remove current-subject from OpenAPI header specs, use Authorization instead (#164)

Co-authored-by: Michael Hoennig <michael@hoennig.de> Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/164 Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-03-18 11:52:29 +01:00
parent 5ca0638319
commit eb9edf1cb1
100 changed files with 404 additions and 590 deletions
--- a/src/main/resources/api-definition/auth.yaml
+++ b/src/main/resources/api-definition/auth.yaml
@@ -3,14 +3,6 @@ components:

    parameters:

-        currentSubject:
-            name: current-subject
-            in: header
-            required: false
-            schema:
-                type: string
-            description: Identifying name of the current subject (e.g. user).
-
        assumedRoles:
            name: assumed-roles
            in: header
--- a/src/main/resources/api-definition/hs-booking/auth.yaml
+++ b/src/main/resources/api-definition/hs-booking/auth.yaml
@@ -1,20 +0,0 @@
-
-components:
-
-    parameters:
-
-        currentSubject:
-            name: current-subject
-            in: header
-            required: true
-            schema:
-                type: string
-            description: Identifying name of the currently logged in subject.
-
-        assumedRoles:
-            name: assumed-roles
-            in: header
-            required: false
-            schema:
-                type: string
-            description: Semicolon-separated list of roles to assume. The current subject needs to have the right to assume these roles.
--- a/src/main/resources/api-definition/hs-booking/auth.yaml
+++ b/src/main/resources/api-definition/hs-booking/auth.yaml
@@ -0,0 +1 @@
+../auth.yaml
--- a/src/main/resources/api-definition/hs-booking/hs-booking-items-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-booking/hs-booking-items-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single booking item its uuid, if visible for the current subject.'
    operationId: getSingleBookingItemByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: bookingItemUuid
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single booking item identified by its uuid, if permitted for the current subject.'
    operationId: patchBookingItem
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: bookingItemUuid
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single booking item identified by its uuid, if permitted for the current subject.'
    operationId: deleteBookingIemByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: bookingItemUuid
          in: path
--- a/src/main/resources/api-definition/hs-booking/hs-booking-items.yaml
+++ b/src/main/resources/api-definition/hs-booking/hs-booking-items.yaml
@@ -5,7 +5,6 @@ get:
        - hs-booking-items
    operationId: getListOfBookingItemsByProjectUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: projectUuid
          in: query
@@ -34,7 +33,6 @@ post:
        - hs-booking-items
    operationId: postNewBookingItem
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        description: A JSON object describing the new booking item.
--- a/src/main/resources/api-definition/hs-booking/hs-booking-projects-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-booking/hs-booking-projects-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single booking project its uuid, if visible for the current subject.'
    operationId: getBookingProjectByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: bookingProjectUuid
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single booking project identified by its uuid, if permitted for the current subject.'
    operationId: patchBookingProject
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: bookingProjectUuid
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single booking project identified by its uuid, if permitted for the current subject.'
    operationId: deleteBookingIemByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: bookingProjectUuid
          in: path
--- a/src/main/resources/api-definition/hs-booking/hs-booking-projects.yaml
+++ b/src/main/resources/api-definition/hs-booking/hs-booking-projects.yaml
@@ -5,7 +5,6 @@ get:
        - hs-booking-projects
    operationId: getListOfBookingProjectsByDebitorUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: debitorUuid
          in: query
@@ -34,7 +33,6 @@ post:
        - hs-booking-projects
    operationId: postNewBookingProject
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        description: A JSON object describing the new booking project.
--- a/src/main/resources/api-definition/hs-hosting/auth.yaml
+++ b/src/main/resources/api-definition/hs-hosting/auth.yaml
@@ -1,20 +0,0 @@
-
-components:
-
-    parameters:
-
-        currentSubject:
-            name: current-subject
-            in: header
-            required: true
-            schema:
-                type: string
-            description: Identifying name of the currently logged in subject.
-
-        assumedRoles:
-            name: assumed-roles
-            in: header
-            required: false
-            schema:
-                type: string
-            description: Semicolon-separated list of roles to assume. The current subject needs to have the right to assume these roles.
--- a/src/main/resources/api-definition/hs-hosting/auth.yaml
+++ b/src/main/resources/api-definition/hs-hosting/auth.yaml
@@ -0,0 +1 @@
+../auth.yaml
--- a/src/main/resources/api-definition/hs-hosting/hs-hosting-assets-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-hosting/hs-hosting-assets-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single managed asset by its uuid, if visible for the current subject.'
    operationId: getSingleHostingAssetByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: assetUuid
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single hosting asset identified by its uuid, if permitted for the current subject.'
    operationId: patchHostingAsset
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: assetUuid
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single hosting asset identified by its uuid, if permitted for the current subject.'
    operationId: deleteHostingAssetByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: assetUuid
          in: path
--- a/src/main/resources/api-definition/hs-hosting/hs-hosting-assets.yaml
+++ b/src/main/resources/api-definition/hs-hosting/hs-hosting-assets.yaml
@@ -5,7 +5,6 @@ get:
        - hs-hosting-assets
    operationId: getListOfHostingAssets
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: projectUuid
          in: query
@@ -47,7 +46,6 @@ post:
        - hs-hosting-assets
    operationId: postNewHostingAsset
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        description: A JSON object describing the new hosting asset.
--- a/src/main/resources/api-definition/hs-office/hs-office-bankaccounts-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-bankaccounts-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single bank account by its uuid, if visible for the current subject.'
    operationId: getSingleBankAccountByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: bankAccountUUID
          in: path
@@ -31,7 +30,6 @@ delete:
    description: 'Delete a single bank account by its uuid, if permitted for the current subject.'
    operationId: deleteBankAccountByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: bankAccountUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-bankaccounts.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-bankaccounts.yaml
@@ -5,7 +5,6 @@ get:
        - hs-office-bank-accounts
    operationId: getListOfBankAccounts
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: holder
          in: query
@@ -33,7 +32,6 @@ post:
        - hs-office-bank-accounts
    operationId: postNewBankAccount
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        content:
--- a/src/main/resources/api-definition/hs-office/hs-office-contacts-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-contacts-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single business contact by its uuid, if visible for the current subject.'
    operationId: getSingleContactByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: contactUUID
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single contact by its uuid, if permitted for the current subject.'
    operationId: patchContact
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: contactUUID
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single business contact by its uuid, if permitted for the current subject.'
    operationId: deleteContactByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: contactUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-contacts.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-contacts.yaml
@@ -5,7 +5,6 @@ get:
        - hs-office-contacts
    operationId: getListOfContacts
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: caption
          in: query
@@ -40,7 +39,6 @@ post:
        - hs-office-contacts
    operationId: postNewContact
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        content:
--- a/src/main/resources/api-definition/hs-office/hs-office-coopassets-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-coopassets-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single asset transaction by its uuid, if visible for the current subject.'
    operationId: getSingleCoopAssetTransactionByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: assetTransactionUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-coopassets.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-coopassets.yaml
@@ -5,7 +5,6 @@ get:
    - hs-office-coopAssets
  operationId: getListOfCoopAssets
  parameters:
-    - $ref: 'auth.yaml#/components/parameters/currentSubject'
    - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    - name: membershipUuid
      in: query
@@ -48,7 +47,6 @@ post:
    - hs-office-coopAssets
  operationId: postNewCoopAssetTransaction
  parameters:
-    - $ref: 'auth.yaml#/components/parameters/currentSubject'
    - $ref: 'auth.yaml#/components/parameters/assumedRoles'
  requestBody:
    description: A JSON object describing the new cooperative assets transaction.
--- a/src/main/resources/api-definition/hs-office/hs-office-coopshares-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-coopshares-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single share transaction by its uuid, if visible for the current subject.'
    operationId: getSingleCoopShareTransactionByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: shareTransactionUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-coopshares.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-coopshares.yaml
@@ -5,7 +5,6 @@ get:
    - hs-office-coopShares
  operationId: getListOfCoopShares
  parameters:
-    - $ref: 'auth.yaml#/components/parameters/currentSubject'
    - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    - name: membershipUuid
      in: query
@@ -48,7 +47,6 @@ post:
    - hs-office-coopShares
  operationId: postNewCoopSharesTransaction
  parameters:
-    - $ref: 'auth.yaml#/components/parameters/currentSubject'
    - $ref: 'auth.yaml#/components/parameters/assumedRoles'
  requestBody:
    description: A JSON object describing the new cooperative shares transaction.
--- a/src/main/resources/api-definition/hs-office/hs-office-debitors-with-debitorNumber.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-debitors-with-debitorNumber.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single debitor by its debitorNumber, if visible for the current subject.'
    operationId: getSingleDebitorByDebitorNumber
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: debitorNumber
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-debitors-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-debitors-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single debitor by its uuid, if visible for the current subject.'
    operationId: getSingleDebitorByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: debitorUUID
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single debitor by its uuid, if permitted for the current subject.'
    operationId: patchDebitor
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: debitorUUID
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single debitor by its uuid, if permitted for the current subject.'
    operationId: deleteDebitorByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: debitorUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-debitors.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-debitors.yaml
@@ -5,7 +5,6 @@ get:
        - hs-office-debitors
    operationId: getListOfDebitors
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: name
          in: query
@@ -47,7 +46,6 @@ post:
        - hs-office-debitors
    operationId: postNewDebitor
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        content:
--- a/src/main/resources/api-definition/hs-office/hs-office-memberships-with-membershipNumber.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-memberships-with-membershipNumber.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single membership by its membershipNumber, if visible for the current subject.'
    operationId: getSingleMembershipByMembershipNumber
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: membershipNumber
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-memberships-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-memberships-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single membership by its uuid, if visible for the current subject.'
    operationId: getSingleMembershipByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: membershipUUID
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single membership by its uuid, if permitted for the current subject.'
    operationId: patchMembership
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: membershipUUID
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single membership by its uuid, if permitted for the current subject.'
    operationId: deleteMembershipByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: membershipUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-memberships.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-memberships.yaml
@@ -6,7 +6,6 @@ get:
        - hs-office-memberships
    operationId: getListOfMemberships
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: partnerUuid
          in: query
@@ -42,7 +41,6 @@ post:
        - hs-office-memberships
    operationId: postNewMembership
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        description: A JSON object describing the new membership.
--- a/src/main/resources/api-definition/hs-office/hs-office-partners-with-partnerNumber.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-partners-with-partnerNumber.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single business partner by its partner-number (prefixed with "P-"), if visible for the current subject.'
    operationId: getSinglePartnerByPartnerNumber
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: partnerNumber
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-partners-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-partners-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single business partner by its uuid, if visible for the current subject.'
    operationId: getSinglePartnerByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: partnerUUID
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single business partner by its uuid, if permitted for the current subject.'
    operationId: patchPartner
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: partnerUUID
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single business partner by its uuid, if permitted for the current subject.'
    operationId: deletePartnerByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: partnerUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-partners.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-partners.yaml
@@ -5,7 +5,6 @@ get:
        - hs-office-partners
    operationId: getListOfPartners
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: name
          in: query
@@ -33,7 +32,6 @@ post:
        - hs-office-partners
    operationId: postNewPartner
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        content:
--- a/src/main/resources/api-definition/hs-office/hs-office-persons-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-persons-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single business person by its uuid, if visible for the current subject.'
    operationId: getSinglePersonByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: personUUID
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single person by its uuid, if permitted for the current subject.'
    operationId: patchPerson
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: personUUID
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single business person by its uuid, if permitted for the current subject.'
    operationId: deletePersonByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: personUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-persons.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-persons.yaml
@@ -5,7 +5,6 @@ get:
        - hs-office-persons
    operationId: getListOfPersons
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: name
          in: query
@@ -33,7 +32,6 @@ post:
        - hs-office-persons
    operationId: postNewPerson
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        content:
--- a/src/main/resources/api-definition/hs-office/hs-office-relations-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-relations-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single person relation by its uuid, if visible for the current subject.'
    operationId: getSingleRelationByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: relationUUID
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single person relation by its uuid, if permitted for the current subject.'
    operationId: patchRelation
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: relationUUID
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single person relation by its uuid, if permitted for the current subject.'
    operationId: deleteRelationByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: relationUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-relations.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-relations.yaml
@@ -7,7 +7,6 @@ get:
        - hs-office-relations
    operationId: getListOfRelations
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: personUuid
          in: query
@@ -60,7 +59,6 @@ post:
        - hs-office-relations
    operationId: postNewRelation
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        content:
--- a/src/main/resources/api-definition/hs-office/hs-office-sepamandates-with-uuid.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-sepamandates-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single SEPA Mandate by its uuid, if visible for the current subject.'
    operationId: getSingleSepaMandateByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: sepaMandateUUID
          in: path
@@ -32,7 +31,6 @@ patch:
    description: 'Updates a single SEPA Mandate by its uuid, if permitted for the current subject.'
    operationId: patchSepaMandate
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: sepaMandateUUID
            in: path
@@ -63,7 +61,6 @@ delete:
    description: 'Delete a single SEPA Mandate by its uuid, if permitted for the current subject.'
    operationId: deleteSepaMandateByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: sepaMandateUUID
          in: path
--- a/src/main/resources/api-definition/hs-office/hs-office-sepamandates.yaml
+++ b/src/main/resources/api-definition/hs-office/hs-office-sepamandates.yaml
@@ -5,7 +5,6 @@ get:
        - hs-office-sepaMandates
    operationId: getListOfSepaMandates
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: iban
          in: query
@@ -33,7 +32,6 @@ post:
        - hs-office-sepaMandates
    operationId: postNewSepaMandate
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        description: A JSON object describing the new SEPA-Mandate.
--- a/src/main/resources/api-definition/rbac/rbac-grants-with-id.yaml
+++ b/src/main/resources/api-definition/rbac/rbac-grants-with-id.yaml
@@ -3,7 +3,6 @@ get:
    - rbac-grants
  operationId: getListOfGrantsByUuid
  parameters:
-    - $ref: 'auth.yaml#/components/parameters/currentSubject'
    - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    - name: grantedRoleUuid
      in: path
@@ -38,7 +37,6 @@ delete:
        - rbac-grants
    operationId: deleteRoleGrantFromSubject
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: grantedRoleUuid
          in: path
--- a/src/main/resources/api-definition/rbac/rbac-grants.yaml
+++ b/src/main/resources/api-definition/rbac/rbac-grants.yaml
@@ -3,7 +3,6 @@ get:
        - rbac-grants
    operationId: getListOfSubjectGrants
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    responses:
        "200":
@@ -20,7 +19,6 @@ post:
        - rbac-grants
    operationId: postNewRoleGrantToSubject
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        required: true
--- a/src/main/resources/api-definition/rbac/rbac-roles.yaml
+++ b/src/main/resources/api-definition/rbac/rbac-roles.yaml
@@ -3,7 +3,6 @@ get:
        - rbac-roles
    operationId: getListOfRoles
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    responses:
        "200":
--- a/src/main/resources/api-definition/rbac/rbac-subjects-with-id-permissions.yaml
+++ b/src/main/resources/api-definition/rbac/rbac-subjects-with-id-permissions.yaml
@@ -4,7 +4,6 @@ get:
    description: 'List all visible permissions granted to the given subject; reduced '
    operationId: getListOfSubjectPermissions
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: subjectUuid
          in: path
--- a/src/main/resources/api-definition/rbac/rbac-subjects-with-uuid.yaml
+++ b/src/main/resources/api-definition/rbac/rbac-subjects-with-uuid.yaml
@@ -4,7 +4,6 @@ get:
    description: 'Fetch a single subject by its id, if visible for the current subject.'
    operationId: getSingleSubjectByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: subjectUuid
          in: path
@@ -31,7 +30,6 @@ delete:
        - rbac-subjects
    operationId: deleteSubjectByUuid
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: subjectUuid
          in: path
--- a/src/main/resources/api-definition/rbac/rbac-subjects.yaml
+++ b/src/main/resources/api-definition/rbac/rbac-subjects.yaml
@@ -4,7 +4,6 @@ get:
    description: List accessible RBAC subjects with optional filter by name.
    operationId: getListOfSubjects
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: name
          in: query
--- a/src/main/resources/api-definition/test/test-customers.yaml
+++ b/src/main/resources/api-definition/test/test-customers.yaml
@@ -6,7 +6,6 @@ get:
    operationId: listCustomers

    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: prefix
          in: query
@@ -34,7 +33,6 @@ post:
        - testCustomers
    operationId: addCustomer
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
    requestBody:
        content:
--- a/src/main/resources/api-definition/test/test-packages-uuid.yaml
+++ b/src/main/resources/api-definition/test/test-packages-uuid.yaml
@@ -3,7 +3,6 @@ patch:
        - testPackages
    operationId: updatePackage
    parameters:
-        -   $ref: 'auth.yaml#/components/parameters/currentSubject'
        -   $ref: 'auth.yaml#/components/parameters/assumedRoles'
        -   name: packageUUID
            in: path
--- a/src/main/resources/api-definition/test/test-packages.yaml
+++ b/src/main/resources/api-definition/test/test-packages.yaml
@@ -3,7 +3,6 @@ get:
        - testPackages
    operationId: listPackages
    parameters:
-        - $ref: 'auth.yaml#/components/parameters/currentSubject'
        - $ref: 'auth.yaml#/components/parameters/assumedRoles'
        - name: name
          in: query