option (gogoproto.goproto_enum_prefix) = false;

// Grant type used to exchange an authorization code for an access token.

GRANT_AUTHORIZATION_CODE = 0;

// Grant type used to exchange a user ID and password for an access token.

GRANT_PASSWORD = 1;

// Grant type used to exchange a refresh token for an access token.

GRANT_REFRESH_TOKEN = 2;

ClientIdentifiers ids = 1 [(gogoproto.embed) = true, (gogoproto.nullable) = false, (validate.rules).message.required = true];

google.protobuf.Timestamp created_at = 2 [(gogoproto.nullable) = false, (gogoproto.stdtime) = true];

google.protobuf.Timestamp updated_at = 3 [(gogoproto.nullable) = false, (gogoproto.stdtime) = true];

string name = 4 [(validate.rules).string.max_len = 50];

string description = 5 [(validate.rules).string.max_len = 2000];

map<string,string> attributes = 6 [(validate.rules).map.keys.string = {pattern: "^[a-z0-9](?:[-]?[a-z0-9]){2,}$" , max_len: 36}];

repeated ContactInfo contact_info = 7;

// The client secret is only visible to collaborators of the client.

string secret = 8;

// The allowed redirect URIs against which authorization requests are checked.

// If the authorization request does not pass a redirect URI, the first one

// from this list is taken.

repeated string redirect_uris = 9 [(gogoproto.customname) = "RedirectURIs"];

// The allowed logout redirect URIs against which client initiated logout

// requests are checked. If the authorization request does not pass a redirect

// URI, the first one from this list is taken.

repeated string logout_redirect_uris = 15 [(gogoproto.customname) = "LogoutRedirectURIs"];

// The reviewing state of the client.

// This field can only be modified by admins.

State state = 10 [(validate.rules).enum.defined_only = true];

// If set, the authorization page will be skipped.

// This field can only be modified by admins.

bool skip_authorization = 11;

// If set, the authorization page will show endorsement.

// This field can only be modified by admins.

bool endorsed = 12;

// OAuth flows that can be used for the client to get a token.

// After a client is created, this field can only be modified by admins.

repeated GrantType grants = 13 [(validate.rules).repeated.items.enum.defined_only = true];

// Rights denotes what rights the client will have access to.

// Users that previously authorized this client will have to re-authorize the

// client after rights are added to this list.

repeated Right rights = 14 [(validate.rules).repeated.items.enum.defined_only = true];

// By default we list all OAuth clients the caller has rights on.

// Set the user or the organization (not both) to instead list the OAuth clients

// where the user or organization is collaborator on.

OrganizationOrUserIdentifiers collaborator = 1;

google.protobuf.FieldMask field_mask = 2 [(gogoproto.nullable) = false];

// Order the results by this field path (must be present in the field mask).

// Default ordering is by ID. Prepend with a minus (-) to reverse the order.

string order = 3 [

(validate.rules).string = { in: ["", "client_id", "-client_id", "name", "-name", "created_at", "-created_at"] }

];

// Limit the number of results per page.

uint32 limit = 4 [(validate.rules).uint32.lte = 1000];

// Page number for pagination. 0 is interpreted as 1.

uint32 page = 5;

Client client = 1 [(gogoproto.embed) = true, (gogoproto.nullable) = false, (validate.rules).message.required = true];

// Collaborator to grant all rights on the newly created client.

OrganizationOrUserIdentifiers collaborator = 2 [(gogoproto.nullable) = false, (validate.rules).message.required = true];

ClientIdentifiers client_ids = 1 [(gogoproto.embed) = true, (gogoproto.nullable) = false, (validate.rules).message.required = true];

// Limit the number of results per page.

uint32 limit = 2 [(validate.rules).uint32.lte = 1000];

// Page number for pagination. 0 is interpreted as 1.

uint32 page = 3;