apiVersion: capabilities.naftiko.dev/v1
kind: Capability
metadata:
  name: span-auth
  title: SPAN Auth
  provider: span-io
  api: span-rest-api
  tags:
    - Authentication
    - JWT
    - On-Premise
spec:
  description: >-
    Manage SPAN Panel local API client registrations and JWT tokens. The
    panel itself mints bearer tokens bound to a named client; tokens are used
    for both REST and MQTT broker authentication.
  operations:
    - id: register-client
      summary: Register an API client and mint a JWT.
      method: POST
      path: /api/v1/auth/register
    - id: list-clients
      summary: List registered API clients.
      method: GET
      path: /api/v1/auth/clients
    - id: get-client
      summary: Get a single registered client.
      method: GET
      path: /api/v1/auth/clients/{name}
    - id: delete-client
      summary: Delete a registered client (revokes its token).
      method: DELETE
      path: /api/v1/auth/clients/{name}