{
  "consumes": [
    "application/json"
  ],
  "definitions": {
    "protobufAny": {
      "additionalProperties": {},
      "properties": {
        "@type": {
          "type": "string"
        }
      },
      "type": "object"
    },
    "protobufNullValue": {
      "default": "NULL_VALUE",
      "description": "`NullValue` is a singleton enumeration to represent the null value for the\n`Value` type union.\n\nThe JSON representation for `NullValue` is JSON `null`.\n\n - NULL_VALUE: Null value.",
      "enum": [
        "NULL_VALUE"
      ],
      "type": "string"
    },
    "rpcStatus": {
      "properties": {
        "code": {
          "format": "int32",
          "type": "integer"
        },
        "details": {
          "items": {
            "$ref": "#/definitions/protobufAny",
            "type": "object"
          },
          "type": "array"
        },
        "message": {
          "type": "string"
        }
      },
      "type": "object"
    },
    "v1Action": {
      "properties": {
        "name": {
          "type": "string"
        },
        "properties": {
          "type": "object"
        }
      },
      "title": "https://openid.github.io/authzen/#name-action",
      "type": "object"
    },
    "v1ActionSearchRequest": {
      "properties": {
        "action": {
          "$ref": "#/definitions/v1Action"
        },
        "context": {
          "type": "object"
        },
        "page": {
          "$ref": "#/definitions/v1Page"
        },
        "resource": {
          "$ref": "#/definitions/v1Resource"
        },
        "subject": {
          "$ref": "#/definitions/v1Subject"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-action-search-api-reque",
      "type": "object"
    },
    "v1ActionSearchResponse": {
      "properties": {
        "page": {
          "$ref": "#/definitions/v1Page"
        },
        "results": {
          "items": {
            "$ref": "#/definitions/v1Action",
            "type": "object"
          },
          "type": "array"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-action-search-api-respo",
      "type": "object"
    },
    "v1EvaluationRequest": {
      "properties": {
        "action": {
          "$ref": "#/definitions/v1Action"
        },
        "context": {
          "type": "object"
        },
        "resource": {
          "$ref": "#/definitions/v1Resource"
        },
        "subject": {
          "$ref": "#/definitions/v1Subject"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-access-evaluation-api-r",
      "type": "object"
    },
    "v1EvaluationResponse": {
      "properties": {
        "context": {
          "type": "object"
        },
        "decision": {
          "type": "boolean"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-access-evaluation-api-re",
      "type": "object"
    },
    "v1EvaluationsRequest": {
      "properties": {
        "action": {
          "$ref": "#/definitions/v1Action"
        },
        "context": {
          "type": "object"
        },
        "evaluations": {
          "items": {
            "$ref": "#/definitions/v1EvaluationRequest",
            "type": "object"
          },
          "type": "array"
        },
        "options": {
          "type": "object"
        },
        "resource": {
          "$ref": "#/definitions/v1Resource"
        },
        "subject": {
          "$ref": "#/definitions/v1Subject"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-access-evaluations-api-",
      "type": "object"
    },
    "v1EvaluationsResponse": {
      "properties": {
        "decisions": {
          "items": {
            "$ref": "#/definitions/v1EvaluationResponse",
            "type": "object"
          },
          "type": "array"
        }
      },
      "title": "https://openid.github.io/authzen/#name-access-evaluations-api-resp",
      "type": "object"
    },
    "v1Page": {
      "properties": {
        "next_token": {
          "type": "string"
        }
      },
      "type": "object"
    },
    "v1Resource": {
      "properties": {
        "id": {
          "type": "string"
        },
        "properties": {
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "title": "https://openid.github.io/authzen/#name-resource",
      "type": "object"
    },
    "v1ResourceSearchRequest": {
      "properties": {
        "action": {
          "$ref": "#/definitions/v1Action"
        },
        "context": {
          "type": "object"
        },
        "page": {
          "$ref": "#/definitions/v1Page"
        },
        "resource": {
          "$ref": "#/definitions/v1Resource"
        },
        "subject": {
          "$ref": "#/definitions/v1Subject"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-resource-search-api-req",
      "type": "object"
    },
    "v1ResourceSearchResponse": {
      "properties": {
        "page": {
          "$ref": "#/definitions/v1Page"
        },
        "results": {
          "items": {
            "$ref": "#/definitions/v1Resource",
            "type": "object"
          },
          "type": "array"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-resource-search-api-res",
      "type": "object"
    },
    "v1Subject": {
      "properties": {
        "id": {
          "type": "string"
        },
        "properties": {
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "title": "https://openid.github.io/authzen/#name-subject",
      "type": "object"
    },
    "v1SubjectSearchRequest": {
      "properties": {
        "action": {
          "$ref": "#/definitions/v1Action"
        },
        "context": {
          "type": "object"
        },
        "page": {
          "$ref": "#/definitions/v1Page"
        },
        "resource": {
          "$ref": "#/definitions/v1Resource"
        },
        "subject": {
          "$ref": "#/definitions/v1Subject"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-subject-search-api-requ",
      "type": "object"
    },
    "v1SubjectSearchResponse": {
      "properties": {
        "page": {
          "$ref": "#/definitions/v1Page"
        },
        "results": {
          "items": {
            "$ref": "#/definitions/v1Subject",
            "type": "object"
          },
          "type": "array"
        }
      },
      "title": "https://openid.github.io/authzen/#name-the-subject-search-api-resp",
      "type": "object"
    },
    "v3Assert": {
      "properties": {
        "check": {
          "$ref": "#/definitions/v3CheckRequest"
        },
        "check_permission": {
          "$ref": "#/definitions/v3CheckPermissionRequest"
        },
        "check_relation": {
          "$ref": "#/definitions/v3CheckRelationRequest"
        },
        "description": {
          "title": "description",
          "type": "string"
        },
        "expected": {
          "title": "expected outcome of assertion",
          "type": "boolean"
        },
        "id": {
          "format": "int64",
          "title": "assertion identifier",
          "type": "integer"
        }
      },
      "required": [
        "expected"
      ],
      "type": "object"
    },
    "v3Body": {
      "properties": {
        "data": {
          "format": "byte",
          "title": "manifest content",
          "type": "string"
        }
      },
      "type": "object"
    },
    "v3CheckPermissionRequest": {
      "properties": {
        "object_id": {
          "title": "object identifier",
          "type": "string"
        },
        "object_type": {
          "title": "object type",
          "type": "string"
        },
        "permission": {
          "title": "permission name",
          "type": "string"
        },
        "subject_id": {
          "title": "subject identifier",
          "type": "string"
        },
        "subject_type": {
          "title": "subject type",
          "type": "string"
        },
        "trace": {
          "title": "collect trace information",
          "type": "boolean"
        }
      },
      "required": [
        "object_type",
        "object_id",
        "permission",
        "subject_type",
        "subject_id"
      ],
      "type": "object"
    },
    "v3CheckPermissionResponse": {
      "properties": {
        "check": {
          "title": "check result",
          "type": "boolean"
        },
        "trace": {
          "items": {
            "type": "string"
          },
          "title": "trace information",
          "type": "array"
        }
      },
      "type": "object"
    },
    "v3CheckRelationRequest": {
      "properties": {
        "object_id": {
          "title": "object identifier",
          "type": "string"
        },
        "object_type": {
          "title": "object type",
          "type": "string"
        },
        "relation": {
          "title": "relation name",
          "type": "string"
        },
        "subject_id": {
          "title": "subject identifier",
          "type": "string"
        },
        "subject_type": {
          "title": "subject type",
          "type": "string"
        },
        "trace": {
          "title": "collect trace information",
          "type": "boolean"
        }
      },
      "required": [
        "object_type",
        "object_id",
        "relation",
        "subject_type",
        "subject_id"
      ],
      "type": "object"
    },
    "v3CheckRelationResponse": {
      "properties": {
        "check": {
          "title": "check result",
          "type": "boolean"
        },
        "trace": {
          "items": {
            "type": "string"
          },
          "title": "trace information",
          "type": "array"
        }
      },
      "type": "object"
    },
    "v3CheckRequest": {
      "properties": {
        "object_id": {
          "title": "object identifier",
          "type": "string"
        },
        "object_type": {
          "title": "object type",
          "type": "string"
        },
        "relation": {
          "title": "relation name",
          "type": "string"
        },
        "subject_id": {
          "title": "subject identifier",
          "type": "string"
        },
        "subject_type": {
          "title": "subject type",
          "type": "string"
        },
        "trace": {
          "title": "collect trace information",
          "type": "boolean"
        }
      },
      "required": [
        "object_type",
        "object_id",
        "relation",
        "subject_type",
        "subject_id"
      ],
      "type": "object"
    },
    "v3CheckResponse": {
      "properties": {
        "check": {
          "title": "check result",
          "type": "boolean"
        },
        "context": {
          "title": "context",
          "type": "object"
        },
        "trace": {
          "items": {
            "type": "string"
          },
          "title": "trace information",
          "type": "array"
        }
      },
      "type": "object"
    },
    "v3ChecksRequest": {
      "properties": {
        "checks": {
          "items": {
            "$ref": "#/definitions/v3CheckRequest",
            "type": "object"
          },
          "type": "array"
        },
        "default": {
          "$ref": "#/definitions/v3CheckRequest"
        }
      },
      "title": "EXPERIMENTAL",
      "type": "object"
    },
    "v3ChecksResponse": {
      "properties": {
        "checks": {
          "items": {
            "$ref": "#/definitions/v3CheckResponse",
            "type": "object"
          },
          "type": "array"
        }
      },
      "title": "EXPERIMENTAL",
      "type": "object"
    },
    "v3DeleteAssertionResponse": {
      "properties": {
        "result": {
          "properties": {},
          "title": "empty result",
          "type": "object"
        }
      },
      "type": "object"
    },
    "v3DeleteManifestResponse": {
      "properties": {
        "result": {
          "properties": {},
          "title": "empty result",
          "type": "object"
        }
      },
      "type": "object"
    },
    "v3DeleteObjectResponse": {
      "properties": {
        "result": {
          "properties": {},
          "title": "empty result",
          "type": "object"
        }
      },
      "type": "object"
    },
    "v3DeleteRelationResponse": {
      "properties": {
        "result": {
          "properties": {},
          "title": "empty result",
          "type": "object"
        }
      },
      "type": "object"
    },
    "v3ExportResponse": {
      "properties": {
        "object": {
          "$ref": "#/definitions/v3Object",
          "title": "object instance (data)"
        },
        "relation": {
          "$ref": "#/definitions/v3Relation",
          "title": "relation instance (data)"
        },
        "stats": {
          "title": "object and/or relation stats (no data)",
          "type": "object"
        }
      },
      "type": "object"
    },
    "v3GetAssertionResponse": {
      "properties": {
        "result": {
          "$ref": "#/definitions/v3Assert"
        }
      },
      "type": "object"
    },
    "v3GetGraphResponse": {
      "properties": {
        "explanation": {
          "title": "explanation of results",
          "type": "object"
        },
        "results": {
          "items": {
            "$ref": "#/definitions/v3ObjectIdentifier",
            "type": "object"
          },
          "title": "matching object identifiers",
          "type": "array"
        },
        "trace": {
          "items": {
            "type": "string"
          },
          "title": "trace information",
          "type": "array"
        }
      },
      "type": "object"
    },
    "v3GetManifestResponse": {
      "properties": {
        "body": {
          "$ref": "#/definitions/v3Body",
          "title": "Manifest content"
        },
        "metadata": {
          "$ref": "#/definitions/v3Metadata",
          "title": "Manifest metadata"
        },
        "model": {
          "title": "Model",
          "type": "object"
        }
      },
      "type": "object"
    },
    "v3GetObjectManyResponse": {
      "properties": {
        "results": {
          "items": {
            "$ref": "#/definitions/v3Object",
            "type": "object"
          },
          "title": "array of object instances",
          "type": "array"
        }
      },
      "type": "object"
    },
    "v3GetObjectResponse": {
      "properties": {
        "page": {
          "$ref": "#/definitions/v3PaginationResponse",
          "title": "pagination response"
        },
        "relations": {
          "items": {
            "$ref": "#/definitions/v3Relation",
            "type": "object"
          },
          "title": "object relations",
          "type": "array"
        },
        "result": {
          "$ref": "#/definitions/v3Object",
          "title": "object instance"
        }
      },
      "type": "object"
    },
    "v3GetObjectsResponse": {
      "properties": {
        "page": {
          "$ref": "#/definitions/v3PaginationResponse",
          "title": "pagination response"
        },
        "results": {
          "items": {
            "$ref": "#/definitions/v3Object",
            "type": "object"
          },
          "title": "array of object instances",
          "type": "array"
        }
      },
      "type": "object"
    },
    "v3GetRelationResponse": {
      "properties": {
        "objects": {
          "additionalProperties": {
            "$ref": "#/definitions/v3Object"
          },
          "title": "map of materialized relation objects",
          "type": "object"
        },
        "result": {
          "$ref": "#/definitions/v3Relation",
          "title": "relation instance"
        }
      },
      "type": "object"
    },
    "v3GetRelationsResponse": {
      "properties": {
        "objects": {
          "additionalProperties": {
            "$ref": "#/definitions/v3Object"
          },
          "title": "map of materialized relation objects",
          "type": "object"
        },
        "page": {
          "$ref": "#/definitions/v3PaginationResponse",
          "title": "pagination response"
        },
        "results": {
          "items": {
            "$ref": "#/definitions/v3Relation",
            "type": "object"
          },
          "title": "array of relation instances",
          "type": "array"
        }
      },
      "type": "object"
    },
    "v3ImportCounter": {
      "properties": {
        "delete": {
          "format": "uint64",
          "title": "number of messages with OPCODE_DELETE",
          "type": "string"
        },
        "error": {
          "format": "uint64",
          "title": "number of messages resulting in error",
          "type": "string"
        },
        "recv": {
          "format": "uint64",
          "title": "number of messages received",
          "type": "string"
        },
        "set": {
          "format": "uint64",
          "title": "number of messages with OPCODE_SET",
          "type": "string"
        },
        "type": {
          "title": "counter of type (object|relation)",
          "type": "string"
        }
      },
      "type": "object"
    },
    "v3ImportRequest": {
      "properties": {
        "object": {
          "$ref": "#/definitions/v3Object",
          "title": "object import message"
        },
        "op_code": {
          "$ref": "#/definitions/v3Opcode",
          "title": "operation Opcode enum value"
        },
        "relation": {
          "$ref": "#/definitions/v3Relation",
          "title": "relation import message"
        }
      },
      "type": "object"
    },
    "v3ImportResponse": {
      "properties": {
        "counter": {
          "$ref": "#/definitions/v3ImportCounter",
          "title": "import counter per type"
        },
        "object": {
          "$ref": "#/definitions/v3ImportCounter",
          "title": "object import counter"
        },
        "relation": {
          "$ref": "#/definitions/v3ImportCounter",
          "title": "relation import counter"
        },
        "status": {
          "$ref": "#/definitions/v3ImportStatus",
          "title": "import status message"
        }
      },
      "type": "object"
    },
    "v3ImportStatus": {
      "properties": {
        "code": {
          "format": "int64",
          "title": "gRPC status code (google.golang.org/grpc/codes)",
          "type": "integer"
        },
        "msg": {
          "title": "gRPC status message (google.golang.org/grpc/status)",
          "type": "string"
        },
        "req": {
          "$ref": "#/definitions/v3ImportRequest",
          "title": "req contains the original import request message"
        }
      },
      "type": "object"
    },
    "v3ListAssertionsResponse": {
      "properties": {
        "page": {
          "$ref": "#/definitions/v3PaginationResponse"
        },
        "results": {
          "items": {
            "$ref": "#/definitions/v3Assert",
            "type": "object"
          },
          "type": "array"
        }
      },
      "type": "object"
    },
    "v3Metadata": {
      "properties": {
        "etag": {
          "title": "object instance etag",
          "type": "string"
        },
        "updated_at": {
          "format": "date-time",
          "readOnly": true,
          "title": "last updated timestamp (UTC)",
          "type": "string"
        }
      },
      "type": "object"
    },
    "v3Object": {
      "properties": {
        "created_at": {
          "format": "date-time",
          "readOnly": true,
          "title": "created at timestamp (UTC)",
          "type": "string"
        },
        "display_name": {
          "title": "display name object",
          "type": "string"
        },
        "etag": {
          "title": "object instance etag",
          "type": "string"
        },
        "id": {
          "title": "external object identifier (cs-string, no spaces or tabs)",
          "type": "string"
        },
        "properties": {
          "title": "property bag",
          "type": "object"
        },
        "type": {
          "title": "object type name",
          "type": "string"
        },
        "updated_at": {
          "format": "date-time",
          "readOnly": true,
          "title": "last updated timestamp (UTC)",
          "type": "string"
        }
      },
      "required": [
        "type",
        "id"
      ],
      "type": "object"
    },
    "v3ObjectIdentifier": {
      "properties": {
        "object_id": {
          "title": "object identifier (cs-string)",
          "type": "string"
        },
        "object_type": {
          "title": "object type (lc-string)",
          "type": "string"
        }
      },
      "required": [
        "object_type",
        "object_id"
      ],
      "title": "Object identifier",
      "type": "object"
    },
    "v3Opcode": {
      "default": "OPCODE_UNKNOWN",
      "enum": [
        "OPCODE_UNKNOWN",
        "OPCODE_SET",
        "OPCODE_DELETE",
        "OPCODE_DELETE_WITH_RELATIONS"
      ],
      "type": "string"
    },
    "v3PaginationRequest": {
      "properties": {
        "size": {
          "format": "int32",
          "title": "requested page size, valid value between 1-100 rows (default 100)",
          "type": "integer"
        },
        "token": {
          "title": "pagination start token, default \"\"",
          "type": "string"
        }
      },
      "title": "Pagination request",
      "type": "object"
    },
    "v3PaginationResponse": {
      "properties": {
        "next_token": {
          "readOnly": true,
          "title": "next page token, when empty there are no more pages to fetch",
          "type": "string"
        }
      },
      "title": "Pagination response",
      "type": "object"
    },
    "v3Relation": {
      "properties": {
        "created_at": {
          "format": "date-time",
          "readOnly": true,
          "title": "created at timestamp (UTC)",
          "type": "string"
        },
        "etag": {
          "title": "object instance etag",
          "type": "string"
        },
        "object_id": {
          "title": "object identifier",
          "type": "string"
        },
        "object_type": {
          "title": "object type",
          "type": "string"
        },
        "relation": {
          "title": "object relation name",
          "type": "string"
        },
        "subject_id": {
          "title": "subject identifier",
          "type": "string"
        },
        "subject_relation": {
          "title": "optional subject relation name",
          "type": "string"
        },
        "subject_type": {
          "title": "subject type",
          "type": "string"
        },
        "updated_at": {
          "format": "date-time",
          "readOnly": true,
          "title": "last updated timestamp (UTC)",
          "type": "string"
        }
      },
      "required": [
        "object_type",
        "object_id",
        "relation",
        "subject_type",
        "subject_id"
      ],
      "type": "object"
    },
    "v3SetAssertionRequest": {
      "properties": {
        "assert": {
          "$ref": "#/definitions/v3Assert"
        }
      },
      "required": [
        "assert"
      ],
      "type": "object"
    },
    "v3SetAssertionResponse": {
      "properties": {
        "result": {
          "$ref": "#/definitions/v3Assert"
        }
      },
      "type": "object"
    },
    "v3SetManifestResponse": {
      "properties": {
        "result": {
          "properties": {},
          "title": "empty result",
          "type": "object"
        }
      },
      "type": "object"
    },
    "v3SetObjectRequest": {
      "properties": {
        "object": {
          "$ref": "#/definitions/v3Object",
          "title": "object instance"
        }
      },
      "required": [
        "object"
      ],
      "type": "object"
    },
    "v3SetObjectResponse": {
      "properties": {
        "result": {
          "$ref": "#/definitions/v3Object",
          "title": "object instance"
        }
      },
      "type": "object"
    },
    "v3SetRelationRequest": {
      "properties": {
        "relation": {
          "$ref": "#/definitions/v3Relation",
          "title": "relation instance"
        }
      },
      "required": [
        "relation"
      ],
      "type": "object"
    },
    "v3SetRelationResponse": {
      "properties": {
        "result": {
          "$ref": "#/definitions/v3Relation",
          "title": "relation instance"
        }
      },
      "type": "object"
    }
  },
  "externalDocs": {
    "description": "Authorization API 1.0 - draft 03",
    "url": "https://openid.github.io/authzen/"
  },
  "info": {
    "contact": {
      "email": "support@aserto.com",
      "name": "Aserto, Inc.",
      "url": "https://github.com/aserto-dev/pb-directory"
    },
    "license": {
      "name": "Apache v2",
      "url": "https://github.com/aserto-dev/pb-directory/blob/main/LICENSE"
    },
    "title": "OpenID AuthZen Access Service",
    "version": "1.0.0-3"
  },
  "paths": {
    "/access/v1/evaluation": {
      "post": {
        "description": "TBD",
        "operationId": "openid.authzen.access.v1.evaluation.post",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1EvaluationRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1EvaluationResponse"
            }
          },
          "400": {
            "description": "Bad Request",
            "schema": {}
          },
          "401": {
            "description": "Unauthorized",
            "schema": {}
          },
          "403": {
            "description": "Forbidden",
            "schema": {}
          },
          "500": {
            "description": "Internal error",
            "schema": {}
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "summary": "Access Evaluation API",
        "tags": [
          "authzen"
        ]
      }
    },
    "/access/v1/evaluations": {
      "post": {
        "description": "TBD.",
        "operationId": "openid.authzen.access.v1.evaluations.post",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1EvaluationsRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1EvaluationsResponse"
            }
          },
          "400": {
            "description": "Bad Request",
            "schema": {}
          },
          "401": {
            "description": "Unauthorized",
            "schema": {}
          },
          "403": {
            "description": "Forbidden",
            "schema": {}
          },
          "500": {
            "description": "Internal error",
            "schema": {}
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "summary": "Access Evaluations API",
        "tags": [
          "authzen"
        ]
      }
    },
    "/access/v1/search/action": {
      "post": {
        "description": "TBD.",
        "operationId": "openid.authzen.access.v1.search.action.post",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1ActionSearchRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1ActionSearchResponse"
            }
          },
          "400": {
            "description": "Bad Request",
            "schema": {}
          },
          "401": {
            "description": "Unauthorized",
            "schema": {}
          },
          "403": {
            "description": "Forbidden",
            "schema": {}
          },
          "500": {
            "description": "Internal error",
            "schema": {}
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "summary": "Action Search API",
        "tags": [
          "authzen"
        ]
      }
    },
    "/access/v1/search/resource": {
      "post": {
        "description": "TBD.",
        "operationId": "openid.authzen.access.v1.search.post",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1ResourceSearchRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1ResourceSearchResponse"
            }
          },
          "400": {
            "description": "Bad Request",
            "schema": {}
          },
          "401": {
            "description": "Unauthorized",
            "schema": {}
          },
          "403": {
            "description": "Forbidden",
            "schema": {}
          },
          "500": {
            "description": "Internal error",
            "schema": {}
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "summary": "Resource Search API",
        "tags": [
          "authzen"
        ]
      }
    },
    "/access/v1/search/subject": {
      "post": {
        "description": "TBD.",
        "operationId": "openid.authzen.access.v1.search.subject.post",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1SubjectSearchRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1SubjectSearchResponse"
            }
          },
          "400": {
            "description": "Bad Request",
            "schema": {}
          },
          "401": {
            "description": "Unauthorized",
            "schema": {}
          },
          "403": {
            "description": "Forbidden",
            "schema": {}
          },
          "500": {
            "description": "Internal error",
            "schema": {}
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "summary": "Subject Search API",
        "tags": [
          "authzen"
        ]
      }
    },
    "/api/v3/directory/assertion": {
      "post": {
        "description": "Set assertion.",
        "operationId": "directory.assertion.v3.assertion.set",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v3SetAssertionRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3SetAssertionResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Set assertion",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/assertion/{id}": {
      "delete": {
        "description": "Delete assertion.",
        "operationId": "directory.assertion.v3.assertion.delete",
        "parameters": [
          {
            "description": "assertion identifier",
            "format": "int64",
            "in": "path",
            "name": "id",
            "required": true,
            "type": "integer"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3DeleteAssertionResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Delete assertion",
        "tags": [
          "directory"
        ]
      },
      "get": {
        "description": "Returns single assertion instance.",
        "operationId": "directory.assertion.v3.assertion.get",
        "parameters": [
          {
            "description": "assertion identifier",
            "format": "int64",
            "in": "path",
            "name": "id",
            "required": true,
            "type": "integer"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3GetAssertionResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Get assertion instance",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/assertions": {
      "get": {
        "description": "Returns list of assertion instances.",
        "operationId": "directory.assertion.v3.assertions.list",
        "parameters": [
          {
            "description": "requested page size, valid value between 1-100 rows (default 100)",
            "format": "int32",
            "in": "query",
            "name": "page.size",
            "required": false,
            "type": "integer"
          },
          {
            "description": "pagination start token, default \"\"",
            "in": "query",
            "name": "page.token",
            "required": false,
            "type": "string"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3ListAssertionsResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "List assertions",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/check": {
      "post": {
        "description": "Returns check outcome.",
        "operationId": "directory.reader.v3.check",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v3CheckRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3CheckResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Check",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/check/permission": {
      "post": {
        "deprecated": true,
        "description": "Returns check permission outcome.",
        "operationId": "directory.reader.v3.check.permission",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v3CheckPermissionRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3CheckPermissionResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Check permission",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/check/relation": {
      "post": {
        "deprecated": true,
        "description": "Returns check relation outcome.",
        "operationId": "directory.reader.v3.check.relation",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v3CheckRelationRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3CheckRelationResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Check relation",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/checks": {
      "post": {
        "description": "Returns multiple check outcomes.",
        "operationId": "directory.reader.v3.checks",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v3ChecksRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3ChecksResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Checks",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/graph/{object_type}/{relation}/{subject_type}": {
      "get": {
        "description": "Returns object graph from anchor to subject or object.",
        "operationId": "directory.reader.v3.graph",
        "parameters": [
          {
            "description": "object type",
            "in": "path",
            "name": "object_type",
            "required": true,
            "type": "string"
          },
          {
            "description": "relation name",
            "in": "path",
            "name": "relation",
            "required": true,
            "type": "string"
          },
          {
            "description": "subject type",
            "in": "path",
            "name": "subject_type",
            "required": true,
            "type": "string"
          },
          {
            "description": "object identifier",
            "in": "query",
            "name": "object_id",
            "required": false,
            "type": "string"
          },
          {
            "description": "subject identifier",
            "in": "query",
            "name": "subject_id",
            "required": false,
            "type": "string"
          },
          {
            "description": "subject relation",
            "in": "query",
            "name": "subject_relation",
            "required": false,
            "type": "string"
          },
          {
            "description": "return graph paths for each result",
            "in": "query",
            "name": "explain",
            "required": false,
            "type": "boolean"
          },
          {
            "description": "collect trace information",
            "in": "query",
            "name": "trace",
            "required": false,
            "type": "boolean"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3GetGraphResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Get graph",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/manifest": {
      "delete": {
        "description": "Delete manifest.",
        "operationId": "directory.model.v3.manifest.delete",
        "parameters": [
          {
            "description": "empty request",
            "in": "query",
            "name": "empty",
            "required": false,
            "type": "object"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3DeleteManifestResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Delete manifest",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/object": {
      "post": {
        "description": "Set object.",
        "operationId": "directory.writer.v3.object.set",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v3SetObjectRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3SetObjectResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Set object",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/object/{object_type}/{object_id}": {
      "delete": {
        "description": "Delete object.",
        "operationId": "directory.writer.v3.object.delete",
        "parameters": [
          {
            "description": "object type",
            "in": "path",
            "name": "object_type",
            "required": true,
            "type": "string"
          },
          {
            "description": "object identifier",
            "in": "path",
            "name": "object_id",
            "required": true,
            "type": "string"
          },
          {
            "description": "delete object relations, both object and subject relations.",
            "in": "query",
            "name": "with_relations",
            "required": false,
            "type": "boolean"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3DeleteObjectResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Delete object",
        "tags": [
          "directory"
        ]
      },
      "get": {
        "description": "Returns single object instance, optionally with relations.",
        "operationId": "directory.reader.v3.object.get",
        "parameters": [
          {
            "description": "object type name (lc-string)",
            "in": "path",
            "name": "object_type",
            "required": true,
            "type": "string"
          },
          {
            "description": "object identifier (cs-string)",
            "in": "path",
            "name": "object_id",
            "required": true,
            "type": "string"
          },
          {
            "description": "materialize the object relations objects",
            "in": "query",
            "name": "with_relations",
            "required": false,
            "type": "boolean"
          },
          {
            "description": "requested page size, valid value between 1-100 rows (default 100)",
            "format": "int32",
            "in": "query",
            "name": "page.size",
            "required": false,
            "type": "integer"
          },
          {
            "description": "pagination start token, default \"\"",
            "in": "query",
            "name": "page.token",
            "required": false,
            "type": "string"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3GetObjectResponse"
            }
          },
          "304": {
            "description": "Object not modified.",
            "schema": {}
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Get object instance",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/objects": {
      "get": {
        "description": "Returns list of object instances.",
        "operationId": "directory.reader.v3.objects.list",
        "parameters": [
          {
            "description": "object type name (lc-string)",
            "in": "query",
            "name": "object_type",
            "required": false,
            "type": "string"
          },
          {
            "description": "requested page size, valid value between 1-100 rows (default 100)",
            "format": "int32",
            "in": "query",
            "name": "page.size",
            "required": false,
            "type": "integer"
          },
          {
            "description": "pagination start token, default \"\"",
            "in": "query",
            "name": "page.token",
            "required": false,
            "type": "string"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3GetObjectsResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "List object instances",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/relation": {
      "delete": {
        "description": "Delete relation.",
        "operationId": "directory.writer.v3.relation.delete",
        "parameters": [
          {
            "description": "object type",
            "in": "query",
            "name": "object_type",
            "required": true,
            "type": "string"
          },
          {
            "description": "object identifier",
            "in": "query",
            "name": "object_id",
            "required": true,
            "type": "string"
          },
          {
            "description": "object relation name",
            "in": "query",
            "name": "relation",
            "required": true,
            "type": "string"
          },
          {
            "description": "subject type",
            "in": "query",
            "name": "subject_type",
            "required": true,
            "type": "string"
          },
          {
            "description": "subject identifier",
            "in": "query",
            "name": "subject_id",
            "required": true,
            "type": "string"
          },
          {
            "description": "optional subject relation name",
            "in": "query",
            "name": "subject_relation",
            "required": false,
            "type": "string"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3DeleteRelationResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Delete relation",
        "tags": [
          "directory"
        ]
      },
      "get": {
        "description": "Returns single relation instance, optionally with objects.",
        "operationId": "directory.reader.v3.relation.get",
        "parameters": [
          {
            "description": "object type",
            "in": "query",
            "name": "object_type",
            "required": true,
            "type": "string"
          },
          {
            "description": "object identifier",
            "in": "query",
            "name": "object_id",
            "required": true,
            "type": "string"
          },
          {
            "description": "relation name",
            "in": "query",
            "name": "relation",
            "required": true,
            "type": "string"
          },
          {
            "description": "subject type",
            "in": "query",
            "name": "subject_type",
            "required": true,
            "type": "string"
          },
          {
            "description": "subject identifier",
            "in": "query",
            "name": "subject_id",
            "required": true,
            "type": "string"
          },
          {
            "description": "optional subject relation name",
            "in": "query",
            "name": "subject_relation",
            "required": false,
            "type": "string"
          },
          {
            "description": "materialize relation objects",
            "in": "query",
            "name": "with_objects",
            "required": false,
            "type": "boolean"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3GetRelationResponse"
            }
          },
          "304": {
            "description": "Relation not modified.",
            "schema": {}
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Get relation instance",
        "tags": [
          "directory"
        ]
      },
      "post": {
        "description": "Set relation.",
        "operationId": "directory.writer.v3.relation.set",
        "parameters": [
          {
            "in": "body",
            "name": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v3SetRelationRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3SetRelationResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "Set relation",
        "tags": [
          "directory"
        ]
      }
    },
    "/api/v3/directory/relations": {
      "get": {
        "description": "Returns list of relation instances.",
        "operationId": "directory.reader.v3.relations.list",
        "parameters": [
          {
            "description": "object type",
            "in": "query",
            "name": "object_type",
            "required": false,
            "type": "string"
          },
          {
            "description": "object identifier",
            "in": "query",
            "name": "object_id",
            "required": false,
            "type": "string"
          },
          {
            "description": "relation name",
            "in": "query",
            "name": "relation",
            "required": false,
            "type": "string"
          },
          {
            "description": "subject type",
            "in": "query",
            "name": "subject_type",
            "required": false,
            "type": "string"
          },
          {
            "description": "subject identifier",
            "in": "query",
            "name": "subject_id",
            "required": false,
            "type": "string"
          },
          {
            "description": "optional subject relation name",
            "in": "query",
            "name": "subject_relation",
            "required": false,
            "type": "string"
          },
          {
            "description": "materialize relation objects",
            "in": "query",
            "name": "with_objects",
            "required": false,
            "type": "boolean"
          },
          {
            "description": "only return relations that do not have a subject relation.",
            "in": "query",
            "name": "with_empty_subject_relation",
            "required": false,
            "type": "boolean"
          },
          {
            "description": "requested page size, valid value between 1-100 rows (default 100)",
            "format": "int32",
            "in": "query",
            "name": "page.size",
            "required": false,
            "type": "integer"
          },
          {
            "description": "pagination start token, default \"\"",
            "in": "query",
            "name": "page.token",
            "required": false,
            "type": "string"
          }
        ],
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v3GetRelationsResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "security": [
          {
            "DirectoryAPIKey": [],
            "TenantID": []
          }
        ],
        "summary": "List relations instances",
        "tags": [
          "directory"
        ]
      }
    }
  },
  "produces": [
    "application/json"
  ],
  "schemes": [
    "http",
    "https"
  ],
  "security": [
    {
      "DirectoryAPIKey": [],
      "TenantID": []
    }
  ],
  "securityDefinitions": {
    "DirectoryAPIKey": {
      "in": "header",
      "name": "authorization",
      "type": "apiKey"
    },
    "TenantID": {
      "in": "header",
      "name": "aserto-tenant-id",
      "type": "apiKey"
    }
  },
  "swagger": "2.0",
  "tags": [
    {
      "name": "Access"
    }
  ]
}