> ## Documentation Index
> Fetch the complete documentation index at: https://auth0-automated-translations-update.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Créer un serveur de ressources

> Créez une nouvelle API associée à votre tenant. Notez que toutes les nouvelles API doivent être enregistrées auprès d’Auth0. Pour en savoir plus, consultez <a href="https://www.auth0.com/docs/get-started/apis"> APIs</a>.

export const Scopes = ({scopes = []}) => {
  return <div>
      <div class="api-section-heading flex flex-col gap-y-4 w-full">
        <div class="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 class="api-section-heading-title flex-1 mb-0">Portées</h4>
          <div class="flex items-center"></div>
        </div>
      </div>
      <div class="mt-4">
        <div class="space-y-4 whitespace-normal prose prose-sm prose-gray dark:prose-invert overflow-wrap-anywhere [&_*]:overflow-wrap-anywhere">
          <p class="whitespace-pre-line text-xs">
            {"Les portées définissent les autorisations et les niveaux d’accès des requêtes API et des jetons d’authentification."}
          </p>
        </div>
      </div>
      <div class="flex font-mono text-sm group/param-head param-head break-all relative mt-6" id="scopes-scopes">
        <div class="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div class="flex items-center flex-wrap gap-2">
            <div class="absolute -top-1.5">
              <a href="#scopes-scopes" class="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Aller à l’en-tête">
                ​
                <div class="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            {scopes.map((scope, index) => {
    return <span class="flex items-center px-2 py-0.5 rounded-md bg-gray-100/50 dark:bg-white/5 text-gray-600 dark:text-gray-200 font-medium break-all" style={{
      lineHeight: "1rem",
      fontSize: "0.75rem",
      fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace'
    }} data-component-part="field-info-pill" key={index}>
                  {scope}
                </span>;
  })}
          </div>
        </div>
      </div>
    </div>;
};

export const ApiReleaseLifecycle = ({releaseLifecycle = "GA"}) => {
  const lifecycleMap = {
    ea: "Accès anticipé",
    ga: "Généralement disponible",
    deprecated: "Déprécié",
    planned: "Planifié",
    beta: "Bêta"
  };
  const LIFECYCLE_THEMES = {
    info: {
      light: {
        bg: "lab(91.896% .077188 -6.94053)",
        text: "lab(36.091% 25.9241 -68.0384)"
      },
      dark: {
        bg: "lab(16.0426% 6.71726 -27.2409)",
        text: "lab(72.6029% 4.08953 -41.9669)"
      }
    },
    secondary: {
      light: {
        bg: "lab(90.8548% 11.3355 8.01476)",
        text: "lab(47.5286% 56.4238 43.4706)"
      },
      dark: {
        bg: "lab(16.3609% 37.191 25.6346)",
        text: "lab(71.881% 41.5 29.4839)"
      }
    },
    danger: {
      light: {
        bg: "lab(94.7916% -.0000298023 0)",
        text: "lab(54.3656% 0 -.0000119209)"
      },
      dark: {
        bg: "lab(13.232% 0 0)",
        text: "lab(51.6164% 0 0)"
      }
    }
  };
  const LIFECYCLE_THEME_MAP = {
    ea: "info",
    ga: "info",
    beta: "info",
    deprecated: "secondary",
    planned: "danger"
  };
  const lifecycle = releaseLifecycle.toLocaleLowerCase();
  const lifecycleText = lifecycleMap[lifecycle];
  if (!lifecycleText) {
    return null;
  }
  const theme = LIFECYCLE_THEMES[LIFECYCLE_THEME_MAP[lifecycle]];
  return <div>
      <div className="api-section-heading flex flex-col gap-y-4 w-full">
        <div className="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 className="api-section-heading-title flex-1 mb-0">Cycle de vie de la version</h4>
        </div>
      </div>
      <div className="flex font-mono text-sm group/param-head param-head break-all relative mt-2.5" id="releaselifecycle-lifecycle">
        <div className="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div className="flex items-center flex-wrap gap-2">
            <div className="absolute -top-1.5">
              <a href="#releaselifecycle-lifecycle" className="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Naviguer vers l'en-tête">
                <div className="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            <span className="inline-flex items-center w-fit font-medium gap-1 py-0.5 px-2 rounded-md" style={{
    lineHeight: "1rem",
    fontSize: "0.75rem",
    fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace',
    backgroundColor: `light-dark(${theme.light.bg}, ${theme.dark.bg})`,
    color: `light-dark(${theme.light.text}, ${theme.dark.text})`,
    borderColor: `light-dark(color-mix(in oklab, ${theme.light.text} 25%, transparent), color-mix(in oklab, ${theme.dark.text} 25%, transparent))`
  }}>
              {lifecycleText}
            </span>
          </div>
        </div>
      </div>
    </div>;
};

<ApiReleaseLifecycle releaseLifecycle="GA" />

<Scopes scopes={["create:resource_servers"]} />


## OpenAPI

````yaml docs/fr-ca/oas/management/v2/management-api-oas.json POST /resource-servers
openapi: 3.1.0
info:
  title: Auth0 Management API
  description: Auth0 Management API v2.
  termsOfService: https://auth0.com/web-terms/
  contact:
    name: Auth0 Support
    url: https://support.auth0.com
  version: '2.0'
servers:
  - url: https://{tenantDomain}/api/v2
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du tenant Auth0
security:
  - bearerAuth: []
externalDocs:
  description: Documentation de l’Auth0 Management API
  url: https://auth0.com/docs/api/management/v2/
paths:
  /resource-servers:
    post:
      tags:
        - resource-servers
      summary: Créer un serveur de ressources
      description: >-
        Créez une nouvelle API associée à votre tenant. Notez que toutes les
        nouvelles API doivent être enregistrées auprès d’Auth0. Pour en savoir
        plus, consultez <a href="https://www.auth0.com/docs/get-started/apis">
        APIs</a>.
      operationId: post_resource-servers
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateResourceServerRequestContent'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/CreateResourceServerRequestContent'
      responses:
        '201':
          description: Serveur de ressources créé avec succès.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateResourceServerResponseContent'
        '400':
          description: Corps de requête invalide. Le message variera selon la cause.
          x-description-1: Scopes with the 'dev.ucp' prefix are reserved.
          x-description-2: The selected identifier is reserved.
        '401':
          description: Jeton invalide.
          x-description-1: Client is not global.
          x-description-2: Invalid signature received for JSON Web Token validation.
        '403':
          description: >-
            Scope insuffisant; l’un des scopes suivants est requis :
            create:resource_servers.
          x-description-1: You reached the limit of entities of this type for this tenant.
          x-description-2: >-
            The resource server type cannot be set because this tenant is not
            enabled for Universal Commerce Protocol.
        '409':
          description: Un serveur de ressources avec le même identifiant existe déjà.
          x-description-1: >-
            Another resource server is already configured with type
            universal_commerce_protocol_server. Only 1 resource server per
            tenant can have this type.
        '429':
          description: >-
            Trop de requêtes. Vérifiez les en-têtes X-RateLimit-Limit,
            X-RateLimit-Remaining et X-RateLimit-Reset.
      security:
        - bearerAuth: []
        - oAuth2ClientCredentials:
            - create:resource_servers
      x-codeSamples:
        - lang: csharp
          label: Create a resource server
          source: |
            using Auth0.ManagementApi;
            using System.Threading.Tasks;

            public partial class Examples
            {
                public async Task Example() {
                    var client = new ManagementApiClient(
                        token: "<token>",
                        clientOptions: new ClientOptions { BaseUrl = "https://{YOUR_DOMAIN}/api/v2" }
                    );

                    await client.ResourceServers.CreateAsync(
                        new CreateResourceServerRequestContent {
                            Identifier = "identifier"
                        }
                    );
                }

            }
        - lang: go
          label: Create a resource server
          source: |
            package example

            import (
                context "context"

                management "github.com/auth0/go-auth0/v3/management"
                client "github.com/auth0/go-auth0/v3/management/client"
                option "github.com/auth0/go-auth0/v3/management/option"
            )

            func do() {
                mgmt, err := client.New(
                    "{YOUR_DOMAIN}",
                    option.WithToken(
                        "<token>",
                    ),
                )
                if err != nil {
                    return
                }
                request := &management.CreateResourceServerRequestContent{
                    Identifier: "identifier",
                }
                mgmt.ResourceServers.Create(
                    context.TODO(),
                    request,
                )
            }
        - lang: java
          label: Create a resource server
          source: >-
            package com.example.usage;


            import com.auth0.client.mgmt.ManagementApi;

            import
            com.auth0.client.mgmt.types.CreateResourceServerRequestContent;


            public class Example {
                public static void main(String[] args) {
                    ManagementApi client = ManagementApi
                        .builder()
                        .domain("{YOUR_DOMAIN}")
                        .token("<token>")
                        .build();

                    client.resourceServers().create(
                        CreateResourceServerRequestContent
                            .builder()
                            .identifier("identifier")
                            .build()
                    );
                }
            }
        - lang: php
          label: Create a resource server
          source: >
            <?php


            namespace Example;


            use Auth0\SDK\API\Management\Wrapper\ManagementClient;

            use Auth0\SDK\API\Management\Wrapper\ManagementClientOptions;

            use
            Auth0\SDK\API\Management\ResourceServers\Requests\CreateResourceServerRequestContent;


            $client = new ManagementClient(new ManagementClientOptions(
                domain: '{YOUR_DOMAIN}',
                token: '<token>',
            ));

            $client->resourceServers->create(
                new CreateResourceServerRequestContent([
                    'identifier' => 'identifier',
                ]),
            );
        - lang: python
          label: Create a resource server
          source: |
            from auth0.management import ManagementClient

            client = ManagementClient(
                domain="{YOUR_DOMAIN}",
                token="<token>",
            )

            client.resource_servers.create(
                identifier="identifier",
            )
        - lang: ruby
          label: Create a resource server
          source: >
            require "auth0"


            client = Auth0::Management.new(token: "<token>", base_url:
            "https://{YOUR_DOMAIN}/api/v2")


            client.resource_servers.create(identifier: "identifier")
        - lang: typescript
          label: Create a resource server
          source: |
            import { ManagementClient } from "auth0";

            async function main() {
                const client = new ManagementClient({
                    domain: "{YOUR_DOMAIN}",
                    token: "<token>",
                });
                await client.resourceServers.create({
                    identifier: "identifier",
                });
            }
            main();
        - lang: javascript
          label: Create a resource server
          source: |
            import { ManagementClient } from "auth0";

            async function main() {
                const client = new ManagementClient({
                    domain: "{YOUR_DOMAIN}",
                    token: "<token>",
                });
                await client.resourceServers.create({
                    identifier: "identifier",
                });
            }
            main();
components:
  schemas:
    CreateResourceServerRequestContent:
      type: object
      additionalProperties: false
      required:
        - identifier
      properties:
        name:
          type: string
          description: >-
            Nom convivial de ce serveur de ressources. Ne peut pas contenir les
            caractères `<` ou `>`.
          maxLength: 200
          pattern: ^[^<>]+$
        identifier:
          type: string
          description: >-
            Identifiant unique de l’API utilisé comme paramètre audience dans
            les appels d’autorisation. Ne peut pas être modifié une fois défini.
          minLength: 1
          maxLength: 600
        scopes:
          type: array
          description: Liste des permissions (scopes) utilisées par cette API.
          items:
            $ref: '#/components/schemas/ResourceServerScope'
        signing_alg:
          $ref: '#/components/schemas/SigningAlgorithmEnum'
        signing_secret:
          type: string
          description: >-
            Secret utilisé pour signer les jetons lors de l’utilisation
            d’algorithmes symétriques (HS256).
          minLength: 16
        allow_offline_access:
          type: boolean
          description: >-
            Indique si des jetons d’actualisation peuvent être émis pour cette
            API (true) ou non (false).
        allow_online_access:
          type: boolean
          description: >-
            Indique si des Online Refresh Tokens peuvent être émis pour cette
            API (true) ou non (false).
        allow_online_access_with_ephemeral_sessions:
          type: boolean
          description: >-
            Indique si des Online Refresh Tokens peuvent être émis même lorsque
            les sessions sont configurées comme éphémères (true) ou non (false).
        token_lifetime:
          type: integer
          description: >-
            Valeur d’expiration (en secondes) des jetons d’accès émis pour cette
            API depuis le point de terminaison des jetons.
          minimum: 0
          maximum: 2592000
        token_lifetime_for_anonymous_access_tokens:
          type:
            - integer
            - 'null'
          description: >-
            Durée de validité (en secondes) des jetons d’accès de sessions
            anonymes émis pour cette API.
          minimum: 86400
          maximum: 2592000
          x-release-lifecycle: EA
        token_dialect:
          $ref: '#/components/schemas/ResourceServerTokenDialectSchemaEnum'
        skip_consent_for_verifiable_first_party_clients:
          type: boolean
          description: >-
            Indique si le consentement de l’utilisateur doit être ignoré pour
            les applications marquées comme de première partie (true) ou non
            (false).
        enforce_policies:
          type: boolean
          description: >-
            Indique s’il faut appliquer les politiques d’autorisation (true) ou
            les ignorer (false).
        access_token:
          $ref: '#/components/schemas/ResourceServerAccessToken'
          x-release-lifecycle: EA
        token_encryption:
          $ref: '#/components/schemas/ResourceServerTokenEncryption'
        consent_policy:
          $ref: '#/components/schemas/ResourceServerConsentPolicyEnum'
        require_consent_non_repudiation:
          type: boolean
          description: >-
            Lorsque cette valeur est vraie, le serveur de ressources exige que
            chaque approbation de consentement soit signée numériquement afin
            que l’approbateur ne puisse pas ultérieurement nier un consentement
            qu’il a accordé. Lorsque cette valeur est fausse, les décisions de
            consentement n’ont pas besoin de signature. La valeur par défaut est
            fausse. Une valeur configurée est tout de même renvoyée, même après
            la désactivation du droit associé.
          x-release-lifecycle: EA
        authorization_details:
          type:
            - array
            - 'null'
          items: {}
        proof_of_possession:
          $ref: '#/components/schemas/ResourceServerProofOfPossession'
        subject_type_authorization:
          $ref: '#/components/schemas/ResourceServerSubjectTypeAuthorization'
        authorization_policy:
          $ref: '#/components/schemas/ResourceServerAuthorizationPolicy'
          x-release-lifecycle: EA
    CreateResourceServerResponseContent:
      type: object
      additionalProperties: false
      properties:
        id:
          type: string
          description: ID de l’API (serveur de ressources).
        name:
          type: string
          description: >-
            Nom convivial de ce serveur de ressources. Ne peut pas contenir les
            caractères `<` ou `>`.
        is_system:
          type: boolean
          description: >-
            Indique s’il s’agit d’une API système Auth0 (true) ou d’une API
            personnalisée (false).
        identifier:
          type: string
          description: >-
            Identificateur unique de l’API utilisé comme paramètre audience dans
            les appels d’autorisation. Ne peut pas être modifié une fois défini.
        scopes:
          type: array
          description: Liste des permissions (scopes) utilisées par cette API.
          items:
            $ref: '#/components/schemas/ResourceServerScope'
        signing_alg:
          $ref: '#/components/schemas/SigningAlgorithmEnum'
        signing_secret:
          type: string
          description: >-
            Secret utilisé pour signer les jetons lors de l’utilisation
            d’algorithmes symétriques (HS256).
          minLength: 16
        allow_offline_access:
          type: boolean
          description: >-
            Indique si des jetons d’actualisation peuvent être émis pour cette
            API (true) ou non (false).
        allow_online_access:
          type: boolean
          description: >-
            Indique si des Online Refresh Tokens peuvent être émis pour cette
            API (true) ou non (false).
        allow_online_access_with_ephemeral_sessions:
          type: boolean
          description: >-
            Indique si des Online Refresh Tokens peuvent être émis même lorsque
            les sessions sont configurées comme éphémères (true) ou non (false).
        skip_consent_for_verifiable_first_party_clients:
          type: boolean
          description: >-
            Indique si le consentement de l’utilisateur doit être ignoré pour
            les applications marquées comme de première partie (true) ou non
            (false).
        token_lifetime:
          type: integer
          description: >-
            Valeur d’expiration (en secondes) des jetons d’accès émis pour cette
            API depuis le point de terminaison des jetons.
        token_lifetime_for_web:
          type: integer
          description: >-
            Valeur d’expiration (en secondes) des jetons d’accès émis pour cette
            API au moyen des flux Implicit ou Hybrid. Ne peut pas être
            supérieure à la valeur `token_lifetime`.
        enforce_policies:
          type: boolean
          description: >-
            Indique si les politiques d’autorisation sont appliquées (true) ou
            non (false).
        token_lifetime_for_anonymous_access_tokens:
          type: integer
          description: >-
            Durée de validité (en secondes) des jetons d’accès de sessions
            anonymes émis pour cette API.
          x-release-lifecycle: EA
        token_dialect:
          $ref: '#/components/schemas/ResourceServerTokenDialectResponseEnum'
        access_token:
          $ref: '#/components/schemas/ResourceServerAccessToken'
          x-release-lifecycle: EA
        token_encryption:
          $ref: '#/components/schemas/ResourceServerTokenEncryption'
        consent_policy:
          $ref: '#/components/schemas/ResourceServerConsentPolicyEnum'
        require_consent_non_repudiation:
          type: boolean
          description: >-
            Lorsque cette valeur est vraie, le serveur de ressources exige que
            chaque approbation de consentement soit signée numériquement afin
            que l’approbateur ne puisse pas ultérieurement nier un consentement
            qu’il a accordé. Lorsque cette valeur est fausse, les décisions de
            consentement n’ont pas besoin de signature. La valeur par défaut est
            fausse. Une valeur configurée est tout de même renvoyée, même après
            la désactivation du droit associé.
          x-release-lifecycle: EA
        authorization_details:
          type:
            - array
            - 'null'
          items: {}
        proof_of_possession:
          $ref: '#/components/schemas/ResourceServerProofOfPossession'
        subject_type_authorization:
          $ref: '#/components/schemas/ResourceServerSubjectTypeAuthorization'
        authorization_policy:
          $ref: '#/components/schemas/ResourceServerAuthorizationPolicy'
          x-release-lifecycle: EA
        client_id:
          type: string
          description: ID client du client auquel ce serveur de ressources est lié
          format: client-id
    ResourceServerScope:
      type: object
      additionalProperties: false
      required:
        - value
      properties:
        value:
          type: string
          description: Valeur de ce scope.
          minLength: 1
          maxLength: 280
        description:
          type: string
          description: Description conviviale de ce scope.
          maxLength: 500
    SigningAlgorithmEnum:
      type: string
      description: >-
        Algorithme utilisé pour signer les JWT. Peut être `HS256` (par défaut)
        ou `RS256`. `PS256` est offert via l’addon.
      default: HS256
      enum:
        - HS256
        - RS256
        - RS512
        - PS256
    ResourceServerTokenDialectSchemaEnum:
      type: string
      description: >-
        Dialecte du jeton d’accès émis. `access_token` est un JWT contenant des
        claims Auth0 standard; `rfc9068_profile` est un JWT conforme au profil
        de jeton d’accès JWT de l’IETF. `access_token_authz` et
        `rfc9068_profile_authz` incluent aussi des claims de permissions RBAC.
      enum:
        - access_token
        - access_token_authz
        - rfc9068_profile
        - rfc9068_profile_authz
    ResourceServerAccessToken:
      type:
        - object
        - 'null'
      description: Configuration personnalisée des jetons d'accès
      additionalProperties: false
      x-release-lifecycle: EA
      properties:
        claims_mapping:
          $ref: '#/components/schemas/ResourceServerAccessTokenClaimsMapping'
          x-release-lifecycle: EA
    ResourceServerTokenEncryption:
      type:
        - object
        - 'null'
      additionalProperties: false
      required:
        - format
        - encryption_key
      properties:
        format:
          $ref: '#/components/schemas/ResourceServerTokenEncryptionFormatEnum'
        encryption_key:
          $ref: '#/components/schemas/ResourceServerTokenEncryptionKey'
    ResourceServerConsentPolicyEnum:
      type:
        - string
        - 'null'
      enum:
        - transactional-authorization-with-mfa
        - null
    ResourceServerProofOfPossession:
      type:
        - object
        - 'null'
      description: Configuration de Proof-of-Possession pour les jetons d’accès
      additionalProperties: false
      required:
        - mechanism
        - required
      properties:
        mechanism:
          $ref: '#/components/schemas/ResourceServerProofOfPossessionMechanismEnum'
        required:
          type: boolean
          description: >-
            Indique si l’utilisation de Proof-of-Possession est requise pour le
            serveur de ressources
        required_for:
          $ref: '#/components/schemas/ResourceServerProofOfPossessionRequiredForEnum'
    ResourceServerSubjectTypeAuthorization:
      type: object
      description: >-
        Définit la permission d’accès de l’application pour un serveur de
        ressources
      additionalProperties: false
      properties:
        user:
          $ref: '#/components/schemas/ResourceServerSubjectTypeAuthorizationUser'
        client:
          $ref: '#/components/schemas/ResourceServerSubjectTypeAuthorizationClient'
        anonymous_user:
          $ref: >-
            #/components/schemas/ResourceServerSubjectTypeAuthorizationAnonymousUser
          x-release-lifecycle: EA
    ResourceServerAuthorizationPolicy:
      type:
        - object
        - 'null'
      description: Politique d’autorisation du serveur de ressources.
      additionalProperties: false
      required:
        - policy_id
      x-release-lifecycle: EA
      properties:
        policy_id:
          type: string
          description: L’ID de la politique d’autorisation à appliquer.
          minLength: 1
          maxLength: 1024
    ResourceServerTokenDialectResponseEnum:
      type: string
      description: >-
        Dialecte des jetons d’accès à émettre. `access_token` est un JWT
        contenant des claims Auth0 standard; `rfc9068_profile` est un JWT
        conforme au profil de jeton d’accès JWT de l’IETF. `access_token_authz`
        et `rfc9068_profile_authz` incluent aussi des claims de permissions
        RBAC.
      enum:
        - access_token
        - access_token_authz
        - rfc9068_profile
        - rfc9068_profile_authz
    ResourceServerAccessTokenClaimsMapping:
      type: object
      description: Configuration personnalisée des demandes dans les jetons d'accès
      additionalProperties: false
      x-release-lifecycle: EA
      properties:
        custom_claims:
          $ref: '#/components/schemas/ResourceServerAccessTokenCustomClaimsMapping'
          x-release-lifecycle: EA
    ResourceServerTokenEncryptionFormatEnum:
      description: Format du payload JWT chiffré.
      enum:
        - compact-nested-jwe
    ResourceServerTokenEncryptionKey:
      type: object
      additionalProperties: false
      required:
        - alg
        - pem
      properties:
        name:
          type: string
          description: Nom de la clé de chiffrement.
          minLength: 1
          maxLength: 128
        alg:
          $ref: '#/components/schemas/ResourceServerTokenEncryptionAlgorithmEnum'
        kid:
          type: string
          description: ID de clé.
          minLength: 1
          maxLength: 128
        pem:
          type: string
          description: Clé publique au format PEM. Doit être échappée en JSON.
          default: "-----BEGIN PUBLIC KEY-----\r\nMIIBIjANBg...\r\n-----END PUBLIC KEY-----\r\n"
          minLength: 1
          maxLength: 4096
    ResourceServerProofOfPossessionMechanismEnum:
      type: string
      description: Mécanisme prévu pour Proof-of-Possession
      enum:
        - mtls
        - dpop
    ResourceServerProofOfPossessionRequiredForEnum:
      type: string
      description: Précise quels types de clients nécessitent Proof-of-Possession
      enum:
        - public_clients
        - all_clients
    ResourceServerSubjectTypeAuthorizationUser:
      type: object
      description: Permissions d’accès pour les flux utilisateur
      additionalProperties: true
      properties:
        policy:
          $ref: >-
            #/components/schemas/ResourceServerSubjectTypeAuthorizationUserPolicyEnum
    ResourceServerSubjectTypeAuthorizationClient:
      type: object
      description: Permissions d’accès pour les flux client
      additionalProperties: true
      properties:
        policy:
          $ref: >-
            #/components/schemas/ResourceServerSubjectTypeAuthorizationClientPolicyEnum
    ResourceServerSubjectTypeAuthorizationAnonymousUser:
      type: object
      description: Autorisations d’accès pour les flux d’utilisateurs anonymes
      additionalProperties: true
      x-release-lifecycle: EA
      properties:
        policy:
          $ref: >-
            #/components/schemas/ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum
    ResourceServerAccessTokenCustomClaimsMapping:
      type: array
      description: >-
        Demandes personnalisées à émettre dans les jetons d'accès de session
        anonyme. Chaque règle associe une valeur lue dans le contexte de session
        anonyme (au moyen d'une expression de chemin restreint séparé par des
        points) à une demande nommée de jeton d'accès.
      x-release-lifecycle: EA
      items:
        $ref: '#/components/schemas/ResourceServerAccessTokenCustomClaimsMappingRule'
    ResourceServerTokenEncryptionAlgorithmEnum:
      type: string
      description: Algorithme utilisé pour chiffrer le jeton.
      enum:
        - RSA-OAEP-256
        - RSA-OAEP-384
        - RSA-OAEP-512
    ResourceServerSubjectTypeAuthorizationUserPolicyEnum:
      type: string
      description: Définit la politique des flux utilisateur pour le serveur de ressources
      enum:
        - allow_all
        - deny_all
        - require_client_grant
    ResourceServerSubjectTypeAuthorizationClientPolicyEnum:
      type: string
      description: Définit la politique des flux client pour le serveur de ressources
      enum:
        - deny_all
        - require_client_grant
    ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum:
      type: string
      description: >-
        Définit la politique des flux d’utilisateurs anonymes pour le serveur de
        ressources
      enum:
        - deny_all
        - require_client_grant
    ResourceServerAccessTokenCustomClaimsMappingRule:
      type: object
      additionalProperties: false
      required:
        - name
        - expression
      properties:
        name:
          type: string
          description: >-
            Nom de la demande de jeton d'accès à émettre, stocké selon la casse
            que vous fournissez. Les noms de demandes OIDC/JWT réservés ne sont
            pas autorisés (comparés sans distinction de casse).
          minLength: 1
          maxLength: 255
        expression:
          type: string
          description: >-
            Expression de chemin restreint séparé par des points, lue dans le
            contexte de session anonyme (p. ex.
            `anonymous_session.metadata.country`).
          minLength: 1
          maxLength: 255
          pattern: >-
            ^[A-Za-z_][A-Za-z0-9_]*(?:-[A-Za-z0-9_]+)*(?:\.[A-Za-z_][A-Za-z0-9_]*(?:-[A-Za-z0-9_]+)*)+$
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: jwt
    oAuth2ClientCredentials:
      type: oauth2
      flows:
        clientCredentials:
          tokenUrl: /oauth/token/
          x-form-parameters:
            audience: /api/v2/
          scopes:
            create:actions: Create Actions
            read:actions: Read Actions
            update:actions: Update Actions
            delete:actions: Delete Actions
            create:agents: Create Agents
            read:agents: Read Agents
            update:agents: Update Agents
            delete:agents: Delete Agents
            read:anomaly_blocks: Read Anomaly Blocks
            delete:anomaly_blocks: Delete Anomaly Blocks
            read:attack_protection: Read Attack Protection
            update:attack_protection: Update Attack Protection
            create:authentication_methods: Create Authentication Methods
            read:authentication_methods: Read Authentication Methods
            update:authentication_methods: Update Authentication Methods
            delete:authentication_methods: Delete Authentication Methods
            read:branding: Read Branding
            update:branding: Update Branding
            delete:branding: Delete Branding
            create:client_credentials: Create Client Credentials
            read:client_credentials: Read Client Credentials
            update:client_credentials: Update Client Credentials
            delete:client_credentials: Delete Client Credentials
            create:client_grants: Create Client Grants
            read:client_grants: Read Client Grants
            update:client_grants: Update Client Grants
            delete:client_grants: Delete Client Grants
            read:client_keys: Read Client Keys
            update:client_keys: Update Client Keys
            read:client_summary: Read Client Summary
            update:client_token_vault_privileged_access: Update Client Token Vault Privileged Access
            create:clients: Create Clients
            read:clients: Read Clients
            update:clients: Update Clients
            delete:clients: Delete Clients
            create:connection_profiles: Create Connection Profiles
            read:connection_profiles: Read Connection Profiles
            update:connection_profiles: Update Connection Profiles
            delete:connection_profiles: Delete Connection Profiles
            create:connections: Create Connections
            read:connections: Read Connections
            update:connections: Update Connections
            delete:connections: Delete Connections
            create:connections_keys: Create Connections Keys
            read:connections_keys: Read Connections Keys
            update:connections_keys: Update Connections Keys
            read:current_user: Read Current User
            delete:current_user: Delete Current User
            create:current_user_device_credentials: Create Current User Device Credentials
            delete:current_user_device_credentials: Delete Current User Device Credentials
            update:current_user_identities: Update Current User Identities
            update:current_user_metadata: Update Current User Metadata
            create:custom_domains: Create Custom Domains
            read:custom_domains: Read Custom Domains
            update:custom_domains: Update Custom Domains
            delete:custom_domains: Delete Custom Domains
            create:custom_signing_keys: Create Custom Signing Keys
            read:custom_signing_keys: Read Custom Signing Keys
            update:custom_signing_keys: Update Custom Signing Keys
            delete:custom_signing_keys: Delete Custom Signing Keys
            read:device_credentials: Read Device Credentials
            delete:device_credentials: Delete Device Credentials
            create:directory_provisionings: Create Directory Provisionings
            read:directory_provisionings: Read Directory Provisionings
            update:directory_provisionings: Update Directory Provisionings
            delete:directory_provisionings: Delete Directory Provisionings
            create:email_provider: Create Email Provider
            read:email_provider: Read Email Provider
            update:email_provider: Update Email Provider
            delete:email_provider: Delete Email Provider
            create:email_templates: Create Email Templates
            read:email_templates: Read Email Templates
            update:email_templates: Update Email Templates
            create:encryption_keys: Create Encryption Keys
            read:encryption_keys: Read Encryption Keys
            update:encryption_keys: Update Encryption Keys
            delete:encryption_keys: Delete Encryption Keys
            read:event_deliveries: Read Event Deliveries
            update:event_deliveries: Update Event Deliveries
            create:event_streams: Create Event Streams
            read:event_streams: Read Event Streams
            update:event_streams: Update Event Streams
            delete:event_streams: Delete Event Streams
            read:events: Read Events
            create:experimentation: Create Experimentation
            read:experimentation: Read Experimentation
            update:experimentation: Update Experimentation
            delete:experimentation: Delete Experimentation
            create:flows: Create Flows
            read:flows: Read Flows
            update:flows: Update Flows
            delete:flows: Delete Flows
            read:flows_executions: Read Flows Executions
            delete:flows_executions: Delete Flows Executions
            create:flows_vault_connections: Create Flows Vault Connections
            read:flows_vault_connections: Read Flows Vault Connections
            update:flows_vault_connections: Update Flows Vault Connections
            delete:flows_vault_connections: Delete Flows Vault Connections
            create:forms: Create Forms
            read:forms: Read Forms
            update:forms: Update Forms
            delete:forms: Delete Forms
            read:grants: Read Grants
            delete:grants: Delete Grants
            read:group_members: Read Group Members
            create:group_roles: Create Group Roles
            read:group_roles: Read Group Roles
            delete:group_roles: Delete Group Roles
            read:groups: Read Groups
            delete:groups: Delete Groups
            create:guardian_enrollment_tickets: Create Guardian Enrollment Tickets
            read:guardian_enrollments: Read Guardian Enrollments
            delete:guardian_enrollments: Delete Guardian Enrollments
            read:guardian_factors: Read Guardian Factors
            update:guardian_factors: Update Guardian Factors
            create:hooks: Create Hooks
            read:hooks: Read Hooks
            update:hooks: Update Hooks
            delete:hooks: Delete Hooks
            create:log_streams: Create Log Streams
            read:log_streams: Read Log Streams
            update:log_streams: Update Log Streams
            delete:log_streams: Delete Log Streams
            read:logs: Read Logs
            read:logs_users: Read Logs Users
            read:mfa_policies: Read Mfa Policies
            update:mfa_policies: Update Mfa Policies
            create:network_acls: Create Network Acls
            read:network_acls: Read Network Acls
            update:network_acls: Update Network Acls
            delete:network_acls: Delete Network Acls
            create:organization_client_grants: Create Organization Client Grants
            read:organization_client_grants: Read Organization Client Grants
            delete:organization_client_grants: Delete Organization Client Grants
            create:organization_connections: Create Organization Connections
            read:organization_connections: Read Organization Connections
            update:organization_connections: Update Organization Connections
            delete:organization_connections: Delete Organization Connections
            create:organization_discovery_domains: Create Organization Discovery Domains
            read:organization_discovery_domains: Read Organization Discovery Domains
            update:organization_discovery_domains: Update Organization Discovery Domains
            delete:organization_discovery_domains: Delete Organization Discovery Domains
            create:organization_group_roles: Create Organization Group Roles
            read:organization_group_roles: Read Organization Group Roles
            delete:organization_group_roles: Delete Organization Group Roles
            read:organization_groups: Read Organization Groups
            create:organization_invitations: Create Organization Invitations
            read:organization_invitations: Read Organization Invitations
            delete:organization_invitations: Delete Organization Invitations
            read:organization_member_effective_roles: Read Organization Member Effective Roles
            read:organization_member_role_source_groups: Read Organization Member Role Source Groups
            create:organization_member_roles: Create Organization Member Roles
            read:organization_member_roles: Read Organization Member Roles
            delete:organization_member_roles: Delete Organization Member Roles
            create:organization_members: Create Organization Members
            read:organization_members: Read Organization Members
            delete:organization_members: Delete Organization Members
            create:organizations: Create Organizations
            read:organizations: Read Organizations
            update:organizations: Update Organizations
            delete:organizations: Delete Organizations
            read:organizations_summary: Read Organizations Summary
            create:phone_providers: Create Phone Providers
            read:phone_providers: Read Phone Providers
            update:phone_providers: Update Phone Providers
            delete:phone_providers: Delete Phone Providers
            create:phone_templates: Create Phone Templates
            read:phone_templates: Read Phone Templates
            update:phone_templates: Update Phone Templates
            delete:phone_templates: Delete Phone Templates
            read:prompts: Read Prompts
            update:prompts: Update Prompts
            create:rate_limit_policies: Create Rate Limit Policies
            read:rate_limit_policies: Read Rate Limit Policies
            update:rate_limit_policies: Update Rate Limit Policies
            delete:rate_limit_policies: Delete Rate Limit Policies
            read:refresh_tokens: Read Refresh Tokens
            update:refresh_tokens: Update Refresh Tokens
            delete:refresh_tokens: Delete Refresh Tokens
            create:resource_servers: Create Resource Servers
            read:resource_servers: Read Resource Servers
            update:resource_servers: Update Resource Servers
            delete:resource_servers: Delete Resource Servers
            create:role_members: Create Role Members
            read:role_members: Read Role Members
            delete:role_members: Delete Role Members
            create:roles: Create Roles
            read:roles: Read Roles
            update:roles: Update Roles
            delete:roles: Delete Roles
            create:rules: Create Rules
            read:rules: Read Rules
            update:rules: Update Rules
            delete:rules: Delete Rules
            read:rules_configs: Read Rules Configs
            update:rules_configs: Update Rules Configs
            delete:rules_configs: Delete Rules Configs
            create:scim_config: Create Scim Config
            read:scim_config: Read Scim Config
            update:scim_config: Update Scim Config
            delete:scim_config: Delete Scim Config
            create:scim_token: Create Scim Token
            read:scim_token: Read Scim Token
            delete:scim_token: Delete Scim Token
            read:self_service_profile_custom_texts: Read Self Service Profile Custom Texts
            update:self_service_profile_custom_texts: Update Self Service Profile Custom Texts
            create:self_service_profiles: Create Self Service Profiles
            read:self_service_profiles: Read Self Service Profiles
            update:self_service_profiles: Update Self Service Profiles
            delete:self_service_profiles: Delete Self Service Profiles
            read:sessions: Read Sessions
            update:sessions: Update Sessions
            delete:sessions: Delete Sessions
            create:signing_keys: Create Signing Keys
            read:signing_keys: Read Signing Keys
            update:signing_keys: Update Signing Keys
            create:sso_access_tickets: Create Sso Access Tickets
            delete:sso_access_tickets: Delete Sso Access Tickets
            read:stats: Read Stats
            read:tenant_settings: Read Tenant Settings
            update:tenant_settings: Update Tenant Settings
            create:token_exchange_profiles: Create Token Exchange Profiles
            read:token_exchange_profiles: Read Token Exchange Profiles
            update:token_exchange_profiles: Update Token Exchange Profiles
            delete:token_exchange_profiles: Delete Token Exchange Profiles
            create:user_attribute_profiles: Create User Attribute Profiles
            read:user_attribute_profiles: Read User Attribute Profiles
            update:user_attribute_profiles: Update User Attribute Profiles
            delete:user_attribute_profiles: Delete User Attribute Profiles
            read:user_effective_permissions: Read User Effective Permissions
            read:user_effective_roles: Read User Effective Roles
            read:user_idp_tokens: Read User Idp Tokens
            read:user_permission_source_roles: Read User Permission Source Roles
            read:user_role_source_groups: Read User Role Source Groups
            create:user_tickets: Create User Tickets
            create:users: Create Users
            read:users: Read Users
            update:users: Update Users
            delete:users: Delete Users
            update:users_app_metadata: Update Users App Metadata
            create:vdcs_templates: Create Vdcs Templates
            read:vdcs_templates: Read Vdcs Templates
            update:vdcs_templates: Update Vdcs Templates
            delete:vdcs_templates: Delete Vdcs Templates
            create:organization_clients: Create Organization Client Associations
            read:organization_clients: Read Organization Client Associations
            update:organization_clients: Update Organization Client Associations
            delete:organization_clients: Delete Organization Client Associations
            create:network_acl_keys: Create Network ACL Keys
            read:network_acl_keys: Read Network ACL Keys
            delete:network_acl_keys: Delete Network ACL Keys

````