# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Harness Oidc Provider API
  version: 1.0.0
extends: openapi/harness-oidc-provider-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 6
- target: $.paths['/v1/oidc-provider'].get
  update:
    x-apievangelist-phrasing:
      intent: List OIDC identity providers
      effect: read
      questions:
      - Which OIDC identity providers are configured for sign-in?
      - What OIDC providers does my account have set up?
      instructions:
      - text: List all OIDC providers.
      - text: Show every configured OIDC sign-in provider.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/oidc-provider'].post
  update:
    x-apievangelist-phrasing:
      intent: Add an OIDC identity provider
      effect: write
      questions:
      - How do I connect a new OIDC identity provider for single sign-on?
      - Can I enable PKCE and just-in-time provisioning when adding an OIDC provider?
      instructions:
      - text: Create OIDC provider {name} with issuer {issuer}.
        slots:
          name: requestBody.name
          issuer: requestBody.issuer
      - text: Add an OIDC provider using discovery URL {discovery} and scope {scope}.
        slots:
          discovery: requestBody.discovery
          scope: requestBody.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/oidc-provider/{providerIdentifier}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an OIDC provider
      effect: read
      questions:
      - What issuer and scopes is an OIDC provider configured with?
      - Can I view one OIDC provider's settings without its client secret?
      instructions:
      - text: Show OIDC provider {provider}.
        slots:
          provider: path.providerIdentifier
      - text: Get the configuration of OIDC provider {provider}.
        slots:
          provider: path.providerIdentifier
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/oidc-provider/{providerIdentifier}'].put
  update:
    x-apievangelist-phrasing:
      intent: Update an OIDC provider
      effect: write
      questions:
      - Can I change the issuer or scopes of an existing OIDC provider?
      - How do I turn PKCE on for an OIDC provider I already configured?
      instructions:
      - text: Update OIDC provider {provider} to use issuer {issuer}.
        slots:
          provider: path.providerIdentifier
          issuer: requestBody.issuer
      - text: Set PKCE to {pkce} on OIDC provider {provider}.
        slots:
          pkce: requestBody.pkce
          provider: path.providerIdentifier
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/oidc-provider/{providerIdentifier}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an OIDC provider
      effect: destructive
      questions:
      - How do I remove an OIDC identity provider from my account?
      - Can I disconnect an OIDC sign-in provider permanently?
      instructions:
      - text: Delete OIDC provider {provider}.
        slots:
          provider: path.providerIdentifier
      - text: Remove the OIDC sign-in provider {provider}.
        slots:
          provider: path.providerIdentifier
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/oidc-provider/{providerIdentifier}/decrypt'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an OIDC provider with its decrypted secret
      effect: read
      questions:
      - Can I retrieve an OIDC provider including its decrypted client secret?
      - Where do I read the OIDC client secret back in plain form?
      instructions:
      - text: Get OIDC provider {provider} with its secret decrypted.
        slots:
          provider: path.providerIdentifier
      - text: Fetch the decrypted client configuration for OIDC provider {provider}.
        slots:
          provider: path.providerIdentifier
      method: generated
      generated: '2026-09-26'