From eb32ae516fb865d335a6fda3c7db45b5f39d9d40 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 29 Feb 2024 20:22:59 +0100
Subject: [PATCH 01/16] ciba-grant-3.2.0.md

---
 versions/3.2.0.md | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 45d59a7c3f..29e257b609 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3290,6 +3290,7 @@ Field Name | Type | Description
 <a name="oauthFlowsClientCredentials"></a>clientCredentials| [OAuth Flow Object](#oauthFlowObject) | Configuration for the OAuth Client Credentials flow.  Previously called `application` in OpenAPI 2.0.
 <a name="oauthFlowsAuthorizationCode"></a>authorizationCode| [OAuth Flow Object](#oauthFlowObject) | Configuration for the OAuth Authorization Code flow.  Previously called `accessCode` in OpenAPI 2.0.
 <a name="oauthFlowsDeviceAuthorization"></s>deviceAuthorization| [OAuth Flow Object](#oauthFlowObject) | Configuration for the OAuth Device Authorization flow.
+<a name="oauthFlowsCiba"></a>ciba| [OAuth Flow Object](#oauth-flow-object) | Configuration for the OpenID Connect Client-Initiated Backchannel Authentication Flow.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).
 
@@ -3300,11 +3301,14 @@ Configuration details for a supported OAuth Flow
 ##### Fixed Fields
 Field Name | Type | Applies To | Description
 ---|:---:|---|---
-<a name="oauthFlowAuthorizationUrl"></a>authorizationUrl | `string` | `oauth2` (`"implicit"`, `"authorizationCode"`) | **REQUIRED**. The authorization URL to be used for this flow. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
+<a name="oauthFlowAuthorizationUrl"></a>authorizationUrl | `string` | `oauth2` (`"implicit"`, `"authorizationCode"`, `"ciba"`) | **REQUIRED**. The authorization URL to be used for this flow. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowDeviceAuthorizationUrl"></s>deviceAuthorizationUrl | `string` | `oauth2` (`"deviceAuthorization"`) | **REQUIRED**. The device authorization URL to be used for this flow. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
-<a name="oauthFlowTokenUrl"></a>tokenUrl | `string` | `oauth2` (`"password"`, `"clientCredentials"`, `"authorizationCode"`, `"deviceAuthorization"`) | **REQUIRED**. The token URL to be used for this flow. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
+<a name="oauthFlowTokenUrl"></a>tokenUrl | `string` | `oauth2` (`"password"`, `"clientCredentials"`, `"authorizationCode"`, `"deviceAuthorization"`, `"ciba"`) | **REQUIRED**. The token URL to be used for this flow. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowRefreshUrl"></a>refreshUrl | `string` | `oauth2` | The URL to be used for obtaining refresh tokens. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
+<a name="backchannel_token_delivery_modes_supported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
+<a name="backchannel_authentication_request_signing_alg_values"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) | **OPTIONAL**. JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
+<a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | Array[`string`] | `oauth2` (`"ciba"`) | **OPTIONAL**. Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).
 
@@ -3328,6 +3332,15 @@ This object MAY be extended with [Specification Extensions](#specificationExtens
         "write:pets": "modify pets in your account",
         "read:pets": "read your pets"
       }
+    },
+    "ciba": {
+      "authorizationUrl": "https://example.com/api/oauth/dialog",
+      "tokenUrl": "https://example.com/api/oauth/token",
+      "scopes": {
+        "write:pets": "modify pets in your account",
+        "read:pets": "read your pets"
+      },
+      "ciba_delivery_modes": ["poll"]
     }
   }
 }

From d40532e2576560f3e610105993471303432aa433 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Fri, 12 Apr 2024 22:38:52 +0200
Subject: [PATCH 02/16] Update schema.yaml-ciba-changes

---
 schemas/v3.1/schema.yaml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/schemas/v3.1/schema.yaml b/schemas/v3.1/schema.yaml
index 68fcc0d0bc..ce850b21a1 100644
--- a/schemas/v3.1/schema.yaml
+++ b/schemas/v3.1/schema.yaml
@@ -837,6 +837,8 @@ $defs:
         $ref: '#/$defs/oauth-flows/$defs/client-credentials'
       authorizationCode:
         $ref: '#/$defs/oauth-flows/$defs/authorization-code'
+      ciba:
+        $ref: '#/$defs/oauth-flows/$defs/ciba'
     $ref: '#/$defs/specification-extensions'
     unevaluatedProperties: false
 
@@ -903,6 +905,36 @@ $defs:
           - scopes
         $ref: '#/$defs/specification-extensions'
         unevaluatedProperties: false
+        
+      ciba:
+        type: object
+        properties:
+          authorizationUrl:
+            type: string
+          tokenUrl:
+            type: string
+          refreshUrl:
+            type: string
+          ciba_delivery_modes:
+              type: array
+              items:
+                type: string
+          ciba_signing_algs:
+*             type: array
+              items:
+                type: string
+          ciba_user_code:
+            type: boolean
+          scopes:
+            $ref: '#/$defs/map-of-strings'
+        required:
+          - authorizationUrl
+          - tokenUrl
+          - ciba_delivery_modes
+          - ciba_signing_algs
+          - scopes
+        $ref: '#/$defs/specification-extensions'
+        unevaluatedProperties: false
 
   security-requirement:
     type: object

From 14c09b960dd0fb09738ff7e0f90d443fb75147bc Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Fri, 12 Apr 2024 22:50:10 +0200
Subject: [PATCH 03/16] Update schema.json-for-ciba

---
 schemas/v3.1/schema.json | 42 +++++++++++++++++++++++++++++++++++++++-
 1 file changed, 41 insertions(+), 1 deletion(-)

diff --git a/schemas/v3.1/schema.json b/schemas/v3.1/schema.json
index 14171960cc..41caba0917 100644
--- a/schemas/v3.1/schema.json
+++ b/schemas/v3.1/schema.json
@@ -1240,6 +1240,9 @@
         "authorizationCode": {
           "$ref": "#/$defs/oauth-flows/$defs/authorization-code"
         }
+        "ciba": {
+          "$ref": "#/$defs/oauth-flows/$defs/ciba"
+        }
       },
       "$ref": "#/$defs/specification-extensions",
       "unevaluatedProperties": false,
@@ -1327,7 +1330,44 @@
           ],
           "$ref": "#/$defs/specification-extensions",
           "unevaluatedProperties": false
-        }
+        },
+        "ciba": {
+          "type": "object",
+          "properties": {
+            "authorizationUrl": {
+              "type": "string"
+            },
+            "tokenUrl": {
+              "type": "string"
+            },
+            "refreshUrl": {
+              "type": "string"
+            },
+            "ciba_delivery_modes": {
+               "type": "array",
+               "item": "string"
+            },
+            "ciba_signing_algs": {
+               "type": "array",
+               "item": "string"
+            },
+            "ciba_user_code":{
+               "type": "boolean"
+            },
+            "scopes": {
+              "$ref": "#/$defs/map-of-strings"
+            }
+          },
+          "required": [
+            "authorizationUrl",
+            "tokenUrl",
+            "ciba_delivery_modes",
+            "ciba_signing_algs",
+            "scopes"
+          ],
+          "$ref": "#/$defs/specification-extensions",
+          "unevaluatedProperties": false
+        }       
       }
     },
     "security-requirement": {

From 4aa2d4ce1345608f774039b3e2234928b0c73b0b Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Fri, 12 Apr 2024 22:53:15 +0200
Subject: [PATCH 04/16] Update 3.2.0.md-for ciba

---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 29e257b609..17f5a5e9d1 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3308,7 +3308,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
 <a name="backchannel_token_delivery_modes_supported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
 <a name="backchannel_authentication_request_signing_alg_values"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) | **OPTIONAL**. JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
-<a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | Array[`string`] | `oauth2` (`"ciba"`) | **OPTIONAL**. Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
+<a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) | **OPTIONAL**. Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).
 

From 3361813cbd4640fdc4d275d24f411f4e8e8c63e2 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Fri, 12 Apr 2024 22:57:02 +0200
Subject: [PATCH 05/16] Update schema.yaml-ciba

---
 schemas/v3.1/schema.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/schemas/v3.1/schema.yaml b/schemas/v3.1/schema.yaml
index ce850b21a1..f93da936b8 100644
--- a/schemas/v3.1/schema.yaml
+++ b/schemas/v3.1/schema.yaml
@@ -916,13 +916,13 @@ $defs:
           refreshUrl:
             type: string
           ciba_delivery_modes:
-              type: array
-              items:
-                type: string
+            type: array
+            items:
+              type: string
           ciba_signing_algs:
-*             type: array
-              items:
-                type: string
+*           type: array
+            items:
+              type: string
           ciba_user_code:
             type: boolean
           scopes:

From 695e169f38d8ea4be258f9018678efccb4b71976 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:17:17 +0200
Subject: [PATCH 06/16] Update versions/3.2.0.md

Co-authored-by: Darrel <darrmi@microsoft.com>
---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 17f5a5e9d1..b4c0af5dce 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3307,7 +3307,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowRefreshUrl"></a>refreshUrl | `string` | `oauth2` | The URL to be used for obtaining refresh tokens. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
 <a name="backchannel_token_delivery_modes_supported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
-<a name="backchannel_authentication_request_signing_alg_values"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) | **OPTIONAL**. JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
+<a name="backchannel_authentication_request_signing_alg_values"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
 <a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) | **OPTIONAL**. Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).

From 85e5c20e53fe5b270dc74b7712baffdbf281f746 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:18:24 +0200
Subject: [PATCH 07/16] Update versions/3.2.0.md

Co-authored-by: Darrel <darrmi@microsoft.com>
---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index b4c0af5dce..312d76a069 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3308,7 +3308,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
 <a name="backchannel_token_delivery_modes_supported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
 <a name="backchannel_authentication_request_signing_alg_values"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
-<a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) | **OPTIONAL**. Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
+<a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).
 

From 4c5fe8a27ae4f7ba28a36671ea277da5c2292e00 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:20:44 +0200
Subject: [PATCH 08/16] Update versions/3.2.0.md-camelCase

---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 312d76a069..ee68d14e98 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3306,7 +3306,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowTokenUrl"></a>tokenUrl | `string` | `oauth2` (`"password"`, `"clientCredentials"`, `"authorizationCode"`, `"deviceAuthorization"`, `"ciba"`) | **REQUIRED**. The token URL to be used for this flow. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowRefreshUrl"></a>refreshUrl | `string` | `oauth2` | The URL to be used for obtaining refresh tokens. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
-<a name="backchannel_token_delivery_modes_supported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
+<a name="backchannelTokenDeliveryModesSupported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
 <a name="backchannel_authentication_request_signing_alg_values"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
 <a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 

From 367e391dbfdc34e46765fe8d1e69f21c251885d1 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:21:44 +0200
Subject: [PATCH 09/16] Update versions/3.2.0.md-camelCase2

---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index ee68d14e98..961d3fad56 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3307,7 +3307,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowRefreshUrl"></a>refreshUrl | `string` | `oauth2` | The URL to be used for obtaining refresh tokens. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
 <a name="backchannelTokenDeliveryModesSupported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
-<a name="backchannel_authentication_request_signing_alg_values"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
+<a name="backchannelAuthenticationRequestSigningAlgValues"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
 <a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).

From 433477cd037c693656cfa994301def3b681a3f95 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:24:05 +0200
Subject: [PATCH 10/16] Update versions/3.2.0.md-camelCase3

---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 961d3fad56..1658d66487 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3308,7 +3308,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
 <a name="backchannelTokenDeliveryModesSupported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
 <a name="backchannelAuthenticationRequestSigningAlgValues"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
-<a name="backchannel_user_code_parameter_supported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
+<a name="backchannelUserCodeParameterSupported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).
 

From 73681b326dc79db61d47256b3e47e6f72536f768 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:24:43 +0200
Subject: [PATCH 11/16] Update versions/3.2.0.md

---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 1658d66487..147d08826c 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3306,7 +3306,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowTokenUrl"></a>tokenUrl | `string` | `oauth2` (`"password"`, `"clientCredentials"`, `"authorizationCode"`, `"deviceAuthorization"`, `"ciba"`) | **REQUIRED**. The token URL to be used for this flow. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowRefreshUrl"></a>refreshUrl | `string` | `oauth2` | The URL to be used for obtaining refresh tokens. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
-<a name="backchannelTokenDeliveryModesSupported"></a>ciba_delivery_modes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
+<a name="backchannelTokenDeliveryModesSupported"></a>cibaDeliveryModes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
 <a name="backchannelAuthenticationRequestSigningAlgValues"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
 <a name="backchannelUserCodeParameterSupported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 

From a281804aee497b95c874b09a1e5f95a5345b2b7d Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:26:30 +0200
Subject: [PATCH 12/16] Update versions/3.2.0.md

---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 147d08826c..c2bc193f61 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3307,7 +3307,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowRefreshUrl"></a>refreshUrl | `string` | `oauth2` | The URL to be used for obtaining refresh tokens. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
 <a name="backchannelTokenDeliveryModesSupported"></a>cibaDeliveryModes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
-<a name="backchannelAuthenticationRequestSigningAlgValues"></a>ciba_signing_algs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
+<a name="backchannelAuthenticationRequestSigningAlgValues"></a>cibaSigningAlgs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
 <a name="backchannelUserCodeParameterSupported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).

From 05017bbfc614fede065ac2e99e337c83b58405ce Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:27:04 +0200
Subject: [PATCH 13/16] Update versions/3.2.0.md

---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index c2bc193f61..1c91534354 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3308,7 +3308,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
 <a name="backchannelTokenDeliveryModesSupported"></a>cibaDeliveryModes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
 <a name="backchannelAuthenticationRequestSigningAlgValues"></a>cibaSigningAlgs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
-<a name="backchannelUserCodeParameterSupported"></a>ciba_user_code | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
+<a name="backchannelUserCodeParameterSupported"></a>cibaUserCode | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.
 
 This object MAY be extended with [Specification Extensions](#specificationExtensions).
 

From a001f7240f5db32fd2ee58c3f204c3cb5c98bbf3 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <77152136+shilpa-padgaonkar@users.noreply.github.com>
Date: Thu, 18 Apr 2024 21:30:44 +0200
Subject: [PATCH 14/16] Update versions/3.2.0.md

---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 1c91534354..93c100c303 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3340,7 +3340,7 @@ This object MAY be extended with [Specification Extensions](#specificationExtens
         "write:pets": "modify pets in your account",
         "read:pets": "read your pets"
       },
-      "ciba_delivery_modes": ["poll"]
+      "cibaDeliveryModes": ["poll"]
     }
   }
 }

From 2598663ca7a40a903fada4588f015aecbd3b7c96 Mon Sep 17 00:00:00 2001
From: Shilpa Padgaonkar <shilpa.padgaonkar@telekom.de>
Date: Fri, 19 Apr 2024 15:28:09 +0200
Subject: [PATCH 15/16] Reverting schema changes due to
 https://github.com/OAI/OpenAPI-Specification/pull/3615#issuecomment-2064514942

---
 schemas/v3.1/schema.json | 42 +---------------------------------------
 schemas/v3.1/schema.yaml | 32 ------------------------------
 2 files changed, 1 insertion(+), 73 deletions(-)

diff --git a/schemas/v3.1/schema.json b/schemas/v3.1/schema.json
index 41caba0917..14171960cc 100644
--- a/schemas/v3.1/schema.json
+++ b/schemas/v3.1/schema.json
@@ -1240,9 +1240,6 @@
         "authorizationCode": {
           "$ref": "#/$defs/oauth-flows/$defs/authorization-code"
         }
-        "ciba": {
-          "$ref": "#/$defs/oauth-flows/$defs/ciba"
-        }
       },
       "$ref": "#/$defs/specification-extensions",
       "unevaluatedProperties": false,
@@ -1330,44 +1327,7 @@
           ],
           "$ref": "#/$defs/specification-extensions",
           "unevaluatedProperties": false
-        },
-        "ciba": {
-          "type": "object",
-          "properties": {
-            "authorizationUrl": {
-              "type": "string"
-            },
-            "tokenUrl": {
-              "type": "string"
-            },
-            "refreshUrl": {
-              "type": "string"
-            },
-            "ciba_delivery_modes": {
-               "type": "array",
-               "item": "string"
-            },
-            "ciba_signing_algs": {
-               "type": "array",
-               "item": "string"
-            },
-            "ciba_user_code":{
-               "type": "boolean"
-            },
-            "scopes": {
-              "$ref": "#/$defs/map-of-strings"
-            }
-          },
-          "required": [
-            "authorizationUrl",
-            "tokenUrl",
-            "ciba_delivery_modes",
-            "ciba_signing_algs",
-            "scopes"
-          ],
-          "$ref": "#/$defs/specification-extensions",
-          "unevaluatedProperties": false
-        }       
+        }
       }
     },
     "security-requirement": {
diff --git a/schemas/v3.1/schema.yaml b/schemas/v3.1/schema.yaml
index f93da936b8..68fcc0d0bc 100644
--- a/schemas/v3.1/schema.yaml
+++ b/schemas/v3.1/schema.yaml
@@ -837,8 +837,6 @@ $defs:
         $ref: '#/$defs/oauth-flows/$defs/client-credentials'
       authorizationCode:
         $ref: '#/$defs/oauth-flows/$defs/authorization-code'
-      ciba:
-        $ref: '#/$defs/oauth-flows/$defs/ciba'
     $ref: '#/$defs/specification-extensions'
     unevaluatedProperties: false
 
@@ -905,36 +903,6 @@ $defs:
           - scopes
         $ref: '#/$defs/specification-extensions'
         unevaluatedProperties: false
-        
-      ciba:
-        type: object
-        properties:
-          authorizationUrl:
-            type: string
-          tokenUrl:
-            type: string
-          refreshUrl:
-            type: string
-          ciba_delivery_modes:
-            type: array
-            items:
-              type: string
-          ciba_signing_algs:
-*           type: array
-            items:
-              type: string
-          ciba_user_code:
-            type: boolean
-          scopes:
-            $ref: '#/$defs/map-of-strings'
-        required:
-          - authorizationUrl
-          - tokenUrl
-          - ciba_delivery_modes
-          - ciba_signing_algs
-          - scopes
-        $ref: '#/$defs/specification-extensions'
-        unevaluatedProperties: false
 
   security-requirement:
     type: object

From f3e23ad09a85a3526a7ecbd167ab547d9ec0f643 Mon Sep 17 00:00:00 2001
From: Axel Nennker <axel.nennker@telekom.de>
Date: Thu, 25 Apr 2024 18:38:50 +0200
Subject: [PATCH 16/16] markup fixes

Co-authored-by: Ralf Handl <ralf.handl@sap.com>
---
 versions/3.2.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versions/3.2.0.md b/versions/3.2.0.md
index 93c100c303..f852aa9c79 100644
--- a/versions/3.2.0.md
+++ b/versions/3.2.0.md
@@ -3306,7 +3306,7 @@ Field Name | Type | Applies To | Description
 <a name="oauthFlowTokenUrl"></a>tokenUrl | `string` | `oauth2` (`"password"`, `"clientCredentials"`, `"authorizationCode"`, `"deviceAuthorization"`, `"ciba"`) | **REQUIRED**. The token URL to be used for this flow. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowRefreshUrl"></a>refreshUrl | `string` | `oauth2` | The URL to be used for obtaining refresh tokens. This MUST be in the form of a URL. The OAuth2 standard requires the use of TLS.
 <a name="oauthFlowScopes"></a>scopes | Map[`string`, `string`] | `oauth2` | **REQUIRED**. The available scopes for the OAuth2 security scheme. A map between the scope name and a short description for it. The map MAY be empty.
-<a name="backchannelTokenDeliveryModesSupported"></a>cibaDeliveryModes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: poll, ping, and push.
+<a name="backchannelTokenDeliveryModesSupported"></a>cibaDeliveryModes | Array[`string`] | `oauth2` (`"ciba"`) | **REQUIRED**. JSON array containing one or more of the following values: `poll`, `ping`, and `push`.
 <a name="backchannelAuthenticationRequestSigningAlgValues"></a>cibaSigningAlgs | Array[`string`] | `oauth2` (`"ciba"`) |  JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP (OpenIdConnect Provider) for signed authentication requests
 <a name="backchannelUserCodeParameterSupported"></a>cibaUserCode | `boolean` | `oauth2` (`"ciba"`) |  Boolean value specifying whether the OP supports the use of the user_code parameter, with true indicating support. If omitted, the default value is false.