{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/commandplusk/main/json-schema/commandplusk-post-cmdk-verify-user-response-schema.json",
  "title": "PostCmdkVerifyUserResponse",
  "x-generated": "2026-10-16",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/_ae-authored/commandplusk-openapi-generated.yml#/components/schemas/PostCmdkVerifyUserResponse",
  "type": "object",
  "properties": {
    "allowed": {
      "type": "boolean",
      "description": "Grant (true) or deny (false) the connection. Required."
    },
    "subject": {
      "type": "string",
      "description": "Optional replacement for the subject sent in the request."
    },
    "email": {
      "type": "string",
      "description": "Optional email to store on the end‑user record."
    },
    "display_name": {
      "type": "string",
      "description": "Optional display name for the end‑user."
    },
    "scopes": {
      "type": "array",
      "description": "Optional array of scopes to replace the requested_scopes."
    },
    "ttl_seconds": {
      "type": "integer",
      "description": "Optional token lifetime in seconds (default 24 h, clamped 60 s–30 days)."
    },
    "reason": {
      "type": "string",
      "description": "Optional reason shown to the user when allowed is false."
    }
  }
}