anchor.diff:  ----
   {
       "kind": "OAuthClientAuthorization",
  -    "apiVersion": "v1beta1",
  -    "metadata": {
  -        "name": "ldap:bob:openshift-web-console",
  -        "selfLink": "/osapi/v1beta1/oAuthClientAuthorizations/ldap:bob:openshift-web-console",
  +    "apiVersion": "v1",
  +    "metadata": {
  +        "name": "bob:openshift-web-console",
           "resourceVersion": "1",
           "creationTimestamp": "2015-01-01T01:01:01-00:00"
       },
       "clientName": "openshift-web-console",
  -    "userName": "ldap:bob",
  -    "userUID": "123df313-b404-4efe-9856-fdfb13a2a005"
  -    "scopes": [
  -        "session"
  -    ]
  -}
  -----
  -
  -== OAuthAuthorizeToken
  -This API is still in development and subject to change.
  -
  +    "userName": "bob",
  +    "userUID": "9311ac33-0fde-11e5-97a1-3c970e4b7ffe"
  +    "scopes": []
  +}
  +----
  +
  +=== OAuthAuthorizeToken
   An OAuthAuthorizeToken represents an OAuth authorization code, as described in
   https://tools.ietf.org/html/rfc6749#section-1.3.1[RFC 6749, section 1.3.1].
   
  
positive.code: }
  ----
  
  == User
  This API is still in development and subject to change.
  
  A User represents an actor in the system.
  
  Sample User:
  ----
  {
      "kind": "User",
      "apiVersion": "v1beta1",
      "metadata": {
          "name": "ldap:bob",
          "uid": "123df313-b404-4efe-9856-fdfb13a2a005",
          "selfLink": "/osapi/v1beta1/users/ldap:bob",
          "creationTimestamp": "2015-01-01T01:01:01-00:00"
      }
  }
  ----
  
  == UserIdentityMapping
  This API is still in development and subject to change.
  
  A UserIdentityMapping maps an identity (consisting of an identity provider and username) to a User.
  
  Sample UserIdentityMapping:
  ----
  {
      "kind": "UserIdentityMapping",
      "apiVersion": "v1beta1",
      "metadata": {
          "name": "ldap:bob",
          "selfLink": "/osapi/v1beta1/userIdentityMappings/ldap:bob",
          "resourceVersion": "1",
          "creationTimestamp": "2015-01-01T01:01:01-00:00"
      },
      "identity": {
          "metadata": {
              "name": "ldap:bob",
              "creationTimestamp": "2015-01-01T01:01:01-00:00"
          },
          "provider": "ldap",
          "userName": "bob"
      },
      "user": {
          "metadata": {
              "name": "ldap:bob",
              "uid": "123df313-b404-4efe-9856-fdfb13a2a005",
              "creationTimestamp": "2015-01-01T01:01:01-00:00"
          }
      }
  }
  ----
  
  == OAuthClient
  This API is still in development and subject to change.
  
  An OAuthClient represents an OAuth client, as described in
  https://tools.ietf.org/html/rfc6749#section-2[RFC 6749, section 2].
  
  
negative.code: ----
  {
      "kind": "OAuthAccessToken",
      "apiVersion": "v1",
      "metadata": {
          "name": "ODliOGE5ZmMtYzczYi00Nzk1LTg4MGEtNzQyZmUxZmUwY2Vh", <1>
          "resourceVersion": "1",
          "creationTimestamp": "2015-01-01T01:01:02-00:00"
      },
      "clientName": "openshift-web-console", <2>
      "expiresIn": 86400, <3>
      "scopes": [],
      "redirectURI": "https://localhost:8443/console/oauth", <4>
      "userName": "bob", <5>
      "userUID": "9311ac33-0fde-11e5-97a1-3c970e4b7ffe", <6>
      "authorizeToken": "MDAwYjM5YjMtMzM1MC00NDY4LTkxODItOTA2OTE2YzE0M2Fj" <7>
  }
  ----
  <1> Token name, used as a bearer token to authenticate to the API
  <2> OAuthClient that requested this token
  <3> Expiration in seconds from the creationTimestamp
  <4> The redirectURI where the user was redirected during the authorization flow that resulted in this token
  <5> The name of the User this token allows authentication as.
  <6> The UID of the User this token allows authentication as.
  <7> The name of the OAuthAuthorizationToken used to obtain this token, if any