openapi: 3.0.3
info:
  title: Quanon Identity Platform API
  version: 1.0.0
  description: Identity, auth, SSO, and session endpoints for Quanon Platform.
servers:
  - url: http://localhost:4040
paths:
  /api/auth/register:
    post:
      summary: Register organization and owner
      responses:
        "201":
          description: Created
  /api/auth/login:
    post:
      summary: Password login
      responses:
        "200":
          description: OK or MFA challenge
  /api/auth/mfa/verify:
    post:
      summary: Verify TOTP MFA
      responses:
        "200":
          description: Session issued
  /api/auth/session:
    get:
      summary: Current session
      responses:
        "200":
          description: Session payload
  /api/auth/sso/start:
    get:
      summary: Start enterprise OIDC SSO
      responses:
        "302":
          description: Redirect to IdP
  /api/auth/saml/status:
    get:
      summary: SAML configuration status stub
      responses:
        "200":
          description: Status
  /scim/v2/Users:
    get:
      summary: SCIM Users list (enabled when SCIM_ENABLED=true)
      responses:
        "200":
          description: ListResponse
        "501":
          description: SCIM disabled