Add DeviceAuthorization field to OpenApiOAuthFlows with v3.2 support and v3.1/v3.0 extension

Co-authored-by: baywet <7905502+baywet@users.noreply.github.com>

Author: Copilot

src/Microsoft.OpenApi/Models/OpenApiConstants.cs

@@ -560,6 +560,11 @@ public static class OpenApiConstants
         /// </summary>
         public const string AuthorizationCode = "authorizationCode";
 
+        /// <summary>
+        /// Field: DeviceAuthorization
+        /// </summary>
+        public const string DeviceAuthorization = "deviceAuthorization";
+
         /// <summary>
         /// Field: AuthorizationUrl
         /// </summary>

src/Microsoft.OpenApi/Models/OpenApiOAuthFlows.cs

@@ -31,6 +31,11 @@ public class OpenApiOAuthFlows : IOpenApiSerializable, IOpenApiExtensible
         /// </summary>
         public OpenApiOAuthFlow? AuthorizationCode { get; set; }
 
+        /// <summary>
+        /// Configuration for the OAuth Device Authorization flow.
+        /// </summary>
+        public OpenApiOAuthFlow? DeviceAuthorization { get; set; }
+
         /// <summary>
         /// Specification Extensions.
         /// </summary>
@@ -51,6 +56,7 @@ public OpenApiOAuthFlows(OpenApiOAuthFlows oAuthFlows)
             Password = oAuthFlows?.Password != null ? new(oAuthFlows.Password) : null;
             ClientCredentials = oAuthFlows?.ClientCredentials != null ? new(oAuthFlows.ClientCredentials) : null;
             AuthorizationCode = oAuthFlows?.AuthorizationCode != null ? new(oAuthFlows.AuthorizationCode) : null;
+            DeviceAuthorization = oAuthFlows?.DeviceAuthorization != null ? new(oAuthFlows.DeviceAuthorization) : null;
             Extensions = oAuthFlows?.Extensions != null ? new Dictionary<string, IOpenApiExtension>(oAuthFlows.Extensions) : null;
         }
 
@@ -106,6 +112,22 @@ private void SerializeInternal(IOpenApiWriter writer, OpenApiSpecVersion version
                 AuthorizationCode,
                 callback);
 
+            // deviceAuthorization - only for v3.2+, otherwise as extension
+            if (version >= OpenApiSpecVersion.OpenApi3_2)
+            {
+                writer.WriteOptionalObject(
+                    OpenApiConstants.DeviceAuthorization,
+                    DeviceAuthorization,
+                    callback);
+            }
+            else if (DeviceAuthorization is not null)
+            {
+                writer.WriteOptionalObject(
+                    OpenApiConstants.ExtensionFieldNamePrefix + "oai-" + OpenApiConstants.DeviceAuthorization,
+                    DeviceAuthorization,
+                    callback);
+            }
+
             // extensions
             writer.WriteExtensions(Extensions, version);
 

src/Microsoft.OpenApi/Reader/V3/OpenApiOAuthFlowsDeserializer.cs

@@ -23,6 +23,7 @@ internal static partial class OpenApiV3Deserializer
         private static readonly PatternFieldMap<OpenApiOAuthFlows> _oAuthFlowsPatternFields =
             new()
             {
+                {s => s.Equals("x-oai-deviceAuthorization", StringComparison.OrdinalIgnoreCase), (o, p, n, t) => o.DeviceAuthorization = LoadOAuthFlow(n, t)},
                 {s => s.StartsWith(OpenApiConstants.ExtensionFieldNamePrefix, StringComparison.OrdinalIgnoreCase), (o, p, n, _) => o.AddExtension(p, LoadExtension(p,n))}
             };
 

src/Microsoft.OpenApi/Reader/V31/OpenApiOAuthFlowsDeserializer.cs

@@ -20,6 +20,7 @@ internal static partial class OpenApiV31Deserializer
         private static readonly PatternFieldMap<OpenApiOAuthFlows> _oAuthFlowsPatternFields =
             new()
             {
+                {s => s.Equals("x-oai-deviceAuthorization", StringComparison.OrdinalIgnoreCase), (o, p, n, t) => o.DeviceAuthorization = LoadOAuthFlow(n, t)},
                 {s => s.StartsWith(OpenApiConstants.ExtensionFieldNamePrefix, StringComparison.OrdinalIgnoreCase), (o, p, n, _) => o.AddExtension(p, LoadExtension(p,n))}
             };
 

src/Microsoft.OpenApi/Reader/V32/OpenApiOAuthFlowsDeserializer.cs

@@ -14,7 +14,8 @@ internal static partial class OpenApiV32Deserializer
                 {"implicit", (o, n, t) => o.Implicit = LoadOAuthFlow(n, t)},
                 {"password", (o, n, t) => o.Password = LoadOAuthFlow(n, t)},
                 {"clientCredentials", (o, n, t) => o.ClientCredentials = LoadOAuthFlow(n, t)},
-                {"authorizationCode", (o, n, t) => o.AuthorizationCode = LoadOAuthFlow(n, t)}
+                {"authorizationCode", (o, n, t) => o.AuthorizationCode = LoadOAuthFlow(n, t)},
+                {"deviceAuthorization", (o, n, t) => o.DeviceAuthorization = LoadOAuthFlow(n, t)}
             };
 
         private static readonly PatternFieldMap<OpenApiOAuthFlows> _oAuthFlowsPatternFields =