feat: just added 403 response

2025-05-07 11:04:16 +02:00
parent e84f69c21a
commit 43b40c9432
5 changed files with 113 additions and 13 deletions
--- a/documentation/openapi/src/bundled.yaml
+++ b/documentation/openapi/src/bundled.yaml
@ -257,6 +257,8 @@ paths:
          description: Bad Request - Problem processing the token or user data derived from it.
        '401':
          description: Unauthorized - Valid authentication token required.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/unauth/request-join/{projectId}':
    post:
      summary: Request to join an existing project
@ -278,6 +280,8 @@ paths:
          description: Bad Request - Invalid project ID format
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
        '409':
          description: Already member/request pending.
  /admin/pending-accounts:
@ -301,6 +305,8 @@ paths:
                  $ref: '#/components/schemas/user-entrepreneur'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/admin/accounts/validate/{userId}':
    post:
      operationId: validateUserAccount
@ -326,6 +332,8 @@ paths:
          description: Bad Request - Invalid user ID format.
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  /admin/request-join:
    get:
      operationId: getPendingProjects
@ -347,6 +355,8 @@ paths:
                  $ref: '#/components/schemas/joinRequest'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/admin/request-join/decision/{joinRequestId}':
    post:
      summary: Approve or reject a pending project join request
@ -376,6 +386,8 @@ paths:
          description: 'Bad Request - Invalid input (e.g., missing decision).'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  /admin/projects:
    get:
      operationId: getAdminProjects
@ -399,6 +411,8 @@ paths:
          description: 'Bad Request - Invalid project data provided (e.g., missing required fields).'
        '401':
          description: Unauthorized - Authentication required or invalid token.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
    post:
      operationId: addProjectManually
      summary: Manually add a new project
@ -424,6 +438,8 @@ paths:
                $ref: '#/components/schemas/project'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
        '409':
          description: Bad Request - Project already exists.
  /admin/projects/pending:
@ -447,6 +463,8 @@ paths:
                  $ref: '#/components/schemas/project'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  /admin/projects/pending/decision:
    post:
      operationId: decidePendingProject
@ -474,6 +492,8 @@ paths:
          description: 'Bad Request - Invalid input (e.g., missing decision).'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/admin/appointments/report/{appointmentId}':
    post:
      operationId: createAppointmentReport
@ -510,6 +530,8 @@ paths:
          description: 'Bad Request - Invalid input (e.g., missing content, invalid appointment ID format).'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
    put:
      operationId: updateAppointmentReport
      summary: Update an existing appointment report
@ -545,6 +567,8 @@ paths:
          description: 'Bad Request - Invalid input (e.g., missing content).'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  /admin/appointments/upcoming:
    get:
      operationId: getUpcomingAppointments
@ -566,6 +590,8 @@ paths:
                  $ref: '#/components/schemas/appointment'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
        '404':
          description: no appointments found.
  '/admin/projects/{projectId}':
@ -593,6 +619,8 @@ paths:
          description: Bad Request - Invalid project ID format.
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/admin/make-admin/{userId}':
    post:
      operationId: grantAdminRights
@ -618,6 +646,8 @@ paths:
          description: Bad Request - Invalid user ID format or user is already an admin.
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  /admin/create-account:
    post:
      summary: Creates Admin out Jwt Token
@ -632,6 +662,8 @@ paths:
          description: No Content - Admin user created successfully.
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/shared/projects/sectionCells/{projectId}/{sectionId}/{date}':
    get:
      operationId: getSectionCellsByDate
@ -676,6 +708,8 @@ paths:
          description: Bad Request - Invalid parameter format.
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/shared/projects/entrepreneurs/{projectId}':
    get:
      operationId: getProjectEntrepreneurs
@ -706,7 +740,7 @@ paths:
        '401':
          description: Unauthorized.
        '403':
-          description: Forbidden - User does not have access to this project.
+          description: Forbidden - User does not have access to this project or invalid Keycloack configuration.
        '404':
          description: Not Found - Project not found.
  '/shared/projects/admin/{projectId}':
@ -737,7 +771,7 @@ paths:
        '401':
          description: Unauthorized.
        '403':
-          description: Forbidden - User does not have access to this project.
+          description: Forbidden - User does not have access to this project or invalid Keycloack configuration.
        '404':
          description: Not Found - Project not found.
  '/shared/projects/appointments/{projectId}':
@ -769,6 +803,8 @@ paths:
                  $ref: '#/components/schemas/appointment'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/shared/appointments/report/{appointmentId}':
    get:
      operationId: getAppointmentReport
@ -798,6 +834,8 @@ paths:
                format: binary
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  /shared/appointments/request:
    post:
      operationId: requestAppointment
@ -823,6 +861,8 @@ paths:
          description: Bad Request - Invalid appointment details.
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  /entrepreneur/projects:
    get:
      summary: gets the projectId of the project associated with the entrepreneur
@ -844,6 +884,8 @@ paths:
                  $ref: '#/components/schemas/project'
        '401':
          description: Unauthorized or identity not found
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
        '404':
          description: Bad Request - Invalid input or ID mismatch.
  /entrepreneur/projects/request:
@ -873,6 +915,8 @@ paths:
          description: 'Bad Request - Invalid input (e.g., missing name).'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  /entrepreneur/sectionCells:
    post:
      operationId: addSectionCell
@ -897,6 +941,8 @@ paths:
          description: 'Bad Request - Invalid input (e.g., missing content or sectionId).'
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
  '/entrepreneur/sectionCells/{sectionCellId}':
    put:
      operationId: modifySectionCell
@ -927,6 +973,8 @@ paths:
          description: OK - Section cell updated successfully. Returns the updated cell.
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
        '404':
          description: Bad Request - Invalid input or ID mismatch.
    delete:
@ -953,5 +1001,7 @@ paths:
          description: Bad Request - Invalid ID format.
        '401':
          description: Unauthorized.
+        '403':
+          description: Bad Token - Invalid Keycloack configuration.
        '404':
          description: Bad Request - sectionCell not found.