DaVinci Admin Applications

When: A POST /environments/{envID}/davinciApplications or a PUT /environments/{envID}/davinciApplications/{davinciApplicationID} request supplies a body that violates the data model: an omitted name, a blank or null name, a name longer than 256 characters, a name whose first non-whitespace character is outside the allowed set or that contains a < or a ${ sequence, an apiKeyEnabled value that is not a boolean, an oauth value that is not an object, or an unknown oauth.scopes or oauth.grantTypes value

Details: One detail per validation error, each with the failing property path as the target. must have required property 'name' with target name when the request omits name. must not be empty or blank for a blank name. must be string, must be boolean, or must be object for a property of the wrong JSON type. must NOT have more than 256 characters for a name longer than 256 characters. must match pattern "<pattern>", where the pattern is the JSON schema pattern for the property, for a name whose first non-whitespace character is outside the allowed set or that contains a < or a ${ sequence. must be one of the values: <allowed values joined by or>, for example must be one of the values: openid or profile or flow_analytics or offline_access with target oauth.scopes.2 for an unknown oauth.scopes entry.

When: A POST /environments/{envID}/davinciApplications request fails with a duplicate-key storage error, for example when the request specifies an application name that already exists

Details: App record already exists. No target is returned.

When: A GET all applications request supplies a page, limit, filter, or expand query parameter longer than 256 characters

Details: Detail code INVALID_PARAMETER with message must NOT have more than 256 characters and the overlong query parameter as the target.

When: A PUT, DELETE, key rotation POST, or secret rotation POST targets an application that is read-only

Details: Application is read-only. The target is readOnly.

When: A GET all applications request supplies a filter query parameter that references an attribute other than createdBy.user.id, createdBy.client.id, updatedBy.user.id, or updatedBy.client.id, or an operator other than eq, and, or or, when actor metadata is enabled for the environment. When actor metadata is disabled, the filter parameter is ignored

Details: Detail code INVALID_PARAMETER with message The filter attribute was invalid or does not support filtering. and the invalid attribute as the target, or message The filter operator was invalid or not supported. and the invalid operator as the target. A filter that is not a well-formed SCIM expression returns detail code INVALID_FILTER with message The specified filter was invalid. and no target.

When: A POST /environments/{envID}/davinciApplications request creates an application after the environment has reached the maximum number of applications allowed for the environment

Details: Cannot create more than <resourceLimit> applications. No target is returned.

When: The actor lacks the davinci:create:applications permission (POST operations), the davinci:read:applications permission (GET operations), the davinci:update:applications permission (PUT or the key or secret rotation POST), or the davinci:delete:applications permission (DELETE)

Details: None

When: A GET one, PUT, DELETE, key rotation, or secret rotation request references a DaVinci application ID that does not exist in the environment

Details: None

When: A key rotation request does not use the application/vnd.pingidentity.davinciApplication.rotateKey+json content type, or a secret rotation request does not use the application/vnd.pingidentity.davinciApplication.rotateSecret+json content type

Details: None

When: The service encounters an unexpected internal failure while processing the request, for example a GET all applications request that cannot read the application list

Details: None