openapi: '3.0.0'
info:
  version: 1.0.3
  title: DEA Auth API
paths:
  /auth/{authCode}/token:
    post:
      summary: Returns ID Token and sets Oauth Cookie
      operationId: getToken
      tags:
        - auth
      parameters:
        - name: authCode
          in: path
          description: Auth code to trade for ID Token
          required: true
          schema:
            type: string
        - name: callback-override
          in: header
          description: Callback url for oauth2/token. Override default callback url
          required: false
          schema:
            type: string
        - name: origin
          in: header
          description: Override for origin URL
          required: false
          schema:
            type: string
      responses:
        '200':
          description: Id Token and Cognito information for fetching credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/getTokenResult'
  /auth/refreshToken:
    post:
      summary: Fetches new ID Token to refresh credentials using Refresh Token
      operationId: refreshToken
      tags:
        - auth
      responses:
        '200':
          description: Id Token and Cognito information for fetching credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/getTokenResult'
  /auth/revokeToken:
    post:
      summary: Revokes and invalides Cognito Refresh Token
      operationId: revokeToken
      tags:
        - auth
      responses:
        '200':
          description: Successfully Revoked Token
  /auth/loginUrl:
    get:
      summary: Get login URL
      operationId: loginUrl
      tags:
        - auth
      parameters:
        - name: callbackUrl
          in: query
          description: callback URL for Hosted UI
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Login URL for DEA
          content:
            application/json:
              schema:
                properties:
                  loginUrl:
                    type: string
  /auth/logoutUrl:
    get:
      summary: Get logout URL
      operationId: logoutUrl
      tags:
        - auth
      parameters:
        - name: callbackUrl
          in: query
          description: callback URL for Hosted UI
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Logout URL for DEA
          content:
            application/json:
              schema:
                properties:
                  logoutUrl:
                    type: string

components:
  schemas:
    getTokenResult:
      type: object
      required:
        - idToken
        - identityPoolId
        - userPoolId
        - expiresIn
      properties:
        idToken:
          type: string
        identityPoolId:
          type: string
        userPoolId:
          type: string
        expiresIn:
          type: number