{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/ibm-api-connect/json-schema/ibm-api-connect-strategy-schema.json",
  "title": "Strategy",
  "x-generated": "2026-10-29",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/ibm-api-connect-application-strategy-management-api-openapi.yml#/components/schemas/Strategy",
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "type": {
      "type": "string",
      "readOnly": true,
      "enum": [
        "strategy"
      ]
    },
    "api_version": {
      "type": "string",
      "readOnly": true,
      "enum": [
        "2.0.0"
      ]
    },
    "id": {
      "type": "string",
      "readOnly": true
    },
    "name": {
      "type": "string",
      "maxLength": 255
    },
    "title": {
      "type": "string",
      "maxLength": 1023
    },
    "summary": {
      "type": "string",
      "maxLength": 65535
    },
    "scope": {
      "type": "string"
    },
    "description": {
      "type": "string"
    },
    "strategy_type": {
      "type": "string",
      "enum": [
        "jwt-hsa",
        "jwt-rsa",
        "openid-connect-hsa",
        "openid-connect-rsa",
        "oauth2",
        "oauth2-local-hsa",
        "oauth2-local-rsa",
        "composite"
      ]
    },
    "auth_server_alias": {
      "type": "string"
    },
    "client_id": {
      "type": "string"
    },
    "audience": {
      "type": "string"
    },
    "dcr_config": {
      "$ref": "#/$defs/DynamicClientRegistrationConfig"
    },
    "client_registration": {
      "$ref": "#/$defs/ClientRegistration"
    },
    "secret": {
      "type": "string",
      "format": "password"
    },
    "gateway_secret": {
      "$ref": "#/$defs/GatewaySecret"
    },
    "primary_node": {
      "$ref": "#/$defs/Node"
    },
    "access_token_uris": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "authorization_uris": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "refresh_token_uris": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "jwt_access_token_uris": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "org_url": {
      "type": "string",
      "format": "uri"
    },
    "catalog_url": {
      "type": "string",
      "format": "uri"
    },
    "consumer_org_url": {
      "type": "string",
      "format": "uri"
    },
    "app_url": {
      "type": "string",
      "format": "uri"
    },
    "metadata": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      }
    },
    "created_at": {
      "type": "string",
      "format": "date-time",
      "readOnly": true
    },
    "updated_at": {
      "type": "string",
      "format": "date-time",
      "readOnly": true
    },
    "url": {
      "type": "string",
      "readOnly": true,
      "format": "uri"
    }
  },
  "$defs": {
    "ClientRegistration": {
      "description": "Shows the configurations set for the oauth client, when using Dynamic Client Registration. This is a read only model. To update the configuration use the DynamicClientRegistrationConfig model.",
      "type": "object",
      "additionalProperties": false,
      "properties": {
        "approval_pgfilename": {
          "type": "string",
          "description": "Approval page file name"
        },
        "approval_pgfooter": {
          "type": "string",
          "description": "Approval page footer"
        },
        "approval_pgheading": {
          "type": "string",
          "description": "Approval page heading"
        },
        "approval_pglogo_filename": {
          "type": "string",
          "description": "Approval page logo filename"
        },
        "approval_pgtitle": {
          "type": "string",
          "description": "Approval page title"
        },
        "authcode_allowed": {
          "type": "boolean",
          "description": "Option to choose Authorization code grant type"
        },
        "cl_scopes": {
          "type": "array",
          "description": "The scopes associated with this client",
          "items": {
            "type": "string"
          }
        },
        "client_credentials_allowed": {
          "type": "boolean",
          "description": "Option to choose Client Credentials grant type"
        },
        "client_id": {
          "type": "string",
          "description": "The client id"
        },
        "client_secret": {
          "type": "string"
        },
        "enabled": {
          "type": "boolean",
          "description": "Is the client enabled?"
        },
        "implicit_allowed": {
          "type": "boolean",
          "description": "Option to choose Implicit grant type"
        },
        "name": {
          "type": "string",
          "description": "The client name"
        },
        "notes": {
          "type": "string",
          "description": "Notes on the client"
        },
        "pkce_type": {
          "type": "string",
          "description": "OAuth client level options to apply PKCE security, for the public clients using authorization code grant type. Applicable only for local auth server.",
          "enum": [
            "not-enforced",
            "enforced",
            "use-global-setting"
          ]
        },
        "primary_node": {
          "$ref": "#/$defs/Node"
        },
        "redirect_uris": {
          "type": "array",
          "description": "List of redirect urls allowed for this client",
          "items": {
            "type": "string"
          }
        },
        "resource_owner_allowed": {
          "type": "boolean",
          "description": "Option to choose Resource Owner grant type"
        },
        "shell": {
          "type": "boolean"
        },
        "token_lifetime": {
          "type": "integer",
          "minimum": 0,
          "maximum": 2147483647,
          "description": "Token life time"
        },
        "token_refresh_limit": {
          "type": "integer",
          "minimum": 0,
          "maximum": 2147483647,
          "description": "The number of times token can be refreshed"
        },
        "type": {
          "type": "string",
          "description": "specifies whether the client is either public or confidential client"
        },
        "version": {
          "type": "string",
          "description": "The client version"
        }
      }
    },
    "DynamicClientRegistrationConfig": {
      "type": "object",
      "description": "Accepts the configurations to be set for the oauth client, when using Dynamic Client Registration",
      "properties": {
        "allowed_grant_types": {
          "type": "array",
          "description": "grant types to be allowed for this client",
          "items": {
            "type": "string",
            "enum": [
              "authorization_code",
              "password",
              "client_credentials",
              "refresh_token",
              "implicit"
            ]
          }
        },
        "application_type": {
          "type": "string",
          "description": "type of the application"
        },
        "client_id": {
          "type": "string",
          "description": "The client id"
        },
        "client_name": {
          "type": "string",
          "description": "The client name"
        },
        "client_secret": {
          "type": "string",
          "description": "The client secret"
        },
        "client_type": {
          "type": "string",
          "description": "specifies whether the client is either public or confidential client",
          "enum": [
            "public",
            "confidential"
          ]
        },
        "client_version": {
          "type": "string",
          "description": "The client version"
        },
        "expiration_interval": {
          "type": "string",
          "description": "Token expiry time"
        },
        "pkce_type": {
          "type": "string",
          "description": "OAuth client level options to apply PKCE security, for the public clients using authorization code grant type. Applicable only for local auth server.",
          "enum": [
            "not-enforced",
            "enforced",
            "use-global-setting"
          ]
        },
        "redirect_uris": {
          "type": "array",
          "description": "The redirect uris",
          "items": {
            "type": "string"
          }
        },
        "refresh_count": {
          "type": "string",
          "description": "The number of times token can be refreshed"
        },
        "scopes": {
          "type": "array",
          "description": "The scopes associated with this client",
          "items": {
            "type": "string"
          }
        }
      }
    },
    "GatewaySecret": {
      "type": "object",
      "additionalProperties": false,
      "properties": {
        "cached_secret": {
          "type": "string"
        },
        "secret": {
          "type": "string"
        },
        "xrayview": {
          "type": "string"
        }
      }
    },
    "Node": {
      "type": "object",
      "additionalProperties": false,
      "properties": {
        "hostId": {
          "type": "string"
        },
        "replica": {
          "type": "integer",
          "minimum": 0,
          "maximum": 1000
        }
      }
    }
  }
}