken-{-# INLINE acceptOAuth2ConsentRequestSessionIdTokenL #-}------ * AcceptOAuth2LoginRequest---- | 'acceptOAuth2LoginRequestAcr' Lens-acceptOAuth2LoginRequestAcrL :: Lens_' AcceptOAuth2LoginRequest (Maybe Text)-acceptOAuth2LoginRequestAcrL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestAcr -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestAcr, ..} ) <$> f acceptOAuth2LoginRequestAcr-{-# INLINE acceptOAuth2LoginRequestAcrL #-}---- | 'acceptOAuth2LoginRequestAmr' Lens-acceptOAuth2LoginRequestAmrL :: Lens_' AcceptOAuth2LoginRequest (Maybe [Text])-acceptOAuth2LoginRequestAmrL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestAmr -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestAmr, ..} ) <$> f acceptOAuth2LoginRequestAmr-{-# INLINE acceptOAuth2LoginRequestAmrL #-}---- | 'acceptOAuth2LoginRequestContext' Lens-acceptOAuth2LoginRequestContextL :: Lens_' AcceptOAuth2LoginRequest (Maybe A.Value)-acceptOAuth2LoginRequestContextL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestContext -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestContext, ..} ) <$> f acceptOAuth2LoginRequestContext-{-# INLINE acceptOAuth2LoginRequestContextL #-}---- | 'acceptOAuth2LoginRequestForceSubjectIdentifier' Lens-acceptOAuth2LoginRequestForceSubjectIdentifierL :: Lens_' AcceptOAuth2LoginRequest (Maybe Text)-acceptOAuth2LoginRequestForceSubjectIdentifierL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestForceSubjectIdentifier -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestForceSubjectIdentifier, ..} ) <$> f acceptOAuth2LoginRequestForceSubjectIdentifier-{-# INLINE acceptOAuth2LoginRequestForceSubjectIdentifierL #-}---- | 'acceptOAuth2LoginRequestRemember' Lens-acceptOAuth2LoginRequestRememberL :: Lens_' AcceptOAuth2LoginRequest (Maybe Bool)-acceptOAuth2LoginRequestRememberL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestRemember -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestRemember, ..} ) <$> f acceptOAuth2LoginRequestRemember-{-# INLINE acceptOAuth2LoginRequestRememberL #-}---- | 'acceptOAuth2LoginRequestRememberFor' Lens-acceptOAuth2LoginRequestRememberForL :: Lens_' AcceptOAuth2LoginRequest (Maybe Integer)-acceptOAuth2LoginRequestRememberForL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestRememberFor -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestRememberFor, ..} ) <$> f acceptOAuth2LoginRequestRememberFor-{-# INLINE acceptOAuth2LoginRequestRememberForL #-}---- | 'acceptOAuth2LoginRequestSubject' Lens-acceptOAuth2LoginRequestSubjectL :: Lens_' AcceptOAuth2LoginRequest (Text)-acceptOAuth2LoginRequestSubjectL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestSubject -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestSubject, ..} ) <$> f acceptOAuth2LoginRequestSubject-{-# INLINE acceptOAuth2LoginRequestSubjectL #-}------ * CreateJsonWebKeySet---- | 'createJsonWebKeySetAlg' Lens-createJsonWebKeySetAlgL :: Lens_' CreateJsonWebKeySet (Text)-createJsonWebKeySetAlgL f CreateJsonWebKeySet{..} = (\createJsonWebKeySetAlg -> CreateJsonWebKeySet { createJsonWebKeySetAlg, ..} ) <$> f createJsonWebKeySetAlg-{-# INLINE createJsonWebKeySetAlgL #-}---- | 'createJsonWebKeySetKid' Lens-createJsonWebKeySetKidL :: Lens_' CreateJsonWebKeySet (Text)-createJsonWebKeySetKidL f CreateJsonWebKeySet{..} = (\createJsonWebKeySetKid -> CreateJsonWebKeySet { createJsonWebKeySetKid, ..} ) <$> f createJsonWebKeySetKid-{-# INLINE createJsonWebKeySetKidL #-}---- | 'createJsonWebKeySetUse' Lens-createJsonWebKeySetUseL :: Lens_' CreateJsonWebKeySet (Text)-createJsonWebKeySetUseL f CreateJsonWebKeySet{..} = (\createJsonWebKeySetUse -> CreateJsonWebKeySet { createJsonWebKeySetUse, ..} ) <$> f createJsonWebKeySetUse-{-# INLINE createJsonWebKeySetUseL #-}------ * ErrorOAuth2---- | 'errorOAuth2Error' Lens-errorOAuth2ErrorL :: Lens_' ErrorOAuth2 (Maybe Text)-errorOAuth2ErrorL f ErrorOAuth2{..} = (\errorOAuth2Error -> ErrorOAuth2 { errorOAuth2Error, ..} ) <$> f errorOAuth2Error-{-# INLINE errorOAuth2ErrorL #-}---- | 'errorOAuth2ErrorDebug' Lens-errorOAuth2ErrorDebugL :: Lens_' ErrorOAuth2 (Maybe Text)-errorOAuth2ErrorDebugL f ErrorOAuth2{..} = (\errorOAuth2ErrorDebug -> ErrorOAuth2 { errorOAuth2ErrorDebug, ..} ) <$> f errorOAuth2ErrorDebug-{-# INLINE errorOAuth2ErrorDebugL #-}---- | 'errorOAuth2ErrorDescription' Lens-errorOAuth2ErrorDescriptionL :: Lens_' ErrorOAuth2 (Maybe Text)-errorOAuth2ErrorDescriptionL f ErrorOAuth2{..} = (\errorOAuth2ErrorDescription -> ErrorOAuth2 { errorOAuth2ErrorDescription, ..} ) <$> f errorOAuth2ErrorDescription-{-# INLINE errorOAuth2ErrorDescriptionL #-}---- | 'errorOAuth2ErrorHint' Lens-errorOAuth2ErrorHintL :: Lens_' ErrorOAuth2 (Maybe Text)-errorOAuth2ErrorHintL f ErrorOAuth2{..} = (\errorOAuth2ErrorHint -> ErrorOAuth2 { errorOAuth2ErrorHint, ..} ) <$> f errorOAuth2ErrorHint-{-# INLINE errorOAuth2ErrorHintL #-}---- | 'errorOAuth2StatusCode' Lens-errorOAuth2StatusCodeL :: Lens_' ErrorOAuth2 (Maybe Integer)-errorOAuth2StatusCodeL f ErrorOAuth2{..} = (\errorOAuth2StatusCode -> ErrorOAuth2 { errorOAuth2StatusCode, ..} ) <$> f errorOAuth2StatusCode-{-# INLINE errorOAuth2StatusCodeL #-}------ * GenericError---- | 'genericErrorCode' Lens-genericErrorCodeL :: Lens_' GenericError (Maybe Integer)-genericErrorCodeL f GenericError{..} = (\genericErrorCode -> GenericError { genericErrorCode, ..} ) <$> f genericErrorCode-{-# INLINE genericErrorCodeL #-}---- | 'genericErrorDebug' Lens-genericErrorDebugL :: Lens_' GenericError (Maybe Text)-genericErrorDebugL f GenericError{..} = (\genericErrorDebug -> GenericError { genericErrorDebug, ..} ) <$> f genericErrorDebug-{-# INLINE genericErrorDebugL #-}---- | 'genericErrorDetails' Lens-genericErrorDetailsL :: Lens_' GenericError (Maybe A.Value)-genericErrorDetailsL f GenericError{..} = (\genericErrorDetails -> GenericError { genericErrorDetails, ..} ) <$> f genericErrorDetails-{-# INLINE genericErrorDetailsL #-}---- | 'genericErrorId' Lens-genericErrorIdL :: Lens_' GenericError (Maybe Text)-genericErrorIdL f GenericError{..} = (\genericErrorId -> GenericError { genericErrorId, ..} ) <$> f genericErrorId-{-# INLINE genericErrorIdL #-}---- | 'genericErrorMessage' Lens-genericErrorMessageL :: Lens_' GenericError (Text)-genericErrorMessageL f GenericError{..} = (\genericErrorMessage -> GenericError { genericErrorMessage, ..} ) <$> f genericErrorMessage-{-# INLINE genericErrorMessageL #-}---- | 'genericErrorReason' Lens-genericErrorReasonL :: Lens_' GenericError (Maybe Text)-genericErrorReasonL f GenericError{..} = (\genericErrorReason -> GenericError { genericErrorReason, ..} ) <$> f genericErrorReason-{-# INLINE genericErrorReasonL #-}---- | 'genericErrorRequest' Lens-genericErrorRequestL :: Lens_' GenericError (Maybe Text)-genericErrorRequestL f GenericError{..} = (\genericErrorRequest -> GenericError { genericErrorRequest, ..} ) <$> f genericErrorRequest-{-# INLINE genericErrorRequestL #-}---- | 'genericErrorStatus' Lens-genericErrorStatusL :: Lens_' GenericError (Maybe Text)-genericErrorStatusL f GenericError{..} = (\genericErrorStatus -> GenericError { genericErrorStatus, ..} ) <$> f genericErrorStatus-{-# INLINE genericErrorStatusL #-}------ * GetVersion200Response---- | 'getVersion200ResponseVersion' Lens-getVersion200ResponseVersionL :: Lens_' GetVersion200Response (Maybe Text)-getVersion200ResponseVersionL f GetVersion200Response{..} = (\getVersion200ResponseVersion -> GetVersion200Response { getVersion200ResponseVersion, ..} ) <$> f getVersion200ResponseVersion-{-# INLINE getVersion200ResponseVersionL #-}------ * HealthNotReadyStatus---- | 'healthNotReadyStatusErrors' Lens-healthNotReadyStatusErrorsL :: Lens_' HealthNotReadyStatus (Maybe (Map.Map String Text))-healthNotReadyStatusErrorsL f HealthNotReadyStatus{..} = (\healthNotReadyStatusErrors -> HealthNotReadyStatus { healthNotReadyStatusErrors, ..} ) <$> f healthNotReadyStatusErrors-{-# INLINE healthNotReadyStatusErrorsL #-}------ * HealthStatus---- | 'healthStatusStatus' Lens-healthStatusStatusL :: Lens_' HealthStatus (Maybe Text)-healthStatusStatusL f HealthStatus{..} = (\healthStatusStatus -> HealthStatus { healthStatusStatus, ..} ) <$> f healthStatusStatus-{-# INLINE healthStatusStatusL #-}------ * IntrospectedOAuth2Token---- | 'introspectedOAuth2TokenActive' Lens-introspectedOAuth2TokenActiveL :: Lens_' IntrospectedOAuth2Token (Bool)-introspectedOAuth2TokenActiveL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenActive -> IntrospectedOAuth2Token { introspectedOAuth2TokenActive, ..} ) <$> f introspectedOAuth2TokenActive-{-# INLINE introspectedOAuth2TokenActiveL #-}---- | 'introspectedOAuth2TokenAud' Lens-introspectedOAuth2TokenAudL :: Lens_' IntrospectedOAuth2Token (Maybe [Text])-introspectedOAuth2TokenAudL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenAud -> IntrospectedOAuth2Token { introspectedOAuth2TokenAud, ..} ) <$> f introspectedOAuth2TokenAud-{-# INLINE introspectedOAuth2TokenAudL #-}---- | 'introspectedOAuth2TokenClientId' Lens-introspectedOAuth2TokenClientIdL :: Lens_' IntrospectedOAuth2Token (Maybe Text)-introspectedOAuth2TokenClientIdL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenClientId -> IntrospectedOAuth2Token { introspectedOAuth2TokenClientId, ..} ) <$> f introspectedOAuth2TokenClientId-{-# INLINE introspectedOAuth2TokenClientIdL #-}---- | 'introspectedOAuth2TokenExp' Lens-introspectedOAuth2TokenExpL :: Lens_' IntrospectedOAuth2Token (Maybe Integer)-introspectedOAuth2TokenExpL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenExp -> IntrospectedOAuth2Token { introspectedOAuth2TokenExp, ..} ) <$> f introspectedOAuth2TokenExp-{-# INLINE introspectedOAuth2TokenExpL #-}---- | 'introspectedOAuth2TokenExt' Lens-introspectedOAuth2TokenExtL :: Lens_' IntrospectedOAuth2Token (Maybe (Map.Map String A.Value))-introspectedOAuth2TokenExtL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenExt -> IntrospectedOAuth2Token { introspectedOAuth2TokenExt, ..} ) <$> f introspectedOAuth2TokenExt-{-# INLINE introspectedOAuth2TokenExtL #-}---- | 'introspectedOAuth2TokenIat' Lens-introspectedOAuth2TokenIatL :: Lens_' IntrospectedOAuth2Token (Maybe Integer)-introspectedOAuth2TokenIatL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenIat -> IntrospectedOAuth2Token { introspectedOAuth2TokenIat, ..} ) <$> f introspectedOAuth2TokenIat-{-# INLINE introspectedOAuth2TokenIatL #-}---- | 'introspectedOAuth2TokenIss' Lens-introspectedOAuth2TokenIssL :: Lens_' IntrospectedOAuth2Token (Maybe Text)-introspectedOAuth2TokenIssL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenIss -> IntrospectedOAuth2Token { introspectedOAuth2TokenIss, ..} ) <$> f introspectedOAuth2TokenIss-{-# INLINE introspectedOAuth2TokenIssL #-}---- | 'introspectedOAuth2TokenNbf' Lens-introspectedOAuth2TokenNbfL :: Lens_' IntrospectedOAuth2Token (Maybe Integer)-introspectedOAuth2TokenNbfL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenNbf -> IntrospectedOAuth2Token { introspectedOAuth2TokenNbf, ..} ) <$> f introspectedOAuth2TokenNbf-{-# INLINE introspectedOAuth2TokenNbfL #-}---- | 'introspectedOAuth2TokenObfuscatedSubject' Lens-introspectedOAuth2TokenObfuscatedSubjectL :: Lens_' IntrospectedOAuth2Token (Maybe Text)-introspectedOAuth2TokenObfuscatedSubjectL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenObfuscatedSubject -> IntrospectedOAuth2Token { introspectedOAuth2TokenObfuscatedSubject, ..} ) <$> f introspectedOAuth2TokenObfuscatedSubject-{-# INLINE introspectedOAuth2TokenObfuscatedSubjectL #-}---- | 'introspectedOAuth2TokenScope' Lens-introspectedOAuth2TokenScopeL :: Lens_' IntrospectedOAuth2Token (Maybe Text)-introspectedOAuth2TokenScopeL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenScope -> IntrospectedOAuth2Token { introspectedOAuth2TokenScope, ..} ) <$> f introspectedOAuth2TokenScope-{-# INLINE introspectedOAuth2TokenScopeL #-}---- | 'introspectedOAuth2TokenSub' Lens-introspectedOAuth2TokenSubL :: Lens_' IntrospectedOAuth2Token (Maybe Text)-introspectedOAuth2TokenSubL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenSub -> IntrospectedOAuth2Token { introspectedOAuth2TokenSub, ..} ) <$> f introspectedOAuth2TokenSub-{-# INLINE introspectedOAuth2TokenSubL #-}---- | 'introspectedOAuth2TokenTokenType' Lens-introspectedOAuth2TokenTokenTypeL :: Lens_' IntrospectedOAuth2Token (Maybe Text)-introspectedOAuth2TokenTokenTypeL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenTokenType -> IntrospectedOAuth2Token { introspectedOAuth2TokenTokenType, ..} ) <$> f introspectedOAuth2TokenTokenType-{-# INLINE introspectedOAuth2TokenTokenTypeL #-}---- | 'introspectedOAuth2TokenTokenUse' Lens-introspectedOAuth2TokenTokenUseL :: Lens_' IntrospectedOAuth2Token (Maybe Text)-introspectedOAuth2TokenTokenUseL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenTokenUse -> IntrospectedOAuth2Token { introspectedOAuth2TokenTokenUse, ..} ) <$> f introspectedOAuth2TokenTokenUse-{-# INLINE introspectedOAuth2TokenTokenUseL #-}---- | 'introspectedOAuth2TokenUsername' Lens-introspectedOAuth2TokenUsernameL :: Lens_' IntrospectedOAuth2Token (Maybe Text)-introspectedOAuth2TokenUsernameL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenUsername -> IntrospectedOAuth2Token { introspectedOAuth2TokenUsername, ..} ) <$> f introspectedOAuth2TokenUsername-{-# INLINE introspectedOAuth2TokenUsernameL #-}------ * IsReady200Response---- | 'isReady200ResponseStatus' Lens-isReady200ResponseStatusL :: Lens_' IsReady200Response (Maybe Text)-isReady200ResponseStatusL f IsReady200Response{..} = (\isReady200ResponseStatus -> IsReady200Response { isReady200ResponseStatus, ..} ) <$> f isReady200ResponseStatus-{-# INLINE isReady200ResponseStatusL #-}------ * IsReady503Response---- | 'isReady503ResponseErrors' Lens-isReady503ResponseErrorsL :: Lens_' IsReady503Response (Maybe (Map.Map String Text))-isReady503ResponseErrorsL f IsReady503Response{..} = (\isReady503ResponseErrors -> IsReady503Response { isReady503ResponseErrors, ..} ) <$> f isReady503ResponseErrors-{-# INLINE isReady503ResponseErrorsL #-}------ * JsonPatch---- | 'jsonPatchFrom' Lens-jsonPatchFromL :: Lens_' JsonPatch (Maybe Text)-jsonPatchFromL f JsonPatch{..} = (\jsonPatchFrom -> JsonPatch { jsonPatchFrom, ..} ) <$> f jsonPatchFrom-{-# INLINE jsonPatchFromL #-}---- | 'jsonPatchOp' Lens-jsonPatchOpL :: Lens_' JsonPatch (Text)-jsonPatchOpL f JsonPatch{..} = (\jsonPatchOp -> JsonPatch { jsonPatchOp, ..} ) <$> f jsonPatchOp-{-# INLINE jsonPatchOpL #-}---- | 'jsonPatchPath' Lens-jsonPatchPathL :: Lens_' JsonPatch (Text)-jsonPatchPathL f JsonPatch{..} = (\jsonPatchPath -> JsonPatch { jsonPatchPath, ..} ) <$> f jsonPatchPath-{-# INLINE jsonPatchPathL #-}---- | 'jsonPatchValue' Lens-jsonPatchValueL :: Lens_' JsonPatch (Maybe A.Value)-jsonPatchValueL f JsonPatch{..} = (\jsonPatchValue -> JsonPatch { jsonPatchValue, ..} ) <$> f jsonPatchValue-{-# INLINE jsonPatchValueL #-}------ * JsonWebKey---- | 'jsonWebKeyAlg' Lens-jsonWebKeyAlgL :: Lens_' JsonWebKey (Text)-jsonWebKeyAlgL f JsonWebKey{..} = (\jsonWebKeyAlg -> JsonWebKey { jsonWebKeyAlg, ..} ) <$> f jsonWebKeyAlg-{-# INLINE jsonWebKeyAlgL #-}---- | 'jsonWebKeyCrv' Lens-jsonWebKeyCrvL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyCrvL f JsonWebKey{..} = (\jsonWebKeyCrv -> JsonWebKey { jsonWebKeyCrv, ..} ) <$> f jsonWebKeyCrv-{-# INLINE jsonWebKeyCrvL #-}---- | 'jsonWebKeyD' Lens-jsonWebKeyDL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyDL f JsonWebKey{..} = (\jsonWebKeyD -> JsonWebKey { jsonWebKeyD, ..} ) <$> f jsonWebKeyD-{-# INLINE jsonWebKeyDL #-}---- | 'jsonWebKeyDp' Lens-jsonWebKeyDpL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyDpL f JsonWebKey{..} = (\jsonWebKeyDp -> JsonWebKey { jsonWebKeyDp, ..} ) <$> f jsonWebKeyDp-{-# INLINE jsonWebKeyDpL #-}---- | 'jsonWebKeyDq' Lens-jsonWebKeyDqL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyDqL f JsonWebKey{..} = (\jsonWebKeyDq -> JsonWebKey { jsonWebKeyDq, ..} ) <$> f jsonWebKeyDq-{-# INLINE jsonWebKeyDqL #-}---- | 'jsonWebKeyE' Lens-jsonWebKeyEL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyEL f JsonWebKey{..} = (\jsonWebKeyE -> JsonWebKey { jsonWebKeyE, ..} ) <$> f jsonWebKeyE-{-# INLINE jsonWebKeyEL #-}---- | 'jsonWebKeyK' Lens-jsonWebKeyKL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyKL f JsonWebKey{..} = (\jsonWebKeyK -> JsonWebKey { jsonWebKeyK, ..} ) <$> f jsonWebKeyK-{-# INLINE jsonWebKeyKL #-}---- | 'jsonWebKeyKid' Lens-jsonWebKeyKidL :: Lens_' JsonWebKey (Text)-jsonWebKeyKidL f JsonWebKey{..} = (\jsonWebKeyKid -> JsonWebKey { jsonWebKeyKid, ..} ) <$> f jsonWebKeyKid-{-# INLINE jsonWebKeyKidL #-}---- | 'jsonWebKeyKty' Lens-jsonWebKeyKtyL :: Lens_' JsonWebKey (Text)-jsonWebKeyKtyL f JsonWebKey{..} = (\jsonWebKeyKty -> JsonWebKey { jsonWebKeyKty, ..} ) <$> f jsonWebKeyKty-{-# INLINE jsonWebKeyKtyL #-}---- | 'jsonWebKeyN' Lens-jsonWebKeyNL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyNL f JsonWebKey{..} = (\jsonWebKeyN -> JsonWebKey { jsonWebKeyN, ..} ) <$> f jsonWebKeyN-{-# INLINE jsonWebKeyNL #-}---- | 'jsonWebKeyP' Lens-jsonWebKeyPL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyPL f JsonWebKey{..} = (\jsonWebKeyP -> JsonWebKey { jsonWebKeyP, ..} ) <$> f jsonWebKeyP-{-# INLINE jsonWebKeyPL #-}---- | 'jsonWebKeyQ' Lens-jsonWebKeyQL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyQL f JsonWebKey{..} = (\jsonWebKeyQ -> JsonWebKey { jsonWebKeyQ, ..} ) <$> f jsonWebKeyQ-{-# INLINE jsonWebKeyQL #-}---- | 'jsonWebKeyQi' Lens-jsonWebKeyQiL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyQiL f JsonWebKey{..} = (\jsonWebKeyQi -> JsonWebKey { jsonWebKeyQi, ..} ) <$> f jsonWebKeyQi-{-# INLINE jsonWebKeyQiL #-}---- | 'jsonWebKeyUse' Lens-jsonWebKeyUseL :: Lens_' JsonWebKey (Text)-jsonWebKeyUseL f JsonWebKey{..} = (\jsonWebKeyUse -> JsonWebKey { jsonWebKeyUse, ..} ) <$> f jsonWebKeyUse-{-# INLINE jsonWebKeyUseL #-}---- | 'jsonWebKeyX' Lens-jsonWebKeyXL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyXL f JsonWebKey{..} = (\jsonWebKeyX -> JsonWebKey { jsonWebKeyX, ..} ) <$> f jsonWebKeyX-{-# INLINE jsonWebKeyXL #-}---- | 'jsonWebKeyX5c' Lens-jsonWebKeyX5cL :: Lens_' JsonWebKey (Maybe [Text])-jsonWebKeyX5cL f JsonWebKey{..} = (\jsonWebKeyX5c -> JsonWebKey { jsonWebKeyX5c, ..} ) <$> f jsonWebKeyX5c-{-# INLINE jsonWebKeyX5cL #-}---- | 'jsonWebKeyY' Lens-jsonWebKeyYL :: Lens_' JsonWebKey (Maybe Text)-jsonWebKeyYL f JsonWebKey{..} = (\jsonWebKeyY -> JsonWebKey { jsonWebKeyY, ..} ) <$> f jsonWebKeyY-{-# INLINE jsonWebKeyYL #-}------ * JsonWebKeySet---- | 'jsonWebKeySetKeys' Lens-jsonWebKeySetKeysL :: Lens_' JsonWebKeySet (Maybe [JsonWebKey])-jsonWebKeySetKeysL f JsonWebKeySet{..} = (\jsonWebKeySetKeys -> JsonWebKeySet { jsonWebKeySetKeys, ..} ) <$> f jsonWebKeySetKeys-{-# INLINE jsonWebKeySetKeysL #-}------ * OAuth2Client---- | 'oAuth2ClientAllowedCorsOrigins' Lens-oAuth2ClientAllowedCorsOriginsL :: Lens_' OAuth2Client (Maybe [Text])-oAuth2ClientAllowedCorsOriginsL f OAuth2Client{..} = (\oAuth2ClientAllowedCorsOrigins -> OAuth2Client { oAuth2ClientAllowedCorsOrigins, ..} ) <$> f oAuth2ClientAllowedCorsOrigins-{-# INLINE oAuth2ClientAllowedCorsOriginsL #-}---- | 'oAuth2ClientAudience' Lens-oAuth2ClientAudienceL :: Lens_' OAuth2Client (Maybe [Text])-oAuth2ClientAudienceL f OAuth2Client{..} = (\oAuth2ClientAudience -> OAuth2Client { oAuth2ClientAudience, ..} ) <$> f oAuth2ClientAudience-{-# INLINE oAuth2ClientAudienceL #-}---- | 'oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan' Lens-oAuth2ClientAuthorizationCodeGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientAuthorizationCodeGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan-{-# INLINE oAuth2ClientAuthorizationCodeGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientAuthorizationCodeGrantIdTokenLifespan' Lens-oAuth2ClientAuthorizationCodeGrantIdTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientAuthorizationCodeGrantIdTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientAuthorizationCodeGrantIdTokenLifespan -> OAuth2Client { oAuth2ClientAuthorizationCodeGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientAuthorizationCodeGrantIdTokenLifespan-{-# INLINE oAuth2ClientAuthorizationCodeGrantIdTokenLifespanL #-}---- | 'oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan' Lens-oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan -> OAuth2Client { oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan, ..} ) <$> f oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespan-{-# INLINE oAuth2ClientAuthorizationCodeGrantRefreshTokenLifespanL #-}---- | 'oAuth2ClientBackchannelLogoutSessionRequired' Lens-oAuth2ClientBackchannelLogoutSessionRequiredL :: Lens_' OAuth2Client (Maybe Bool)-oAuth2ClientBackchannelLogoutSessionRequiredL f OAuth2Client{..} = (\oAuth2ClientBackchannelLogoutSessionRequired -> OAuth2Client { oAuth2ClientBackchannelLogoutSessionRequired, ..} ) <$> f oAuth2ClientBackchannelLogoutSessionRequired-{-# INLINE oAuth2ClientBackchannelLogoutSessionRequiredL #-}---- | 'oAuth2ClientBackchannelLogoutUri' Lens-oAuth2ClientBackchannelLogoutUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientBackchannelLogoutUriL f OAuth2Client{..} = (\oAuth2ClientBackchannelLogoutUri -> OAuth2Client { oAuth2ClientBackchannelLogoutUri, ..} ) <$> f oAuth2ClientBackchannelLogoutUri-{-# INLINE oAuth2ClientBackchannelLogoutUriL #-}---- | 'oAuth2ClientClientCredentialsGrantAccessTokenLifespan' Lens-oAuth2ClientClientCredentialsGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientClientCredentialsGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientClientCredentialsGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientClientCredentialsGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientClientCredentialsGrantAccessTokenLifespan-{-# INLINE oAuth2ClientClientCredentialsGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientClientId' Lens-oAuth2ClientClientIdL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientClientIdL f OAuth2Client{..} = (\oAuth2ClientClientId -> OAuth2Client { oAuth2ClientClientId, ..} ) <$> f oAuth2ClientClientId-{-# INLINE oAuth2ClientClientIdL #-}---- | 'oAuth2ClientClientName' Lens-oAuth2ClientClientNameL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientClientNameL f OAuth2Client{..} = (\oAuth2ClientClientName -> OAuth2Client { oAuth2ClientClientName, ..} ) <$> f oAuth2ClientClientName-{-# INLINE oAuth2ClientClientNameL #-}---- | 'oAuth2ClientClientSecret' Lens-oAuth2ClientClientSecretL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientClientSecretL f OAuth2Client{..} = (\oAuth2ClientClientSecret -> OAuth2Client { oAuth2ClientClientSecret, ..} ) <$> f oAuth2ClientClientSecret-{-# INLINE oAuth2ClientClientSecretL #-}---- | 'oAuth2ClientClientSecretExpiresAt' Lens-oAuth2ClientClientSecretExpiresAtL :: Lens_' OAuth2Client (Maybe Integer)-oAuth2ClientClientSecretExpiresAtL f OAuth2Client{..} = (\oAuth2ClientClientSecretExpiresAt -> OAuth2Client { oAuth2ClientClientSecretExpiresAt, ..} ) <$> f oAuth2ClientClientSecretExpiresAt-{-# INLINE oAuth2ClientClientSecretExpiresAtL #-}---- | 'oAuth2ClientClientUri' Lens-oAuth2ClientClientUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientClientUriL f OAuth2Client{..} = (\oAuth2ClientClientUri -> OAuth2Client { oAuth2ClientClientUri, ..} ) <$> f oAuth2ClientClientUri-{-# INLINE oAuth2ClientClientUriL #-}---- | 'oAuth2ClientContacts' Lens-oAuth2ClientContactsL :: Lens_' OAuth2Client (Maybe [Text])-oAuth2ClientContactsL f OAuth2Client{..} = (\oAuth2ClientContacts -> OAuth2Client { oAuth2ClientContacts, ..} ) <$> f oAuth2ClientContacts-{-# INLINE oAuth2ClientContactsL #-}---- | 'oAuth2ClientCreatedAt' Lens-oAuth2ClientCreatedAtL :: Lens_' OAuth2Client (Maybe DateTime)-oAuth2ClientCreatedAtL f OAuth2Client{..} = (\oAuth2ClientCreatedAt -> OAuth2Client { oAuth2ClientCreatedAt, ..} ) <$> f oAuth2ClientCreatedAt-{-# INLINE oAuth2ClientCreatedAtL #-}---- | 'oAuth2ClientFrontchannelLogoutSessionRequired' Lens-oAuth2ClientFrontchannelLogoutSessionRequiredL :: Lens_' OAuth2Client (Maybe Bool)-oAuth2ClientFrontchannelLogoutSessionRequiredL f OAuth2Client{..} = (\oAuth2ClientFrontchannelLogoutSessionRequired -> OAuth2Client { oAuth2ClientFrontchannelLogoutSessionRequired, ..} ) <$> f oAuth2ClientFrontchannelLogoutSessionRequired-{-# INLINE oAuth2ClientFrontchannelLogoutSessionRequiredL #-}---- | 'oAuth2ClientFrontchannelLogoutUri' Lens-oAuth2ClientFrontchannelLogoutUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientFrontchannelLogoutUriL f OAuth2Client{..} = (\oAuth2ClientFrontchannelLogoutUri -> OAuth2Client { oAuth2ClientFrontchannelLogoutUri, ..} ) <$> f oAuth2ClientFrontchannelLogoutUri-{-# INLINE oAuth2ClientFrontchannelLogoutUriL #-}---- | 'oAuth2ClientGrantTypes' Lens-oAuth2ClientGrantTypesL :: Lens_' OAuth2Client (Maybe [Text])-oAuth2ClientGrantTypesL f OAuth2Client{..} = (\oAuth2ClientGrantTypes -> OAuth2Client { oAuth2ClientGrantTypes, ..} ) <$> f oAuth2ClientGrantTypes-{-# INLINE oAuth2ClientGrantTypesL #-}---- | 'oAuth2ClientImplicitGrantAccessTokenLifespan' Lens-oAuth2ClientImplicitGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientImplicitGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientImplicitGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientImplicitGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientImplicitGrantAccessTokenLifespan-{-# INLINE oAuth2ClientImplicitGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientImplicitGrantIdTokenLifespan' Lens-oAuth2ClientImplicitGrantIdTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientImplicitGrantIdTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientImplicitGrantIdTokenLifespan -> OAuth2Client { oAuth2ClientImplicitGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientImplicitGrantIdTokenLifespan-{-# INLINE oAuth2ClientImplicitGrantIdTokenLifespanL #-}---- | 'oAuth2ClientJwks' Lens-oAuth2ClientJwksL :: Lens_' OAuth2Client (Maybe A.Value)-oAuth2ClientJwksL f OAuth2Client{..} = (\oAuth2ClientJwks -> OAuth2Client { oAuth2ClientJwks, ..} ) <$> f oAuth2ClientJwks-{-# INLINE oAuth2ClientJwksL #-}---- | 'oAuth2ClientJwksUri' Lens-oAuth2ClientJwksUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientJwksUriL f OAuth2Client{..} = (\oAuth2ClientJwksUri -> OAuth2Client { oAuth2ClientJwksUri, ..} ) <$> f oAuth2ClientJwksUri-{-# INLINE oAuth2ClientJwksUriL #-}---- | 'oAuth2ClientJwtBearerGrantAccessTokenLifespan' Lens-oAuth2ClientJwtBearerGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientJwtBearerGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientJwtBearerGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientJwtBearerGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientJwtBearerGrantAccessTokenLifespan-{-# INLINE oAuth2ClientJwtBearerGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientLogoUri' Lens-oAuth2ClientLogoUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientLogoUriL f OAuth2Client{..} = (\oAuth2ClientLogoUri -> OAuth2Client { oAuth2ClientLogoUri, ..} ) <$> f oAuth2ClientLogoUri-{-# INLINE oAuth2ClientLogoUriL #-}---- | 'oAuth2ClientMetadata' Lens-oAuth2ClientMetadataL :: Lens_' OAuth2Client (Maybe A.Value)-oAuth2ClientMetadataL f OAuth2Client{..} = (\oAuth2ClientMetadata -> OAuth2Client { oAuth2ClientMetadata, ..} ) <$> f oAuth2ClientMetadata-{-# INLINE oAuth2ClientMetadataL #-}---- | 'oAuth2ClientOwner' Lens-oAuth2ClientOwnerL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientOwnerL f OAuth2Client{..} = (\oAuth2ClientOwner -> OAuth2Client { oAuth2ClientOwner, ..} ) <$> f oAuth2ClientOwner-{-# INLINE oAuth2ClientOwnerL #-}---- | 'oAuth2ClientPolicyUri' Lens-oAuth2ClientPolicyUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientPolicyUriL f OAuth2Client{..} = (\oAuth2ClientPolicyUri -> OAuth2Client { oAuth2ClientPolicyUri, ..} ) <$> f oAuth2ClientPolicyUri-{-# INLINE oAuth2ClientPolicyUriL #-}---- | 'oAuth2ClientPostLogoutRedirectUris' Lens-oAuth2ClientPostLogoutRedirectUrisL :: Lens_' OAuth2Client (Maybe [Text])-oAuth2ClientPostLogoutRedirectUrisL f OAuth2Client{..} = (\oAuth2ClientPostLogoutRedirectUris -> OAuth2Client { oAuth2ClientPostLogoutRedirectUris, ..} ) <$> f oAuth2ClientPostLogoutRedirectUris-{-# INLINE oAuth2ClientPostLogoutRedirectUrisL #-}---- | 'oAuth2ClientRedirectUris' Lens-oAuth2ClientRedirectUrisL :: Lens_' OAuth2Client (Maybe [Text])-oAuth2ClientRedirectUrisL f OAuth2Client{..} = (\oAuth2ClientRedirectUris -> OAuth2Client { oAuth2ClientRedirectUris, ..} ) <$> f oAuth2ClientRedirectUris-{-# INLINE oAuth2ClientRedirectUrisL #-}---- | 'oAuth2ClientRefreshTokenGrantAccessTokenLifespan' Lens-oAuth2ClientRefreshTokenGrantAccessTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientRefreshTokenGrantAccessTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientRefreshTokenGrantAccessTokenLifespan -> OAuth2Client { oAuth2ClientRefreshTokenGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientRefreshTokenGrantAccessTokenLifespan-{-# INLINE oAuth2ClientRefreshTokenGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientRefreshTokenGrantIdTokenLifespan' Lens-oAuth2ClientRefreshTokenGrantIdTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientRefreshTokenGrantIdTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientRefreshTokenGrantIdTokenLifespan -> OAuth2Client { oAuth2ClientRefreshTokenGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientRefreshTokenGrantIdTokenLifespan-{-# INLINE oAuth2ClientRefreshTokenGrantIdTokenLifespanL #-}---- | 'oAuth2ClientRefreshTokenGrantRefreshTokenLifespan' Lens-oAuth2ClientRefreshTokenGrantRefreshTokenLifespanL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientRefreshTokenGrantRefreshTokenLifespanL f OAuth2Client{..} = (\oAuth2ClientRefreshTokenGrantRefreshTokenLifespan -> OAuth2Client { oAuth2ClientRefreshTokenGrantRefreshTokenLifespan, ..} ) <$> f oAuth2ClientRefreshTokenGrantRefreshTokenLifespan-{-# INLINE oAuth2ClientRefreshTokenGrantRefreshTokenLifespanL #-}---- | 'oAuth2ClientRegistrationAccessToken' Lens-oAuth2ClientRegistrationAccessTokenL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientRegistrationAccessTokenL f OAuth2Client{..} = (\oAuth2ClientRegistrationAccessToken -> OAuth2Client { oAuth2ClientRegistrationAccessToken, ..} ) <$> f oAuth2ClientRegistrationAccessToken-{-# INLINE oAuth2ClientRegistrationAccessTokenL #-}---- | 'oAuth2ClientRegistrationClientUri' Lens-oAuth2ClientRegistrationClientUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientRegistrationClientUriL f OAuth2Client{..} = (\oAuth2ClientRegistrationClientUri -> OAuth2Client { oAuth2ClientRegistrationClientUri, ..} ) <$> f oAuth2ClientRegistrationClientUri-{-# INLINE oAuth2ClientRegistrationClientUriL #-}---- | 'oAuth2ClientRequestObjectSigningAlg' Lens-oAuth2ClientRequestObjectSigningAlgL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientRequestObjectSigningAlgL f OAuth2Client{..} = (\oAuth2ClientRequestObjectSigningAlg -> OAuth2Client { oAuth2ClientRequestObjectSigningAlg, ..} ) <$> f oAuth2ClientRequestObjectSigningAlg-{-# INLINE oAuth2ClientRequestObjectSigningAlgL #-}---- | 'oAuth2ClientRequestUris' Lens-oAuth2ClientRequestUrisL :: Lens_' OAuth2Client (Maybe [Text])-oAuth2ClientRequestUrisL f OAuth2Client{..} = (\oAuth2ClientRequestUris -> OAuth2Client { oAuth2ClientRequestUris, ..} ) <$> f oAuth2ClientRequestUris-{-# INLINE oAuth2ClientRequestUrisL #-}---- | 'oAuth2ClientResponseTypes' Lens-oAuth2ClientResponseTypesL :: Lens_' OAuth2Client (Maybe [Text])-oAuth2ClientResponseTypesL f OAuth2Client{..} = (\oAuth2ClientResponseTypes -> OAuth2Client { oAuth2ClientResponseTypes, ..} ) <$> f oAuth2ClientResponseTypes-{-# INLINE oAuth2ClientResponseTypesL #-}---- | 'oAuth2ClientScope' Lens-oAuth2ClientScopeL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientScopeL f OAuth2Client{..} = (\oAuth2ClientScope -> OAuth2Client { oAuth2ClientScope, ..} ) <$> f oAuth2ClientScope-{-# INLINE oAuth2ClientScopeL #-}---- | 'oAuth2ClientSectorIdentifierUri' Lens-oAuth2ClientSectorIdentifierUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientSectorIdentifierUriL f OAuth2Client{..} = (\oAuth2ClientSectorIdentifierUri -> OAuth2Client { oAuth2ClientSectorIdentifierUri, ..} ) <$> f oAuth2ClientSectorIdentifierUri-{-# INLINE oAuth2ClientSectorIdentifierUriL #-}---- | 'oAuth2ClientSubjectType' Lens-oAuth2ClientSubjectTypeL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientSubjectTypeL f OAuth2Client{..} = (\oAuth2ClientSubjectType -> OAuth2Client { oAuth2ClientSubjectType, ..} ) <$> f oAuth2ClientSubjectType-{-# INLINE oAuth2ClientSubjectTypeL #-}---- | 'oAuth2ClientTokenEndpointAuthMethod' Lens-oAuth2ClientTokenEndpointAuthMethodL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientTokenEndpointAuthMethodL f OAuth2Client{..} = (\oAuth2ClientTokenEndpointAuthMethod -> OAuth2Client { oAuth2ClientTokenEndpointAuthMethod, ..} ) <$> f oAuth2ClientTokenEndpointAuthMethod-{-# INLINE oAuth2ClientTokenEndpointAuthMethodL #-}---- | 'oAuth2ClientTokenEndpointAuthSigningAlg' Lens-oAuth2ClientTokenEndpointAuthSigningAlgL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientTokenEndpointAuthSigningAlgL f OAuth2Client{..} = (\oAuth2ClientTokenEndpointAuthSigningAlg -> OAuth2Client { oAuth2ClientTokenEndpointAuthSigningAlg, ..} ) <$> f oAuth2ClientTokenEndpointAuthSigningAlg-{-# INLINE oAuth2ClientTokenEndpointAuthSigningAlgL #-}---- | 'oAuth2ClientTosUri' Lens-oAuth2ClientTosUriL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientTosUriL f OAuth2Client{..} = (\oAuth2ClientTosUri -> OAuth2Client { oAuth2ClientTosUri, ..} ) <$> f oAuth2ClientTosUri-{-# INLINE oAuth2ClientTosUriL #-}---- | 'oAuth2ClientUpdatedAt' Lens-oAuth2ClientUpdatedAtL :: Lens_' OAuth2Client (Maybe DateTime)-oAuth2ClientUpdatedAtL f OAuth2Client{..} = (\oAuth2ClientUpdatedAt -> OAuth2Client { oAuth2ClientUpdatedAt, ..} ) <$> f oAuth2ClientUpdatedAt-{-# INLINE oAuth2ClientUpdatedAtL #-}---- | 'oAuth2ClientUserinfoSignedResponseAlg' Lens-oAuth2ClientUserinfoSignedResponseAlgL :: Lens_' OAuth2Client (Maybe Text)-oAuth2ClientUserinfoSignedResponseAlgL f OAuth2Client{..} = (\oAuth2ClientUserinfoSignedResponseAlg -> OAuth2Client { oAuth2ClientUserinfoSignedResponseAlg, ..} ) <$> f oAuth2ClientUserinfoSignedResponseAlg-{-# INLINE oAuth2ClientUserinfoSignedResponseAlgL #-}------ * OAuth2ClientTokenLifespans---- | 'oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan' Lens-oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansAuthorizationCodeGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan' Lens-oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansAuthorizationCodeGrantIdTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan' Lens-oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansAuthorizationCodeGrantRefreshTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan' Lens-oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansClientCredentialsGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan' Lens-oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansImplicitGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan' Lens-oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansImplicitGrantIdTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan' Lens-oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansJwtBearerGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan' Lens-oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansRefreshTokenGrantAccessTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan' Lens-oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansRefreshTokenGrantIdTokenLifespanL #-}---- | 'oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan' Lens-oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespanL :: Lens_' OAuth2ClientTokenLifespans (Maybe Text)-oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespanL f OAuth2ClientTokenLifespans{..} = (\oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan -> OAuth2ClientTokenLifespans { oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan, ..} ) <$> f oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespan-{-# INLINE oAuth2ClientTokenLifespansRefreshTokenGrantRefreshTokenLifespanL #-}------ * OAuth2ConsentRequest---- | 'oAuth2ConsentRequestAcr' Lens-oAuth2ConsentRequestAcrL :: Lens_' OAuth2ConsentRequest (Maybe Text)-oAuth2ConsentRequestAcrL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestAcr -> OAuth2ConsentRequest { oAuth2ConsentRequestAcr, ..} ) <$> f oAuth2ConsentRequestAcr-{-# INLINE oAuth2ConsentRequestAcrL #-}---- | 'oAuth2ConsentRequestAmr' Lens-oAuth2ConsentRequestAmrL :: Lens_' OAuth2ConsentRequest (Maybe [Text])-oAuth2ConsentRequestAmrL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestAmr -> OAuth2ConsentRequest { oAuth2ConsentRequestAmr, ..} ) <$> f oAuth2ConsentRequestAmr-{-# INLINE oAuth2ConsentRequestAmrL #-}---- | 'oAuth2ConsentRequestChallenge' Lens-oAuth2ConsentRequestChallengeL :: Lens_' OAuth2ConsentRequest (Text)-oAuth2ConsentRequestChallengeL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestChallenge -> OAuth2ConsentRequest { oAuth2ConsentRequestChallenge, ..} ) <$> f oAuth2ConsentRequestChallenge-{-# INLINE oAuth2ConsentRequestChallengeL #-}---- | 'oAuth2ConsentRequestClient' Lens-oAuth2ConsentRequestClientL :: Lens_' OAuth2ConsentRequest (Maybe OAuth2Client)-oAuth2ConsentRequestClientL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestClient -> OAuth2ConsentRequest { oAuth2ConsentRequestClient, ..} ) <$> f oAuth2ConsentRequestClient-{-# INLINE oAuth2ConsentRequestClientL #-}---- | 'oAuth2ConsentRequestContext' Lens-oAuth2ConsentRequestContextL :: Lens_' OAuth2ConsentRequest (Maybe A.Value)-oAuth2ConsentRequestContextL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestContext -> OAuth2ConsentRequest { oAuth2ConsentRequestContext, ..} ) <$> f oAuth2ConsentRequestContext-{-# INLINE oAuth2ConsentRequestContextL #-}---- | 'oAuth2ConsentRequestLoginChallenge' Lens-oAuth2ConsentRequestLoginChallengeL :: Lens_' OAuth2ConsentRequest (Maybe Text)-oAuth2ConsentRequestLoginChallengeL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestLoginChallenge -> OAuth2ConsentRequest { oAuth2ConsentRequestLoginChallenge, ..} ) <$> f oAuth2ConsentRequestLoginChallenge-{-# INLINE oAuth2ConsentRequestLoginChallengeL #-}---- | 'oAuth2ConsentRequestLoginSessionId' Lens-oAuth2ConsentRequestLoginSessionIdL :: Lens_' OAuth2ConsentRequest (Maybe Text)-oAuth2ConsentRequestLoginSessionIdL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestLoginSessionId -> OAuth2ConsentRequest { oAuth2ConsentRequestLoginSessionId, ..} ) <$> f oAuth2ConsentRequestLoginSessionId-{-# INLINE oAuth2ConsentRequestLoginSessionIdL #-}---- | 'oAuth2ConsentRequestOidcContext' Lens-oAuth2ConsentRequestOidcContextL :: Lens_' OAuth2ConsentRequest (Maybe OAuth2ConsentRequestOpenIDConnectContext)-oAuth2ConsentRequestOidcContextL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestOidcContext -> OAuth2ConsentRequest { oAuth2ConsentRequestOidcContext, ..} ) <$> f oAuth2ConsentRequestOidcContext-{-# INLINE oAuth2ConsentRequestOidcContextL #-}---- | 'oAuth2ConsentRequestRequestUrl' Lens-oAuth2ConsentRequestRequestUrlL :: Lens_' OAuth2ConsentRequest (Maybe Text)-oAuth2ConsentRequestRequestUrlL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestRequestUrl -> OAuth2ConsentRequest { oAuth2ConsentRequestRequestUrl, ..} ) <$> f oAuth2ConsentRequestRequestUrl-{-# INLINE oAuth2ConsentRequestRequestUrlL #-}---- | 'oAuth2ConsentRequestRequestedAccessTokenAudience' Lens-oAuth2ConsentRequestRequestedAccessTokenAudienceL :: Lens_' OAuth2ConsentRequest (Maybe [Text])-oAuth2ConsentRequestRequestedAccessTokenAudienceL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestRequestedAccessTokenAudience -> OAuth2ConsentRequest { oAuth2ConsentRequestRequestedAccessTokenAudience, ..} ) <$> f oAuth2ConsentRequestRequestedAccessTokenAudience-{-# INLINE oAuth2ConsentRequestRequestedAccessTokenAudienceL #-}---- | 'oAuth2ConsentRequestRequestedScope' Lens-oAuth2ConsentRequestRequestedScopeL :: Lens_' OAuth2ConsentRequest (Maybe [Text])-oAuth2ConsentRequestRequestedScopeL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestRequestedScope -> OAuth2ConsentRequest { oAuth2ConsentRequestRequestedScope, ..} ) <$> f oAuth2ConsentRequestRequestedScope-{-# INLINE oAuth2ConsentRequestRequestedScopeL #-}---- | 'oAuth2ConsentRequestSkip' Lens-oAuth2ConsentRequestSkipL :: Lens_' OAuth2ConsentRequest (Maybe Bool)-oAuth2ConsentRequestSkipL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestSkip -> OAuth2ConsentRequest { oAuth2ConsentRequestSkip, ..} ) <$> f oAuth2ConsentRequestSkip-{-# INLINE oAuth2ConsentRequestSkipL #-}---- | 'oAuth2ConsentRequestSubject' Lens-oAuth2ConsentRequestSubjectL :: Lens_' OAuth2ConsentRequest (Maybe Text)-oAuth2ConsentRequestSubjectL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestSubject -> OAuth2ConsentRequest { oAuth2ConsentRequestSubject, ..} ) <$> f oAuth2ConsentRequestSubject-{-# INLINE oAuth2ConsentRequestSubjectL #-}------ * OAuth2ConsentRequestOpenIDConnectContext---- | 'oAuth2ConsentRequestOpenIDConnectContextAcrValues' Lens-oAuth2ConsentRequestOpenIDConnectContextAcrValuesL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe [Text])-oAuth2ConsentRequestOpenIDConnectContextAcrValuesL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextAcrValues -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextAcrValues, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextAcrValues-{-# INLINE oAuth2ConsentRequestOpenIDConnectContextAcrValuesL #-}---- | 'oAuth2ConsentRequestOpenIDConnectContextDisplay' Lens-oAuth2ConsentRequestOpenIDConnectContextDisplayL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe Text)-oAuth2ConsentRequestOpenIDConnectContextDisplayL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextDisplay -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextDisplay, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextDisplay-{-# INLINE oAuth2ConsentRequestOpenIDConnectContextDisplayL #-}---- | 'oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims' Lens-oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe (Map.Map String A.Value))-oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims-{-# INLINE oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL #-}---- | 'oAuth2ConsentRequestOpenIDConnectContextLoginHint' Lens-oAuth2ConsentRequestOpenIDConnectContextLoginHintL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe Text)-oAuth2ConsentRequestOpenIDConnectContextLoginHintL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextLoginHint -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextLoginHint, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextLoginHint-{-# INLINE oAuth2ConsentRequestOpenIDConnectContextLoginHintL #-}---- | 'oAuth2ConsentRequestOpenIDConnectContextUiLocales' Lens-oAuth2ConsentRequestOpenIDConnectContextUiLocalesL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe [Text])-oAuth2ConsentRequestOpenIDConnectContextUiLocalesL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextUiLocales -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextUiLocales, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextUiLocales-{-# INLINE oAuth2ConsentRequestOpenIDConnectContextUiLocalesL #-}------ * OAuth2ConsentSession---- | 'oAuth2ConsentSessionConsentRequest' Lens-oAuth2ConsentSessionConsentRequestL :: Lens_' OAuth2ConsentSession (Maybe OAuth2ConsentRequest)-oAuth2ConsentSessionConsentRequestL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionConsentRequest -> OAuth2ConsentSession { oAuth2ConsentSessionConsentRequest, ..} ) <$> f oAuth2ConsentSessionConsentRequest-{-# INLINE oAuth2ConsentSessionConsentRequestL #-}---- | 'oAuth2ConsentSessionExpiresAt' Lens-oAuth2ConsentSessionExpiresAtL :: Lens_' OAuth2ConsentSession (Maybe OAuth2ConsentSessionExpiresAt)-oAuth2ConsentSessionExpiresAtL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionExpiresAt -> OAuth2ConsentSession { oAuth2ConsentSessionExpiresAt, ..} ) <$> f oAuth2ConsentSessionExpiresAt-{-# INLINE oAuth2ConsentSessionExpiresAtL #-}---- | 'oAuth2ConsentSessionGrantAccessTokenAudience' Lens-oAuth2ConsentSessionGrantAccessTokenAudienceL :: Lens_' OAuth2ConsentSession (Maybe [Text])-oAuth2ConsentSessionGrantAccessTokenAudienceL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionGrantAccessTokenAudience -> OAuth2ConsentSession { oAuth2ConsentSessionGrantAccessTokenAudience, ..} ) <$> f oAuth2ConsentSessionGrantAccessTokenAudience-{-# INLINE oAuth2ConsentSessionGrantAccessTokenAudienceL #-}---- | 'oAuth2ConsentSessionGrantScope' Lens-oAuth2ConsentSessionGrantScopeL :: Lens_' OAuth2ConsentSession (Maybe [Text])-oAuth2ConsentSessionGrantScopeL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionGrantScope -> OAuth2ConsentSession { oAuth2ConsentSessionGrantScope, ..} ) <$> f oAuth2ConsentSessionGrantScope-{-# INLINE oAuth2ConsentSessionGrantScopeL #-}---- | 'oAuth2ConsentSessionHandledAt' Lens-oAuth2ConsentSessionHandledAtL :: Lens_' OAuth2ConsentSession (Maybe DateTime)-oAuth2ConsentSessionHandledAtL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionHandledAt -> OAuth2ConsentSession { oAuth2ConsentSessionHandledAt, ..} ) <$> f oAuth2ConsentSessionHandledAt-{-# INLINE oAuth2ConsentSessionHandledAtL #-}---- | 'oAuth2ConsentSessionRemember' Lens-oAuth2ConsentSessionRememberL :: Lens_' OAuth2ConsentSession (Maybe Bool)-oAuth2ConsentSessionRememberL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionRemember -> OAuth2ConsentSession { oAuth2ConsentSessionRemember, ..} ) <$> f oAuth2ConsentSessionRemember-{-# INLINE oAuth2ConsentSessionRememberL #-}---- | 'oAuth2ConsentSessionRememberFor' Lens-oAuth2ConsentSessionRememberForL :: Lens_' OAuth2ConsentSession (Maybe Integer)-oAuth2ConsentSessionRememberForL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionRememberFor -> OAuth2ConsentSession { oAuth2ConsentSessionRememberFor, ..} ) <$> f oAuth2ConsentSessionRememberFor-{-# INLINE oAuth2ConsentSessionRememberForL #-}---- | 'oAuth2ConsentSessionSession' Lens-oAuth2ConsentSessionSessionL :: Lens_' OAuth2ConsentSession (Maybe AcceptOAuth2ConsentRequestSession)-oAuth2ConsentSessionSessionL f OAuth2ConsentSession{..} = (\oAuth2ConsentSessionSession -> OAuth2ConsentSession { oAuth2ConsentSessionSession, ..} ) <$> f oAuth2ConsentSessionSession-{-# INLINE oAuth2ConsentSessionSessionL #-}------ * OAuth2ConsentSessionExpiresAt---- | 'oAuth2ConsentSessionExpiresAtAccessToken' Lens-oAuth2ConsentSessionExpiresAtAccessTokenL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)-oAuth2ConsentSessionExpiresAtAccessTokenL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtAccessToken -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtAccessToken, ..} ) <$> f oAuth2ConsentSessionExpiresAtAccessToken-{-# INLINE oAuth2ConsentSessionExpiresAtAccessTokenL #-}---- | 'oAuth2ConsentSessionExpiresAtAuthorizeCode' Lens-oAuth2ConsentSessionExpiresAtAuthorizeCodeL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)-oAuth2ConsentSessionExpiresAtAuthorizeCodeL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtAuthorizeCode -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtAuthorizeCode, ..} ) <$> f oAuth2ConsentSessionExpiresAtAuthorizeCode-{-# INLINE oAuth2ConsentSessionExpiresAtAuthorizeCodeL #-}---- | 'oAuth2ConsentSessionExpiresAtIdToken' Lens-oAuth2ConsentSessionExpiresAtIdTokenL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)-oAuth2ConsentSessionExpiresAtIdTokenL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtIdToken -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtIdToken, ..} ) <$> f oAuth2ConsentSessionExpiresAtIdToken-{-# INLINE oAuth2ConsentSessionExpiresAtIdTokenL #-}---- | 'oAuth2ConsentSessionExpiresAtParContext' Lens-oAuth2ConsentSessionExpiresAtParContextL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)-oAuth2ConsentSessionExpiresAtParContextL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtParContext -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtParContext, ..} ) <$> f oAuth2ConsentSessionExpiresAtParContext-{-# INLINE oAuth2ConsentSessionExpiresAtParContextL #-}---- | 'oAuth2ConsentSessionExpiresAtRefreshToken' Lens-oAuth2ConsentSessionExpiresAtRefreshTokenL :: Lens_' OAuth2ConsentSessionExpiresAt (Maybe DateTime)-oAuth2ConsentSessionExpiresAtRefreshTokenL f OAuth2ConsentSessionExpiresAt{..} = (\oAuth2ConsentSessionExpiresAtRefreshToken -> OAuth2ConsentSessionExpiresAt { oAuth2ConsentSessionExpiresAtRefreshToken, ..} ) <$> f oAuth2ConsentSessionExpiresAtRefreshToken-{-# INLINE oAuth2ConsentSessionExpiresAtRefreshTokenL #-}------ * OAuth2LoginRequest---- | 'oAuth2LoginRequestChallenge' Lens-oAuth2LoginRequestChallengeL :: Lens_' OAuth2LoginRequest (Text)-oAuth2LoginRequestChallengeL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestChallenge -> OAuth2LoginRequest { oAuth2LoginRequestChallenge, ..} ) <$> f oAuth2LoginRequestChallenge-{-# INLINE oAuth2LoginRequestChallengeL #-}---- | 'oAuth2LoginRequestClient' Lens-oAuth2LoginRequestClientL :: Lens_' OAuth2LoginRequest (OAuth2Client)-oAuth2LoginRequestClientL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestClient -> OAuth2LoginRequest { oAuth2LoginRequestClient, ..} ) <$> f oAuth2LoginRequestClient-{-# INLINE oAuth2LoginRequestClientL #-}---- | 'oAuth2LoginRequestOidcContext' Lens-oAuth2LoginRequestOidcContextL :: Lens_' OAuth2LoginRequest (Maybe OAuth2ConsentRequestOpenIDConnectContext)-oAuth2LoginRequestOidcContextL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestOidcContext -> OAuth2LoginRequest { oAuth2LoginRequestOidcContext, ..} ) <$> f oAuth2LoginRequestOidcContext-{-# INLINE oAuth2LoginRequestOidcContextL #-}---- | 'oAuth2LoginRequestRequestUrl' Lens-oAuth2LoginRequestRequestUrlL :: Lens_' OAuth2LoginRequest (Text)-oAuth2LoginRequestRequestUrlL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestRequestUrl -> OAuth2LoginRequest { oAuth2LoginRequestRequestUrl, ..} ) <$> f oAuth2LoginRequestRequestUrl-{-# INLINE oAuth2LoginRequestRequestUrlL #-}---- | 'oAuth2LoginRequestRequestedAccessTokenAudience' Lens-oAuth2LoginRequestRequestedAccessTokenAudienceL :: Lens_' OAuth2LoginRequest ([Text])-oAuth2LoginRequestRequestedAccessTokenAudienceL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestRequestedAccessTokenAudience -> OAuth2LoginRequest { oAuth2LoginRequestRequestedAccessTokenAudience, ..} ) <$> f oAuth2LoginRequestRequestedAccessTokenAudience-{-# INLINE oAuth2LoginRequestRequestedAccessTokenAudienceL #-}---- | 'oAuth2LoginRequestRequestedScope' Lens-oAuth2LoginRequestRequestedScopeL :: Lens_' OAuth2LoginRequest ([Text])-oAuth2LoginRequestRequestedScopeL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestRequestedScope -> OAuth2LoginRequest { oAuth2LoginRequestRequestedScope, ..} ) <$> f oAuth2LoginRequestRequestedScope-{-# INLINE oAuth2LoginRequestRequestedScopeL #-}---- | 'oAuth2LoginRequestSessionId' Lens-oAuth2LoginRequestSessionIdL :: Lens_' OAuth2LoginRequest (Maybe Text)-oAuth2LoginRequestSessionIdL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestSessionId -> OAuth2LoginRequest { oAuth2LoginRequestSessionId, ..} ) <$> f oAuth2LoginRequestSessionId-{-# INLINE oAuth2LoginRequestSessionIdL #-}---- | 'oAuth2LoginRequestSkip' Lens-oAuth2LoginRequestSkipL :: Lens_' OAuth2LoginRequest (Bool)-oAuth2LoginRequestSkipL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestSkip -> OAuth2LoginRequest { oAuth2LoginRequestSkip, ..} ) <$> f oAuth2LoginRequestSkip-{-# INLINE oAuth2LoginRequestSkipL #-}---- | 'oAuth2LoginRequestSubject' Lens-oAuth2LoginRequestSubjectL :: Lens_' OAuth2LoginRequest (Text)-oAuth2LoginRequestSubjectL f OAuth2LoginRequest{..} = (\oAuth2LoginRequestSubject -> OAuth2LoginRequest { oAuth2LoginRequestSubject, ..} ) <$> f oAuth2LoginRequestSubject-{-# INLINE oAuth2LoginRequestSubjectL #-}------ * OAuth2LogoutRequest---- | 'oAuth2LogoutRequestChallenge' Lens-oAuth2LogoutRequestChallengeL :: Lens_' OAuth2LogoutRequest (Maybe Text)-oAuth2LogoutRequestChallengeL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestChallenge -> OAuth2LogoutRequest { oAuth2LogoutRequestChallenge, ..} ) <$> f oAuth2LogoutRequestChallenge-{-# INLINE oAuth2LogoutRequestChallengeL #-}---- | 'oAuth2LogoutRequestClient' Lens-oAuth2LogoutRequestClientL :: Lens_' OAuth2LogoutRequest (Maybe OAuth2Client)-oAuth2LogoutRequestClientL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestClient -> OAuth2LogoutRequest { oAuth2LogoutRequestClient, ..} ) <$> f oAuth2LogoutRequestClient-{-# INLINE oAuth2LogoutRequestClientL #-}---- | 'oAuth2LogoutRequestRequestUrl' Lens-oAuth2LogoutRequestRequestUrlL :: Lens_' OAuth2LogoutRequest (Maybe Text)-oAuth2LogoutRequestRequestUrlL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestRequestUrl -> OAuth2LogoutRequest { oAuth2LogoutRequestRequestUrl, ..} ) <$> f oAuth2LogoutRequestRequestUrl-{-# INLINE oAuth2LogoutRequestRequestUrlL #-}---- | 'oAuth2LogoutRequestRpInitiated' Lens-oAuth2LogoutRequestRpInitiatedL :: Lens_' OAuth2LogoutRequest (Maybe Bool)-oAuth2LogoutRequestRpInitiatedL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestRpInitiated -> OAuth2LogoutRequest { oAuth2LogoutRequestRpInitiated, ..} ) <$> f oAuth2LogoutRequestRpInitiated-{-# INLINE oAuth2LogoutRequestRpInitiatedL #-}---- | 'oAuth2LogoutRequestSid' Lens-oAuth2LogoutRequestSidL :: Lens_' OAuth2LogoutRequest (Maybe Text)-oAuth2LogoutRequestSidL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestSid -> OAuth2LogoutRequest { oAuth2LogoutRequestSid, ..} ) <$> f oAuth2LogoutRequestSid-{-# INLINE oAuth2LogoutRequestSidL #-}---- | 'oAuth2LogoutRequestSubject' Lens-oAuth2LogoutRequestSubjectL :: Lens_' OAuth2LogoutRequest (Maybe Text)-oAuth2LogoutRequestSubjectL f OAuth2LogoutRequest{..} = (\oAuth2LogoutRequestSubject -> OAuth2LogoutRequest { oAuth2LogoutRequestSubject, ..} ) <$> f oAuth2LogoutRequestSubject-{-# INLINE oAuth2LogoutRequestSubjectL #-}------ * OAuth2RedirectTo---- | 'oAuth2RedirectToRedirectTo' Lens-oAuth2RedirectToRedirectToL :: Lens_' OAuth2RedirectTo (Text)-oAuth2RedirectToRedirectToL f OAuth2RedirectTo{..} = (\oAuth2RedirectToRedirectTo -> OAuth2RedirectTo { oAuth2RedirectToRedirectTo, ..} ) <$> f oAuth2RedirectToRedirectTo-{-# INLINE oAuth2RedirectToRedirectToL #-}------ * OAuth2TokenExchange---- | 'oAuth2TokenExchangeAccessToken' Lens-oAuth2TokenExchangeAccessTokenL :: Lens_' OAuth2TokenExchange (Maybe Text)-oAuth2TokenExchangeAccessTokenL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeAccessToken -> OAuth2TokenExchange { oAuth2TokenExchangeAccessToken, ..} ) <$> f oAuth2TokenExchangeAccessToken-{-# INLINE oAuth2TokenExchangeAccessTokenL #-}---- | 'oAuth2TokenExchangeExpiresIn' Lens-oAuth2TokenExchangeExpiresInL :: Lens_' OAuth2TokenExchange (Maybe Integer)-oAuth2TokenExchangeExpiresInL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeExpiresIn -> OAuth2TokenExchange { oAuth2TokenExchangeExpiresIn, ..} ) <$> f oAuth2TokenExchangeExpiresIn-{-# INLINE oAuth2TokenExchangeExpiresInL #-}---- | 'oAuth2TokenExchangeIdToken' Lens-oAuth2TokenExchangeIdTokenL :: Lens_' OAuth2TokenExchange (Maybe Integer)-oAuth2TokenExchangeIdTokenL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeIdToken -> OAuth2TokenExchange { oAuth2TokenExchangeIdToken, ..} ) <$> f oAuth2TokenExchangeIdToken-{-# INLINE oAuth2TokenExchangeIdTokenL #-}---- | 'oAuth2TokenExchangeRefreshToken' Lens-oAuth2TokenExchangeRefreshTokenL :: Lens_' OAuth2TokenExchange (Maybe Text)-oAuth2TokenExchangeRefreshTokenL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeRefreshToken -> OAuth2TokenExchange { oAuth2TokenExchangeRefreshToken, ..} ) <$> f oAuth2TokenExchangeRefreshToken-{-# INLINE oAuth2TokenExchangeRefreshTokenL #-}---- | 'oAuth2TokenExchangeScope' Lens-oAuth2TokenExchangeScopeL :: Lens_' OAuth2TokenExchange (Maybe Text)-oAuth2TokenExchangeScopeL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeScope -> OAuth2TokenExchange { oAuth2TokenExchangeScope, ..} ) <$> f oAuth2TokenExchangeScope-{-# INLINE oAuth2TokenExchangeScopeL #-}---- | 'oAuth2TokenExchangeTokenType' Lens-oAuth2TokenExchangeTokenTypeL :: Lens_' OAuth2TokenExchange (Maybe Text)-oAuth2TokenExchangeTokenTypeL f OAuth2TokenExchange{..} = (\oAuth2TokenExchangeTokenType -> OAuth2TokenExchange { oAuth2TokenExchangeTokenType, ..} ) <$> f oAuth2TokenExchangeTokenType-{-# INLINE oAuth2TokenExchangeTokenTypeL #-}------ * OidcConfiguration---- | 'oidcConfigurationAuthorizationEndpoint' Lens-oidcConfigurationAuthorizationEndpointL :: Lens_' OidcConfiguration (Text)-oidcConfigurationAuthorizationEndpointL f OidcConfiguration{..} = (\oidcConfigurationAuthorizationEndpoint -> OidcConfiguration { oidcConfigurationAuthorizationEndpoint, ..} ) <$> f oidcConfigurationAuthorizationEndpoint-{-# INLINE oidcConfigurationAuthorizationEndpointL #-}---- | 'oidcConfigurationBackchannelLogoutSessionSupported' Lens-oidcConfigurationBackchannelLogoutSessionSupportedL :: Lens_' OidcConfiguration (Maybe Bool)-oidcConfigurationBackchannelLogoutSessionSupportedL f OidcConfiguration{..} = (\oidcConfigurationBackchannelLogoutSessionSupported -> OidcConfiguration { oidcConfigurationBackchannelLogoutSessionSupported, ..} ) <$> f oidcConfigurationBackchannelLogoutSessionSupported-{-# INLINE oidcConfigurationBackchannelLogoutSessionSupportedL #-}---- | 'oidcConfigurationBackchannelLogoutSupported' Lens-oidcConfigurationBackchannelLogoutSupportedL :: Lens_' OidcConfiguration (Maybe Bool)-oidcConfigurationBackchannelLogoutSupportedL f OidcConfiguration{..} = (\oidcConfigurationBackchannelLogoutSupported -> OidcConfiguration { oidcConfigurationBackchannelLogoutSupported, ..} ) <$> f oidcConfigurationBackchannelLogoutSupported-{-# INLINE oidcConfigurationBackchannelLogoutSupportedL #-}---- | 'oidcConfigurationClaimsParameterSupported' Lens-oidcConfigurationClaimsParameterSupportedL :: Lens_' OidcConfiguration (Maybe Bool)-oidcConfigurationClaimsParameterSupportedL f OidcConfiguration{..} = (\oidcConfigurationClaimsParameterSupported -> OidcConfiguration { oidcConfigurationClaimsParameterSupported, ..} ) <$> f oidcConfigurationClaimsParameterSupported-{-# INLINE oidcConfigurationClaimsParameterSupportedL #-}---- | 'oidcConfigurationClaimsSupported' Lens-oidcConfigurationClaimsSupportedL :: Lens_' OidcConfiguration (Maybe [Text])-oidcConfigurationClaimsSupportedL f OidcConfiguration{..} = (\oidcConfigurationClaimsSupported -> OidcConfiguration { oidcConfigurationClaimsSupported, ..} ) <$> f oidcConfigurationClaimsSupported-{-# INLINE oidcConfigurationClaimsSupportedL #-}---- | 'oidcConfigurationCodeChallengeMethodsSupported' Lens-oidcConfigurationCodeChallengeMethodsSupportedL :: Lens_' OidcConfiguration (Maybe [Text])-oidcConfigurationCodeChallengeMethodsSupportedL f OidcConfiguration{..} = (\oidcConfigurationCodeChallengeMethodsSupported -> OidcConfiguration { oidcConfigurationCodeChallengeMethodsSupported, ..} ) <$> f oidcConfigurationCodeChallengeMethodsSupported-{-# INLINE oidcConfigurationCodeChallengeMethodsSupportedL #-}---- | 'oidcConfigurationEndSessionEndpoint' Lens-oidcConfigurationEndSessionEndpointL :: Lens_' OidcConfiguration (Maybe Text)-oidcConfigurationEndSessionEndpointL f OidcConfiguration{..} = (\oidcConfigurationEndSessionEndpoint -> OidcConfiguration { oidcConfigurationEndSessionEndpoint, ..} ) <$> f oidcConfigurationEndSessionEndpoint-{-# INLINE oidcConfigurationEndSessionEndpointL #-}---- | 'oidcConfigurationFrontchannelLogoutSessionSupported' Lens-oidcConfigurationFrontchannelLogoutSessionSupportedL :: Lens_' OidcConfiguration (Maybe Bool)-oidcConfigurationFrontchannelLogoutSessionSupportedL f OidcConfiguration{..} = (\oidcConfigurationFrontchannelLogoutSessionSupported -> OidcConfiguration { oidcConfigurationFrontchannelLogoutSessionSupported, ..} ) <$> f oidcConfigurationFrontchannelLogoutSessionSupported-{-# INLINE oidcConfigurationFrontchannelLogoutSessionSupportedL #-}---- | 'oidcConfigurationFrontchannelLogoutSupported' Lens-oidcConfigurationFrontchannelLogoutSupportedL :: Lens_' OidcConfiguration (Maybe Bool)-oidcConfigurationFrontchannelLogoutSupportedL f OidcConfiguration{..} = (\oidcConfigurationFrontchannelLogoutSupported -> OidcConfiguration { oidcConfigurationFrontchannelLogoutSupported, ..} ) <$> f oidcConfigurationFrontchannelLogoutSupported-{-# INLINE oidcConfigurationFrontchannelLogoutSupportedL #-}---- | 'oidcConfigurationGrantTypesSupported' Lens-oidcConfigurationGrantTypesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])-oidcConfigurationGrantTypesSupportedL f OidcConfiguration{..} = (\oidcConfigurationGrantTypesSupported -> OidcConfiguration { oidcConfigurationGrantTypesSupported, ..} ) <$> f oidcConfigurationGrantTypesSupported-{-# INLINE oidcConfigurationGrantTypesSupportedL #-}---- | 'oidcConfigurationIdTokenSignedResponseAlg' Lens-oidcConfigurationIdTokenSignedResponseAlgL :: Lens_' OidcConfiguration ([Text])-oidcConfigurationIdTokenSignedResponseAlgL f OidcConfiguration{..} = (\oidcConfigurationIdTokenSignedResponseAlg -> OidcConfiguration { oidcConfigurationIdTokenSignedResponseAlg, ..} ) <$> f oidcConfigurationIdTokenSignedResponseAlg-{-# INLINE oidcConfigurationIdTokenSignedResponseAlgL #-}---- | 'oidcConfigurationIdTokenSigningAlgValuesSupported' Lens-oidcConfigurationIdTokenSigningAlgValuesSupportedL :: Lens_' OidcConfiguration ([Text])-oidcConfigurationIdTokenSigningAlgValuesSupportedL f OidcConfiguration{..} = (\oidcConfigurationIdTokenSigningAlgValuesSupported -> OidcConfiguration { oidcConfigurationIdTokenSigningAlgValuesSupported, ..} ) <$> f oidcConfigurationIdTokenSigningAlgValuesSupported-{-# INLINE oidcConfigurationIdTokenSigningAlgValuesSupportedL #-}---- | 'oidcConfigurationIssuer' Lens-oidcConfigurationIssuerL :: Lens_' OidcConfiguration (Text)-oidcConfigurationIssuerL f OidcConfiguration{..} = (\oidcConfigurationIssuer -> OidcConfiguration { oidcConfigurationIssuer, ..} ) <$> f oidcConfigurationIssuer-{-# INLINE oidcConfigurationIssuerL #-}---- | 'oidcConfigurationJwksUri' Lens-oidcConfigurationJwksUriL :: Lens_' OidcConfiguration (Text)-oidcConfigurationJwksUriL f OidcConfiguration{..} = (\oidcConfigurationJwksUri -> OidcConfiguration { oidcConfigurationJwksUri, ..} ) <$> f oidcConfigurationJwksUri-{-# INLINE oidcConfigurationJwksUriL #-}---- | 'oidcConfigurationRegistrationEndpoint' Lens-oidcConfigurationRegistrationEndpointL :: Lens_' OidcConfiguration (Maybe Text)-oidcConfigurationRegistrationEndpointL f OidcConfiguration{..} = (\oidcConfigurationRegistrationEndpoint -> OidcConfiguration { oidcConfigurationRegistrationEndpoint, ..} ) <$> f oidcConfigurationRegistrationEndpoint-{-# INLINE oidcConfigurationRegistrationEndpointL #-}---- | 'oidcConfigurationRequestObjectSigningAlgValuesSupported' Lens-oidcConfigurationRequestObjectSigningAlgValuesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])-oidcConfigurationRequestObjectSigningAlgValuesSupportedL f OidcConfiguration{..} = (\oidcConfigurationRequestObjectSigningAlgValuesSupported -> OidcConfiguration { oidcConfigurationRequestObjectSigningAlgValuesSupported, ..} ) <$> f oidcConfigurationRequestObjectSigningAlgValuesSupported-{-# INLINE oidcConfigurationRequestObjectSigningAlgValuesSupportedL #-}---- | 'oidcConfigurationRequestParameterSupported' Lens-oidcConfigurationRequestParameterSupportedL :: Lens_' OidcConfiguration (Maybe Bool)-oidcConfigurationRequestParameterSupportedL f OidcConfiguration{..} = (\oidcConfigurationRequestParameterSupported -> OidcConfiguration { oidcConfigurationRequestParameterSupported, ..} ) <$> f oidcConfigurationRequestParameterSupported-{-# INLINE oidcConfigurationRequestParameterSupportedL #-}---- | 'oidcConfigurationRequestUriParameterSupported' Lens-oidcConfigurationRequestUriParameterSupportedL :: Lens_' OidcConfiguration (Maybe Bool)-oidcConfigurationRequestUriParameterSupportedL f OidcConfiguration{..} = (\oidcConfigurationRequestUriParameterSupported -> OidcConfiguration { oidcConfigurationRequestUriParameterSupported, ..} ) <$> f oidcConfigurationRequestUriParameterSupported-{-# INLINE oidcConfigurationRequestUriParameterSupportedL #-}---- | 'oidcConfigurationRequireRequestUriRegistration' Lens-oidcConfigurationRequireRequestUriRegistrationL :: Lens_' OidcConfiguration (Maybe Bool)-oidcConfigurationRequireRequestUriRegistrationL f OidcConfiguration{..} = (\oidcConfigurationRequireRequestUriRegistration -> OidcConfiguration { oidcConfigurationRequireRequestUriRegistration, ..} ) <$> f oidcConfigurationRequireRequestUriRegistration-{-# INLINE oidcConfigurationRequireRequestUriRegistrationL #-}---- | 'oidcConfigurationResponseModesSupported' Lens-oidcConfigurationResponseModesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])-oidcConfigurationResponseModesSupportedL f OidcConfiguration{..} = (\oidcConfigurationResponseModesSupported -> OidcConfiguration { oidcConfigurationResponseModesSupported, ..} ) <$> f oidcConfigurationResponseModesSupported-{-# INLINE oidcConfigurationResponseModesSupportedL #-}---- | 'oidcConfigurationResponseTypesSupported' Lens-oidcConfigurationResponseTypesSupportedL :: Lens_' OidcConfiguration ([Text])-oidcConfigurationResponseTypesSupportedL f OidcConfiguration{..} = (\oidcConfigurationResponseTypesSupported -> OidcConfiguration { oidcConfigurationResponseTypesSupported, ..} ) <$> f oidcConfigurationResponseTypesSupported-{-# INLINE oidcConfigurationResponseTypesSupportedL #-}---- | 'oidcConfigurationRevocationEndpoint' Lens-oidcConfigurationRevocationEndpointL :: Lens_' OidcConfiguration (Maybe Text)-oidcConfigurationRevocationEndpointL f OidcConfiguration{..} = (\oidcConfigurationRevocationEndpoint -> OidcConfiguration { oidcConfigurationRevocationEndpoint, ..} ) <$> f oidcConfigurationRevocationEndpoint-{-# INLINE oidcConfigurationRevocationEndpointL #-}---- | 'oidcConfigurationScopesSupported' Lens-oidcConfigurationScopesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])-oidcConfigurationScopesSupportedL f OidcConfiguration{..} = (\oidcConfigurationScopesSupported -> OidcConfiguration { oidcConfigurationScopesSupported, ..} ) <$> f oidcConfigurationScopesSupported-{-# INLINE oidcConfigurationScopesSupportedL #-}---- | 'oidcConfigurationSubjectTypesSupported' Lens-oidcConfigurationSubjectTypesSupportedL :: Lens_' OidcConfiguration ([Text])-oidcConfigurationSubjectTypesSupportedL f OidcConfiguration{..} = (\oidcConfigurationSubjectTypesSupported -> OidcConfiguration { oidcConfigurationSubjectTypesSupported, ..} ) <$> f oidcConfigurationSubjectTypesSupported-{-# INLINE oidcConfigurationSubjectTypesSupportedL #-}---- | 'oidcConfigurationTokenEndpoint' Lens-oidcConfigurationTokenEndpointL :: Lens_' OidcConfiguration (Text)-oidcConfigurationTokenEndpointL f OidcConfiguration{..} = (\oidcConfigurationTokenEndpoint -> OidcConfiguration { oidcConfigurationTokenEndpoint, ..} ) <$> f oidcConfigurationTokenEndpoint-{-# INLINE oidcConfigurationTokenEndpointL #-}---- | 'oidcConfigurationTokenEndpointAuthMethodsSupported' Lens-oidcConfigurationTokenEndpointAuthMethodsSupportedL :: Lens_' OidcConfiguration (Maybe [Text])-oidcConfigurationTokenEndpointAuthMethodsSupportedL f OidcConfiguration{..} = (\oidcConfigurationTokenEndpointAuthMethodsSupported -> OidcConfiguration { oidcConfigurationTokenEndpointAuthMethodsSupported, ..} ) <$> f oidcConfigurationTokenEndpointAuthMethodsSupported-{-# INLINE oidcConfigurationTokenEndpointAuthMethodsSupportedL #-}---- | 'oidcConfigurationUserinfoEndpoint' Lens-oidcConfigurationUserinfoEndpointL :: Lens_' OidcConfiguration (Maybe Text)-oidcConfigurationUserinfoEndpointL f OidcConfiguration{..} = (\oidcConfigurationUserinfoEndpoint -> OidcConfiguration { oidcConfigurationUserinfoEndpoint, ..} ) <$> f oidcConfigurationUserinfoEndpoint-{-# INLINE oidcConfigurationUserinfoEndpointL #-}---- | 'oidcConfigurationUserinfoSignedResponseAlg' Lens-oidcConfigurationUserinfoSignedResponseAlgL :: Lens_' OidcConfiguration ([Text])-oidcConfigurationUserinfoSignedResponseAlgL f OidcConfiguration{..} = (\oidcConfigurationUserinfoSignedResponseAlg -> OidcConfiguration { oidcConfigurationUserinfoSignedResponseAlg, ..} ) <$> f oidcConfigurationUserinfoSignedResponseAlg-{-# INLINE oidcConfigurationUserinfoSignedResponseAlgL #-}---- | 'oidcConfigurationUserinfoSigningAlgValuesSupported' Lens-oidcConfigurationUserinfoSigningAlgValuesSupportedL :: Lens_' OidcConfiguration (Maybe [Text])-oidcConfigurationUserinfoSigningAlgValuesSupportedL f OidcConfiguration{..} = (\oidcConfigurationUserinfoSigningAlgValuesSupported -> OidcConfiguration { oidcConfigurationUserinfoSigningAlgValuesSupported, ..} ) <$> f oidcConfigurationUserinfoSigningAlgValuesSupported-{-# INLINE oidcConfigurationUserinfoSigningAlgValuesSupportedL #-}------ * OidcUserInfo---- | 'oidcUserInfoBirthdate' Lens-oidcUserInfoBirthdateL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoBirthdateL f OidcUserInfo{..} = (\oidcUserInfoBirthdate -> OidcUserInfo { oidcUserInfoBirthdate, ..} ) <$> f oidcUserInfoBirthdate-{-# INLINE oidcUserInfoBirthdateL #-}---- | 'oidcUserInfoEmail' Lens-oidcUserInfoEmailL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoEmailL f OidcUserInfo{..} = (\oidcUserInfoEmail -> OidcUserInfo { oidcUserInfoEmail, ..} ) <$> f oidcUserInfoEmail-{-# INLINE oidcUserInfoEmailL #-}---- | 'oidcUserInfoEmailVerified' Lens-oidcUserInfoEmailVerifiedL :: Lens_' OidcUserInfo (Maybe Bool)-oidcUserInfoEmailVerifiedL f OidcUserInfo{..} = (\oidcUserInfoEmailVerified -> OidcUserInfo { oidcUserInfoEmailVerified, ..} ) <$> f oidcUserInfoEmailVerified-{-# INLINE oidcUserInfoEmailVerifiedL #-}---- | 'oidcUserInfoFamilyName' Lens-oidcUserInfoFamilyNameL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoFamilyNameL f OidcUserInfo{..} = (\oidcUserInfoFamilyName -> OidcUserInfo { oidcUserInfoFamilyName, ..} ) <$> f oidcUserInfoFamilyName-{-# INLINE oidcUserInfoFamilyNameL #-}---- | 'oidcUserInfoGender' Lens-oidcUserInfoGenderL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoGenderL f OidcUserInfo{..} = (\oidcUserInfoGender -> OidcUserInfo { oidcUserInfoGender, ..} ) <$> f oidcUserInfoGender-{-# INLINE oidcUserInfoGenderL #-}---- | 'oidcUserInfoGivenName' Lens-oidcUserInfoGivenNameL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoGivenNameL f OidcUserInfo{..} = (\oidcUserInfoGivenName -> OidcUserInfo { oidcUserInfoGivenName, ..} ) <$> f oidcUserInfoGivenName-{-# INLINE oidcUserInfoGivenNameL #-}---- | 'oidcUserInfoLocale' Lens-oidcUserInfoLocaleL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoLocaleL f OidcUserInfo{..} = (\oidcUserInfoLocale -> OidcUserInfo { oidcUserInfoLocale, ..} ) <$> f oidcUserInfoLocale-{-# INLINE oidcUserInfoLocaleL #-}---- | 'oidcUserInfoMiddleName' Lens-oidcUserInfoMiddleNameL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoMiddleNameL f OidcUserInfo{..} = (\oidcUserInfoMiddleName -> OidcUserInfo { oidcUserInfoMiddleName, ..} ) <$> f oidcUserInfoMiddleName-{-# INLINE oidcUserInfoMiddleNameL #-}---- | 'oidcUserInfoName' Lens-oidcUserInfoNameL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoNameL f OidcUserInfo{..} = (\oidcUserInfoName -> OidcUserInfo { oidcUserInfoName, ..} ) <$> f oidcUserInfoName-{-# INLINE oidcUserInfoNameL #-}---- | 'oidcUserInfoNickname' Lens-oidcUserInfoNicknameL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoNicknameL f OidcUserInfo{..} = (\oidcUserInfoNickname -> OidcUserInfo { oidcUserInfoNickname, ..} ) <$> f oidcUserInfoNickname-{-# INLINE oidcUserInfoNicknameL #-}---- | 'oidcUserInfoPhoneNumber' Lens-oidcUserInfoPhoneNumberL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoPhoneNumberL f OidcUserInfo{..} = (\oidcUserInfoPhoneNumber -> OidcUserInfo { oidcUserInfoPhoneNumber, ..} ) <$> f oidcUserInfoPhoneNumber-{-# INLINE oidcUserInfoPhoneNumberL #-}---- | 'oidcUserInfoPhoneNumberVerified' Lens-oidcUserInfoPhoneNumberVerifiedL :: Lens_' OidcUserInfo (Maybe Bool)-oidcUserInfoPhoneNumberVerifiedL f OidcUserInfo{..} = (\oidcUserInfoPhoneNumberVerified -> OidcUserInfo { oidcUserInfoPhoneNumberVerified, ..} ) <$> f oidcUserInfoPhoneNumberVerified-{-# INLINE oidcUserInfoPhoneNumberVerifiedL #-}---- | 'oidcUserInfoPicture' Lens-oidcUserInfoPictureL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoPictureL f OidcUserInfo{..} = (\oidcUserInfoPicture -> OidcUserInfo { oidcUserInfoPicture, ..} ) <$> f oidcUserInfoPicture-{-# INLINE oidcUserInfoPictureL #-}---- | 'oidcUserInfoPreferredUsername' Lens-oidcUserInfoPreferredUsernameL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoPreferredUsernameL f OidcUserInfo{..} = (\oidcUserInfoPreferredUsername -> OidcUserInfo { oidcUserInfoPreferredUsername, ..} ) <$> f oidcUserInfoPreferredUsername-{-# INLINE oidcUserInfoPreferredUsernameL #-}---- | 'oidcUserInfoProfile' Lens-oidcUserInfoProfileL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoProfileL f OidcUserInfo{..} = (\oidcUserInfoProfile -> OidcUserInfo { oidcUserInfoProfile, ..} ) <$> f oidcUserInfoProfile-{-# INLINE oidcUserInfoProfileL #-}---- | 'oidcUserInfoSub' Lens-oidcUserInfoSubL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoSubL f OidcUserInfo{..} = (\oidcUserInfoSub -> OidcUserInfo { oidcUserInfoSub, ..} ) <$> f oidcUserInfoSub-{-# INLINE oidcUserInfoSubL #-}---- | 'oidcUserInfoUpdatedAt' Lens-oidcUserInfoUpdatedAtL :: Lens_' OidcUserInfo (Maybe Integer)-oidcUserInfoUpdatedAtL f OidcUserInfo{..} = (\oidcUserInfoUpdatedAt -> OidcUserInfo { oidcUserInfoUpdatedAt, ..} ) <$> f oidcUserInfoUpdatedAt-{-# INLINE oidcUserInfoUpdatedAtL #-}---- | 'oidcUserInfoWebsite' Lens-oidcUserInfoWebsiteL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoWebsiteL f OidcUserInfo{..} = (\oidcUserInfoWebsite -> OidcUserInfo { oidcUserInfoWebsite, ..} ) <$> f oidcUserInfoWebsite-{-# INLINE oidcUserInfoWebsiteL #-}---- | 'oidcUserInfoZoneinfo' Lens-oidcUserInfoZoneinfoL :: Lens_' OidcUserInfo (Maybe Text)-oidcUserInfoZoneinfoL f OidcUserInfo{..} = (\oidcUserInfoZoneinfo -> OidcUserInfo { oidcUserInfoZoneinfo, ..} ) <$> f oidcUserInfoZoneinfo-{-# INLINE oidcUserInfoZoneinfoL #-}------ * Pagination---- | 'paginationPageSize' Lens-paginationPageSizeL :: Lens_' Pagination (Maybe Integer)-paginationPageSizeL f Pagination{..} = (\paginationPageSize -> Pagination { paginationPageSize, ..} ) <$> f paginationPageSize-{-# INLINE paginationPageSizeL #-}---- | 'paginationPageToken' Lens-paginationPageTokenL :: Lens_' Pagination (Maybe Text)-paginationPageTokenL f Pagination{..} = (\paginationPageToken -> Pagination { paginationPageToken, ..} ) <$> f paginationPageToken-{-# INLINE paginationPageTokenL #-}------ * PaginationHeaders---- | 'paginationHeadersLink' Lens-paginationHeadersLinkL :: Lens_' PaginationHeaders (Maybe Text)-paginationHeadersLinkL f PaginationHeaders{..} = (\paginationHeadersLink -> PaginationHeaders { paginationHeadersLink, ..} ) <$> f paginationHeadersLink-{-# INLINE paginationHeadersLinkL #-}---- | 'paginationHeadersXTotalCount' Lens-paginationHeadersXTotalCountL :: Lens_' PaginationHeaders (Maybe Text)-paginationHeadersXTotalCountL f PaginationHeaders{..} = (\paginationHeadersXTotalCount -> PaginationHeaders { paginationHeadersXTotalCount, ..} ) <$> f paginationHeadersXTotalCount-{-# INLINE paginationHeadersXTotalCountL #-}------ * RejectOAuth2Request---- | 'rejectOAuth2RequestError' Lens-rejectOAuth2RequestErrorL :: Lens_' RejectOAuth2Request (Maybe Text)-rejectOAuth2RequestErrorL f RejectOAuth2Request{..} = (\rejectOAuth2RequestError -> RejectOAuth2Request { rejectOAuth2RequestError, ..} ) <$> f rejectOAuth2RequestError-{-# INLINE rejectOAuth2RequestErrorL #-}---- | 'rejectOAuth2RequestErrorDebug' Lens-rejectOAuth2RequestErrorDebugL :: Lens_' RejectOAuth2Request (Maybe Text)-rejectOAuth2RequestErrorDebugL f RejectOAuth2Request{..} = (\rejectOAuth2RequestErrorDebug -> RejectOAuth2Request { rejectOAuth2RequestErrorDebug, ..} ) <$> f rejectOAuth2RequestErrorDebug-{-# INLINE rejectOAuth2RequestErrorDebugL #-}---- | 'rejectOAuth2RequestErrorDescription' Lens-rejectOAuth2RequestErrorDescriptionL :: Lens_' RejectOAuth2Request (Maybe Text)-rejectOAuth2RequestErrorDescriptionL f RejectOAuth2Request{..} = (\rejectOAuth2RequestErrorDescription -> RejectOAuth2Request { rejectOAuth2RequestErrorDescription, ..} ) <$> f rejectOAuth2RequestErrorDescription-{-# INLINE rejectOAuth2RequestErrorDescriptionL #-}---- | 'rejectOAuth2RequestErrorHint' Lens-rejectOAuth2RequestErrorHintL :: Lens_' RejectOAuth2Request (Maybe Text)-rejectOAuth2RequestErrorHintL f RejectOAuth2Request{..} = (\rejectOAuth2RequestErrorHint -> RejectOAuth2Request { rejectOAuth2RequestErrorHint, ..} ) <$> f rejectOAuth2RequestErrorHint-{-# INLINE rejectOAuth2RequestErrorHintL #-}---- | 'rejectOAuth2RequestStatusCode' Lens-rejectOAuth2RequestStatusCodeL :: Lens_' RejectOAuth2Request (Maybe Integer)-rejectOAuth2RequestStatusCodeL f RejectOAuth2Request{..} = (\rejectOAuth2RequestStatusCode -> RejectOAuth2Request { rejectOAuth2RequestStatusCode, ..} ) <$> f rejectOAuth2RequestStatusCode-{-# INLINE rejectOAuth2RequestStatusCodeL #-}------ * TokenPagination---- | 'tokenPaginationPageSize' Lens-tokenPaginationPageSizeL :: Lens_' TokenPagination (Maybe Integer)-tokenPaginationPageSizeL f TokenPagination{..} = (\tokenPaginationPageSize -> TokenPagination { tokenPaginationPageSize, ..} ) <$> f tokenPaginationPageSize-{-# INLINE tokenPaginationPageSizeL #-}---- | 'tokenPaginationPageToken' Lens-tokenPaginationPageTokenL :: Lens_' TokenPagination (Maybe Text)-tokenPaginationPageTokenL f TokenPagination{..} = (\tokenPaginationPageToken -> TokenPagination { tokenPaginationPageToken, ..} ) <$> f tokenPaginationPageToken-{-# INLINE tokenPaginationPageTokenL #-}------ * TokenPaginationHeaders---- | 'tokenPaginationHeadersLink' Lens-tokenPaginationHeadersLinkL :: Lens_' TokenPaginationHeaders (Maybe Text)-tokenPaginationHeadersLinkL f TokenPaginationHeaders{..} = (\tokenPaginationHeadersLink -> TokenPaginationHeaders { tokenPaginationHeadersLink, ..} ) <$> f tokenPaginationHeadersLink-{-# INLINE tokenPaginationHeadersLinkL #-}---- | 'tokenPaginationHeadersXTotalCount' Lens-tokenPaginationHeadersXTotalCountL :: Lens_' TokenPaginationHeaders (Maybe Text)-tokenPaginationHeadersXTotalCountL f TokenPaginationHeaders{..} = (\tokenPaginationHeadersXTotalCount -> TokenPaginationHeaders { tokenPaginationHeadersXTotalCount, ..} ) <$> f tokenPaginationHeadersXTotalCount-{-# INLINE tokenPaginationHeadersXTotalCountL #-}------ * TokenPaginationRequestParameters---- | 'tokenPaginationRequestParametersPageSize' Lens-tokenPaginationRequestParametersPageSizeL :: Lens_' TokenPaginationRequestParameters (Maybe Integer)-tokenPaginationRequestParametersPageSizeL f TokenPaginationRequestParameters{..} = (\tokenPaginationRequestParametersPageSize -> TokenPaginationRequestParameters { tokenPaginationRequestParametersPageSize, ..} ) <$> f tokenPaginationRequestParametersPageSize-{-# INLINE tokenPaginationRequestParametersPageSizeL #-}---- | 'tokenPaginationRequestParametersPageToken' Lens-tokenPaginationRequestParametersPageTokenL :: Lens_' TokenPaginationRequestParameters (Maybe Text)-tokenPaginationRequestParametersPageTokenL f TokenPaginationRequestParameters{..} = (\tokenPaginationRequestParametersPageToken -> TokenPaginationRequestParameters { tokenPaginationRequestParametersPageToken, ..} ) <$> f tokenPaginationRequestParametersPageToken-{-# INLINE tokenPaginationRequestParametersPageTokenL #-}------ * TokenPaginationResponseHeaders---- | 'tokenPaginationResponseHeadersLink' Lens-tokenPaginationResponseHeadersLinkL :: Lens_' TokenPaginationResponseHeaders (Maybe Text)-tokenPaginationResponseHeadersLinkL f TokenPaginationResponseHeaders{..} = (\tokenPaginationResponseHeadersLink -> TokenPaginationResponseHeaders { tokenPaginationResponseHeadersLink, ..} ) <$> f tokenPaginationResponseHeadersLink-{-# INLINE tokenPaginationResponseHeadersLinkL #-}---- | 'tokenPaginationResponseHeadersXTotalCount' Lens-tokenPaginationResponseHeadersXTotalCountL :: Lens_' TokenPaginationResponseHeaders (Maybe Integer)-tokenPaginationResponseHeadersXTotalCountL f TokenPaginationResponseHeaders{..} = (\tokenPaginationResponseHeadersXTotalCount -> TokenPaginationResponseHeaders { tokenPaginationResponseHeadersXTotalCount, ..} ) <$> f tokenPaginationResponseHeadersXTotalCount-{-# INLINE tokenPaginationResponseHeadersXTotalCountL #-}------ * TrustOAuth2JwtGrantIssuer---- | 'trustOAuth2JwtGrantIssuerAllowAnySubject' Lens-trustOAuth2JwtGrantIssuerAllowAnySubjectL :: Lens_' TrustOAuth2JwtGrantIssuer (Maybe Bool)-trustOAuth2JwtGrantIssuerAllowAnySubjectL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerAllowAnySubject -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerAllowAnySubject, ..} ) <$> f trustOAuth2JwtGrantIssuerAllowAnySubject-{-# INLINE trustOAuth2JwtGrantIssuerAllowAnySubjectL #-}---- | 'trustOAuth2JwtGrantIssuerExpiresAt' Lens-trustOAuth2JwtGrantIssuerExpiresAtL :: Lens_' TrustOAuth2JwtGrantIssuer (DateTime)-trustOAuth2JwtGrantIssuerExpiresAtL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerExpiresAt -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerExpiresAt, ..} ) <$> f trustOAuth2JwtGrantIssuerExpiresAt-{-# INLINE trustOAuth2JwtGrantIssuerExpiresAtL #-}---- | 'trustOAuth2JwtGrantIssuerIssuer' Lens-trustOAuth2JwtGrantIssuerIssuerL :: Lens_' TrustOAuth2JwtGrantIssuer (Text)-trustOAuth2JwtGrantIssuerIssuerL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerIssuer -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerIssuer, ..} ) <$> f trustOAuth2JwtGrantIssuerIssuer-{-# INLINE trustOAuth2JwtGrantIssuerIssuerL #-}---- | 'trustOAuth2JwtGrantIssuerJwk' Lens-trustOAuth2JwtGrantIssuerJwkL :: Lens_' TrustOAuth2JwtGrantIssuer (JsonWebKey)-trustOAuth2JwtGrantIssuerJwkL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerJwk -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerJwk, ..} ) <$> f trustOAuth2JwtGrantIssuerJwk-{-# INLINE trustOAuth2JwtGrantIssuerJwkL #-}---- | 'trustOAuth2JwtGrantIssuerScope' Lens-trustOAuth2JwtGrantIssuerScopeL :: Lens_' TrustOAuth2JwtGrantIssuer ([Text])-trustOAuth2JwtGrantIssuerScopeL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerScope -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerScope, ..} ) <$> f trustOAuth2JwtGrantIssuerScope-{-# INLINE trustOAuth2JwtGrantIssuerScopeL #-}---- | 'trustOAuth2JwtGrantIssuerSubject' Lens-trustOAuth2JwtGrantIssuerSubjectL :: Lens_' TrustOAuth2JwtGrantIssuer (Maybe Text)-trustOAuth2JwtGrantIssuerSubjectL f TrustOAuth2JwtGrantIssuer{..} = (\trustOAuth2JwtGrantIssuerSubject -> TrustOAuth2JwtGrantIssuer { trustOAuth2JwtGrantIssuerSubject, ..} ) <$> f trustOAuth2JwtGrantIssuerSubject-{-# INLINE trustOAuth2JwtGrantIssuerSubjectL #-}------ * TrustedOAuth2JwtGrantIssuer---- | 'trustedOAuth2JwtGrantIssuerAllowAnySubject' Lens-trustedOAuth2JwtGrantIssuerAllowAnySubjectL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe Bool)-trustedOAuth2JwtGrantIssuerAllowAnySubjectL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerAllowAnySubject -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerAllowAnySubject, ..} ) <$> f trustedOAuth2JwtGrantIssuerAllowAnySubject-{-# INLINE trustedOAuth2JwtGrantIssuerAllowAnySubjectL #-}---- | 'trustedOAuth2JwtGrantIssuerCreatedAt' Lens-trustedOAuth2JwtGrantIssuerCreatedAtL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe DateTime)-trustedOAuth2JwtGrantIssuerCreatedAtL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerCreatedAt -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerCreatedAt, ..} ) <$> f trustedOAuth2JwtGrantIssuerCreatedAt-{-# INLINE trustedOAuth2JwtGrantIssuerCreatedAtL #-}---- | 'trustedOAuth2JwtGrantIssuerExpiresAt' Lens-trustedOAuth2JwtGrantIssuerExpiresAtL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe DateTime)-trustedOAuth2JwtGrantIssuerExpiresAtL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerExpiresAt -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerExpiresAt, ..} ) <$> f trustedOAuth2JwtGrantIssuerExpiresAt-{-# INLINE trustedOAuth2JwtGrantIssuerExpiresAtL #-}---- | 'trustedOAuth2JwtGrantIssuerId' Lens-trustedOAuth2JwtGrantIssuerIdL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe Text)-trustedOAuth2JwtGrantIssuerIdL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerId -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerId, ..} ) <$> f trustedOAuth2JwtGrantIssuerId-{-# INLINE trustedOAuth2JwtGrantIssuerIdL #-}---- | 'trustedOAuth2JwtGrantIssuerIssuer' Lens-trustedOAuth2JwtGrantIssuerIssuerL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe Text)-trustedOAuth2JwtGrantIssuerIssuerL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerIssuer -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerIssuer, ..} ) <$> f trustedOAuth2JwtGrantIssuerIssuer-{-# INLINE trustedOAuth2JwtGrantIssuerIssuerL #-}---- | 'trustedOAuth2JwtGrantIssuerPublicKey' Lens-trustedOAuth2JwtGrantIssuerPublicKeyL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe TrustedOAuth2JwtGrantJsonWebKey)-trustedOAuth2JwtGrantIssuerPublicKeyL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerPublicKey -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerPublicKey, ..} ) <$> f trustedOAuth2JwtGrantIssuerPublicKey-{-# INLINE trustedOAuth2JwtGrantIssuerPublicKeyL #-}---- | 'trustedOAuth2JwtGrantIssuerScope' Lens-trustedOAuth2JwtGrantIssuerScopeL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe [Text])-trustedOAuth2JwtGrantIssuerScopeL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerScope -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerScope, ..} ) <$> f trustedOAuth2JwtGrantIssuerScope-{-# INLINE trustedOAuth2JwtGrantIssuerScopeL #-}---- | 'trustedOAuth2JwtGrantIssuerSubject' Lens-trustedOAuth2JwtGrantIssuerSubjectL :: Lens_' TrustedOAuth2JwtGrantIssuer (Maybe Text)-trustedOAuth2JwtGrantIssuerSubjectL f TrustedOAuth2JwtGrantIssuer{..} = (\trustedOAuth2JwtGrantIssuerSubject -> TrustedOAuth2JwtGrantIssuer { trustedOAuth2JwtGrantIssuerSubject, ..} ) <$> f trustedOAuth2JwtGrantIssuerSubject-{-# INLINE trustedOAuth2JwtGrantIssuerSubjectL #-}------ * TrustedOAuth2JwtGrantJsonWebKey---- | 'trustedOAuth2JwtGrantJsonWebKeyKid' Lens-trustedOAuth2JwtGrantJsonWebKeyKidL :: Lens_' TrustedOAuth2JwtGrantJsonWebKey (Maybe Text)-trustedOAuth2JwtGrantJsonWebKeyKidL f TrustedOAuth2JwtGrantJsonWebKey{..} = (\trustedOAuth2JwtGrantJsonWebKeyKid -> TrustedOAuth2JwtGrantJsonWebKey { trustedOAuth2JwtGrantJsonWebKeyKid, ..} ) <$> f trustedOAuth2JwtGrantJsonWebKeyKid-{-# INLINE trustedOAuth2JwtGrantJsonWebKeyKidL #-}---- | 'trustedOAuth2JwtGrantJsonWebKeySet' Lens-trustedOAuth2JwtGrantJsonWebKeySetL :: Lens_' TrustedOAuth2JwtGrantJsonWebKey (Maybe Text)-trustedOAuth2JwtGrantJsonWebKeySetL f TrustedOAuth2JwtGrantJsonWebKey{..} = (\trustedOAuth2JwtGrantJsonWebKeySet -> TrustedOAuth2JwtGrantJsonWebKey { trustedOAuth2JwtGrantJsonWebKeySet, ..} ) <$> f trustedOAuth2JwtGrantJsonWebKeySet-{-# INLINE trustedOAuth2JwtGrantJsonWebKeySetL #-}------ * Version---- | 'versionVersion' Lens-versionVersionL :: Lens_' Version (Maybe Text)-versionVersionL f Version{..} = (\versionVersion -> Version { versionVersion, ..} ) <$> f versionVersion-{-# INLINE versionVersionL #-}--
openapi.yaml view
@@ -1141,9 +1141,14 @@   /admin/oauth2/auth/sessions/login:     delete:       description: |--        This endpoint invalidates a subject's authentication session. After revoking the authentication session, the subject-        has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens and-        does not work with OpenID Connect Front- or Back-channel logout.+        This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject+        has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.++        If you send the subject in a query param, all authentication sessions that belong to that subject are revoked.+        No OpennID Connect Front- or Back-channel logout is performed in this case.++        Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected+        to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.       operationId: revokeOAuth2LoginSessions       parameters:       - description: |-@@ -1153,10 +1158,21 @@         explode: true         in: query         name: subject-        required: true+        required: false         schema:           type: string         style: form+      - description: |-+          OAuth 2.0 Subject++          The subject to revoke authentication sessions for.+        explode: true+        in: query+        name: sid+        required: false+        schema:+          type: string+        style: form       responses:         "204":           description: |-@@ -1168,7 +1184,7 @@               schema:                 $ref: '#/components/schemas/errorOAuth2'           description: errorOAuth2-      summary: Revokes All OAuth 2.0 Login Sessions of a Subject+      summary: Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID       tags:       - oAuth2   /admin/oauth2/introspect:@@ -1785,6 +1801,7 @@             type: array       description: Paginated OAuth2 Client List Response   schemas:+    DefaultError: {}     JSONRawMessage:       title: "JSONRawMessage represents a json.RawMessage that works well with JSON,\         \ SQL, and Swagger."@@ -1888,6 +1905,14 @@         context:           title: "JSONRawMessage represents a json.RawMessage that works well with\             \ JSON, SQL, and Swagger."+        extend_session_lifespan:+          description: |-+            Extend OAuth2 authentication session lifespan++            If set to `true`, the OAuth2 authentication cookie lifespan is extended. This is for example useful if you want the user to be able to use `prompt=none` continuously.++            This value can only be set to `true` if the user has an authentication, which is the case if the `skip` value is `true`.+          type: boolean         force_subject_identifier:           description: |-             ForceSubjectIdentifier forces the "pairwise" user ID of the end-user that authenticated. The "pairwise" user ID refers to the@@ -2397,7 +2422,7 @@         refresh_token_grant_access_token_lifespan: refresh_token_grant_access_token_lifespan         registration_access_token: registration_access_token         client_id: client_id-        token_endpoint_auth_method: token_endpoint_auth_method+        token_endpoint_auth_method: client_secret_basic         userinfo_signed_response_alg: userinfo_signed_response_alg         authorization_code_grant_id_token_lifespan: authorization_code_grant_id_token_lifespan         authorization_code_grant_refresh_token_lifespan: authorization_code_grant_refresh_token_lifespan@@ -2413,6 +2438,7 @@         client_name: client_name         policy_uri: policy_uri         owner: owner+        skip_consent: true         audience:         - audience         - audience@@ -2435,6 +2461,7 @@         implicit_grant_id_token_lifespan: implicit_grant_id_token_lifespan         client_secret_expires_at: 0         implicit_grant_access_token_lifespan: implicit_grant_access_token_lifespan+        access_token_strategy: access_token_strategy         jwks_uri: jwks_uri         request_object_signing_alg: request_object_signing_alg         tos_uri: tos_uri@@ -2445,6 +2472,14 @@         - response_types         - response_types       properties:+        access_token_strategy:+          description: |-+            OAuth 2.0 Access Token Strategy++            AccessTokenStrategy is the strategy used to generate access tokens.+            Valid options are `jwt` and `opaque`. `jwt` is a bad idea, see https://www.ory.sh/docs/hydra/advanced#json-web-tokens+            Setting the stragegy here overrides the global setting in `strategies.access_token`.+          type: string         allowed_cors_origins:           items:             type: string@@ -2709,6 +2744,11 @@             URL using the https scheme to be used in calculating Pseudonymous Identifiers by the OP. The URL references a             file with a single JSON array of redirect_uri values.           type: string+        skip_consent:+          description: |-+            SkipConsent skips the consent screen for this client. This field can only+            be set from the admin API.+          type: boolean         subject_type:           description: |-             OpenID Connect Subject Type@@ -2717,13 +2757,14 @@             list of the supported subject_type values for this server. Valid types include `pairwise` and `public`.           type: string         token_endpoint_auth_method:+          default: client_secret_basic           description: |-             OAuth 2.0 Token Endpoint Authentication Method              Requested Client Authentication method for the Token Endpoint. The options are: -            `client_secret_post`: (default) Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` in the HTTP body.-            `client_secret_basic`: Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` encoded in the HTTP Authorization header.+            `client_secret_basic`: (default) Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` encoded in the HTTP Authorization header.+            `client_secret_post`: Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` in the HTTP body.             `private_key_jwt`: Use JSON Web Tokens to authenticate the client.             `none`: Used for public clients (native apps, mobile apps) which can not have secrets.           type: string@@ -2865,7 +2906,7 @@           refresh_token_grant_access_token_lifespan: refresh_token_grant_access_token_lifespan           registration_access_token: registration_access_token           client_id: client_id-          token_endpoint_auth_method: token_endpoint_auth_method+          token_endpoint_auth_method: client_secret_basic           userinfo_signed_response_alg: userinfo_signed_response_alg           authorization_code_grant_id_token_lifespan: authorization_code_grant_id_token_lifespan           authorization_code_grant_refresh_token_lifespan: authorization_code_grant_refresh_token_lifespan@@ -2881,6 +2922,7 @@           client_name: client_name           policy_uri: policy_uri           owner: owner+          skip_consent: true           audience:           - audience           - audience@@ -2903,6 +2945,7 @@           implicit_grant_id_token_lifespan: implicit_grant_id_token_lifespan           client_secret_expires_at: 0           implicit_grant_access_token_lifespan: implicit_grant_access_token_lifespan+          access_token_strategy: access_token_strategy           jwks_uri: jwks_uri           request_object_signing_alg: request_object_signing_alg           tos_uri: tos_uri@@ -3092,7 +3135,7 @@             refresh_token_grant_access_token_lifespan: refresh_token_grant_access_token_lifespan             registration_access_token: registration_access_token             client_id: client_id-            token_endpoint_auth_method: token_endpoint_auth_method+            token_endpoint_auth_method: client_secret_basic             userinfo_signed_response_alg: userinfo_signed_response_alg             authorization_code_grant_id_token_lifespan: authorization_code_grant_id_token_lifespan             authorization_code_grant_refresh_token_lifespan: authorization_code_grant_refresh_token_lifespan@@ -3108,6 +3151,7 @@             client_name: client_name             policy_uri: policy_uri             owner: owner+            skip_consent: true             audience:             - audience             - audience@@ -3130,6 +3174,7 @@             implicit_grant_id_token_lifespan: implicit_grant_id_token_lifespan             client_secret_expires_at: 0             implicit_grant_access_token_lifespan: implicit_grant_access_token_lifespan+            access_token_strategy: access_token_strategy             jwks_uri: jwks_uri             request_object_signing_alg: request_object_signing_alg             tos_uri: tos_uri@@ -3238,7 +3283,7 @@           refresh_token_grant_access_token_lifespan: refresh_token_grant_access_token_lifespan           registration_access_token: registration_access_token           client_id: client_id-          token_endpoint_auth_method: token_endpoint_auth_method+          token_endpoint_auth_method: client_secret_basic           userinfo_signed_response_alg: userinfo_signed_response_alg           authorization_code_grant_id_token_lifespan: authorization_code_grant_id_token_lifespan           authorization_code_grant_refresh_token_lifespan: authorization_code_grant_refresh_token_lifespan@@ -3254,6 +3299,7 @@           client_name: client_name           policy_uri: policy_uri           owner: owner+          skip_consent: true           audience:           - audience           - audience@@ -3276,6 +3322,7 @@           implicit_grant_id_token_lifespan: implicit_grant_id_token_lifespan           client_secret_expires_at: 0           implicit_grant_access_token_lifespan: implicit_grant_access_token_lifespan+          access_token_strategy: access_token_strategy           jwks_uri: jwks_uri           request_object_signing_alg: request_object_signing_alg           tos_uri: tos_uri@@ -3368,7 +3415,7 @@           refresh_token_grant_access_token_lifespan: refresh_token_grant_access_token_lifespan           registration_access_token: registration_access_token           client_id: client_id-          token_endpoint_auth_method: token_endpoint_auth_method+          token_endpoint_auth_method: client_secret_basic           userinfo_signed_response_alg: userinfo_signed_response_alg           authorization_code_grant_id_token_lifespan: authorization_code_grant_id_token_lifespan           authorization_code_grant_refresh_token_lifespan: authorization_code_grant_refresh_token_lifespan@@ -3384,6 +3431,7 @@           client_name: client_name           policy_uri: policy_uri           owner: owner+          skip_consent: true           audience:           - audience           - audience@@ -3406,6 +3454,7 @@           implicit_grant_id_token_lifespan: implicit_grant_id_token_lifespan           client_secret_expires_at: 0           implicit_grant_access_token_lifespan: implicit_grant_access_token_lifespan+          access_token_strategy: access_token_strategy           jwks_uri: jwks_uri           request_object_signing_alg: request_object_signing_alg           tos_uri: tos_uri@@ -4204,6 +4253,8 @@           example: https://jwt-idp.example.com           type: string       type: object+    unexpectedError:+      type: string     version:       properties:         version:
ory-hydra-client.cabal view
@@ -1,16 +1,16 @@ name:           ory-hydra-client-version:        2.0.3-synopsis:       Auto-generated ory-hydra-client API Client+version:        2.1.2+synopsis:       Auto-generated ory-hydra API Client description:    .-                Client library for calling the Ory Hydra API API based on http-client.+                Client library for calling the ORY Hydra API based on http-client.                 .                 host: localhost                 .                 base path: http://localhost                 .-                Ory Hydra API API version: +                ORY Hydra API version: 2.1.2                 .-                OpenAPI version: 3.0.3+                OpenAPI version: 6.6.0                 . category:       Web, OAuth, Network homepage:       https://github.com/lykahb/ory-hydra-client@@ -55,7 +55,7 @@     , network >=2.6.2 && <3.9     , random >=1.1     , safe-exceptions <0.2-    , text >=0.11 && <3+    , text >=0.11 && <1.3     , time >=1.5     , transformers >=0.4.0.0     , unordered-containers@@ -63,27 +63,27 @@   other-modules:       Paths_ory_hydra_client   exposed-modules:-      OryHydra-      OryHydra.API.Jwk-      OryHydra.API.Metadata-      OryHydra.API.OAuth2-      OryHydra.API.Oidc-      OryHydra.API.Wellknown-      OryHydra.Client-      OryHydra.Core-      OryHydra.Logging-      OryHydra.MimeTypes-      OryHydra.Model-      OryHydra.ModelLens+      ORYHydra+      ORYHydra.API.Jwk+      ORYHydra.API.Metadata+      ORYHydra.API.OAuth2+      ORYHydra.API.Oidc+      ORYHydra.API.Wellknown+      ORYHydra.Client+      ORYHydra.Core+      ORYHydra.Logging+      ORYHydra.MimeTypes+      ORYHydra.Model+      ORYHydra.ModelLens   default-language: Haskell2010    if flag(UseKatip)       build-depends: katip >=0.8 && < 1.0-      other-modules: OryHydra.LoggingKatip+      other-modules: ORYHydra.LoggingKatip       cpp-options: -DUSE_KATIP   else       build-depends: monad-logger >=0.3 && <0.4-      other-modules: OryHydra.LoggingMonadLogger+      other-modules: ORYHydra.LoggingMonadLogger       cpp-options: -DUSE_MONAD_LOGGER  test-suite tests
tests/Instances.hs view
@@ -3,8 +3,8 @@  module Instances where -import OryHydra.Model-import OryHydra.Core+import ORYHydra.Model+import ORYHydra.Core  import qualified Data.Aeson as A import qualified Data.ByteString.Lazy as BL@@ -132,8 +132,8 @@ genAcceptOAuth2ConsentRequestSession :: Int -> Gen AcceptOAuth2ConsentRequestSession genAcceptOAuth2ConsentRequestSession n =   AcceptOAuth2ConsentRequestSession-    <$> arbitraryReducedMaybeValue n -- acceptOAuth2ConsentRequestSessionAccessToken :: Maybe A.Value-    <*> arbitraryReducedMaybeValue n -- acceptOAuth2ConsentRequestSessionIdToken :: Maybe A.Value+    <$> arbitraryReducedMaybe n -- acceptOAuth2ConsentRequestSessionAccessToken :: Maybe AnyType+    <*> arbitraryReducedMaybe n -- acceptOAuth2ConsentRequestSessionIdToken :: Maybe AnyType    instance Arbitrary AcceptOAuth2LoginRequest where   arbitrary = sized genAcceptOAuth2LoginRequest@@ -143,7 +143,8 @@   AcceptOAuth2LoginRequest     <$> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestAcr :: Maybe Text     <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestAmr :: Maybe [Text]-    <*> arbitraryReducedMaybeValue n -- acceptOAuth2LoginRequestContext :: Maybe A.Value+    <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestContext :: Maybe AnyType+    <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestExtendSessionLifespan :: Maybe Bool     <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestForceSubjectIdentifier :: Maybe Text     <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestRemember :: Maybe Bool     <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestRememberFor :: Maybe Integer@@ -179,7 +180,7 @@   GenericError     <$> arbitraryReducedMaybe n -- genericErrorCode :: Maybe Integer     <*> arbitraryReducedMaybe n -- genericErrorDebug :: Maybe Text-    <*> arbitraryReducedMaybeValue n -- genericErrorDetails :: Maybe A.Value+    <*> arbitraryReducedMaybe n -- genericErrorDetails :: Maybe AnyType     <*> arbitraryReducedMaybe n -- genericErrorId :: Maybe Text     <*> arbitrary -- genericErrorMessage :: Text     <*> arbitraryReducedMaybe n -- genericErrorReason :: Maybe Text@@ -220,7 +221,7 @@     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenAud :: Maybe [Text]     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenClientId :: Maybe Text     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenExp :: Maybe Integer-    <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenExt :: Maybe (Map.Map String A.Value)+    <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenExt :: Maybe (Map.Map String AnyType)     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenIat :: Maybe Integer     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenIss :: Maybe Text     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenNbf :: Maybe Integer@@ -256,7 +257,7 @@     <$> arbitraryReducedMaybe n -- jsonPatchFrom :: Maybe Text     <*> arbitrary -- jsonPatchOp :: Text     <*> arbitrary -- jsonPatchPath :: Text-    <*> arbitraryReducedMaybeValue n -- jsonPatchValue :: Maybe A.Value+    <*> arbitraryReducedMaybe n -- jsonPatchValue :: Maybe AnyType    instance Arbitrary JsonWebKey where   arbitrary = sized genJsonWebKey@@ -296,7 +297,8 @@ genOAuth2Client :: Int -> Gen OAuth2Client genOAuth2Client n =   OAuth2Client-    <$> arbitraryReducedMaybe n -- oAuth2ClientAllowedCorsOrigins :: Maybe [Text]+    <$> arbitraryReducedMaybe n -- oAuth2ClientAccessTokenStrategy :: Maybe Text+    <*> arbitraryReducedMaybe n -- oAuth2ClientAllowedCorsOrigins :: Maybe [Text]     <*> arbitraryReducedMaybe n -- oAuth2ClientAudience :: Maybe [Text]     <*> arbitraryReducedMaybe n -- oAuth2ClientAuthorizationCodeGrantAccessTokenLifespan :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientAuthorizationCodeGrantIdTokenLifespan :: Maybe Text@@ -316,11 +318,11 @@     <*> arbitraryReducedMaybe n -- oAuth2ClientGrantTypes :: Maybe [Text]     <*> arbitraryReducedMaybe n -- oAuth2ClientImplicitGrantAccessTokenLifespan :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientImplicitGrantIdTokenLifespan :: Maybe Text-    <*> arbitraryReducedMaybeValue n -- oAuth2ClientJwks :: Maybe A.Value+    <*> arbitraryReducedMaybe n -- oAuth2ClientJwks :: Maybe AnyType     <*> arbitraryReducedMaybe n -- oAuth2ClientJwksUri :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientJwtBearerGrantAccessTokenLifespan :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientLogoUri :: Maybe Text-    <*> arbitraryReducedMaybeValue n -- oAuth2ClientMetadata :: Maybe A.Value+    <*> arbitraryReducedMaybe n -- oAuth2ClientMetadata :: Maybe AnyType     <*> arbitraryReducedMaybe n -- oAuth2ClientOwner :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientPolicyUri :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientPostLogoutRedirectUris :: Maybe [Text]@@ -335,6 +337,7 @@     <*> arbitraryReducedMaybe n -- oAuth2ClientResponseTypes :: Maybe [Text]     <*> arbitraryReducedMaybe n -- oAuth2ClientScope :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientSectorIdentifierUri :: Maybe Text+    <*> arbitraryReducedMaybe n -- oAuth2ClientSkipConsent :: Maybe Bool     <*> arbitraryReducedMaybe n -- oAuth2ClientSubjectType :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientTokenEndpointAuthMethod :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientTokenEndpointAuthSigningAlg :: Maybe Text@@ -369,7 +372,7 @@     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestAmr :: Maybe [Text]     <*> arbitrary -- oAuth2ConsentRequestChallenge :: Text     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestClient :: Maybe OAuth2Client-    <*> arbitraryReducedMaybeValue n -- oAuth2ConsentRequestContext :: Maybe A.Value+    <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestContext :: Maybe AnyType     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestLoginChallenge :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestLoginSessionId :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOidcContext :: Maybe OAuth2ConsentRequestOpenIDConnectContext@@ -387,7 +390,7 @@   OAuth2ConsentRequestOpenIDConnectContext     <$> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextAcrValues :: Maybe [Text]     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextDisplay :: Maybe Text-    <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims :: Maybe (Map.Map String A.Value)+    <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims :: Maybe (Map.Map String AnyType)     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextLoginHint :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextUiLocales :: Maybe [Text]
tests/PropMime.hs view
@@ -15,7 +15,7 @@ import Test.QuickCheck.Property import Test.Hspec.QuickCheck (prop) -import OryHydra.MimeTypes+import ORYHydra.MimeTypes  import ApproxEq
tests/Test.hs view
@@ -12,8 +12,8 @@ import PropMime import Instances () -import OryHydra.Model-import OryHydra.MimeTypes+import ORYHydra.Model+import ORYHydra.MimeTypes  main :: IO () main =