packages feed

ory-hydra-client 2.1.2 → 2.1.2.1

raw patch · 5 files changed

+32/−32 lines, 5 files

Files

LICENSE view
@@ -1,6 +1,6 @@ MIT License -Copyright (c) 2021 Boris Lykah, Mercury+Copyright (c) 2021 Borys Lykah, Mercury  Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal
lib/ORYHydra/Model.hs view
@@ -206,8 +206,8 @@ -- Pass session data to a consent request. --  data AcceptOAuth2ConsentRequestSession = AcceptOAuth2ConsentRequestSession-  { acceptOAuth2ConsentRequestSessionAccessToken :: Maybe AnyType -- ^ "access_token" - AccessToken sets session data for the access and refresh token, as well as any future tokens issued by the refresh grant. Keep in mind that this data will be available to anyone performing OAuth 2.0 Challenge Introspection. If only your services can perform OAuth 2.0 Challenge Introspection, this is usually fine. But if third parties can access that endpoint as well, sensitive data from the session might be exposed to them. Use with care!-  , acceptOAuth2ConsentRequestSessionIdToken :: Maybe AnyType -- ^ "id_token" - IDToken sets session data for the OpenID Connect ID token. Keep in mind that the session'id payloads are readable by anyone that has access to the ID Challenge. Use with care!+  { acceptOAuth2ConsentRequestSessionAccessToken :: Maybe A.Value -- ^ "access_token" - AccessToken sets session data for the access and refresh token, as well as any future tokens issued by the refresh grant. Keep in mind that this data will be available to anyone performing OAuth 2.0 Challenge Introspection. If only your services can perform OAuth 2.0 Challenge Introspection, this is usually fine. But if third parties can access that endpoint as well, sensitive data from the session might be exposed to them. Use with care!+  , acceptOAuth2ConsentRequestSessionIdToken :: Maybe A.Value -- ^ "id_token" - IDToken sets session data for the OpenID Connect ID token. Keep in mind that the session'id payloads are readable by anyone that has access to the ID Challenge. Use with care!   } deriving (P.Show, P.Eq, P.Typeable)  -- | FromJSON AcceptOAuth2ConsentRequestSession@@ -242,7 +242,7 @@ data AcceptOAuth2LoginRequest = AcceptOAuth2LoginRequest   { acceptOAuth2LoginRequestAcr :: Maybe Text -- ^ "acr" - ACR sets the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it to express that, for example, a user authenticated using two factor authentication.   , acceptOAuth2LoginRequestAmr :: Maybe [Text] -- ^ "amr"-  , acceptOAuth2LoginRequestContext :: Maybe AnyType -- ^ "context"+  , acceptOAuth2LoginRequestContext :: Maybe A.Value -- ^ "context"   , acceptOAuth2LoginRequestExtendSessionLifespan :: Maybe Bool -- ^ "extend_session_lifespan" - Extend OAuth2 authentication session lifespan  If set to `true`, the OAuth2 authentication cookie lifespan is extended. This is for example useful if you want the user to be able to use `prompt=none` continuously.  This value can only be set to `true` if the user has an authentication, which is the case if the `skip` value is `true`.   , acceptOAuth2LoginRequestForceSubjectIdentifier :: Maybe Text -- ^ "force_subject_identifier" - ForceSubjectIdentifier forces the \"pairwise\" user ID of the end-user that authenticated. The \"pairwise\" user ID refers to the (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID Connect specification. It allows you to set an obfuscated subject (\"user\") identifier that is unique to the client.  Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not change the sub claim in the OAuth 2.0 Introspection.  Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself you can use this field. Please note that setting this field has no effect if `pairwise` is not configured in ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via `subject_type` key in the client's configuration).  Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies that you have to compute this value on every authentication process (probably depending on the client ID or some other unique value).  If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail.   , acceptOAuth2LoginRequestRemember :: Maybe Bool -- ^ "remember" - Remember, if set to true, tells ORY Hydra to remember this user by telling the user agent (browser) to store a cookie with authentication data. If the same user performs another OAuth 2.0 Authorization Request, he/she will not be asked to log in again.@@ -384,7 +384,7 @@ data GenericError = GenericError   { genericErrorCode :: Maybe Integer -- ^ "code" - The status code   , genericErrorDebug :: Maybe Text -- ^ "debug" - Debug information  This field is often not exposed to protect against leaking sensitive information.-  , genericErrorDetails :: Maybe AnyType -- ^ "details" - Further error details+  , genericErrorDetails :: Maybe A.Value -- ^ "details" - Further error details   , genericErrorId :: Maybe Text -- ^ "id" - The error ID  Useful when trying to identify various errors in application logic.   , genericErrorMessage :: Text -- ^ /Required/ "message" - Error message  The error's message.   , genericErrorReason :: Maybe Text -- ^ "reason" - A human-readable reason for the error@@ -528,7 +528,7 @@   , introspectedOAuth2TokenAud :: Maybe [Text] -- ^ "aud" - Audience contains a list of the token's intended audiences.   , introspectedOAuth2TokenClientId :: Maybe Text -- ^ "client_id" - ID is aclient identifier for the OAuth 2.0 client that requested this token.   , introspectedOAuth2TokenExp :: Maybe Integer -- ^ "exp" - Expires at is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token will expire.-  , introspectedOAuth2TokenExt :: Maybe (Map.Map String AnyType) -- ^ "ext" - Extra is arbitrary data set by the session.+  , introspectedOAuth2TokenExt :: Maybe (Map.Map String A.Value) -- ^ "ext" - Extra is arbitrary data set by the session.   , introspectedOAuth2TokenIat :: Maybe Integer -- ^ "iat" - Issued at is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token was originally issued.   , introspectedOAuth2TokenIss :: Maybe Text -- ^ "iss" - IssuerURL is a string representing the issuer of this token   , introspectedOAuth2TokenNbf :: Maybe Integer -- ^ "nbf" - NotBefore is an integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this token is not to be used before.@@ -665,7 +665,7 @@   { jsonPatchFrom :: Maybe Text -- ^ "from" - This field is used together with operation \"move\" and uses JSON Pointer notation.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).   , jsonPatchOp :: Text -- ^ /Required/ "op" - The operation to be performed. One of \"add\", \"remove\", \"replace\", \"move\", \"copy\", or \"test\".   , jsonPatchPath :: Text -- ^ /Required/ "path" - The path to the target path. Uses JSON pointer notation.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).-  , jsonPatchValue :: Maybe AnyType -- ^ "value" - The value to be used within the operations.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).+  , jsonPatchValue :: Maybe A.Value -- ^ "value" - The value to be used within the operations.  Learn more [about JSON Pointers](https://datatracker.ietf.org/doc/html/rfc6901#section-5).   } deriving (P.Show, P.Eq, P.Typeable)  -- | FromJSON JsonPatch@@ -853,11 +853,11 @@   , oAuth2ClientGrantTypes :: Maybe [Text] -- ^ "grant_types"   , oAuth2ClientImplicitGrantAccessTokenLifespan :: Maybe Text -- ^ "implicit_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.   , oAuth2ClientImplicitGrantIdTokenLifespan :: Maybe Text -- ^ "implicit_grant_id_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.-  , oAuth2ClientJwks :: Maybe AnyType -- ^ "jwks" - OAuth 2.0 Client JSON Web Key Set  Client's JSON Web Key Set [JWK] document, passed by value. The semantics of the jwks parameter are the same as the jwks_uri parameter, other than that the JWK Set is passed by value, rather than by reference. This parameter is intended only to be used by Clients that, for some reason, are unable to use the jwks_uri parameter, for instance, by native applications that might not have a location to host the contents of the JWK Set. If a Client can use jwks_uri, it MUST NOT use jwks. One significant downside of jwks is that it does not enable key rotation (which jwks_uri does, as described in Section 10 of OpenID Connect Core 1.0 [OpenID.Core]). The jwks_uri and jwks parameters MUST NOT be used together.+  , oAuth2ClientJwks :: Maybe A.Value -- ^ "jwks" - OAuth 2.0 Client JSON Web Key Set  Client's JSON Web Key Set [JWK] document, passed by value. The semantics of the jwks parameter are the same as the jwks_uri parameter, other than that the JWK Set is passed by value, rather than by reference. This parameter is intended only to be used by Clients that, for some reason, are unable to use the jwks_uri parameter, for instance, by native applications that might not have a location to host the contents of the JWK Set. If a Client can use jwks_uri, it MUST NOT use jwks. One significant downside of jwks is that it does not enable key rotation (which jwks_uri does, as described in Section 10 of OpenID Connect Core 1.0 [OpenID.Core]). The jwks_uri and jwks parameters MUST NOT be used together.   , oAuth2ClientJwksUri :: Maybe Text -- ^ "jwks_uri" - OAuth 2.0 Client JSON Web Key Set URL  URL for the Client's JSON Web Key Set [JWK] document. If the Client signs requests to the Server, it contains the signing key(s) the Server uses to validate signatures from the Client. The JWK Set MAY also contain the Client's encryption keys(s), which are used by the Server to encrypt responses to the Client. When both signing and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key's intended usage. Although some algorithms allow the same key to be used for both signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.   , oAuth2ClientJwtBearerGrantAccessTokenLifespan :: Maybe Text -- ^ "jwt_bearer_grant_access_token_lifespan" - Specify a time duration in milliseconds, seconds, minutes, hours.   , oAuth2ClientLogoUri :: Maybe Text -- ^ "logo_uri" - OAuth 2.0 Client Logo URI  A URL string referencing the client's logo.-  , oAuth2ClientMetadata :: Maybe AnyType -- ^ "metadata"+  , oAuth2ClientMetadata :: Maybe A.Value -- ^ "metadata"   , oAuth2ClientOwner :: Maybe Text -- ^ "owner" - OAuth 2.0 Client Owner  Owner is a string identifying the owner of the OAuth 2.0 Client.   , oAuth2ClientPolicyUri :: Maybe Text -- ^ "policy_uri" - OAuth 2.0 Client Policy URI  PolicyURI is a URL string that points to a human-readable privacy policy document that describes how the deployment organization collects, uses, retains, and discloses personal data.   , oAuth2ClientPostLogoutRedirectUris :: Maybe [Text] -- ^ "post_logout_redirect_uris"@@ -1117,7 +1117,7 @@   , oAuth2ConsentRequestAmr :: Maybe [Text] -- ^ "amr"   , oAuth2ConsentRequestChallenge :: Text -- ^ /Required/ "challenge" - ID is the identifier (\"authorization challenge\") of the consent authorization request. It is used to identify the session.   , oAuth2ConsentRequestClient :: Maybe OAuth2Client -- ^ "client"-  , oAuth2ConsentRequestContext :: Maybe AnyType -- ^ "context"+  , oAuth2ConsentRequestContext :: Maybe A.Value -- ^ "context"   , oAuth2ConsentRequestLoginChallenge :: Maybe Text -- ^ "login_challenge" - LoginChallenge is the login challenge this consent challenge belongs to. It can be used to associate a login and consent request in the login & consent app.   , oAuth2ConsentRequestLoginSessionId :: Maybe Text -- ^ "login_session_id" - LoginSessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag) this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false) this will be a new random value. This value is used as the \"sid\" parameter in the ID Token and in OIDC Front-/Back- channel logout. It's value can generally be used to associate consecutive login requests by a certain user.   , oAuth2ConsentRequestOidcContext :: Maybe OAuth2ConsentRequestOpenIDConnectContext -- ^ "oidc_context"@@ -1194,7 +1194,7 @@ data OAuth2ConsentRequestOpenIDConnectContext = OAuth2ConsentRequestOpenIDConnectContext   { oAuth2ConsentRequestOpenIDConnectContextAcrValues :: Maybe [Text] -- ^ "acr_values" - ACRValues is the Authentication AuthorizationContext Class Reference requested in the OAuth 2.0 Authorization request. It is a parameter defined by OpenID Connect and expresses which level of authentication (e.g. 2FA) is required.  OpenID Connect defines it as follows: > Requested Authentication AuthorizationContext Class Reference values. Space-separated string that specifies the acr values that the Authorization Server is being requested to use for processing this Authentication Request, with the values appearing in order of preference. The Authentication AuthorizationContext Class satisfied by the authentication performed is returned as the acr Claim Value, as specified in Section 2. The acr Claim is requested as a Voluntary Claim by this parameter.   , oAuth2ConsentRequestOpenIDConnectContextDisplay :: Maybe Text -- ^ "display" - Display is a string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User. The defined values are: page: The Authorization Server SHOULD display the authentication and consent UI consistent with a full User Agent page view. If the display parameter is not specified, this is the default display mode. popup: The Authorization Server SHOULD display the authentication and consent UI consistent with a popup User Agent window. The popup User Agent window should be of an appropriate size for a login-focused dialog and should not obscure the entire window that it is popping up over. touch: The Authorization Server SHOULD display the authentication and consent UI consistent with a device that leverages a touch interface. wap: The Authorization Server SHOULD display the authentication and consent UI consistent with a \"feature phone\" type display.  The Authorization Server MAY also attempt to detect the capabilities of the User Agent and present an appropriate display.-  , oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims :: Maybe (Map.Map String AnyType) -- ^ "id_token_hint_claims" - IDTokenHintClaims are the claims of the ID Token previously issued by the Authorization Server being passed as a hint about the End-User's current or past authenticated session with the Client.+  , oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims :: Maybe (Map.Map String A.Value) -- ^ "id_token_hint_claims" - IDTokenHintClaims are the claims of the ID Token previously issued by the Authorization Server being passed as a hint about the End-User's current or past authenticated session with the Client.   , oAuth2ConsentRequestOpenIDConnectContextLoginHint :: Maybe Text -- ^ "login_hint" - LoginHint hints about the login identifier the End-User might use to log in (if necessary). This hint can be used by an RP if it first asks the End-User for their e-mail address (or other identifier) and then wants to pass that value as a hint to the discovered authorization service. This value MAY also be a phone number in the format specified for the phone_number Claim. The use of this parameter is optional.   , oAuth2ConsentRequestOpenIDConnectContextUiLocales :: Maybe [Text] -- ^ "ui_locales" - UILocales is the End-User'id preferred languages and scripts for the user interface, represented as a space-separated list of BCP47 [RFC5646] language tag values, ordered by preference. For instance, the value \"fr-CA fr en\" represents a preference for French as spoken in Canada, then French (without a region designation), followed by English (without a region designation). An error SHOULD NOT result if some or all of the requested locales are not supported by the OpenID Provider.   } deriving (P.Show, P.Eq, P.Typeable)
lib/ORYHydra/ModelLens.hs view
@@ -74,12 +74,12 @@ -- * AcceptOAuth2ConsentRequestSession  -- | 'acceptOAuth2ConsentRequestSessionAccessToken' Lens-acceptOAuth2ConsentRequestSessionAccessTokenL :: Lens_' AcceptOAuth2ConsentRequestSession (Maybe AnyType)+acceptOAuth2ConsentRequestSessionAccessTokenL :: Lens_' AcceptOAuth2ConsentRequestSession (Maybe A.Value) acceptOAuth2ConsentRequestSessionAccessTokenL f AcceptOAuth2ConsentRequestSession{..} = (\acceptOAuth2ConsentRequestSessionAccessToken -> AcceptOAuth2ConsentRequestSession { acceptOAuth2ConsentRequestSessionAccessToken, ..} ) <$> f acceptOAuth2ConsentRequestSessionAccessToken {-# INLINE acceptOAuth2ConsentRequestSessionAccessTokenL #-}  -- | 'acceptOAuth2ConsentRequestSessionIdToken' Lens-acceptOAuth2ConsentRequestSessionIdTokenL :: Lens_' AcceptOAuth2ConsentRequestSession (Maybe AnyType)+acceptOAuth2ConsentRequestSessionIdTokenL :: Lens_' AcceptOAuth2ConsentRequestSession (Maybe A.Value) acceptOAuth2ConsentRequestSessionIdTokenL f AcceptOAuth2ConsentRequestSession{..} = (\acceptOAuth2ConsentRequestSessionIdToken -> AcceptOAuth2ConsentRequestSession { acceptOAuth2ConsentRequestSessionIdToken, ..} ) <$> f acceptOAuth2ConsentRequestSessionIdToken {-# INLINE acceptOAuth2ConsentRequestSessionIdTokenL #-} @@ -98,7 +98,7 @@ {-# INLINE acceptOAuth2LoginRequestAmrL #-}  -- | 'acceptOAuth2LoginRequestContext' Lens-acceptOAuth2LoginRequestContextL :: Lens_' AcceptOAuth2LoginRequest (Maybe AnyType)+acceptOAuth2LoginRequestContextL :: Lens_' AcceptOAuth2LoginRequest (Maybe A.Value) acceptOAuth2LoginRequestContextL f AcceptOAuth2LoginRequest{..} = (\acceptOAuth2LoginRequestContext -> AcceptOAuth2LoginRequest { acceptOAuth2LoginRequestContext, ..} ) <$> f acceptOAuth2LoginRequestContext {-# INLINE acceptOAuth2LoginRequestContextL #-} @@ -190,7 +190,7 @@ {-# INLINE genericErrorDebugL #-}  -- | 'genericErrorDetails' Lens-genericErrorDetailsL :: Lens_' GenericError (Maybe AnyType)+genericErrorDetailsL :: Lens_' GenericError (Maybe A.Value) genericErrorDetailsL f GenericError{..} = (\genericErrorDetails -> GenericError { genericErrorDetails, ..} ) <$> f genericErrorDetails {-# INLINE genericErrorDetailsL #-} @@ -271,7 +271,7 @@ {-# INLINE introspectedOAuth2TokenExpL #-}  -- | 'introspectedOAuth2TokenExt' Lens-introspectedOAuth2TokenExtL :: Lens_' IntrospectedOAuth2Token (Maybe (Map.Map String AnyType))+introspectedOAuth2TokenExtL :: Lens_' IntrospectedOAuth2Token (Maybe (Map.Map String A.Value)) introspectedOAuth2TokenExtL f IntrospectedOAuth2Token{..} = (\introspectedOAuth2TokenExt -> IntrospectedOAuth2Token { introspectedOAuth2TokenExt, ..} ) <$> f introspectedOAuth2TokenExt {-# INLINE introspectedOAuth2TokenExtL #-} @@ -358,7 +358,7 @@ {-# INLINE jsonPatchPathL #-}  -- | 'jsonPatchValue' Lens-jsonPatchValueL :: Lens_' JsonPatch (Maybe AnyType)+jsonPatchValueL :: Lens_' JsonPatch (Maybe A.Value) jsonPatchValueL f JsonPatch{..} = (\jsonPatchValue -> JsonPatch { jsonPatchValue, ..} ) <$> f jsonPatchValue {-# INLINE jsonPatchValueL #-} @@ -570,7 +570,7 @@ {-# INLINE oAuth2ClientImplicitGrantIdTokenLifespanL #-}  -- | 'oAuth2ClientJwks' Lens-oAuth2ClientJwksL :: Lens_' OAuth2Client (Maybe AnyType)+oAuth2ClientJwksL :: Lens_' OAuth2Client (Maybe A.Value) oAuth2ClientJwksL f OAuth2Client{..} = (\oAuth2ClientJwks -> OAuth2Client { oAuth2ClientJwks, ..} ) <$> f oAuth2ClientJwks {-# INLINE oAuth2ClientJwksL #-} @@ -590,7 +590,7 @@ {-# INLINE oAuth2ClientLogoUriL #-}  -- | 'oAuth2ClientMetadata' Lens-oAuth2ClientMetadataL :: Lens_' OAuth2Client (Maybe AnyType)+oAuth2ClientMetadataL :: Lens_' OAuth2Client (Maybe A.Value) oAuth2ClientMetadataL f OAuth2Client{..} = (\oAuth2ClientMetadata -> OAuth2Client { oAuth2ClientMetadata, ..} ) <$> f oAuth2ClientMetadata {-# INLINE oAuth2ClientMetadataL #-} @@ -778,7 +778,7 @@ {-# INLINE oAuth2ConsentRequestClientL #-}  -- | 'oAuth2ConsentRequestContext' Lens-oAuth2ConsentRequestContextL :: Lens_' OAuth2ConsentRequest (Maybe AnyType)+oAuth2ConsentRequestContextL :: Lens_' OAuth2ConsentRequest (Maybe A.Value) oAuth2ConsentRequestContextL f OAuth2ConsentRequest{..} = (\oAuth2ConsentRequestContext -> OAuth2ConsentRequest { oAuth2ConsentRequestContext, ..} ) <$> f oAuth2ConsentRequestContext {-# INLINE oAuth2ConsentRequestContextL #-} @@ -837,7 +837,7 @@ {-# INLINE oAuth2ConsentRequestOpenIDConnectContextDisplayL #-}  -- | 'oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims' Lens-oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe (Map.Map String AnyType))+oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL :: Lens_' OAuth2ConsentRequestOpenIDConnectContext (Maybe (Map.Map String A.Value)) oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL f OAuth2ConsentRequestOpenIDConnectContext{..} = (\oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims -> OAuth2ConsentRequestOpenIDConnectContext { oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims, ..} ) <$> f oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims {-# INLINE oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaimsL #-}
ory-hydra-client.cabal view
@@ -1,5 +1,5 @@ name:           ory-hydra-client-version:        2.1.2+version:        2.1.2.1 synopsis:       Auto-generated ory-hydra API Client description:    .                 Client library for calling the ORY Hydra API based on http-client.
tests/Instances.hs view
@@ -132,8 +132,8 @@ genAcceptOAuth2ConsentRequestSession :: Int -> Gen AcceptOAuth2ConsentRequestSession genAcceptOAuth2ConsentRequestSession n =   AcceptOAuth2ConsentRequestSession-    <$> arbitraryReducedMaybe n -- acceptOAuth2ConsentRequestSessionAccessToken :: Maybe AnyType-    <*> arbitraryReducedMaybe n -- acceptOAuth2ConsentRequestSessionIdToken :: Maybe AnyType+    <$> arbitraryReducedMaybeValue n -- acceptOAuth2ConsentRequestSessionAccessToken :: Maybe A.Value+    <*> arbitraryReducedMaybeValue n -- acceptOAuth2ConsentRequestSessionIdToken :: Maybe A.Value    instance Arbitrary AcceptOAuth2LoginRequest where   arbitrary = sized genAcceptOAuth2LoginRequest@@ -143,7 +143,7 @@   AcceptOAuth2LoginRequest     <$> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestAcr :: Maybe Text     <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestAmr :: Maybe [Text]-    <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestContext :: Maybe AnyType+    <*> arbitraryReducedMaybeValue n -- acceptOAuth2LoginRequestContext :: Maybe A.Value     <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestExtendSessionLifespan :: Maybe Bool     <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestForceSubjectIdentifier :: Maybe Text     <*> arbitraryReducedMaybe n -- acceptOAuth2LoginRequestRemember :: Maybe Bool@@ -180,7 +180,7 @@   GenericError     <$> arbitraryReducedMaybe n -- genericErrorCode :: Maybe Integer     <*> arbitraryReducedMaybe n -- genericErrorDebug :: Maybe Text-    <*> arbitraryReducedMaybe n -- genericErrorDetails :: Maybe AnyType+    <*> arbitraryReducedMaybeValue n -- genericErrorDetails :: Maybe A.Value     <*> arbitraryReducedMaybe n -- genericErrorId :: Maybe Text     <*> arbitrary -- genericErrorMessage :: Text     <*> arbitraryReducedMaybe n -- genericErrorReason :: Maybe Text@@ -221,7 +221,7 @@     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenAud :: Maybe [Text]     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenClientId :: Maybe Text     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenExp :: Maybe Integer-    <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenExt :: Maybe (Map.Map String AnyType)+    <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenExt :: Maybe (Map.Map String A.Value)     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenIat :: Maybe Integer     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenIss :: Maybe Text     <*> arbitraryReducedMaybe n -- introspectedOAuth2TokenNbf :: Maybe Integer@@ -257,7 +257,7 @@     <$> arbitraryReducedMaybe n -- jsonPatchFrom :: Maybe Text     <*> arbitrary -- jsonPatchOp :: Text     <*> arbitrary -- jsonPatchPath :: Text-    <*> arbitraryReducedMaybe n -- jsonPatchValue :: Maybe AnyType+    <*> arbitraryReducedMaybeValue n -- jsonPatchValue :: Maybe A.Value    instance Arbitrary JsonWebKey where   arbitrary = sized genJsonWebKey@@ -318,11 +318,11 @@     <*> arbitraryReducedMaybe n -- oAuth2ClientGrantTypes :: Maybe [Text]     <*> arbitraryReducedMaybe n -- oAuth2ClientImplicitGrantAccessTokenLifespan :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientImplicitGrantIdTokenLifespan :: Maybe Text-    <*> arbitraryReducedMaybe n -- oAuth2ClientJwks :: Maybe AnyType+    <*> arbitraryReducedMaybeValue n -- oAuth2ClientJwks :: Maybe A.Value     <*> arbitraryReducedMaybe n -- oAuth2ClientJwksUri :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientJwtBearerGrantAccessTokenLifespan :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientLogoUri :: Maybe Text-    <*> arbitraryReducedMaybe n -- oAuth2ClientMetadata :: Maybe AnyType+    <*> arbitraryReducedMaybeValue n -- oAuth2ClientMetadata :: Maybe A.Value     <*> arbitraryReducedMaybe n -- oAuth2ClientOwner :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientPolicyUri :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ClientPostLogoutRedirectUris :: Maybe [Text]@@ -372,7 +372,7 @@     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestAmr :: Maybe [Text]     <*> arbitrary -- oAuth2ConsentRequestChallenge :: Text     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestClient :: Maybe OAuth2Client-    <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestContext :: Maybe AnyType+    <*> arbitraryReducedMaybeValue n -- oAuth2ConsentRequestContext :: Maybe A.Value     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestLoginChallenge :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestLoginSessionId :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOidcContext :: Maybe OAuth2ConsentRequestOpenIDConnectContext@@ -390,7 +390,7 @@   OAuth2ConsentRequestOpenIDConnectContext     <$> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextAcrValues :: Maybe [Text]     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextDisplay :: Maybe Text-    <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims :: Maybe (Map.Map String AnyType)+    <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextIdTokenHintClaims :: Maybe (Map.Map String A.Value)     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextLoginHint :: Maybe Text     <*> arbitraryReducedMaybe n -- oAuth2ConsentRequestOpenIDConnectContextUiLocales :: Maybe [Text]