naftiko: 1.0.0-alpha2
info:
  label: BigID Authentication — Sessions
  description: 'BigID Authentication API — Sessions. 2 operations covering user-session creation and access-token refresh.
    Self-contained Naftiko capability covering one BigID business surface.'
  tags:
    - BigID
    - Authentication
    - Sessions
  created: '2026-05-25'
  modified: '2026-05-25'
binds:
  - namespace: env
    keys:
      BIGID_BASE_URL: BIGID_BASE_URL
      BIGID_USERNAME: BIGID_USERNAME
      BIGID_PASSWORD: BIGID_PASSWORD
      BIGID_USER_TOKEN: BIGID_USER_TOKEN
capability:
  consumes:
    - type: http
      namespace: authentication-sessions
      baseUri: '{{env.BIGID_BASE_URL}}'
      description: BigID Authentication business capability. Self-contained, no shared references.
      resources:
        - name: sessions
          path: /api/v1/sessions
          operations:
            - name: createsession
              method: POST
              description: BigID Create A User Session
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.
              inputParameters:
                - name: body
                  in: body
                  type: object
                  description: Request body with username and password.
                  required: true
        - name: refresh-access-token
          path: /api/v1/refresh-access-token
          operations:
            - name: refreshaccesstoken
              method: POST
              description: BigID Refresh Access Token
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.
      authentication:
        type: bearer
        value: '{{env.BIGID_USER_TOKEN}}'
        placement: header
  exposes:
    - type: rest
      namespace: authentication-sessions-rest
      port: 8080
      description: REST adapter for BigID Authentication.
      resources:
        - path: /v1/sessions
          name: sessions
          description: REST surface for sessions.
          operations:
            - method: POST
              name: createsession
              description: BigID Create A User Session
              call: authentication-sessions.createsession
              with:
                body: rest.body
              outputParameters:
                - type: object
                  mapping: $.
        - path: /v1/refresh-access-token
          name: refresh-access-token
          description: REST surface for refresh-access-token.
          operations:
            - method: POST
              name: refreshaccesstoken
              description: BigID Refresh Access Token
              call: authentication-sessions.refreshaccesstoken
              outputParameters:
                - type: object
                  mapping: $.
    - type: mcp
      namespace: authentication-sessions-mcp
      port: 9090
      transport: http
      description: MCP adapter for BigID Authentication.
      tools:
        - name: bigid-create-session
          description: BigID Create A User Session
          hints:
            readOnly: false
            destructive: false
            idempotent: false
          call: authentication-sessions.createsession
          with:
            body: tools.body
          outputParameters:
            - type: object
              mapping: $.
        - name: bigid-refresh-access-token
          description: BigID Refresh Access Token
          hints:
            readOnly: false
            destructive: false
            idempotent: true
          call: authentication-sessions.refreshaccesstoken
          outputParameters:
            - type: object
              mapping: $.