jmgilman · stormshield-gt · Feb 21, 2025 · Dec 16, 2024
diff --git a/src/api/sys/requests.rs b/src/api/sys/requests.rs
@@ -116,6 +116,22 @@ pub struct EnableAuthRequest {
     pub config: Option<EnableAuthDataConfig>,
 }
 
+/// ## Disable Auth Method
+/// This endpoint disables the auth method at the given auth path.
+///
+/// * Path: sys/auth/{self.path}
+/// * Method: DELETE
+/// * Response: N/A
+/// * Reference: <https://developer.hashicorp.com/vault/api-docs/system/auth#disable-auth-method>
+
+#[derive(Builder, Debug, Default, Endpoint, Serialize)]
+#[endpoint(path = "sys/auth/{self.path}", method = "DELETE", builder = "true")]
+#[builder(setter(into, strip_option), default)]
+pub struct DisableAuthRequest {
+    #[endpoint(skip)]
+    pub path: String,
+}
+
 #[derive(Clone, Builder, Debug, Default, Serialize)]
 #[builder(setter(into, strip_option), default)]
 pub struct EnableAuthDataConfig {

diff --git a/src/sys.rs b/src/sys.rs
@@ -119,7 +119,7 @@ pub mod auth {
 
     use crate::api;
     use crate::api::sys::requests::{
-        EnableAuthRequest, EnableAuthRequestBuilder, ListAuthsRequest,
+        DisableAuthRequest, EnableAuthRequest, EnableAuthRequestBuilder, ListAuthsRequest,
     };
     use crate::api::sys::responses::AuthResponse;
     use crate::client::Client;
@@ -144,6 +144,17 @@ pub mod auth {
         api::exec_with_empty(client, endpoint).await
     }
 
+    /// Disables the auth method at the given auth path.
+    ///
+    /// `sudo` required - This endpoint requires `sudo` capability in
+    ///  addition to any path-specific capabilities.
+    ///
+    /// See [DisableAuthRequest]
+    pub async fn disable(client: &impl Client, path: &str) -> Result<(), ClientError> {
+        let endpoint = DisableAuthRequest::builder().path(path).build().unwrap();
+        api::exec_with_empty(client, endpoint).await
+    }
+
     /// Lists all mounted auth engines
     ///
     /// See [ListAuthsRequest]

diff --git a/vaultrs-tests/tests/api_tests/sys.rs b/vaultrs-tests/tests/api_tests/sys.rs
@@ -33,6 +33,7 @@ async fn test() {
     // Test auth
     auth::test_create_auth(client).await;
     auth::test_list_auth(client).await;
+    auth::test_disable_auth(client).await;
 
     // Test policy
     policy::test_set_policy(client).await;
@@ -134,6 +135,10 @@ mod auth {
     pub async fn test_list_auth(client: &impl Client) {
         auth::list(client).await.unwrap();
     }
+
+    pub async fn test_disable_auth(client: &impl Client) {
+        auth::disable(client, "oidc_temp").await.unwrap();
+    }
 }
 
 mod policy {