@bitblit/epsilon

openapi: 3.0.0 info: version: v0 title: SampleAPI tags: - name: CORS description: These endpoints are here to support CORS - name: Public description: These endpoints can be called without setting the authorization header - name: Secure description: Authentication and authorization of the API paths: /: get: description: Redirects to the /meta/server endpoint tags: - Meta - Public responses: '301': description: Redirects to the /meta/server endpoint options: tags: - CORS responses: '200': description: Standard CORS header response /meta/server: get: description: > Returns information about the current build and time. Can be used to test error-handling code by passing a specific http error code in the error query parameter. Can also be used to process specific named tests by passing those names to the test parameter. tags: - Public parameters: - name: error in: query description: >- If set, throw a specific error for testing (valid are 500,400,403,404) required: false schema: type: number - name: test in: query description: Run a specific named test (currently none are publicly available) required: false schema: type: string responses: '200': description: Success '400': description: Simulated bad request content: '*/*': schema: $ref: '#/components/schemas/ApiErrorResponse' '403': description: Simulated unauthorized content: '*/*': schema: $ref: '#/components/schemas/ApiErrorResponse' '404': description: Simulated not found content: '*/*': schema: $ref: '#/components/schemas/ApiErrorResponse' '500': description: Simulated internal server error content: '*/*': schema: $ref: '#/components/schemas/ApiErrorResponse' options: tags: - CORS responses: '200': description: Standard CORS header response /meta/user: get: description: > When logged in, returns the contents of the JWT token as the server parses it. This should match what you get when you process the token returned from the "POST /access-token" endpoint through a standard JWT token processor. tags: - Meta security: - SampleAuthorizer: [] responses: '200': description: Success content: '*/*': schema: $ref: '#/components/schemas/AccessTokenContents' '401': description: Unauthorized content: '*/*': schema: $ref: '#/components/schemas/ApiErrorResponse' options: tags: - CORS responses: '200': description: Success '401': description: Unauthorized content: '*/*': schema: $ref: '#/components/schemas/ApiErrorResponse' /meta/item/{itemId}: get: description: > Example of a path param parameters: - name: itemId in: path description: A sample item id required: true schema: type: string tags: - Meta security: - SampleAuthorizer: [] responses: '200': description: Success content: '*/*': schema: $ref: '#/components/schemas/Empty' '401': description: Unauthorized content: '*/*': schema: $ref: '#/components/schemas/ApiErrorResponse' options: tags: - CORS parameters: - name: itemId in: path description: A sample item id required: true schema: type: string responses: '200': description: Success '401': description: Unauthorized content: '*/*': schema: $ref: '#/components/schemas/ApiErrorResponse' /secure/access-token: post: tags: - Secure - Public responses: '200': description: Success content: application/json: schema: $ref: '#/components/schemas/AccessTokenResponse' '400': description: Invalid request content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' '403': description: Invalid credentials content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' requestBody: content: application/json: schema: type: object title: Access Token Request required: - email - password - scope properties: email: type: string description: Email address of the account to authenticate format: email minLength: 7 password: type: string description: Password of the account to authenticate minLength: 6 scope: type: string enum: - OWNER - ADVERTISER - GLOBAL - RUN_AS_OWNER - RUN_AS_ADVERTISER description: | What style of account to authenticate: * `OWNER` - A device owner account * `ADVERTISER` - A advertising account * `GLOBAL` - Used by Adomni customer service * `RUN_AS_OWNER` - Used by Adomni customer service * `RUN_AS_ADVERTISER` - Used by Adomni customer service default: OWNER runAs: type: string description: Used by Adomni customer service format: email expirationSeconds: type: number minimum: 10 maximum: 3600 default: 3600 description: Request for the access token required: true options: tags: - CORS responses: '200': description: Standard CORS header response /multi/fixed: get: description: Tests path matching from most specific to least (this is most) tags: - Public responses: '200': description: Success options: tags: - CORS responses: '200': description: Standard CORS header response /multi/{v}: get: description: Tests path matching from most specific to least (this is least) tags: - Public parameters: - name: v in: path description: A variable required: true schema: type: string responses: '200': description: Success options: tags: - CORS parameters: - name: v in: path description: A variable required: true schema: type: string responses: '200': description: Standard CORS header response /err/{code}: get: description: Tests path matching from most specific to least (this is least) tags: - Public parameters: - name: code in: path description: Error code required: true schema: type: number responses: '200': description: Success options: tags: - CORS parameters: - name: code in: path description: A variable required: true schema: type: number responses: '200': description: Standard CORS header response x-amazon-apigateway-binary-media-types: - '*/*' x-amazon-apigateway-gateway-responses: UNAUTHORIZED: statusCode: 401 responseParameters: gatewayresponse.header.Access-Control-Allow-Origin: '''*''' responseTemplates: application/json: '{"errors":["Unauthorized"], "httpStatusCode": 401}' MISSING_AUTHENTICATION_TOKEN: statusCode: 404 responseParameters: gatewayresponse.header.Access-Control-Allow-Origin: '''*''' responseTemplates: application/json: '{"errors":["No such endpoint"], "httpStatusCode": 404}' INTEGRATION_TIMEOUT: statusCode: 504 responseParameters: gatewayresponse.header.Access-Control-Allow-Origin: '''*''' responseTemplates: application/json: '{"errors":["Timeout"], "httpStatusCode": 504}' DEFAULT_5XX: statusCode: 500 responseParameters: gatewayresponse.header.Access-Control-Allow-Origin: '''*''' responseTemplates: application/json: '{"errors":["Internal Server Error"], "httpStatusCode": 500}' servers: - url: 'https://api.sample.com/dev' components: securitySchemes: SampleAuthorizer: type: apiKey name: Authorization in: header schemas: Empty: type: object title: Empty Schema AccessTokenRequest: type: object title: Access Token Request required: - email - password - scope properties: email: type: string description: Email address of the account to authenticate format: email minLength: 7 password: type: string description: Password of the account to authenticate minLength: 6 scope: type: string enum: - OWNER - ADVERTISER - GLOBAL - RUN_AS_OWNER - RUN_AS_ADVERTISER description: | What style of account to authenticate: * `OWNER` - A device owner account * `ADVERTISER` - A advertising account * `GLOBAL` - Used by Adomni customer service * `RUN_AS_OWNER` - Used by Adomni customer service * `RUN_AS_ADVERTISER` - Used by Adomni customer service default: OWNER runAs: type: string description: Used by Adomni customer service format: email expirationSeconds: type: number minimum: 10 maximum: 3600 default: 3600 AccessTokenResponse: type: object title: Access Token Response required: - token - expires properties: token: type: string description: A JWT access token for the API expires: type: number format: int64 description: 'The time this token will expire, expressed in epoch ms' AccessTokenContents: type: object title: Access Token Contents description: The contents of the JWT token required: - exp - iss - sub - iat - user properties: exp: type: number description: >- Expiration claim - The time this token will expire, expressed in epoch ms iss: type: string description: Issuer claim - Who created the token sub: type: string description: Subject claim - The target of the token (typically user email) iat: type: number description: >- Issued at claim - The time this token was created, expressed in epoch ms user: type: object description: Object describing the user authenticated by this token ApiErrorResponse: type: object title: API Error Response required: - errors - httpStatusCode properties: errors: type: array items: type: string description: List of the errors that occurred httpStatusCode: type: number description: Http status code of this error detailCode: type: number description: Adomni detail status code for this error