Add support for namespaces

.openapi-generator/FILES

@@ -20,6 +20,7 @@ docs/KeyRestrictions.md
 docs/KeyType.md
 docs/LogLevel.md
 docs/LoggingConfig.md
+docs/NamespaceItem.md
 docs/NetworkConfig.md
 docs/Pcr.md
 docs/PrivateKey.md
@@ -73,6 +74,7 @@ src/models/key_type.rs
 src/models/log_level.rs
 src/models/logging_config.rs
 src/models/mod.rs
+src/models/namespace_item.rs
 src/models/network_config.rs
 src/models/pcr.rs
 src/models/private_key.rs

.openapi-generator/VERSION

@@ -1 +1 @@
-7.6.0-SNAPSHOT
+7.8.0-SNAPSHOT

CHANGELOG.md

@@ -2,13 +2,17 @@
 
 ## Unreleased
 
+### Features
+
+- Add support for namespaces by adding the `namespaces_get`, `namespaces_namespace_id_delete`, `namespaces_namespace_id_put`, `users_user_id_post` API calls
+
 ### Bugfixes
 
 - Return `Error::ResponseError` instead of `Error::Transport` for API errors ([#21](https://github.com/Nitrokey/nethsm-sdk-rs/issues/21))
 - Fix multipart requests, namely `system_restore_post` ([#20](https://github.com/Nitrokey/nethsm-sdk-rs/issues/20))
 - Add authentication for `system_restore_post` ([#15](https://github.com/Nitrokey/nethsm-sdk-rs/issues/15))
 
-### Changes
+### Other Changes
 
 - Add `AkPub` and `Pcr` schemas
 

docs/DefaultApi.md

@@ -41,6 +41,9 @@ Method | HTTP request | Description
 [**keys_post**](DefaultApi.md#keys_post) | **POST** /keys | 
 [**lock_post**](DefaultApi.md#lock_post) | **POST** /lock | 
 [**metrics_get**](DefaultApi.md#metrics_get) | **GET** /metrics | 
+[**namespaces_get**](DefaultApi.md#namespaces_get) | **GET** /namespaces | 
+[**namespaces_namespace_id_delete**](DefaultApi.md#namespaces_namespace_id_delete) | **DELETE** /namespaces/{NamespaceID} | 
+[**namespaces_namespace_id_put**](DefaultApi.md#namespaces_namespace_id_put) | **PUT** /namespaces/{NamespaceID} | 
 [**provision_post**](DefaultApi.md#provision_post) | **POST** /provision | 
 [**random_post**](DefaultApi.md#random_post) | **POST** /random | 
 [**system_backup_post**](DefaultApi.md#system_backup_post) | **POST** /system/backup | 
@@ -58,6 +61,7 @@ Method | HTTP request | Description
 [**users_user_id_delete**](DefaultApi.md#users_user_id_delete) | **DELETE** /users/{UserID} | 
 [**users_user_id_get**](DefaultApi.md#users_user_id_get) | **GET** /users/{UserID} | 
 [**users_user_id_passphrase_post**](DefaultApi.md#users_user_id_passphrase_post) | **POST** /users/{UserID}/passphrase | 
+[**users_user_id_post**](DefaultApi.md#users_user_id_post) | **POST** /users/{UserID} | 
 [**users_user_id_put**](DefaultApi.md#users_user_id_put) | **PUT** /users/{UserID} | 
 [**users_user_id_tags_get**](DefaultApi.md#users_user_id_tags_get) | **GET** /users/{UserID}/tags | 
 [**users_user_id_tags_tag_delete**](DefaultApi.md#users_user_id_tags_tag_delete) | **DELETE** /users/{UserID}/tags/{Tag} | 
@@ -610,7 +614,7 @@ No authorization required
 > crate::models::CreateResourceId keys_generate_post(key_generate_request_data)
 
 
-Generate a pair of public and private key and store it in NetHSM. KeyID is optional as a parameter and will be generated by NetHSM if not present. 
+Generate a pair of public and private key and store it in NetHSM. KeyID is optional as a parameter and will be generated by NetHSM if not present. The key is stored in the caller's namespace. 
 
 ### Parameters
 
@@ -640,7 +644,7 @@ Name | Type | Description  | Required | Notes
 > Vec<crate::models::KeyItem> keys_get(filter)
 
 
-Get a list of the identifiers of all keys that are currently stored in NetHSM. Separate requests need to be made to request the individual key data. 
+Get a list of the identifiers of all keys that are currently stored in NetHSM. If the caller is in a namespace, only keys in that namespace are returned. Separate requests need to be made to request the individual key data. 
 
 ### Parameters
 
@@ -944,7 +948,7 @@ Name | Type | Description  | Required | Notes
 > keys_key_id_put(key_id, private_key)
 
 
-Import a private key into NetHSM and store it under the *KeyID* path. The public key will be automatically derived. The parameters of the key can be passed as a PEM file or a JSON object. 
+Import a private key into NetHSM and store it under the *KeyID* path. The public key will be automatically derived. The parameters of the key can be passed as a PEM file or a JSON object. The key is stored in the caller's namespace. 
 
 ### Parameters
 
@@ -1068,7 +1072,7 @@ Name | Type | Description  | Required | Notes
 > crate::models::CreateResourceId keys_post(private_key)
 
 
-Import a private key into NetHSM and let NetHSM generate a KeyID. The public key will be automatically derived. The parameters of the key can be passed as a PEM file or a JSON object. 
+Import a private key into NetHSM and let NetHSM generate a KeyID. The public key will be automatically derived. The parameters of the key can be passed as a PEM file or a JSON object. The key is stored in the caller's namespace. 
 
 ### Parameters
 
@@ -1147,6 +1151,93 @@ This endpoint does not need any parameter.
 [[Back to top]](#) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to Model list]](../README.md#documentation-for-models) [[Back to README]](../README.md)
 
 
+## namespaces_get
+
+> Vec<crate::models::NamespaceItem> namespaces_get()
+
+
+Get a list of all created namespaces. Note that users may be assigned namespaces not present in this list, as long as the namespace has not been created. 
+
+### Parameters
+
+This endpoint does not need any parameter.
+
+### Return type
+
+[**Vec<crate::models::NamespaceItem>**](NamespaceItem.md)
+
+### Authorization
+
+[basic](../README.md#basic)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+
+[[Back to top]](#) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to Model list]](../README.md#documentation-for-models) [[Back to README]](../README.md)
+
+
+## namespaces_namespace_id_delete
+
+> namespaces_namespace_id_delete(namespace_id)
+
+
+Delete a namespace. **WARNING: all keys from that namespace are deleted.**
+
+### Parameters
+
+
+Name | Type | Description  | Required | Notes
+------------- | ------------- | ------------- | ------------- | -------------
+**namespace_id** | **String** |  | [required] |
+
+### Return type
+
+ (empty response body)
+
+### Authorization
+
+[basic](../README.md#basic)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: Not defined
+
+[[Back to top]](#) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to Model list]](../README.md#documentation-for-models) [[Back to README]](../README.md)
+
+
+## namespaces_namespace_id_put
+
+> namespaces_namespace_id_put(namespace_id)
+
+
+Create a namespace on keyfender. All users in that namespace can now be used, and all user management power is delegated to admins in that namespace. 
+
+### Parameters
+
+
+Name | Type | Description  | Required | Notes
+------------- | ------------- | ------------- | ------------- | -------------
+**namespace_id** | **String** |  | [required] |
+
+### Return type
+
+ (empty response body)
+
+### Authorization
+
+[basic](../README.md#basic)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: Not defined
+
+[[Back to top]](#) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to Model list]](../README.md#documentation-for-models) [[Back to README]](../README.md)
+
+
 ## provision_post
 
 > provision_post(provision_request_data)
@@ -1492,7 +1583,7 @@ No authorization required
 > Vec<crate::models::UserItem> users_get()
 
 
-Get a list of all user ids that have accounts on NetHSM.
+Get a list of all user ids that have accounts on NetHSM. If the caller is in a namespace, return only users in that namespace. 
 
 ### Parameters
 
@@ -1519,7 +1610,7 @@ This endpoint does not need any parameter.
 > crate::models::CreateResourceId users_post(user_post_data)
 
 
-Create a new user on NetHSM. The user-ID is generated by NetHSM.
+Create a new user on NetHSM, inheriting the caller's namespace. The user-ID is generated by NetHSM. 
 
 ### Parameters
 
@@ -1635,12 +1726,43 @@ Name | Type | Description  | Required | Notes
 [[Back to top]](#) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to Model list]](../README.md#documentation-for-models) [[Back to README]](../README.md)
 
 
+## users_user_id_post
+
+> crate::models::CreateResourceId users_user_id_post(user_id, user_post_data)
+
+
+Create a new user on NetHSM, in the namespace specified as a prefix in the path with the format 'namespace~'. For example, a POST request on \"https://nethsm.local/v1/users/namespace1~\" will generate a user-ID and create that user in \"namespace1\". The namespace prefix *must* be present: for creating users without a namespace, use a POST on \"/v1/users\". 
+
+### Parameters
+
+
+Name | Type | Description  | Required | Notes
+------------- | ------------- | ------------- | ------------- | -------------
+**user_id** | **String** |  | [required] |
+**user_post_data** | [**UserPostData**](UserPostData.md) |  | [required] |
+
+### Return type
+
+[**crate::models::CreateResourceId**](CreateResourceId.md)
+
+### Authorization
+
+[basic](../README.md#basic)
+
+### HTTP request headers
+
+- **Content-Type**: application/json
+- **Accept**: application/json
+
+[[Back to top]](#) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to Model list]](../README.md#documentation-for-models) [[Back to README]](../README.md)
+
+
 ## users_user_id_put
 
 > users_user_id_put(user_id, user_post_data)
 
 
-Create a user on keyfender.
+Create a user on keyfender. The new user must either be in the same namespace as the caller, or be in a namespace not created yet if the caller has no namespace. 
 
 ### Parameters
 

docs/NamespaceItem.md

@@ -0,0 +1,11 @@
+# NamespaceItem
+
+## Properties
+
+Name | Type | Description | Notes
+------------ | ------------- | ------------- | -------------
+**id** | **String** |  | 
+
+[[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)
+
+