/auth/login:
    post:
        operationId: loginUser
        summary: Login to OpenVidu Meet
        description: >
            Authenticates a user and returns an access and refresh token in cookies.
        tags:
            - Internal API - Authentication
        requestBody:
            $ref: '../../components/requestBodies/internal/login-user.yaml'
        responses:
            '200':
                $ref: '../../components/responses/internal/success-user-login.yaml'
            '404':
                $ref: '../../components/responses/internal/error-invalid-credentials.yaml'
            '422':
                $ref: '../../components/responses/validation-error.yaml'
            '500':
                $ref: '../../components/responses/internal-server-error.yaml'
/auth/logout:
    post:
        operationId: logoutUser
        summary: Logout from OpenVidu Meet
        description: >
            Logs out the user and clears the access and refresh tokens from cookies.
        tags:
            - Internal API - Authentication
        responses:
            '200':
                description: Successfully logged out
                headers:
                    Set-Cookie:
                        schema:
                            type: string
                            example: 'OvMeetAccessToken=; Path=/; HttpOnly; SameSite=Strict'
                    Set-Cookie-Refresh:
                        schema:
                            type: string
                            example: 'OvMeetRefreshToken=; Path=/meet/internal-api/v1/auth; HttpOnly; SameSite=Strict'
                content:
                    application/json:
                        schema:
                            type: object
                            properties:
                                message:
                                    type: string
                                    example: 'Logout successful'
/auth/refresh:
    post:
        operationId: refreshAccessToken
        summary: Refresh the access token
        description: >
            Refreshes the access token using the refresh token.
            The new access token is returned in a cookie.
        tags:
            - Internal API - Authentication
        security:
            - refreshTokenCookie: []
        responses:
            '200':
                $ref: '../../components/responses/internal/success-refresh-token.yaml'
            '400':
                $ref: '../../components/responses/internal/error-invalid-refresh-token.yaml'
            '500':
                $ref: '../../components/responses/internal-server-error.yaml'

/auth/api-keys:
    post:
        operationId: createApiKey
        summary: Create a new API key
        description: >
            Creates a new API key. Only one API key can be created in the system.
            If an API key already exists, it will be replaced with the new one.
            The API key is returned in the response.
        tags:
            - Internal API - Authentication
        security:
            - accessTokenCookie: []
        responses:
            '201':
                $ref: '../../components/responses/internal/success-create-api-key.yaml'
            '500':
                $ref: '../../components/responses/internal-server-error.yaml'
    get:
        operationId: getApiKeys
        summary: Get API keys
        description: >
            Retrieves the existing API keys.
        tags:
            - Internal API - Authentication
        security:
            - accessTokenCookie: []
        responses:
            '200':
                $ref: '../../components/responses/internal/success-get-api-keys.yaml'
            '500':
                $ref: '../../components/responses/internal-server-error.yaml'
    delete:
        operationId: deleteApiKeys
        summary: Delete API keys
        description: >
            Deletes the existing API keys.
        tags:
            - Internal API - Authentication
        security:
            - accessTokenCookie: []
        responses:
            '204':
                description: Successfully deleted the API key
            '500':
                $ref: '../../components/responses/internal-server-error.yaml'