akeyless 5.0.14 → 5.0.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +6 -1
- data/docs/AccountGeneralSettings.md +2 -0
- data/docs/ActiveDirectoryPayload.md +2 -0
- data/docs/AllowedClientType.md +20 -0
- data/docs/AuthMethodAccessInfo.md +2 -0
- data/docs/AuthMethodCreateApiKey.md +2 -0
- data/docs/AuthMethodCreateAwsIam.md +2 -0
- data/docs/AuthMethodCreateAzureAD.md +2 -0
- data/docs/AuthMethodCreateCert.md +2 -0
- data/docs/AuthMethodCreateEmail.md +2 -0
- data/docs/AuthMethodCreateGcp.md +2 -0
- data/docs/AuthMethodCreateK8s.md +2 -0
- data/docs/AuthMethodCreateKerberos.md +2 -0
- data/docs/AuthMethodCreateLdap.md +2 -0
- data/docs/AuthMethodCreateOCI.md +2 -0
- data/docs/AuthMethodCreateOIDC.md +2 -0
- data/docs/AuthMethodCreateOauth2.md +2 -0
- data/docs/AuthMethodCreateSAML.md +2 -0
- data/docs/AuthMethodCreateUniversalIdentity.md +2 -0
- data/docs/AuthMethodUpdateApiKey.md +2 -0
- data/docs/AuthMethodUpdateAwsIam.md +2 -0
- data/docs/AuthMethodUpdateAzureAD.md +2 -0
- data/docs/AuthMethodUpdateCert.md +2 -0
- data/docs/AuthMethodUpdateEmail.md +2 -0
- data/docs/AuthMethodUpdateGcp.md +2 -0
- data/docs/AuthMethodUpdateK8s.md +2 -0
- data/docs/AuthMethodUpdateKerberos.md +2 -0
- data/docs/AuthMethodUpdateLdap.md +2 -0
- data/docs/AuthMethodUpdateOCI.md +2 -0
- data/docs/AuthMethodUpdateOIDC.md +2 -0
- data/docs/AuthMethodUpdateOauth2.md +2 -0
- data/docs/AuthMethodUpdateSAML.md +2 -0
- data/docs/AuthMethodUpdateUniversalIdentity.md +2 -0
- data/docs/BastionGlobalConf.md +4 -0
- data/docs/CreateAuthMethod.md +2 -0
- data/docs/CreateAuthMethodAWSIAM.md +2 -0
- data/docs/CreateAuthMethodAzureAD.md +2 -0
- data/docs/CreateAuthMethodCert.md +2 -0
- data/docs/CreateAuthMethodEmail.md +2 -0
- data/docs/CreateAuthMethodGCP.md +2 -0
- data/docs/CreateAuthMethodHuawei.md +2 -0
- data/docs/CreateAuthMethodK8S.md +2 -0
- data/docs/CreateAuthMethodLDAP.md +2 -0
- data/docs/CreateAuthMethodOAuth2.md +2 -0
- data/docs/CreateAuthMethodOCI.md +2 -0
- data/docs/CreateAuthMethodOIDC.md +2 -0
- data/docs/CreateAuthMethodSAML.md +2 -0
- data/docs/CreateAuthMethodUniversalIdentity.md +2 -0
- data/docs/CreatePKICertIssuer.md +6 -0
- data/docs/DSProducerDetails.md +10 -0
- data/docs/DynamicSecretCreateGcp.md +22 -6
- data/docs/DynamicSecretCreateGoogleWorkspace.md +2 -0
- data/docs/DynamicSecretCreateMongoDb.md +2 -0
- data/docs/DynamicSecretCreateMsSql.md +2 -0
- data/docs/DynamicSecretGetValue.md +2 -0
- data/docs/DynamicSecretUpdateGcp.md +22 -6
- data/docs/DynamicSecretUpdateGoogleWorkspace.md +2 -0
- data/docs/DynamicSecretUpdateMongoDb.md +2 -0
- data/docs/DynamicSecretUpdateMsSql.md +2 -0
- data/docs/EventForwarderGetOutput.md +3 -1
- data/docs/GatewayCreateMigration.md +2 -0
- data/docs/GatewayCreateProducerGcp.md +22 -6
- data/docs/GatewayCreateProducerMSSQL.md +2 -0
- data/docs/GatewayCreateProducerMongo.md +2 -0
- data/docs/GatewayUpdateMigration.md +2 -0
- data/docs/GatewayUpdateProducerGcp.md +22 -6
- data/docs/GatewayUpdateProducerMSSQL.md +2 -0
- data/docs/GatewayUpdateProducerMongo.md +2 -0
- data/docs/GatewayUpdateRemoteAccess.md +4 -0
- data/docs/GetDynamicSecretValue.md +2 -0
- data/docs/NotiForwarderDetailsInput.md +28 -0
- data/docs/PKICertificateIssueDetails.md +6 -0
- data/docs/RotatedSecretCreateSsh.md +4 -0
- data/docs/RotatedSecretDeleteSync.md +2 -0
- data/docs/RotatedSecretDetailsInfo.md +4 -0
- data/docs/RotatedSecretUpdateSsh.md +4 -0
- data/docs/SlackNotiForwarderDetails.md +18 -0
- data/docs/StaticSecretDeleteSync.md +2 -0
- data/docs/TeamsNotiForwarderDetails.md +18 -0
- data/docs/UpdateAccountSettings.md +4 -0
- data/docs/UpdateAuthMethod.md +2 -0
- data/docs/UpdateAuthMethodAWSIAM.md +2 -0
- data/docs/UpdateAuthMethodAzureAD.md +2 -0
- data/docs/UpdateAuthMethodCert.md +2 -0
- data/docs/UpdateAuthMethodGCP.md +2 -0
- data/docs/UpdateAuthMethodK8S.md +2 -0
- data/docs/UpdateAuthMethodLDAP.md +2 -0
- data/docs/UpdateAuthMethodOAuth2.md +2 -0
- data/docs/UpdateAuthMethodOCI.md +2 -0
- data/docs/UpdateAuthMethodOIDC.md +2 -0
- data/docs/UpdateAuthMethodSAML.md +2 -0
- data/docs/UpdateAuthMethodUniversalIdentity.md +2 -0
- data/docs/UpdatePKICertIssuer.md +6 -0
- data/docs/V2Api.md +4 -4
- data/docs/WebhookNotiForwarderDetails.md +26 -0
- data/docs/WindowsServiceAttributes.md +4 -0
- data/lib/akeyless/models/account_general_settings.rb +10 -1
- data/lib/akeyless/models/active_directory_payload.rb +10 -1
- data/lib/akeyless/models/allowed_client_type.rb +225 -0
- data/lib/akeyless/models/auth_method_access_info.rb +12 -1
- data/lib/akeyless/models/auth_method_create_api_key.rb +13 -1
- data/lib/akeyless/models/auth_method_create_aws_iam.rb +13 -1
- data/lib/akeyless/models/auth_method_create_azure_ad.rb +13 -1
- data/lib/akeyless/models/auth_method_create_cert.rb +13 -1
- data/lib/akeyless/models/auth_method_create_email.rb +13 -1
- data/lib/akeyless/models/auth_method_create_gcp.rb +13 -1
- data/lib/akeyless/models/auth_method_create_k8s.rb +13 -1
- data/lib/akeyless/models/auth_method_create_kerberos.rb +13 -1
- data/lib/akeyless/models/auth_method_create_ldap.rb +13 -1
- data/lib/akeyless/models/auth_method_create_oauth2.rb +13 -1
- data/lib/akeyless/models/auth_method_create_oci.rb +13 -1
- data/lib/akeyless/models/auth_method_create_oidc.rb +13 -1
- data/lib/akeyless/models/auth_method_create_saml.rb +13 -1
- data/lib/akeyless/models/auth_method_create_universal_identity.rb +13 -1
- data/lib/akeyless/models/auth_method_update_api_key.rb +13 -1
- data/lib/akeyless/models/auth_method_update_aws_iam.rb +13 -1
- data/lib/akeyless/models/auth_method_update_azure_ad.rb +13 -1
- data/lib/akeyless/models/auth_method_update_cert.rb +13 -1
- data/lib/akeyless/models/auth_method_update_email.rb +13 -1
- data/lib/akeyless/models/auth_method_update_gcp.rb +13 -1
- data/lib/akeyless/models/auth_method_update_k8s.rb +13 -1
- data/lib/akeyless/models/auth_method_update_kerberos.rb +13 -1
- data/lib/akeyless/models/auth_method_update_ldap.rb +13 -1
- data/lib/akeyless/models/auth_method_update_oauth2.rb +13 -1
- data/lib/akeyless/models/auth_method_update_oci.rb +13 -1
- data/lib/akeyless/models/auth_method_update_oidc.rb +13 -1
- data/lib/akeyless/models/auth_method_update_saml.rb +13 -1
- data/lib/akeyless/models/auth_method_update_universal_identity.rb +13 -1
- data/lib/akeyless/models/bastion_global_conf.rb +19 -1
- data/lib/akeyless/models/create_auth_method.rb +13 -1
- data/lib/akeyless/models/create_auth_method_awsiam.rb +13 -1
- data/lib/akeyless/models/create_auth_method_azure_ad.rb +13 -1
- data/lib/akeyless/models/create_auth_method_cert.rb +13 -1
- data/lib/akeyless/models/create_auth_method_email.rb +13 -1
- data/lib/akeyless/models/create_auth_method_gcp.rb +13 -1
- data/lib/akeyless/models/create_auth_method_huawei.rb +13 -1
- data/lib/akeyless/models/create_auth_method_k8_s.rb +13 -1
- data/lib/akeyless/models/create_auth_method_ldap.rb +13 -1
- data/lib/akeyless/models/create_auth_method_o_auth2.rb +13 -1
- data/lib/akeyless/models/create_auth_method_oci.rb +13 -1
- data/lib/akeyless/models/create_auth_method_oidc.rb +13 -1
- data/lib/akeyless/models/create_auth_method_saml.rb +13 -1
- data/lib/akeyless/models/create_auth_method_universal_identity.rb +13 -1
- data/lib/akeyless/models/create_pki_cert_issuer.rb +31 -1
- data/lib/akeyless/models/ds_producer_details.rb +47 -1
- data/lib/akeyless/models/dynamic_secret_create_gcp.rb +92 -12
- data/lib/akeyless/models/dynamic_secret_create_google_workspace.rb +11 -1
- data/lib/akeyless/models/dynamic_secret_create_mongo_db.rb +11 -1
- data/lib/akeyless/models/dynamic_secret_create_ms_sql.rb +11 -1
- data/lib/akeyless/models/dynamic_secret_get_value.rb +11 -1
- data/lib/akeyless/models/dynamic_secret_update_gcp.rb +92 -12
- data/lib/akeyless/models/dynamic_secret_update_google_workspace.rb +11 -1
- data/lib/akeyless/models/dynamic_secret_update_mongo_db.rb +11 -1
- data/lib/akeyless/models/dynamic_secret_update_ms_sql.rb +11 -1
- data/lib/akeyless/models/event_forwarder_get_output.rb +13 -4
- data/lib/akeyless/models/gateway_create_migration.rb +13 -1
- data/lib/akeyless/models/gateway_create_producer_gcp.rb +92 -12
- data/lib/akeyless/models/gateway_create_producer_mongo.rb +11 -1
- data/lib/akeyless/models/gateway_create_producer_mssql.rb +11 -1
- data/lib/akeyless/models/gateway_update_migration.rb +13 -1
- data/lib/akeyless/models/gateway_update_producer_gcp.rb +92 -12
- data/lib/akeyless/models/gateway_update_producer_mongo.rb +11 -1
- data/lib/akeyless/models/gateway_update_producer_mssql.rb +11 -1
- data/lib/akeyless/models/gateway_update_remote_access.rb +25 -1
- data/lib/akeyless/models/get_dynamic_secret_value.rb +11 -1
- data/lib/akeyless/models/noti_forwarder_details_input.rb +261 -0
- data/lib/akeyless/models/pki_certificate_issue_details.rb +31 -1
- data/lib/akeyless/models/rotated_secret_create_ssh.rb +21 -1
- data/lib/akeyless/models/rotated_secret_delete_sync.rb +11 -1
- data/lib/akeyless/models/rotated_secret_details_info.rb +21 -1
- data/lib/akeyless/models/rotated_secret_update_ssh.rb +21 -1
- data/lib/akeyless/models/slack_noti_forwarder_details.rb +214 -0
- data/lib/akeyless/models/static_secret_delete_sync.rb +11 -1
- data/lib/akeyless/models/teams_noti_forwarder_details.rb +214 -0
- data/lib/akeyless/models/update_account_settings.rb +23 -1
- data/lib/akeyless/models/update_auth_method.rb +13 -1
- data/lib/akeyless/models/update_auth_method_awsiam.rb +13 -1
- data/lib/akeyless/models/update_auth_method_azure_ad.rb +13 -1
- data/lib/akeyless/models/update_auth_method_cert.rb +13 -1
- data/lib/akeyless/models/update_auth_method_gcp.rb +13 -1
- data/lib/akeyless/models/update_auth_method_k8_s.rb +13 -1
- data/lib/akeyless/models/update_auth_method_ldap.rb +13 -1
- data/lib/akeyless/models/update_auth_method_o_auth2.rb +13 -1
- data/lib/akeyless/models/update_auth_method_oci.rb +13 -1
- data/lib/akeyless/models/update_auth_method_oidc.rb +13 -1
- data/lib/akeyless/models/update_auth_method_saml.rb +13 -1
- data/lib/akeyless/models/update_auth_method_universal_identity.rb +13 -1
- data/lib/akeyless/models/update_pki_cert_issuer.rb +31 -1
- data/lib/akeyless/models/webhook_noti_forwarder_details.rb +253 -0
- data/lib/akeyless/models/windows_service_attributes.rb +21 -1
- data/lib/akeyless/version.rb +1 -1
- data/lib/akeyless.rb +5 -0
- data/spec/models/allowed_client_type_spec.rb +42 -0
- data/spec/models/noti_forwarder_details_input_spec.rb +66 -0
- data/spec/models/slack_noti_forwarder_details_spec.rb +36 -0
- data/spec/models/teams_noti_forwarder_details_spec.rb +36 -0
- data/spec/models/webhook_noti_forwarder_details_spec.rb +60 -0
- metadata +21 -1
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Allowed redirect URIs after the authentication
|
|
23
26
|
attr_accessor :allowed_redirect_uri
|
|
24
27
|
|
|
@@ -92,6 +95,7 @@ module Akeyless
|
|
|
92
95
|
def self.attribute_map
|
|
93
96
|
{
|
|
94
97
|
:'access_expires' => :'access-expires',
|
|
98
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
95
99
|
:'allowed_redirect_uri' => :'allowed-redirect-uri',
|
|
96
100
|
:'audience' => :'audience',
|
|
97
101
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
@@ -127,6 +131,7 @@ module Akeyless
|
|
|
127
131
|
def self.openapi_types
|
|
128
132
|
{
|
|
129
133
|
:'access_expires' => :'Integer',
|
|
134
|
+
:'allowed_client_type' => :'Array<String>',
|
|
130
135
|
:'allowed_redirect_uri' => :'Array<String>',
|
|
131
136
|
:'audience' => :'String',
|
|
132
137
|
:'audit_logs_claims' => :'Array<String>',
|
|
@@ -180,6 +185,12 @@ module Akeyless
|
|
|
180
185
|
self.access_expires = 0
|
|
181
186
|
end
|
|
182
187
|
|
|
188
|
+
if attributes.key?(:'allowed_client_type')
|
|
189
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
190
|
+
self.allowed_client_type = value
|
|
191
|
+
end
|
|
192
|
+
end
|
|
193
|
+
|
|
183
194
|
if attributes.key?(:'allowed_redirect_uri')
|
|
184
195
|
if (value = attributes[:'allowed_redirect_uri']).is_a?(Array)
|
|
185
196
|
self.allowed_redirect_uri = value
|
|
@@ -328,6 +339,7 @@ module Akeyless
|
|
|
328
339
|
return true if self.equal?(o)
|
|
329
340
|
self.class == o.class &&
|
|
330
341
|
access_expires == o.access_expires &&
|
|
342
|
+
allowed_client_type == o.allowed_client_type &&
|
|
331
343
|
allowed_redirect_uri == o.allowed_redirect_uri &&
|
|
332
344
|
audience == o.audience &&
|
|
333
345
|
audit_logs_claims == o.audit_logs_claims &&
|
|
@@ -362,7 +374,7 @@ module Akeyless
|
|
|
362
374
|
# Calculates hash code according to all attributes.
|
|
363
375
|
# @return [Integer] Hash code
|
|
364
376
|
def hash
|
|
365
|
-
[access_expires, allowed_redirect_uri, audience, audit_logs_claims, bound_ips, client_id, client_secret, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, issuer, json, jwt_ttl, name, new_name, product_type, required_scopes, required_scopes_prefix, subclaims_delimiters, token, uid_token, unique_identifier].hash
|
|
377
|
+
[access_expires, allowed_client_type, allowed_redirect_uri, audience, audit_logs_claims, bound_ips, client_id, client_secret, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, issuer, json, jwt_ttl, name, new_name, product_type, required_scopes, required_scopes_prefix, subclaims_delimiters, token, uid_token, unique_identifier].hash
|
|
366
378
|
end
|
|
367
379
|
|
|
368
380
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Allowed redirect URIs after the authentication
|
|
23
26
|
attr_accessor :allowed_redirect_uri
|
|
24
27
|
|
|
@@ -80,6 +83,7 @@ module Akeyless
|
|
|
80
83
|
def self.attribute_map
|
|
81
84
|
{
|
|
82
85
|
:'access_expires' => :'access-expires',
|
|
86
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
83
87
|
:'allowed_redirect_uri' => :'allowed-redirect-uri',
|
|
84
88
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
85
89
|
:'bound_ips' => :'bound-ips',
|
|
@@ -111,6 +115,7 @@ module Akeyless
|
|
|
111
115
|
def self.openapi_types
|
|
112
116
|
{
|
|
113
117
|
:'access_expires' => :'Integer',
|
|
118
|
+
:'allowed_client_type' => :'Array<String>',
|
|
114
119
|
:'allowed_redirect_uri' => :'Array<String>',
|
|
115
120
|
:'audit_logs_claims' => :'Array<String>',
|
|
116
121
|
:'bound_ips' => :'Array<String>',
|
|
@@ -160,6 +165,12 @@ module Akeyless
|
|
|
160
165
|
self.access_expires = 0
|
|
161
166
|
end
|
|
162
167
|
|
|
168
|
+
if attributes.key?(:'allowed_client_type')
|
|
169
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
170
|
+
self.allowed_client_type = value
|
|
171
|
+
end
|
|
172
|
+
end
|
|
173
|
+
|
|
163
174
|
if attributes.key?(:'allowed_redirect_uri')
|
|
164
175
|
if (value = attributes[:'allowed_redirect_uri']).is_a?(Array)
|
|
165
176
|
self.allowed_redirect_uri = value
|
|
@@ -290,6 +301,7 @@ module Akeyless
|
|
|
290
301
|
return true if self.equal?(o)
|
|
291
302
|
self.class == o.class &&
|
|
292
303
|
access_expires == o.access_expires &&
|
|
304
|
+
allowed_client_type == o.allowed_client_type &&
|
|
293
305
|
allowed_redirect_uri == o.allowed_redirect_uri &&
|
|
294
306
|
audit_logs_claims == o.audit_logs_claims &&
|
|
295
307
|
bound_ips == o.bound_ips &&
|
|
@@ -320,7 +332,7 @@ module Akeyless
|
|
|
320
332
|
# Calculates hash code according to all attributes.
|
|
321
333
|
# @return [Integer] Hash code
|
|
322
334
|
def hash
|
|
323
|
-
[access_expires, allowed_redirect_uri, audit_logs_claims, bound_ips, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, idp_metadata_url, idp_metadata_xml_data, json, jwt_ttl, name, new_name, product_type, subclaims_delimiters, token, uid_token, unique_identifier].hash
|
|
335
|
+
[access_expires, allowed_client_type, allowed_redirect_uri, audit_logs_claims, bound_ips, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, idp_metadata_url, idp_metadata_xml_data, json, jwt_ttl, name, new_name, product_type, subclaims_delimiters, token, uid_token, unique_identifier].hash
|
|
324
336
|
end
|
|
325
337
|
|
|
326
338
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Subclaims to include in audit logs, e.g \"--audit-logs-claims email --audit-logs-claims username\"
|
|
23
26
|
attr_accessor :audit_logs_claims
|
|
24
27
|
|
|
@@ -74,6 +77,7 @@ module Akeyless
|
|
|
74
77
|
def self.attribute_map
|
|
75
78
|
{
|
|
76
79
|
:'access_expires' => :'access-expires',
|
|
80
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
77
81
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
78
82
|
:'bound_ips' => :'bound-ips',
|
|
79
83
|
:'delete_protection' => :'delete_protection',
|
|
@@ -103,6 +107,7 @@ module Akeyless
|
|
|
103
107
|
def self.openapi_types
|
|
104
108
|
{
|
|
105
109
|
:'access_expires' => :'Integer',
|
|
110
|
+
:'allowed_client_type' => :'Array<String>',
|
|
106
111
|
:'audit_logs_claims' => :'Array<String>',
|
|
107
112
|
:'bound_ips' => :'Array<String>',
|
|
108
113
|
:'delete_protection' => :'String',
|
|
@@ -150,6 +155,12 @@ module Akeyless
|
|
|
150
155
|
self.access_expires = 0
|
|
151
156
|
end
|
|
152
157
|
|
|
158
|
+
if attributes.key?(:'allowed_client_type')
|
|
159
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
160
|
+
self.allowed_client_type = value
|
|
161
|
+
end
|
|
162
|
+
end
|
|
163
|
+
|
|
153
164
|
if attributes.key?(:'audit_logs_claims')
|
|
154
165
|
if (value = attributes[:'audit_logs_claims']).is_a?(Array)
|
|
155
166
|
self.audit_logs_claims = value
|
|
@@ -263,6 +274,7 @@ module Akeyless
|
|
|
263
274
|
return true if self.equal?(o)
|
|
264
275
|
self.class == o.class &&
|
|
265
276
|
access_expires == o.access_expires &&
|
|
277
|
+
allowed_client_type == o.allowed_client_type &&
|
|
266
278
|
audit_logs_claims == o.audit_logs_claims &&
|
|
267
279
|
bound_ips == o.bound_ips &&
|
|
268
280
|
delete_protection == o.delete_protection &&
|
|
@@ -291,7 +303,7 @@ module Akeyless
|
|
|
291
303
|
# Calculates hash code according to all attributes.
|
|
292
304
|
# @return [Integer] Hash code
|
|
293
305
|
def hash
|
|
294
|
-
[access_expires, audit_logs_claims, bound_ips, delete_protection, deny_inheritance, deny_rotate, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, new_name, product_type, token, ttl, uid_token].hash
|
|
306
|
+
[access_expires, allowed_client_type, audit_logs_claims, bound_ips, delete_protection, deny_inheritance, deny_rotate, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, new_name, product_type, token, ttl, uid_token].hash
|
|
295
307
|
end
|
|
296
308
|
|
|
297
309
|
# Builds the object from hash
|
|
@@ -17,6 +17,10 @@ module Akeyless
|
|
|
17
17
|
class BastionGlobalConf
|
|
18
18
|
attr_accessor :allowed_bastion_urls
|
|
19
19
|
|
|
20
|
+
attr_accessor :allowed_ssh_url
|
|
21
|
+
|
|
22
|
+
attr_accessor :default_session_ttl_minutes
|
|
23
|
+
|
|
20
24
|
attr_accessor :legacy_signing_alg
|
|
21
25
|
|
|
22
26
|
attr_accessor :rdp_username_sub_claim
|
|
@@ -27,6 +31,8 @@ module Akeyless
|
|
|
27
31
|
def self.attribute_map
|
|
28
32
|
{
|
|
29
33
|
:'allowed_bastion_urls' => :'allowed_bastion_urls',
|
|
34
|
+
:'allowed_ssh_url' => :'allowed_ssh_url',
|
|
35
|
+
:'default_session_ttl_minutes' => :'default_session_ttl_minutes',
|
|
30
36
|
:'legacy_signing_alg' => :'legacy_signing_alg',
|
|
31
37
|
:'rdp_username_sub_claim' => :'rdp_username_sub_claim',
|
|
32
38
|
:'ssh_username_sub_claim' => :'ssh_username_sub_claim'
|
|
@@ -42,6 +48,8 @@ module Akeyless
|
|
|
42
48
|
def self.openapi_types
|
|
43
49
|
{
|
|
44
50
|
:'allowed_bastion_urls' => :'Array<String>',
|
|
51
|
+
:'allowed_ssh_url' => :'String',
|
|
52
|
+
:'default_session_ttl_minutes' => :'Integer',
|
|
45
53
|
:'legacy_signing_alg' => :'Boolean',
|
|
46
54
|
:'rdp_username_sub_claim' => :'String',
|
|
47
55
|
:'ssh_username_sub_claim' => :'String'
|
|
@@ -75,6 +83,14 @@ module Akeyless
|
|
|
75
83
|
end
|
|
76
84
|
end
|
|
77
85
|
|
|
86
|
+
if attributes.key?(:'allowed_ssh_url')
|
|
87
|
+
self.allowed_ssh_url = attributes[:'allowed_ssh_url']
|
|
88
|
+
end
|
|
89
|
+
|
|
90
|
+
if attributes.key?(:'default_session_ttl_minutes')
|
|
91
|
+
self.default_session_ttl_minutes = attributes[:'default_session_ttl_minutes']
|
|
92
|
+
end
|
|
93
|
+
|
|
78
94
|
if attributes.key?(:'legacy_signing_alg')
|
|
79
95
|
self.legacy_signing_alg = attributes[:'legacy_signing_alg']
|
|
80
96
|
end
|
|
@@ -109,6 +125,8 @@ module Akeyless
|
|
|
109
125
|
return true if self.equal?(o)
|
|
110
126
|
self.class == o.class &&
|
|
111
127
|
allowed_bastion_urls == o.allowed_bastion_urls &&
|
|
128
|
+
allowed_ssh_url == o.allowed_ssh_url &&
|
|
129
|
+
default_session_ttl_minutes == o.default_session_ttl_minutes &&
|
|
112
130
|
legacy_signing_alg == o.legacy_signing_alg &&
|
|
113
131
|
rdp_username_sub_claim == o.rdp_username_sub_claim &&
|
|
114
132
|
ssh_username_sub_claim == o.ssh_username_sub_claim
|
|
@@ -123,7 +141,7 @@ module Akeyless
|
|
|
123
141
|
# Calculates hash code according to all attributes.
|
|
124
142
|
# @return [Integer] Hash code
|
|
125
143
|
def hash
|
|
126
|
-
[allowed_bastion_urls, legacy_signing_alg, rdp_username_sub_claim, ssh_username_sub_claim].hash
|
|
144
|
+
[allowed_bastion_urls, allowed_ssh_url, default_session_ttl_minutes, legacy_signing_alg, rdp_username_sub_claim, ssh_username_sub_claim].hash
|
|
127
145
|
end
|
|
128
146
|
|
|
129
147
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Subclaims to include in audit logs, e.g \"--audit-logs-claims email --audit-logs-claims username\"
|
|
23
26
|
attr_accessor :audit_logs_claims
|
|
24
27
|
|
|
@@ -62,6 +65,7 @@ module Akeyless
|
|
|
62
65
|
def self.attribute_map
|
|
63
66
|
{
|
|
64
67
|
:'access_expires' => :'access-expires',
|
|
68
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
65
69
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
66
70
|
:'bound_ips' => :'bound-ips',
|
|
67
71
|
:'delete_protection' => :'delete_protection',
|
|
@@ -87,6 +91,7 @@ module Akeyless
|
|
|
87
91
|
def self.openapi_types
|
|
88
92
|
{
|
|
89
93
|
:'access_expires' => :'Integer',
|
|
94
|
+
:'allowed_client_type' => :'Array<String>',
|
|
90
95
|
:'audit_logs_claims' => :'Array<String>',
|
|
91
96
|
:'bound_ips' => :'Array<String>',
|
|
92
97
|
:'delete_protection' => :'String',
|
|
@@ -130,6 +135,12 @@ module Akeyless
|
|
|
130
135
|
self.access_expires = 0
|
|
131
136
|
end
|
|
132
137
|
|
|
138
|
+
if attributes.key?(:'allowed_client_type')
|
|
139
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
140
|
+
self.allowed_client_type = value
|
|
141
|
+
end
|
|
142
|
+
end
|
|
143
|
+
|
|
133
144
|
if attributes.key?(:'audit_logs_claims')
|
|
134
145
|
if (value = attributes[:'audit_logs_claims']).is_a?(Array)
|
|
135
146
|
self.audit_logs_claims = value
|
|
@@ -225,6 +236,7 @@ module Akeyless
|
|
|
225
236
|
return true if self.equal?(o)
|
|
226
237
|
self.class == o.class &&
|
|
227
238
|
access_expires == o.access_expires &&
|
|
239
|
+
allowed_client_type == o.allowed_client_type &&
|
|
228
240
|
audit_logs_claims == o.audit_logs_claims &&
|
|
229
241
|
bound_ips == o.bound_ips &&
|
|
230
242
|
delete_protection == o.delete_protection &&
|
|
@@ -249,7 +261,7 @@ module Akeyless
|
|
|
249
261
|
# Calculates hash code according to all attributes.
|
|
250
262
|
# @return [Integer] Hash code
|
|
251
263
|
def hash
|
|
252
|
-
[access_expires, audit_logs_claims, bound_ips, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, token, uid_token].hash
|
|
264
|
+
[access_expires, allowed_client_type, audit_logs_claims, bound_ips, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, token, uid_token].hash
|
|
253
265
|
end
|
|
254
266
|
|
|
255
267
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Subclaims to include in audit logs, e.g \"--audit-logs-claims email --audit-logs-claims username\"
|
|
23
26
|
attr_accessor :audit_logs_claims
|
|
24
27
|
|
|
@@ -89,6 +92,7 @@ module Akeyless
|
|
|
89
92
|
def self.attribute_map
|
|
90
93
|
{
|
|
91
94
|
:'access_expires' => :'access-expires',
|
|
95
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
92
96
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
93
97
|
:'bound_arn' => :'bound-arn',
|
|
94
98
|
:'bound_aws_account_id' => :'bound-aws-account-id',
|
|
@@ -123,6 +127,7 @@ module Akeyless
|
|
|
123
127
|
def self.openapi_types
|
|
124
128
|
{
|
|
125
129
|
:'access_expires' => :'Integer',
|
|
130
|
+
:'allowed_client_type' => :'Array<String>',
|
|
126
131
|
:'audit_logs_claims' => :'Array<String>',
|
|
127
132
|
:'bound_arn' => :'Array<String>',
|
|
128
133
|
:'bound_aws_account_id' => :'Array<String>',
|
|
@@ -175,6 +180,12 @@ module Akeyless
|
|
|
175
180
|
self.access_expires = 0
|
|
176
181
|
end
|
|
177
182
|
|
|
183
|
+
if attributes.key?(:'allowed_client_type')
|
|
184
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
185
|
+
self.allowed_client_type = value
|
|
186
|
+
end
|
|
187
|
+
end
|
|
188
|
+
|
|
178
189
|
if attributes.key?(:'audit_logs_claims')
|
|
179
190
|
if (value = attributes[:'audit_logs_claims']).is_a?(Array)
|
|
180
191
|
self.audit_logs_claims = value
|
|
@@ -329,6 +340,7 @@ module Akeyless
|
|
|
329
340
|
return true if self.equal?(o)
|
|
330
341
|
self.class == o.class &&
|
|
331
342
|
access_expires == o.access_expires &&
|
|
343
|
+
allowed_client_type == o.allowed_client_type &&
|
|
332
344
|
audit_logs_claims == o.audit_logs_claims &&
|
|
333
345
|
bound_arn == o.bound_arn &&
|
|
334
346
|
bound_aws_account_id == o.bound_aws_account_id &&
|
|
@@ -362,7 +374,7 @@ module Akeyless
|
|
|
362
374
|
# Calculates hash code according to all attributes.
|
|
363
375
|
# @return [Integer] Hash code
|
|
364
376
|
def hash
|
|
365
|
-
[access_expires, audit_logs_claims, bound_arn, bound_aws_account_id, bound_ips, bound_resource_id, bound_role_id, bound_role_name, bound_user_id, bound_user_name, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, sts_url, token, uid_token, unique_identifier].hash
|
|
377
|
+
[access_expires, allowed_client_type, audit_logs_claims, bound_arn, bound_aws_account_id, bound_ips, bound_resource_id, bound_role_id, bound_role_name, bound_user_id, bound_user_name, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, sts_url, token, uid_token, unique_identifier].hash
|
|
366
378
|
end
|
|
367
379
|
|
|
368
380
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Deprecated (Deprecated) The audience in the JWT
|
|
23
26
|
attr_accessor :audience
|
|
24
27
|
|
|
@@ -101,6 +104,7 @@ module Akeyless
|
|
|
101
104
|
def self.attribute_map
|
|
102
105
|
{
|
|
103
106
|
:'access_expires' => :'access-expires',
|
|
107
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
104
108
|
:'audience' => :'audience',
|
|
105
109
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
106
110
|
:'bound_group_id' => :'bound-group-id',
|
|
@@ -139,6 +143,7 @@ module Akeyless
|
|
|
139
143
|
def self.openapi_types
|
|
140
144
|
{
|
|
141
145
|
:'access_expires' => :'Integer',
|
|
146
|
+
:'allowed_client_type' => :'Array<String>',
|
|
142
147
|
:'audience' => :'String',
|
|
143
148
|
:'audit_logs_claims' => :'Array<String>',
|
|
144
149
|
:'bound_group_id' => :'Array<String>',
|
|
@@ -195,6 +200,12 @@ module Akeyless
|
|
|
195
200
|
self.access_expires = 0
|
|
196
201
|
end
|
|
197
202
|
|
|
203
|
+
if attributes.key?(:'allowed_client_type')
|
|
204
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
205
|
+
self.allowed_client_type = value
|
|
206
|
+
end
|
|
207
|
+
end
|
|
208
|
+
|
|
198
209
|
if attributes.key?(:'audience')
|
|
199
210
|
self.audience = attributes[:'audience']
|
|
200
211
|
else
|
|
@@ -371,6 +382,7 @@ module Akeyless
|
|
|
371
382
|
return true if self.equal?(o)
|
|
372
383
|
self.class == o.class &&
|
|
373
384
|
access_expires == o.access_expires &&
|
|
385
|
+
allowed_client_type == o.allowed_client_type &&
|
|
374
386
|
audience == o.audience &&
|
|
375
387
|
audit_logs_claims == o.audit_logs_claims &&
|
|
376
388
|
bound_group_id == o.bound_group_id &&
|
|
@@ -408,7 +420,7 @@ module Akeyless
|
|
|
408
420
|
# Calculates hash code according to all attributes.
|
|
409
421
|
# @return [Integer] Hash code
|
|
410
422
|
def hash
|
|
411
|
-
[access_expires, audience, audit_logs_claims, bound_group_id, bound_ips, bound_providers, bound_resource_id, bound_resource_names, bound_resource_types, bound_rg_id, bound_spid, bound_sub_id, bound_tenant_id, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, issuer, json, jwks_uri, jwt_ttl, name, product_type, token, uid_token, unique_identifier].hash
|
|
423
|
+
[access_expires, allowed_client_type, audience, audit_logs_claims, bound_group_id, bound_ips, bound_providers, bound_resource_id, bound_resource_names, bound_resource_types, bound_rg_id, bound_spid, bound_sub_id, bound_tenant_id, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, issuer, json, jwks_uri, jwt_ttl, name, product_type, token, uid_token, unique_identifier].hash
|
|
412
424
|
end
|
|
413
425
|
|
|
414
426
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Comma separated list of allowed CORS domains to be validated as part of the authentication flow.
|
|
23
26
|
attr_accessor :allowed_cors
|
|
24
27
|
|
|
@@ -92,6 +95,7 @@ module Akeyless
|
|
|
92
95
|
def self.attribute_map
|
|
93
96
|
{
|
|
94
97
|
:'access_expires' => :'access-expires',
|
|
98
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
95
99
|
:'allowed_cors' => :'allowed-cors',
|
|
96
100
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
97
101
|
:'bound_common_names' => :'bound-common-names',
|
|
@@ -127,6 +131,7 @@ module Akeyless
|
|
|
127
131
|
def self.openapi_types
|
|
128
132
|
{
|
|
129
133
|
:'access_expires' => :'Integer',
|
|
134
|
+
:'allowed_client_type' => :'Array<String>',
|
|
130
135
|
:'allowed_cors' => :'String',
|
|
131
136
|
:'audit_logs_claims' => :'Array<String>',
|
|
132
137
|
:'bound_common_names' => :'Array<String>',
|
|
@@ -180,6 +185,12 @@ module Akeyless
|
|
|
180
185
|
self.access_expires = 0
|
|
181
186
|
end
|
|
182
187
|
|
|
188
|
+
if attributes.key?(:'allowed_client_type')
|
|
189
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
190
|
+
self.allowed_client_type = value
|
|
191
|
+
end
|
|
192
|
+
end
|
|
193
|
+
|
|
183
194
|
if attributes.key?(:'allowed_cors')
|
|
184
195
|
self.allowed_cors = attributes[:'allowed_cors']
|
|
185
196
|
end
|
|
@@ -336,6 +347,7 @@ module Akeyless
|
|
|
336
347
|
return true if self.equal?(o)
|
|
337
348
|
self.class == o.class &&
|
|
338
349
|
access_expires == o.access_expires &&
|
|
350
|
+
allowed_client_type == o.allowed_client_type &&
|
|
339
351
|
allowed_cors == o.allowed_cors &&
|
|
340
352
|
audit_logs_claims == o.audit_logs_claims &&
|
|
341
353
|
bound_common_names == o.bound_common_names &&
|
|
@@ -370,7 +382,7 @@ module Akeyless
|
|
|
370
382
|
# Calculates hash code according to all attributes.
|
|
371
383
|
# @return [Integer] Hash code
|
|
372
384
|
def hash
|
|
373
|
-
[access_expires, allowed_cors, audit_logs_claims, bound_common_names, bound_dns_sans, bound_email_sans, bound_extensions, bound_ips, bound_organizational_units, bound_uri_sans, certificate_data, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, revoked_cert_ids, token, uid_token, unique_identifier].hash
|
|
385
|
+
[access_expires, allowed_client_type, allowed_cors, audit_logs_claims, bound_common_names, bound_dns_sans, bound_email_sans, bound_extensions, bound_ips, bound_organizational_units, bound_uri_sans, certificate_data, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, revoked_cert_ids, token, uid_token, unique_identifier].hash
|
|
374
386
|
end
|
|
375
387
|
|
|
376
388
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Subclaims to include in audit logs, e.g \"--audit-logs-claims email --audit-logs-claims username\"
|
|
23
26
|
attr_accessor :audit_logs_claims
|
|
24
27
|
|
|
@@ -71,6 +74,7 @@ module Akeyless
|
|
|
71
74
|
def self.attribute_map
|
|
72
75
|
{
|
|
73
76
|
:'access_expires' => :'access-expires',
|
|
77
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
74
78
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
75
79
|
:'bound_ips' => :'bound-ips',
|
|
76
80
|
:'delete_protection' => :'delete_protection',
|
|
@@ -99,6 +103,7 @@ module Akeyless
|
|
|
99
103
|
def self.openapi_types
|
|
100
104
|
{
|
|
101
105
|
:'access_expires' => :'Integer',
|
|
106
|
+
:'allowed_client_type' => :'Array<String>',
|
|
102
107
|
:'audit_logs_claims' => :'Array<String>',
|
|
103
108
|
:'bound_ips' => :'Array<String>',
|
|
104
109
|
:'delete_protection' => :'String',
|
|
@@ -145,6 +150,12 @@ module Akeyless
|
|
|
145
150
|
self.access_expires = 0
|
|
146
151
|
end
|
|
147
152
|
|
|
153
|
+
if attributes.key?(:'allowed_client_type')
|
|
154
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
155
|
+
self.allowed_client_type = value
|
|
156
|
+
end
|
|
157
|
+
end
|
|
158
|
+
|
|
148
159
|
if attributes.key?(:'audit_logs_claims')
|
|
149
160
|
if (value = attributes[:'audit_logs_claims']).is_a?(Array)
|
|
150
161
|
self.audit_logs_claims = value
|
|
@@ -261,6 +272,7 @@ module Akeyless
|
|
|
261
272
|
return true if self.equal?(o)
|
|
262
273
|
self.class == o.class &&
|
|
263
274
|
access_expires == o.access_expires &&
|
|
275
|
+
allowed_client_type == o.allowed_client_type &&
|
|
264
276
|
audit_logs_claims == o.audit_logs_claims &&
|
|
265
277
|
bound_ips == o.bound_ips &&
|
|
266
278
|
delete_protection == o.delete_protection &&
|
|
@@ -288,7 +300,7 @@ module Akeyless
|
|
|
288
300
|
# Calculates hash code according to all attributes.
|
|
289
301
|
# @return [Integer] Hash code
|
|
290
302
|
def hash
|
|
291
|
-
[access_expires, audit_logs_claims, bound_ips, delete_protection, description, email, enable_mfa, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, mfa_type, name, product_type, token, uid_token].hash
|
|
303
|
+
[access_expires, allowed_client_type, audit_logs_claims, bound_ips, delete_protection, description, email, enable_mfa, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, mfa_type, name, product_type, token, uid_token].hash
|
|
292
304
|
end
|
|
293
305
|
|
|
294
306
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# The audience to verify in the JWT received by the client
|
|
23
26
|
attr_accessor :audience
|
|
24
27
|
|
|
@@ -89,6 +92,7 @@ module Akeyless
|
|
|
89
92
|
def self.attribute_map
|
|
90
93
|
{
|
|
91
94
|
:'access_expires' => :'access-expires',
|
|
95
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
92
96
|
:'audience' => :'audience',
|
|
93
97
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
94
98
|
:'bound_ips' => :'bound-ips',
|
|
@@ -123,6 +127,7 @@ module Akeyless
|
|
|
123
127
|
def self.openapi_types
|
|
124
128
|
{
|
|
125
129
|
:'access_expires' => :'Integer',
|
|
130
|
+
:'allowed_client_type' => :'Array<String>',
|
|
126
131
|
:'audience' => :'String',
|
|
127
132
|
:'audit_logs_claims' => :'Array<String>',
|
|
128
133
|
:'bound_ips' => :'Array<String>',
|
|
@@ -175,6 +180,12 @@ module Akeyless
|
|
|
175
180
|
self.access_expires = 0
|
|
176
181
|
end
|
|
177
182
|
|
|
183
|
+
if attributes.key?(:'allowed_client_type')
|
|
184
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
185
|
+
self.allowed_client_type = value
|
|
186
|
+
end
|
|
187
|
+
end
|
|
188
|
+
|
|
178
189
|
if attributes.key?(:'audience')
|
|
179
190
|
self.audience = attributes[:'audience']
|
|
180
191
|
else
|
|
@@ -330,6 +341,7 @@ module Akeyless
|
|
|
330
341
|
return true if self.equal?(o)
|
|
331
342
|
self.class == o.class &&
|
|
332
343
|
access_expires == o.access_expires &&
|
|
344
|
+
allowed_client_type == o.allowed_client_type &&
|
|
333
345
|
audience == o.audience &&
|
|
334
346
|
audit_logs_claims == o.audit_logs_claims &&
|
|
335
347
|
bound_ips == o.bound_ips &&
|
|
@@ -363,7 +375,7 @@ module Akeyless
|
|
|
363
375
|
# Calculates hash code according to all attributes.
|
|
364
376
|
# @return [Integer] Hash code
|
|
365
377
|
def hash
|
|
366
|
-
[access_expires, audience, audit_logs_claims, bound_ips, bound_labels, bound_projects, bound_regions, bound_service_accounts, bound_zones, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, service_account_creds_data, token, type, uid_token, unique_identifier].hash
|
|
378
|
+
[access_expires, allowed_client_type, audience, audit_logs_claims, bound_ips, bound_labels, bound_projects, bound_regions, bound_service_accounts, bound_zones, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, service_account_creds_data, token, type, uid_token, unique_identifier].hash
|
|
367
379
|
end
|
|
368
380
|
|
|
369
381
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# Subclaims to include in audit logs, e.g \"--audit-logs-claims email --audit-logs-claims username\"
|
|
23
26
|
attr_accessor :audit_logs_claims
|
|
24
27
|
|
|
@@ -83,6 +86,7 @@ module Akeyless
|
|
|
83
86
|
def self.attribute_map
|
|
84
87
|
{
|
|
85
88
|
:'access_expires' => :'access-expires',
|
|
89
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
86
90
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
87
91
|
:'auth_url' => :'auth-url',
|
|
88
92
|
:'bound_domain_id' => :'bound-domain-id',
|
|
@@ -115,6 +119,7 @@ module Akeyless
|
|
|
115
119
|
def self.openapi_types
|
|
116
120
|
{
|
|
117
121
|
:'access_expires' => :'Integer',
|
|
122
|
+
:'allowed_client_type' => :'Array<String>',
|
|
118
123
|
:'audit_logs_claims' => :'Array<String>',
|
|
119
124
|
:'auth_url' => :'String',
|
|
120
125
|
:'bound_domain_id' => :'Array<String>',
|
|
@@ -165,6 +170,12 @@ module Akeyless
|
|
|
165
170
|
self.access_expires = 0
|
|
166
171
|
end
|
|
167
172
|
|
|
173
|
+
if attributes.key?(:'allowed_client_type')
|
|
174
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
175
|
+
self.allowed_client_type = value
|
|
176
|
+
end
|
|
177
|
+
end
|
|
178
|
+
|
|
168
179
|
if attributes.key?(:'audit_logs_claims')
|
|
169
180
|
if (value = attributes[:'audit_logs_claims']).is_a?(Array)
|
|
170
181
|
self.audit_logs_claims = value
|
|
@@ -302,6 +313,7 @@ module Akeyless
|
|
|
302
313
|
return true if self.equal?(o)
|
|
303
314
|
self.class == o.class &&
|
|
304
315
|
access_expires == o.access_expires &&
|
|
316
|
+
allowed_client_type == o.allowed_client_type &&
|
|
305
317
|
audit_logs_claims == o.audit_logs_claims &&
|
|
306
318
|
auth_url == o.auth_url &&
|
|
307
319
|
bound_domain_id == o.bound_domain_id &&
|
|
@@ -333,7 +345,7 @@ module Akeyless
|
|
|
333
345
|
# Calculates hash code according to all attributes.
|
|
334
346
|
# @return [Integer] Hash code
|
|
335
347
|
def hash
|
|
336
|
-
[access_expires, audit_logs_claims, auth_url, bound_domain_id, bound_domain_name, bound_ips, bound_tenant_id, bound_tenant_name, bound_user_id, bound_user_name, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, token, uid_token].hash
|
|
348
|
+
[access_expires, allowed_client_type, audit_logs_claims, auth_url, bound_domain_id, bound_domain_name, bound_ips, bound_tenant_id, bound_tenant_name, bound_user_id, bound_user_name, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, product_type, token, uid_token].hash
|
|
337
349
|
end
|
|
338
350
|
|
|
339
351
|
# Builds the object from hash
|
|
@@ -19,6 +19,9 @@ module Akeyless
|
|
|
19
19
|
# Access expiration date in Unix timestamp (select 0 for access without expiry date)
|
|
20
20
|
attr_accessor :access_expires
|
|
21
21
|
|
|
22
|
+
# limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
|
|
23
|
+
attr_accessor :allowed_client_type
|
|
24
|
+
|
|
22
25
|
# The audience in the Kubernetes JWT that the access is restricted to
|
|
23
26
|
attr_accessor :audience
|
|
24
27
|
|
|
@@ -80,6 +83,7 @@ module Akeyless
|
|
|
80
83
|
def self.attribute_map
|
|
81
84
|
{
|
|
82
85
|
:'access_expires' => :'access-expires',
|
|
86
|
+
:'allowed_client_type' => :'allowed-client-type',
|
|
83
87
|
:'audience' => :'audience',
|
|
84
88
|
:'audit_logs_claims' => :'audit-logs-claims',
|
|
85
89
|
:'bound_ips' => :'bound-ips',
|
|
@@ -111,6 +115,7 @@ module Akeyless
|
|
|
111
115
|
def self.openapi_types
|
|
112
116
|
{
|
|
113
117
|
:'access_expires' => :'Integer',
|
|
118
|
+
:'allowed_client_type' => :'Array<String>',
|
|
114
119
|
:'audience' => :'String',
|
|
115
120
|
:'audit_logs_claims' => :'Array<String>',
|
|
116
121
|
:'bound_ips' => :'Array<String>',
|
|
@@ -160,6 +165,12 @@ module Akeyless
|
|
|
160
165
|
self.access_expires = 0
|
|
161
166
|
end
|
|
162
167
|
|
|
168
|
+
if attributes.key?(:'allowed_client_type')
|
|
169
|
+
if (value = attributes[:'allowed_client_type']).is_a?(Array)
|
|
170
|
+
self.allowed_client_type = value
|
|
171
|
+
end
|
|
172
|
+
end
|
|
173
|
+
|
|
163
174
|
if attributes.key?(:'audience')
|
|
164
175
|
self.audience = attributes[:'audience']
|
|
165
176
|
end
|
|
@@ -287,6 +298,7 @@ module Akeyless
|
|
|
287
298
|
return true if self.equal?(o)
|
|
288
299
|
self.class == o.class &&
|
|
289
300
|
access_expires == o.access_expires &&
|
|
301
|
+
allowed_client_type == o.allowed_client_type &&
|
|
290
302
|
audience == o.audience &&
|
|
291
303
|
audit_logs_claims == o.audit_logs_claims &&
|
|
292
304
|
bound_ips == o.bound_ips &&
|
|
@@ -317,7 +329,7 @@ module Akeyless
|
|
|
317
329
|
# Calculates hash code according to all attributes.
|
|
318
330
|
# @return [Integer] Hash code
|
|
319
331
|
def hash
|
|
320
|
-
[access_expires, audience, audit_logs_claims, bound_ips, bound_namespaces, bound_pod_names, bound_sa_names, delete_protection, description, expiration_event_in, force_sub_claims, gen_key, gw_bound_ips, json, jwt_ttl, name, product_type, public_key, token, uid_token].hash
|
|
332
|
+
[access_expires, allowed_client_type, audience, audit_logs_claims, bound_ips, bound_namespaces, bound_pod_names, bound_sa_names, delete_protection, description, expiration_event_in, force_sub_claims, gen_key, gw_bound_ips, json, jwt_ttl, name, product_type, public_key, token, uid_token].hash
|
|
321
333
|
end
|
|
322
334
|
|
|
323
335
|
# Builds the object from hash
|