Skip to main content

nominal_api_conjure/conjure/clients/authentication/api/
authentication_service_v2.rs

1use conjure_http::endpoint;
2/// This service provides operations for managing user and org profiles/settings.
3/// Its name is a bit of a misnomer.
4#[conjure_http::conjure_client(name = "AuthenticationServiceV2")]
5pub trait AuthenticationServiceV2<
6    #[response_body]
7    I: Iterator<
8            Item = Result<conjure_http::private::Bytes, conjure_http::private::Error>,
9        >,
10> {
11    /// Gets the profile of the authenticated user.
12    #[endpoint(
13        method = GET,
14        path = "/authentication/v2/my/profile",
15        name = "getMyProfile",
16        accept = conjure_http::client::StdResponseDeserializer
17    )]
18    fn get_my_profile(
19        &self,
20        #[auth]
21        auth_: &conjure_object::BearerToken,
22    ) -> Result<
23        super::super::super::super::objects::authentication::api::UserV2,
24        conjure_http::private::Error,
25    >;
26    /// Updates the profile of the authenticated user.
27    #[endpoint(
28        method = PUT,
29        path = "/authentication/v2/my/profile",
30        name = "updateMyProfile",
31        accept = conjure_http::client::StdResponseDeserializer
32    )]
33    fn update_my_profile(
34        &self,
35        #[auth]
36        auth_: &conjure_object::BearerToken,
37        #[body(serializer = conjure_http::client::StdRequestSerializer)]
38        update_my_profile_request: &super::super::super::super::objects::authentication::api::UpdateMyProfileRequest,
39    ) -> Result<
40        super::super::super::super::objects::authentication::api::UserV2,
41        conjure_http::private::Error,
42    >;
43    /// Gets the settings of the authenticated user.
44    #[endpoint(
45        method = GET,
46        path = "/authentication/v2/my/settings",
47        name = "getMySettings",
48        accept = conjure_http::client::StdResponseDeserializer
49    )]
50    fn get_my_settings(
51        &self,
52        #[auth]
53        auth_: &conjure_object::BearerToken,
54    ) -> Result<
55        super::super::super::super::objects::authentication::api::UserSettings,
56        conjure_http::private::Error,
57    >;
58    /// Updates the settings of the authenticated user.
59    #[endpoint(
60        method = PUT,
61        path = "/authentication/v2/my/settings",
62        name = "updateMySettings",
63        accept = conjure_http::client::StdResponseDeserializer
64    )]
65    fn update_my_settings(
66        &self,
67        #[auth]
68        auth_: &conjure_object::BearerToken,
69        #[body(serializer = conjure_http::client::StdRequestSerializer)]
70        user_settings: &super::super::super::super::objects::authentication::api::UserSettings,
71    ) -> Result<
72        super::super::super::super::objects::authentication::api::UserSettings,
73        conjure_http::private::Error,
74    >;
75    /// Gets the settings of the org of the authenticated user.
76    #[endpoint(
77        method = GET,
78        path = "/authentication/v2/org/settings",
79        name = "getMyOrgSettings",
80        accept = conjure_http::client::StdResponseDeserializer
81    )]
82    fn get_my_org_settings(
83        &self,
84        #[auth]
85        auth_: &conjure_object::BearerToken,
86    ) -> Result<
87        super::super::super::super::objects::authentication::api::OrgSettings,
88        conjure_http::private::Error,
89    >;
90    /// Updates the settings of the org of the authenticated user.
91    #[endpoint(
92        method = PUT,
93        path = "/authentication/v2/org/settings",
94        name = "updateMyOrgSettings",
95        accept = conjure_http::client::StdResponseDeserializer
96    )]
97    fn update_my_org_settings(
98        &self,
99        #[auth]
100        auth_: &conjure_object::BearerToken,
101        #[body(serializer = conjure_http::client::StdRequestSerializer)]
102        org_settings: &super::super::super::super::objects::authentication::api::OrgSettings,
103    ) -> Result<
104        super::super::super::super::objects::authentication::api::OrgSettings,
105        conjure_http::private::Error,
106    >;
107    /// Searches for users by email and displayName.
108    #[endpoint(
109        method = POST,
110        path = "/authentication/v2/users",
111        name = "searchUsersV2",
112        accept = conjure_http::client::StdResponseDeserializer
113    )]
114    fn search_users_v2(
115        &self,
116        #[auth]
117        auth_: &conjure_object::BearerToken,
118        #[body(serializer = conjure_http::client::StdRequestSerializer)]
119        request: &super::super::super::super::objects::authentication::api::SearchUsersRequest,
120    ) -> Result<
121        super::super::super::super::objects::authentication::api::SearchUsersResponseV2,
122        conjure_http::private::Error,
123    >;
124    /// Get users by RID. Returns objects for any of the requested RIDs that are members or
125    /// guests of the caller's org.
126    #[endpoint(
127        method = POST,
128        path = "/authentication/v2/users/batch",
129        name = "getUsers",
130        accept = conjure_http::client::conjure::CollectionResponseDeserializer
131    )]
132    fn get_users(
133        &self,
134        #[auth]
135        auth_: &conjure_object::BearerToken,
136        #[body(serializer = conjure_http::client::StdRequestSerializer)]
137        user_rids: &std::collections::BTreeSet<
138            super::super::super::super::objects::authentication::api::UserRid,
139        >,
140    ) -> Result<
141        std::collections::BTreeSet<
142            super::super::super::super::objects::authentication::api::UserV2,
143        >,
144        conjure_http::private::Error,
145    >;
146    /// Gets a user by RID. Throws if the requested RID is not a member or guest of the caller's org.
147    #[endpoint(
148        method = GET,
149        path = "/authentication/v2/users/{userRid}",
150        name = "getUser",
151        accept = conjure_http::client::StdResponseDeserializer
152    )]
153    fn get_user(
154        &self,
155        #[auth]
156        auth_: &conjure_object::BearerToken,
157        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
158        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
159    ) -> Result<
160        super::super::super::super::objects::authentication::api::UserV2,
161        conjure_http::private::Error,
162    >;
163    /// Returns JWKS (JSON Web Key Set) for MediaMTX JWT verification.
164    /// Only available if MediaMTX integration is enabled.
165    #[endpoint(
166        method = GET,
167        path = "/authentication/v2/jwks",
168        name = "getJwks",
169        accept = conjure_http::client::StdResponseDeserializer
170    )]
171    fn get_jwks(
172        &self,
173    ) -> Result<
174        super::super::super::super::objects::authentication::api::Jwks,
175        conjure_http::private::Error,
176    >;
177    /// Generates a JWT token for MediaMTX authentication with a 2-hour expiration.
178    /// The token is signed with the MediaMTX private key and contains the specified permissions.
179    /// Requires authentication with Nominal. This endpoint is intended for internal use only.
180    #[endpoint(
181        method = POST,
182        path = "/authentication/v2/mediamtx/token",
183        name = "generateMediaMtxToken",
184        accept = conjure_http::client::StdResponseDeserializer
185    )]
186    fn generate_media_mtx_token(
187        &self,
188        #[auth]
189        auth_: &conjure_object::BearerToken,
190        #[body(serializer = conjure_http::client::StdRequestSerializer)]
191        request: &super::super::super::super::objects::authentication::api::GenerateMediaMtxTokenRequest,
192    ) -> Result<
193        super::super::super::super::objects::authentication::api::GenerateMediaMtxTokenResponse,
194        conjure_http::private::Error,
195    >;
196    /// Batch preregister users in the caller's organization. Only creates new users for
197    /// emails that don't already exist — existing accounts are silently skipped and not
198    /// returned in the response. The caller must be an admin of the organization.
199    #[endpoint(
200        method = POST,
201        path = "/authentication/v2/batch-preregister-users",
202        name = "batchPreregisterUsers",
203        accept = conjure_http::client::StdResponseDeserializer
204    )]
205    fn batch_preregister_users(
206        &self,
207        #[auth]
208        auth_: &conjure_object::BearerToken,
209        #[body(serializer = conjure_http::client::StdRequestSerializer)]
210        request: &super::super::super::super::objects::authentication::api::BatchPreregisterUsersRequest,
211    ) -> Result<
212        super::super::super::super::objects::authentication::api::BatchPreregisterUsersResponse,
213        conjure_http::private::Error,
214    >;
215    /// Lists members of one or more orgs together with their most recent login into each org,
216    /// sorted and paginated. The caller must be an admin of every org requested — defaults to
217    /// the caller's own org if none are specified.
218    #[endpoint(
219        method = POST,
220        path = "/authentication/v2/admin/org/login-activity",
221        name = "listOrgLoginActivity",
222        accept = conjure_http::client::StdResponseDeserializer
223    )]
224    fn list_org_login_activity(
225        &self,
226        #[auth]
227        auth_: &conjure_object::BearerToken,
228        #[body(serializer = conjure_http::client::StdRequestSerializer)]
229        request: &super::super::super::super::objects::authentication::api::ListOrgLoginActivityRequest,
230    ) -> Result<
231        super::super::super::super::objects::authentication::api::ListOrgLoginActivityResponse,
232        conjure_http::private::Error,
233    >;
234    /// Deactivates a user in the caller's organization, preventing them from obtaining new
235    /// Nominal session tokens in that org. Also revokes all of the user's API keys in the
236    /// caller's organization. Caller must be an admin of their  org. Target user must be a
237    /// member or guest of the org.
238    #[endpoint(
239        method = POST,
240        path = "/authentication/v2/admin/users/{userRid}/deactivate",
241        name = "deactivateUser",
242        accept = conjure_http::client::conjure::EmptyResponseDeserializer
243    )]
244    fn deactivate_user(
245        &self,
246        #[auth]
247        auth_: &conjure_object::BearerToken,
248        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
249        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
250    ) -> Result<(), conjure_http::private::Error>;
251    /// Reactivates a user in the caller's organization. Caller must be an admin of their
252    /// org. Target user must be a member or guest of the org.
253    #[endpoint(
254        method = POST,
255        path = "/authentication/v2/admin/users/{userRid}/reactivate",
256        name = "reactivateUser",
257        accept = conjure_http::client::conjure::EmptyResponseDeserializer
258    )]
259    fn reactivate_user(
260        &self,
261        #[auth]
262        auth_: &conjure_object::BearerToken,
263        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
264        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
265    ) -> Result<(), conjure_http::private::Error>;
266}
267/// This service provides operations for managing user and org profiles/settings.
268/// Its name is a bit of a misnomer.
269#[conjure_http::conjure_client(name = "AuthenticationServiceV2")]
270pub trait AsyncAuthenticationServiceV2<
271    #[response_body]
272    I: conjure_http::private::Stream<
273            Item = Result<conjure_http::private::Bytes, conjure_http::private::Error>,
274        >,
275> {
276    /// Gets the profile of the authenticated user.
277    #[endpoint(
278        method = GET,
279        path = "/authentication/v2/my/profile",
280        name = "getMyProfile",
281        accept = conjure_http::client::StdResponseDeserializer
282    )]
283    async fn get_my_profile(
284        &self,
285        #[auth]
286        auth_: &conjure_object::BearerToken,
287    ) -> Result<
288        super::super::super::super::objects::authentication::api::UserV2,
289        conjure_http::private::Error,
290    >;
291    /// Updates the profile of the authenticated user.
292    #[endpoint(
293        method = PUT,
294        path = "/authentication/v2/my/profile",
295        name = "updateMyProfile",
296        accept = conjure_http::client::StdResponseDeserializer
297    )]
298    async fn update_my_profile(
299        &self,
300        #[auth]
301        auth_: &conjure_object::BearerToken,
302        #[body(serializer = conjure_http::client::StdRequestSerializer)]
303        update_my_profile_request: &super::super::super::super::objects::authentication::api::UpdateMyProfileRequest,
304    ) -> Result<
305        super::super::super::super::objects::authentication::api::UserV2,
306        conjure_http::private::Error,
307    >;
308    /// Gets the settings of the authenticated user.
309    #[endpoint(
310        method = GET,
311        path = "/authentication/v2/my/settings",
312        name = "getMySettings",
313        accept = conjure_http::client::StdResponseDeserializer
314    )]
315    async fn get_my_settings(
316        &self,
317        #[auth]
318        auth_: &conjure_object::BearerToken,
319    ) -> Result<
320        super::super::super::super::objects::authentication::api::UserSettings,
321        conjure_http::private::Error,
322    >;
323    /// Updates the settings of the authenticated user.
324    #[endpoint(
325        method = PUT,
326        path = "/authentication/v2/my/settings",
327        name = "updateMySettings",
328        accept = conjure_http::client::StdResponseDeserializer
329    )]
330    async fn update_my_settings(
331        &self,
332        #[auth]
333        auth_: &conjure_object::BearerToken,
334        #[body(serializer = conjure_http::client::StdRequestSerializer)]
335        user_settings: &super::super::super::super::objects::authentication::api::UserSettings,
336    ) -> Result<
337        super::super::super::super::objects::authentication::api::UserSettings,
338        conjure_http::private::Error,
339    >;
340    /// Gets the settings of the org of the authenticated user.
341    #[endpoint(
342        method = GET,
343        path = "/authentication/v2/org/settings",
344        name = "getMyOrgSettings",
345        accept = conjure_http::client::StdResponseDeserializer
346    )]
347    async fn get_my_org_settings(
348        &self,
349        #[auth]
350        auth_: &conjure_object::BearerToken,
351    ) -> Result<
352        super::super::super::super::objects::authentication::api::OrgSettings,
353        conjure_http::private::Error,
354    >;
355    /// Updates the settings of the org of the authenticated user.
356    #[endpoint(
357        method = PUT,
358        path = "/authentication/v2/org/settings",
359        name = "updateMyOrgSettings",
360        accept = conjure_http::client::StdResponseDeserializer
361    )]
362    async fn update_my_org_settings(
363        &self,
364        #[auth]
365        auth_: &conjure_object::BearerToken,
366        #[body(serializer = conjure_http::client::StdRequestSerializer)]
367        org_settings: &super::super::super::super::objects::authentication::api::OrgSettings,
368    ) -> Result<
369        super::super::super::super::objects::authentication::api::OrgSettings,
370        conjure_http::private::Error,
371    >;
372    /// Searches for users by email and displayName.
373    #[endpoint(
374        method = POST,
375        path = "/authentication/v2/users",
376        name = "searchUsersV2",
377        accept = conjure_http::client::StdResponseDeserializer
378    )]
379    async fn search_users_v2(
380        &self,
381        #[auth]
382        auth_: &conjure_object::BearerToken,
383        #[body(serializer = conjure_http::client::StdRequestSerializer)]
384        request: &super::super::super::super::objects::authentication::api::SearchUsersRequest,
385    ) -> Result<
386        super::super::super::super::objects::authentication::api::SearchUsersResponseV2,
387        conjure_http::private::Error,
388    >;
389    /// Get users by RID. Returns objects for any of the requested RIDs that are members or
390    /// guests of the caller's org.
391    #[endpoint(
392        method = POST,
393        path = "/authentication/v2/users/batch",
394        name = "getUsers",
395        accept = conjure_http::client::conjure::CollectionResponseDeserializer
396    )]
397    async fn get_users(
398        &self,
399        #[auth]
400        auth_: &conjure_object::BearerToken,
401        #[body(serializer = conjure_http::client::StdRequestSerializer)]
402        user_rids: &std::collections::BTreeSet<
403            super::super::super::super::objects::authentication::api::UserRid,
404        >,
405    ) -> Result<
406        std::collections::BTreeSet<
407            super::super::super::super::objects::authentication::api::UserV2,
408        >,
409        conjure_http::private::Error,
410    >;
411    /// Gets a user by RID. Throws if the requested RID is not a member or guest of the caller's org.
412    #[endpoint(
413        method = GET,
414        path = "/authentication/v2/users/{userRid}",
415        name = "getUser",
416        accept = conjure_http::client::StdResponseDeserializer
417    )]
418    async fn get_user(
419        &self,
420        #[auth]
421        auth_: &conjure_object::BearerToken,
422        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
423        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
424    ) -> Result<
425        super::super::super::super::objects::authentication::api::UserV2,
426        conjure_http::private::Error,
427    >;
428    /// Returns JWKS (JSON Web Key Set) for MediaMTX JWT verification.
429    /// Only available if MediaMTX integration is enabled.
430    #[endpoint(
431        method = GET,
432        path = "/authentication/v2/jwks",
433        name = "getJwks",
434        accept = conjure_http::client::StdResponseDeserializer
435    )]
436    async fn get_jwks(
437        &self,
438    ) -> Result<
439        super::super::super::super::objects::authentication::api::Jwks,
440        conjure_http::private::Error,
441    >;
442    /// Generates a JWT token for MediaMTX authentication with a 2-hour expiration.
443    /// The token is signed with the MediaMTX private key and contains the specified permissions.
444    /// Requires authentication with Nominal. This endpoint is intended for internal use only.
445    #[endpoint(
446        method = POST,
447        path = "/authentication/v2/mediamtx/token",
448        name = "generateMediaMtxToken",
449        accept = conjure_http::client::StdResponseDeserializer
450    )]
451    async fn generate_media_mtx_token(
452        &self,
453        #[auth]
454        auth_: &conjure_object::BearerToken,
455        #[body(serializer = conjure_http::client::StdRequestSerializer)]
456        request: &super::super::super::super::objects::authentication::api::GenerateMediaMtxTokenRequest,
457    ) -> Result<
458        super::super::super::super::objects::authentication::api::GenerateMediaMtxTokenResponse,
459        conjure_http::private::Error,
460    >;
461    /// Batch preregister users in the caller's organization. Only creates new users for
462    /// emails that don't already exist — existing accounts are silently skipped and not
463    /// returned in the response. The caller must be an admin of the organization.
464    #[endpoint(
465        method = POST,
466        path = "/authentication/v2/batch-preregister-users",
467        name = "batchPreregisterUsers",
468        accept = conjure_http::client::StdResponseDeserializer
469    )]
470    async fn batch_preregister_users(
471        &self,
472        #[auth]
473        auth_: &conjure_object::BearerToken,
474        #[body(serializer = conjure_http::client::StdRequestSerializer)]
475        request: &super::super::super::super::objects::authentication::api::BatchPreregisterUsersRequest,
476    ) -> Result<
477        super::super::super::super::objects::authentication::api::BatchPreregisterUsersResponse,
478        conjure_http::private::Error,
479    >;
480    /// Lists members of one or more orgs together with their most recent login into each org,
481    /// sorted and paginated. The caller must be an admin of every org requested — defaults to
482    /// the caller's own org if none are specified.
483    #[endpoint(
484        method = POST,
485        path = "/authentication/v2/admin/org/login-activity",
486        name = "listOrgLoginActivity",
487        accept = conjure_http::client::StdResponseDeserializer
488    )]
489    async fn list_org_login_activity(
490        &self,
491        #[auth]
492        auth_: &conjure_object::BearerToken,
493        #[body(serializer = conjure_http::client::StdRequestSerializer)]
494        request: &super::super::super::super::objects::authentication::api::ListOrgLoginActivityRequest,
495    ) -> Result<
496        super::super::super::super::objects::authentication::api::ListOrgLoginActivityResponse,
497        conjure_http::private::Error,
498    >;
499    /// Deactivates a user in the caller's organization, preventing them from obtaining new
500    /// Nominal session tokens in that org. Also revokes all of the user's API keys in the
501    /// caller's organization. Caller must be an admin of their  org. Target user must be a
502    /// member or guest of the org.
503    #[endpoint(
504        method = POST,
505        path = "/authentication/v2/admin/users/{userRid}/deactivate",
506        name = "deactivateUser",
507        accept = conjure_http::client::conjure::EmptyResponseDeserializer
508    )]
509    async fn deactivate_user(
510        &self,
511        #[auth]
512        auth_: &conjure_object::BearerToken,
513        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
514        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
515    ) -> Result<(), conjure_http::private::Error>;
516    /// Reactivates a user in the caller's organization. Caller must be an admin of their
517    /// org. Target user must be a member or guest of the org.
518    #[endpoint(
519        method = POST,
520        path = "/authentication/v2/admin/users/{userRid}/reactivate",
521        name = "reactivateUser",
522        accept = conjure_http::client::conjure::EmptyResponseDeserializer
523    )]
524    async fn reactivate_user(
525        &self,
526        #[auth]
527        auth_: &conjure_object::BearerToken,
528        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
529        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
530    ) -> Result<(), conjure_http::private::Error>;
531}
532/// This service provides operations for managing user and org profiles/settings.
533/// Its name is a bit of a misnomer.
534#[conjure_http::conjure_client(name = "AuthenticationServiceV2", local)]
535pub trait LocalAsyncAuthenticationServiceV2<
536    #[response_body]
537    I: conjure_http::private::Stream<
538            Item = Result<conjure_http::private::Bytes, conjure_http::private::Error>,
539        >,
540> {
541    /// Gets the profile of the authenticated user.
542    #[endpoint(
543        method = GET,
544        path = "/authentication/v2/my/profile",
545        name = "getMyProfile",
546        accept = conjure_http::client::StdResponseDeserializer
547    )]
548    async fn get_my_profile(
549        &self,
550        #[auth]
551        auth_: &conjure_object::BearerToken,
552    ) -> Result<
553        super::super::super::super::objects::authentication::api::UserV2,
554        conjure_http::private::Error,
555    >;
556    /// Updates the profile of the authenticated user.
557    #[endpoint(
558        method = PUT,
559        path = "/authentication/v2/my/profile",
560        name = "updateMyProfile",
561        accept = conjure_http::client::StdResponseDeserializer
562    )]
563    async fn update_my_profile(
564        &self,
565        #[auth]
566        auth_: &conjure_object::BearerToken,
567        #[body(serializer = conjure_http::client::StdRequestSerializer)]
568        update_my_profile_request: &super::super::super::super::objects::authentication::api::UpdateMyProfileRequest,
569    ) -> Result<
570        super::super::super::super::objects::authentication::api::UserV2,
571        conjure_http::private::Error,
572    >;
573    /// Gets the settings of the authenticated user.
574    #[endpoint(
575        method = GET,
576        path = "/authentication/v2/my/settings",
577        name = "getMySettings",
578        accept = conjure_http::client::StdResponseDeserializer
579    )]
580    async fn get_my_settings(
581        &self,
582        #[auth]
583        auth_: &conjure_object::BearerToken,
584    ) -> Result<
585        super::super::super::super::objects::authentication::api::UserSettings,
586        conjure_http::private::Error,
587    >;
588    /// Updates the settings of the authenticated user.
589    #[endpoint(
590        method = PUT,
591        path = "/authentication/v2/my/settings",
592        name = "updateMySettings",
593        accept = conjure_http::client::StdResponseDeserializer
594    )]
595    async fn update_my_settings(
596        &self,
597        #[auth]
598        auth_: &conjure_object::BearerToken,
599        #[body(serializer = conjure_http::client::StdRequestSerializer)]
600        user_settings: &super::super::super::super::objects::authentication::api::UserSettings,
601    ) -> Result<
602        super::super::super::super::objects::authentication::api::UserSettings,
603        conjure_http::private::Error,
604    >;
605    /// Gets the settings of the org of the authenticated user.
606    #[endpoint(
607        method = GET,
608        path = "/authentication/v2/org/settings",
609        name = "getMyOrgSettings",
610        accept = conjure_http::client::StdResponseDeserializer
611    )]
612    async fn get_my_org_settings(
613        &self,
614        #[auth]
615        auth_: &conjure_object::BearerToken,
616    ) -> Result<
617        super::super::super::super::objects::authentication::api::OrgSettings,
618        conjure_http::private::Error,
619    >;
620    /// Updates the settings of the org of the authenticated user.
621    #[endpoint(
622        method = PUT,
623        path = "/authentication/v2/org/settings",
624        name = "updateMyOrgSettings",
625        accept = conjure_http::client::StdResponseDeserializer
626    )]
627    async fn update_my_org_settings(
628        &self,
629        #[auth]
630        auth_: &conjure_object::BearerToken,
631        #[body(serializer = conjure_http::client::StdRequestSerializer)]
632        org_settings: &super::super::super::super::objects::authentication::api::OrgSettings,
633    ) -> Result<
634        super::super::super::super::objects::authentication::api::OrgSettings,
635        conjure_http::private::Error,
636    >;
637    /// Searches for users by email and displayName.
638    #[endpoint(
639        method = POST,
640        path = "/authentication/v2/users",
641        name = "searchUsersV2",
642        accept = conjure_http::client::StdResponseDeserializer
643    )]
644    async fn search_users_v2(
645        &self,
646        #[auth]
647        auth_: &conjure_object::BearerToken,
648        #[body(serializer = conjure_http::client::StdRequestSerializer)]
649        request: &super::super::super::super::objects::authentication::api::SearchUsersRequest,
650    ) -> Result<
651        super::super::super::super::objects::authentication::api::SearchUsersResponseV2,
652        conjure_http::private::Error,
653    >;
654    /// Get users by RID. Returns objects for any of the requested RIDs that are members or
655    /// guests of the caller's org.
656    #[endpoint(
657        method = POST,
658        path = "/authentication/v2/users/batch",
659        name = "getUsers",
660        accept = conjure_http::client::conjure::CollectionResponseDeserializer
661    )]
662    async fn get_users(
663        &self,
664        #[auth]
665        auth_: &conjure_object::BearerToken,
666        #[body(serializer = conjure_http::client::StdRequestSerializer)]
667        user_rids: &std::collections::BTreeSet<
668            super::super::super::super::objects::authentication::api::UserRid,
669        >,
670    ) -> Result<
671        std::collections::BTreeSet<
672            super::super::super::super::objects::authentication::api::UserV2,
673        >,
674        conjure_http::private::Error,
675    >;
676    /// Gets a user by RID. Throws if the requested RID is not a member or guest of the caller's org.
677    #[endpoint(
678        method = GET,
679        path = "/authentication/v2/users/{userRid}",
680        name = "getUser",
681        accept = conjure_http::client::StdResponseDeserializer
682    )]
683    async fn get_user(
684        &self,
685        #[auth]
686        auth_: &conjure_object::BearerToken,
687        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
688        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
689    ) -> Result<
690        super::super::super::super::objects::authentication::api::UserV2,
691        conjure_http::private::Error,
692    >;
693    /// Returns JWKS (JSON Web Key Set) for MediaMTX JWT verification.
694    /// Only available if MediaMTX integration is enabled.
695    #[endpoint(
696        method = GET,
697        path = "/authentication/v2/jwks",
698        name = "getJwks",
699        accept = conjure_http::client::StdResponseDeserializer
700    )]
701    async fn get_jwks(
702        &self,
703    ) -> Result<
704        super::super::super::super::objects::authentication::api::Jwks,
705        conjure_http::private::Error,
706    >;
707    /// Generates a JWT token for MediaMTX authentication with a 2-hour expiration.
708    /// The token is signed with the MediaMTX private key and contains the specified permissions.
709    /// Requires authentication with Nominal. This endpoint is intended for internal use only.
710    #[endpoint(
711        method = POST,
712        path = "/authentication/v2/mediamtx/token",
713        name = "generateMediaMtxToken",
714        accept = conjure_http::client::StdResponseDeserializer
715    )]
716    async fn generate_media_mtx_token(
717        &self,
718        #[auth]
719        auth_: &conjure_object::BearerToken,
720        #[body(serializer = conjure_http::client::StdRequestSerializer)]
721        request: &super::super::super::super::objects::authentication::api::GenerateMediaMtxTokenRequest,
722    ) -> Result<
723        super::super::super::super::objects::authentication::api::GenerateMediaMtxTokenResponse,
724        conjure_http::private::Error,
725    >;
726    /// Batch preregister users in the caller's organization. Only creates new users for
727    /// emails that don't already exist — existing accounts are silently skipped and not
728    /// returned in the response. The caller must be an admin of the organization.
729    #[endpoint(
730        method = POST,
731        path = "/authentication/v2/batch-preregister-users",
732        name = "batchPreregisterUsers",
733        accept = conjure_http::client::StdResponseDeserializer
734    )]
735    async fn batch_preregister_users(
736        &self,
737        #[auth]
738        auth_: &conjure_object::BearerToken,
739        #[body(serializer = conjure_http::client::StdRequestSerializer)]
740        request: &super::super::super::super::objects::authentication::api::BatchPreregisterUsersRequest,
741    ) -> Result<
742        super::super::super::super::objects::authentication::api::BatchPreregisterUsersResponse,
743        conjure_http::private::Error,
744    >;
745    /// Lists members of one or more orgs together with their most recent login into each org,
746    /// sorted and paginated. The caller must be an admin of every org requested — defaults to
747    /// the caller's own org if none are specified.
748    #[endpoint(
749        method = POST,
750        path = "/authentication/v2/admin/org/login-activity",
751        name = "listOrgLoginActivity",
752        accept = conjure_http::client::StdResponseDeserializer
753    )]
754    async fn list_org_login_activity(
755        &self,
756        #[auth]
757        auth_: &conjure_object::BearerToken,
758        #[body(serializer = conjure_http::client::StdRequestSerializer)]
759        request: &super::super::super::super::objects::authentication::api::ListOrgLoginActivityRequest,
760    ) -> Result<
761        super::super::super::super::objects::authentication::api::ListOrgLoginActivityResponse,
762        conjure_http::private::Error,
763    >;
764    /// Deactivates a user in the caller's organization, preventing them from obtaining new
765    /// Nominal session tokens in that org. Also revokes all of the user's API keys in the
766    /// caller's organization. Caller must be an admin of their  org. Target user must be a
767    /// member or guest of the org.
768    #[endpoint(
769        method = POST,
770        path = "/authentication/v2/admin/users/{userRid}/deactivate",
771        name = "deactivateUser",
772        accept = conjure_http::client::conjure::EmptyResponseDeserializer
773    )]
774    async fn deactivate_user(
775        &self,
776        #[auth]
777        auth_: &conjure_object::BearerToken,
778        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
779        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
780    ) -> Result<(), conjure_http::private::Error>;
781    /// Reactivates a user in the caller's organization. Caller must be an admin of their
782    /// org. Target user must be a member or guest of the org.
783    #[endpoint(
784        method = POST,
785        path = "/authentication/v2/admin/users/{userRid}/reactivate",
786        name = "reactivateUser",
787        accept = conjure_http::client::conjure::EmptyResponseDeserializer
788    )]
789    async fn reactivate_user(
790        &self,
791        #[auth]
792        auth_: &conjure_object::BearerToken,
793        #[path(name = "userRid", encoder = conjure_http::client::conjure::PlainEncoder)]
794        user_rid: &super::super::super::super::objects::authentication::api::UserRid,
795    ) -> Result<(), conjure_http::private::Error>;
796}