Create OTP list

POST /method-name/otp-list
Request parameters

1. max-age
2. expires
   One of expires or max-age may be given

Success – status 200

1. <otp-list> element with <status> and <sequence> child elements

Error conditions

1. 404
   Not Found. Invalid method-name.
2. 405
   The http method is not valid

POST /otp.1/otp-list?expires=20130101
<otp-list id="f000d9d5-d97d-4347-b4ff-e2edb72b35fd" expires="20130101"size="50">
<sequence>
<otp index="1">123456</otp>
<otp index="2">234567</otp>
</sequence>
</otp-list>

Request parameters

1. max-age
2. expires
3. batch-size

Success – status 200

1. <batch-response> element with <otp-list> collection and <sequence> elements

Error conditions

1. 404
   Not Found. Invalid method-name.
2. 405
   The http method is not valid

POST /otp.1/otp-list/_batch?batch-size=100
<batch-response batch-size="100">
<otp-list id="ba6206b7-2469-4b92-8022-83ce21bc3e39">
<otp-list id="d07c0903-f7c9-4b55-a22b-df51ce60bbd7">
...
</batch-response>

Associate OTP list with user identifier

PUT /method-name/otp-list/list-id
The associate operation is only possible on a list with "free" status.
Request parameters

1. uniqueID
2. login
3. objectGuid

Success – status 200

1. <otp-list> with <status> child element, does not return <sequence>

Error conditions

1. 404
   Not Found. The uniqueID, login or objectGuid parameter does not identify a user.
2. 403
   Forbidden. The status of the list identified by list-id is not "free".
3. 404
   Not Found. Invalid method-name or unknown list-id.
4. 405
   The http method is not valid.

PUT /otp.1/otp-list/d07c0903-f7c9-4b55-a22b-df51ce60bbd7?uniqueID=user1
<otp-list id="d07c0903-f7c9-4b55-a22b-df51ce60bbd7">
<status value="associated" index="1">
<user-info uniqueID="user1"/>
</status>
</otp-list>

Lookup OTP list status by list-id

GET /method-name/otp-list/list-id
Success – status 200

1. <otp-list> with <status> child element, does not return <sequence>

Error conditions

1. 404
   Not Found. Invalid method-name or unknown list-id.
2. 405
   The http method is not valid

GET /otp.1/otp-list/c016051b-8980-4165-8c5b-e4b5cd1bace6
<otp-list id="c016051b-8980-4165-8c5b-e4b5cd1bace6">
<status value="active" index="B1" remaining="12">
<user-info uniqueID="user1"/>
</status>
</otp-list>

Lookup OTP list status by user identifier

GET /method-name/user-info/_query

1. Request parameters
2. uniqueID
3. login
4. objectGuid

Success – status 200

1. <user-info> with <otp-list> child element, does not return <sequence>

Success – status 204

1. The uniqueID, login or objectGuid parameter does not identify a user.

Error conditions

1. 404
   Not Found. Invalid method-name.
2. 405
   The http method is not valid

GET /otp.1/user-info/_query?uniqueID=user1
<user-info uniqueID="user1">
<otp-list id="f000d9d5-d97d-4347-b4ff-e2edb72b35fd">
<status value="active" index="56"/>
</otp-list>
<otp-list id="d38400e9-ce9e-4f93-bef7-6e2d65d2cbf9">
<status value="associated" index="1"/>
</otp-list>
</user-info>

Query OTP lists matching condition

GET /method-name/otp-list/_query
To be implemented. Not currently available in version 1.0.

Delete OTP list

DELETE /method-name/otp-list/list-id
Success – status 204

1. The list is removed from the OTP Server.

Error conditions

1. 404
   Not Found. Invalid method-name or unknown list-id.
2. 405
   The http method is not valid