openapi: 3.2.0
info:
  title: Karada Auth API
  version: 1.0.0
  description: Spec-Driven API definition for Karada MCP Platform
servers:
- url: https://api.karada.ai
  description: Production API
- url: http://localhost:8080
  description: Local development API
tags:
- name: Auth
paths:
  /api/v1/auth/{provider}/login:
    get:
      summary: Initiate OAuth login for provider
      operationId: authLogin
      tags:
      - Auth
      parameters:
      - name: provider
        in: path
        required: true
        schema:
          type: string
      responses:
        '302':
          description: Redirect to OAuth provider
  /api/v1/auth/{provider}/callback:
    get:
      summary: Handle OAuth callback for provider
      operationId: authCallback
      tags:
      - Auth
      parameters:
      - name: provider
        in: path
        required: true
        schema:
          type: string
      responses:
        '302':
          description: Redirect to frontend with session
  /api/v1/auth/logout:
    post:
      summary: Logout current user
      operationId: authLogout
      tags:
      - Auth
      responses:
        '200':
          description: Successfully logged out
  /api/v1/auth/csrf:
    get:
      summary: Get CSRF token
      operationId: getCSRF
      tags:
      - Auth
      responses:
        '200':
          description: CSRF token
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT