Merging to release-5.10: Sync Swagger (#854)

buger · web-flow · commit ea2898638f2c · 2025-10-31T13:17:35.000Z
Sync Swagger (#854) fixes
diff --git a/swagger/dashboard-swagger.yml b/swagger/dashboard-swagger.yml
@@ -6,7 +6,7 @@ info:
     url: https://tyk.io/contact
   description: |2
     <img src="https://tyk.io/docs/img/swagger_dashboard_image.png" width="963" height="250">
-
+    
     ## <a name="introduction"></a> Introduction
 
     The Tyk Dashboard API offers granular, programmatic access to a centralised database of resources that your Tyk nodes can pull from. This API has a dynamic user administrative structure which means the secret key that is used to communicate with your Tyk nodes can be kept secret and access to the wider management functions can be handled on a user-by-user and organisation-by-organisation basis.
@@ -39,7 +39,7 @@ info:
     name: Mozilla Public License Version 2.0
     url: https://github.com/TykTechnologies/tyk/blob/master/LICENSE.md
   title: Tyk Dashboard API
-  version: 5.9.0
+  version: 5.10.0
 servers:
 - url: https://{tenant}
   variables:
@@ -175,6 +175,8 @@ tags:
   name: Single Sign On
 - description: System API.
   name: System
+- description: Notifications for an organisation
+  name: Organisation Notifications
 paths:
   /api/activity/keys/{keyHash}/{startDay}/{startMonth}/{startYear}/{EndDay}/{EndMonth}/{EndYear}:
     get:
@@ -1622,7 +1624,7 @@ paths:
       operationId: proxyRequest
       description: |
         Forwards a request to a specified gateway endpoint. This endpoint allows you to send requests to other services through the Tyk gateway, which can be useful for testing or accessing protected resources.
-
+        
         The proxy will forward your request to the specified URL, including any headers and body data you provide. It then returns the response from the target service, including status code, headers, and body.
       tags:
         - Proxy
@@ -3258,6 +3260,16 @@ paths:
               schema:
                 $ref: '#/components/schemas/ApiResponse'
           description: API not found.
+        "422":
+          content:
+            application/json:
+              example:
+                Message: '{apiId} is not recognised'
+                Meta: null
+                Status: Error
+              schema:
+                $ref: '#/components/schemas/ApiResponse'
+          description: API not recognised.
       summary: List OAS API versions.
       tags:
       - OAS APIs
@@ -4731,11 +4743,13 @@ paths:
           enum:
           - detailed
           type: string
-      - description: |-
-          Defines the filtering strategy applied to certificate keys.
-          This query param works only in combination with detailed mode (mode=detailed).
-          omit – Includes all certificates; this is the default behavior.
-          with_pk – Returns only certificates that are associated with a private key.
+      - description: |- 
+          Used to apply filtering to the list of certificates returned in the response. 
+          With this option you are able to filter by certificates that can be used when signing a request (i.e. they contain a private key),
+          or those used to validate a signature (i.e. they do not contain a private key, only the public key).
+          This query param works only in combination with detailed mode (mode=detailed). 
+          `omit` (default) – Returns all certificates.
+          with_pk – Returns only certificates that include a private key.
           without_pk – Returns only certificates that do not include a private key.
         name: filter
         example: omit
@@ -7783,7 +7797,7 @@ paths:
       - Schemas
   /api/schemas/apidefs/streams-oas:
     get:
-      description: Get API definition Streams OAS schema.
+      description: Retrieve schema for Tyk Streams APIs, enabling developers and integrators to validate or generate stream-based API definitions programmatically. Optionally select the OAS version and pretty-print formatting.
       operationId: getApidefStreamsOASSchema
       parameters:
         - description: The OAS version.
@@ -9384,8 +9398,8 @@ paths:
           required: false
           schema:
             type: integer
-        - description: |
-            This parameter filters audit logs based on partially matching the accessed API endpoint's URL path. It allows searching for actions performed on related resources or sections of the API by matching any portion of the URL. The match is case-sensitive and ignores additional path segments or query parameters beyond the matched portion.
+        - description: | 
+            This parameter filters audit logs based on partially matching the accessed API endpoint's URL path. It allows searching for actions performed on related resources or sections of the API by matching any portion of the URL. The match is case-sensitive and ignores additional path segments or query parameters beyond the matched portion.  
             For example, if the database contains URLs like `/tib/create`, `/tib/get/1?schema=json`,  `/api/schema`, and `/schema1` searching with `url=schema` would return  `/api/schema` and `/schema1`.
           example: /api/apis
           in: query
@@ -9573,6 +9587,60 @@ paths:
       summary: Retrieve single audit log
       tags:
         - AuditLogs
+  /api/org/notifications:
+    get:
+      description: Retrieve all notifications that have been issued for a specific Tyk Organisation.
+      operationId: getAllOrganisationNotifications
+      parameters:
+        - description: Setting refresh to true will force the API to refresh the list of notifications.
+          example: 'true'
+          in: query
+          name: refresh
+          required: false
+          schema:
+            type: string
+      responses:
+        "200":
+          content:
+           application/json:
+              example:
+                - id: b52f491a-2946-408b-9330-2736db85705b
+                  created_at: 2025-08-13T11:16:12.194968+02:00
+                  org_id: 683d6e6a954737af2aa8e5c2
+                  hash: '17090217262863020087'
+                  kind: warning
+                  topic: certificate.expiry
+                  title: Certificate will expire soon
+                  message: Certificate with ID 683d6e6a954737af2aa8e5c20d545f3211d5a53684114dc8b3ebb2503edf6fabf2e5812425be2fa108f3fb4d will expire in less than 18 days
+                  data:
+                    cert_id: 683d6e6a954737af2aa8e5c20d545f3211d5a53684114dc8b3ebb2503edf6fabf2e5812425be2fa108f3fb4d
+                    expiry_date: 2025-08-31T08:41:53Z
+                    days_remaining: 17
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/OrganisationNotification'
+
+          description: Returns a list of notifications that have been issued for the specified Tyk Organisation.
+        "401":
+          content:
+            application/json:
+              example:
+                Message: Not authorised
+                Meta: null
+                Status: Error
+          description: Unauthorized
+        "403":
+          content:
+            application/json:
+              example:
+                Message: 'access denied: You do not have permission to access  /api/org/notifications'
+                Meta: null
+                Status: Error
+          description: Forbidden
+      summary: Retrieve notifications
+      tags:
+        - Organisation Notifications
 components:
   examples:
     aggregateAnalytics:
@@ -10978,6 +11046,16 @@ components:
         pages:
           type: integer
       type: object
+    CertificateExpiryData:
+      properties:
+        cert_id:
+          type: string
+        expiry_date:
+          type: string
+        days_remaining:
+          type: integer
+      type: object
+      x-go-package: github.com/TykTechnologies/tyk-analytics/dashboard/repository/notification
     CertificateList:
       properties:
         certs:
@@ -12551,6 +12629,31 @@ components:
       additionalProperties:
         $ref: '#/components/schemas/ParameterRef'
       type: object
+    OrganisationNotification:
+      properties:
+        id:
+          type: string
+        created_at:
+          type: string
+        org_id:
+          type: string
+        hash:
+          type: string
+        kind:
+          type: string
+          enum: [ "critical", "warning" ]
+        topic:
+          type: string
+          enum: [ "certificate.expiry" ]
+        title:
+          type: string
+        message:
+          type: string
+        data:
+          oneOf:
+            - $ref: "#/components/schemas/CertificateExpiryData"
+      type: object
+      x-go-package: github.com/TykTechnologies/tyk-analytics/dashboard/model
     PathItem:
       properties:
         $ref:
diff --git a/swagger/gateway-swagger.yml b/swagger/gateway-swagger.yml
@@ -1603,6 +1603,66 @@ paths:
       summary: Invalidate cache.
       tags:
       - Cache Invalidation
+  /tyk/cache/jwks/{apiID}:
+    delete:
+      description: Invalidate JWK cache for the given API.
+      operationId: invalidateJWKCache
+      parameters:
+        - description: The API ID.
+          example: ae67bb862a3241a49117508e0f9ee839
+          in: path
+          name: apiID
+          required: true
+          schema:
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              example:
+                message: cache invalidated
+                status: ok
+              schema:
+                $ref: '#/components/schemas/ApiStatusMessage'
+          description: Cache invalidated.
+        "403":
+          content:
+            application/json:
+              example:
+                message: Attempted administrative access with invalid or missing key!
+                status: error
+              schema:
+                $ref: '#/components/schemas/ApiStatusMessage'
+          description: Forbidden
+      summary: Invalidate cache for given API ID.
+      tags:
+        - JWK cache invalidation
+  /tyk/cache/jwks:
+    delete:
+      description: Invalidate JWK cache for all APIs.
+      operationId: invalidateJWKCacheForAllAPIs
+      responses:
+        "200":
+          content:
+            application/json:
+              example:
+                message: cache invalidated
+                status: ok
+              schema:
+                $ref: '#/components/schemas/ApiStatusMessage'
+          description: Cache invalidated.
+        "403":
+          content:
+            application/json:
+              example:
+                message: Attempted administrative access with invalid or missing key!
+                status: error
+              schema:
+                $ref: '#/components/schemas/ApiStatusMessage'
+          description: Forbidden
+      summary: Invalidate JWK cache for all APIs
+      tags:
+        - JWK cache invalidation
   /tyk/certs:
     get:
       description: List all certificates in the Tyk Gateway.
