@alicloud/eiam20211201 2.19.2 → 3.0.0

package/src/models/CreateIdentityProviderRequest.ts

@@ -6,8 +6,8 @@ export class CreateIdentityProviderRequestAuthnConfig extends $dara.Model {
   /**
    * @remarks
    * Specifies whether the corresponding IdP supports authentication. Valid values:
-   * 
    * - disabled: Disabled.
+   * 
    * - enabled: Enabled.
    * 
    * @example
@@ -17,8 +17,8 @@ export class CreateIdentityProviderRequestAuthnConfig extends $dara.Model {
   /**
    * @remarks
    * Specifies whether automatic password update is supported. Valid values:
-   * 
    * - disabled: Disabled.
+   * 
    * - enabled: Enabled.
    * 
    * @example
@@ -129,8 +129,9 @@ export class CreateIdentityProviderRequestBindingConfigAutoMatchUserProfileExpre
    * @remarks
    * The type of the expression. Valid values:
    * 
-   * - field: field
-   * - expression: expression
+   * - field: Field.
+   * 
+   * - expression: Expression.
    * 
    * @example
    * field
@@ -138,7 +139,7 @@ export class CreateIdentityProviderRequestBindingConfigAutoMatchUserProfileExpre
   expressionMappingType?: string;
   /**
    * @remarks
-   * The expression for the mapped attribute value.
+   * The expression for the mapping attribute value.
    * 
    * @example
    * idpUser.phoneNumber
@@ -146,7 +147,7 @@ export class CreateIdentityProviderRequestBindingConfigAutoMatchUserProfileExpre
   sourceValueExpression?: string;
   /**
    * @remarks
-   * The name of the target attribute for mapping.
+   * The name of the mapping target attribute.
    * 
    * @example
    * user.username
@@ -154,7 +155,7 @@ export class CreateIdentityProviderRequestBindingConfigAutoMatchUserProfileExpre
   targetField?: string;
   /**
    * @remarks
-   * The name of the target attribute for mapping.
+   * The name of the mapping target attribute.
    * 
    * @example
    * username
@@ -198,6 +199,7 @@ export class CreateIdentityProviderRequestBindingConfig extends $dara.Model {
    * Specifies whether automatic account matching is enabled. Valid values:
    * 
    * - disabled: Disabled.
+   * 
    * - enabled: Enabled.
    * 
    * @example
@@ -206,10 +208,9 @@ export class CreateIdentityProviderRequestBindingConfig extends $dara.Model {
   autoMatchUserStatus?: string;
   /**
    * @remarks
-   * Specifies whether the manual account binding feature is enabled. Valid values:
-   * 
-   * - disabled: Disabled.
-   * - enabled: Enabled.
+   * Specifies whether the manual account binding feature is enabled for users. Valid values:
+   * - disabled
+   * - enabled
    * 
    * @example
    * enabled
@@ -274,7 +275,7 @@ export class CreateIdentityProviderRequestDingtalkAppConfig extends $dara.Model
    * 
    * - public_dingtalk: Standard DingTalk.
    * 
-   * - private_dingtalk: Exclusive DingTalk.
+   * - private_dingtalk: Dedicated DingTalk.
    * 
    * @example
    * public_dingtalk
@@ -403,7 +404,7 @@ export class CreateIdentityProviderRequestLdapConfig extends $dara.Model {
    * The administrator password.
    * 
    * @example
-   * xxxx
+   * 123456
    */
   administratorPassword?: string;
   /**
@@ -416,11 +417,10 @@ export class CreateIdentityProviderRequestLdapConfig extends $dara.Model {
   administratorUsername?: string;
   /**
    * @remarks
-   * Specifies whether to verify the certificate fingerprint. Valid values:
+   * Specifies whether certificate fingerprint verification is enabled. Valid values:
    * 
-   * - disabled: Disabled.
-   * 
-   * - enabled: Enabled.
+   * - disabled
+   * - enabled
    * 
    * @example
    * enabled
@@ -433,7 +433,7 @@ export class CreateIdentityProviderRequestLdapConfig extends $dara.Model {
   certificateFingerprints?: string[];
   /**
    * @remarks
-   * The group member attribute name.
+   * The group member identifier.
    * 
    * @example
    * member
@@ -497,7 +497,7 @@ export class CreateIdentityProviderRequestLdapConfig extends $dara.Model {
   organizationalUnitRdn?: string;
   /**
    * @remarks
-   * Specifies whether password synchronization is enabled.
+   * The password synchronization switch.
    * 
    * @example
    * enabled
@@ -506,9 +506,8 @@ export class CreateIdentityProviderRequestLdapConfig extends $dara.Model {
   /**
    * @remarks
    * Specifies whether StartTLS is enabled. Valid values:
-   * - disabled: Disabled.
-   * 
-   * - enabled: Enabled.
+   * - disabled
+   * - enabled
    * 
    * @example
    * enabled
@@ -856,7 +855,7 @@ export class CreateIdentityProviderRequestSamlConfig extends $dara.Model {
   bindingMethod?: string;
   /**
    * @remarks
-   * The certificate list of the IdP.
+   * The list of IdP certificates.
    */
   certificates?: CreateIdentityProviderRequestSamlConfigCertificates[];
   /**
@@ -893,12 +892,12 @@ export class CreateIdentityProviderRequestSamlConfig extends $dara.Model {
   requireRequestSigned?: boolean;
   /**
    * @remarks
-   * Specifies whether the external IdP must sign the Assertion.
+   * Specifies whether the external IdP must sign assertions.
    */
   wantAssertionsSigned?: boolean;
   /**
    * @remarks
-   * Specifies whether the external IdP must sign the Response.
+   * Specifies whether the external IdP must sign responses.
    */
   wantResponseSigned?: boolean;
   static names(): { [key: string]: string } {
@@ -1035,6 +1034,7 @@ export class CreateIdentityProviderRequestUdPullConfig extends $dara.Model {
    * Specifies whether group synchronization is supported. Default value: disabled. Valid values:
    * 
    * - disabled: Disabled.
+   * 
    * - enabled: Enabled.
    * 
    * @example
@@ -1043,10 +1043,11 @@ export class CreateIdentityProviderRequestUdPullConfig extends $dara.Model {
   groupSyncStatus?: string;
   /**
    * @remarks
-   * The incremental callback status. Specifies whether to process incremental callback data from the IdP. Valid values:
+   * Specifies whether to process incremental callback data from the IdP. Valid values:
    * 
-   * - disabled
-   * - enabled
+   * - disabled: Disabled.
+   * 
+   * - enabled: Enabled.
    * 
    * @example
    * disabled
@@ -1060,8 +1061,8 @@ export class CreateIdentityProviderRequestUdPullConfig extends $dara.Model {
   /**
    * @remarks
    * Specifies whether to periodically verify data differences between EIAM and the identity provider. Valid values:
-   * 
    * - disabled: Disabled.
+   * 
    * - enabled: Enabled.
    * 
    * @example
@@ -1275,6 +1276,14 @@ export class CreateIdentityProviderRequestWeComConfig extends $dara.Model {
    * https://xxx.aliyunidaas.com/xxxx
    */
   authorizeCallbackDomain?: string;
+  /**
+   * @remarks
+   * The WeCom contacts secret.
+   * 
+   * @example
+   * mPLLiWv-_9wittxxxEJCpk1xkF5hOgBzpRt4kBkxxx
+   */
+  contactSecret?: string;
   /**
    * @remarks
    * The corpId of the WeCom self-built application.
@@ -1293,7 +1302,7 @@ export class CreateIdentityProviderRequestWeComConfig extends $dara.Model {
   corpSecret?: string;
   /**
    * @remarks
-   * The trusted domain.
+   * The trusted domain name.
    * 
    * @example
    * https://xxx.aliyunidaas.com/
@@ -1303,6 +1312,7 @@ export class CreateIdentityProviderRequestWeComConfig extends $dara.Model {
     return {
       agentId: 'AgentId',
       authorizeCallbackDomain: 'AuthorizeCallbackDomain',
+      contactSecret: 'ContactSecret',
       corpId: 'CorpId',
       corpSecret: 'CorpSecret',
       trustableDomain: 'TrustableDomain',
@@ -1313,6 +1323,7 @@ export class CreateIdentityProviderRequestWeComConfig extends $dara.Model {
     return {
       agentId: 'string',
       authorizeCallbackDomain: 'string',
+      contactSecret: 'string',
       corpId: 'string',
       corpSecret: 'string',
       trustableDomain: 'string',
@@ -1359,12 +1370,12 @@ export class CreateIdentityProviderRequest extends $dara.Model {
   clientToken?: string;
   /**
    * @remarks
-   * The DingTalk configuration.
+   * The DingTalk configuration information.
    */
   dingtalkAppConfig?: CreateIdentityProviderRequestDingtalkAppConfig;
   /**
    * @remarks
-   * The name of the identity provider.
+   * The identity provider name.
    * 
    * This parameter is required.
    * 
@@ -1376,14 +1387,21 @@ export class CreateIdentityProviderRequest extends $dara.Model {
    * @remarks
    * The synchronization type of the identity provider. Valid values:
    * 
-   * - urn:alibaba:idaas:idp:alibaba:dingtalk:pull: inbound DingTalk
-   * - urn:alibaba:idaas:idp:alibaba:dingtalk:push: outbound DingTalk
-   * - urn:alibaba:idaas:idp:tencent:wecom:pull: inbound WeCom
-   * - urn:alibaba:idaas:idp:bytedance:lark:pull: inbound Lark
-   * - urn:alibaba:idaas:idp:microsoft:ad:pull: inbound AD
-   * - urn:alibaba:idaas:idp:unknown:ldap:pull: inbound LDAP
-   * - urn:alibaba:idaas:idp:standard:oidc: standard OIDC
-   * - urn:alibaba:idaas:idp:alibaba:sase: SASE custom OIDC
+   * - Inbound DingTalk: urn:alibaba:idaas:idp:alibaba:dingtalk:pull
+   * 
+   * - Outbound DingTalk: urn:alibaba:idaas:idp:alibaba:dingtalk:push
+   * 
+   * - Inbound WeCom: urn:alibaba:idaas:idp:tencent:wecom:pull
+   * 
+   * - Inbound Lark: urn:alibaba:idaas:idp:bytedance:lark:pull
+   * 
+   * - Inbound AD: urn:alibaba:idaas:idp:microsoft:ad:pull
+   * 
+   * - Inbound LDAP: urn:alibaba:idaas:idp:unknown:ldap:pull
+   * 
+   * - Standard OIDC: urn:alibaba:idaas:idp:standard:oidc
+   * 
+   * - SASE custom OIDC: urn:alibaba:idaas:idp:alibaba:sase
    * 
    * This parameter is required.
    * 
@@ -1413,7 +1431,7 @@ export class CreateIdentityProviderRequest extends $dara.Model {
   ldapConfig?: CreateIdentityProviderRequestLdapConfig;
   /**
    * @remarks
-   * The URL of the application logo.
+   * The application logo URL.
    * 
    * @example
    * xxxx-image://xxxx_23aqr2ye554csg33dqpch5eu3q/tmp/d17d9adc-a943-45e7-ba0c-2838dddea678

package/src/models/CreateTrustedOriginRequest.ts

@@ -33,7 +33,7 @@ export class CreateTrustedOriginRequest extends $dara.Model {
   origin?: string;
   /**
    * @remarks
-   * The name of the trusted origin used for management, display, and auditing. If not specified, the value is empty.
+   * The name of the trusted origin used for management, display, and auditing. If this parameter is not specified, the value is empty.
    * 
    * @example
    * Qoder Production Console

package/src/models/DeleteTrustedOriginRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DeleteTrustedOriginRequest extends $dara.Model {
   /**
    * @remarks
-   * A client token that is used to ensure the idempotence of the request. Generate a parameter value from your client to ensure that the value is unique among different requests. The value of ClientToken can contain only ASCII characters and cannot exceed 64 characters in length.
+   * The idempotence token.
    * 
    * @example
    * client-token-example
@@ -13,7 +13,7 @@ export class DeleteTrustedOriginRequest extends $dara.Model {
   clientToken?: string;
   /**
    * @remarks
-   * The ID of the IDaaS EIAM instance.
+   * The instance ID.
    * 
    * This parameter is required.
    * 
@@ -23,7 +23,7 @@ export class DeleteTrustedOriginRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * The ID of the trusted origin.
+   * The trusted origin ID.
    * 
    * This parameter is required.
    * 

package/src/models/ExecIdentityProviderMetadataUrlResolutionRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class ExecIdentityProviderMetadataUrlResolutionRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the identity provider in IDaaS.
+   * The identity provider ID in IDaaS.
    * 
    * @example
    * idp_mwpcwnhrimlr2horxXXXX
@@ -23,7 +23,7 @@ export class ExecIdentityProviderMetadataUrlResolutionRequest extends $dara.Mode
   instanceId?: string;
   /**
    * @remarks
-   * The network access endpoint ID.
+   * The network endpoint ID.
    * 
    * @example
    * inae_public
@@ -38,6 +38,9 @@ export class ExecIdentityProviderMetadataUrlResolutionRequest extends $dara.Mode
    */
   oidcIssuer?: string;
   /**
+   * @remarks
+   * The SAML metadata URL.
+   * 
    * @example
    * https://dc.test.com/FederationMetadata/2007-06/FederationMetadata.xml
    */

package/src/models/ExecIdentityProviderMetadataUrlResolutionResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProviderMetadataOidcOpenIdConfiguration extends $dara.Model {
   /**
    * @remarks
-   * The OAuth 2.0 authorization endpoint.
+   * The OAuth2 authorization endpoint.
    * 
    * @example
    * https://demo.com/oauth2/default/v1/authorize
@@ -13,7 +13,7 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
   authorizationEndpoint?: string;
   /**
    * @remarks
-   * The OIDC issuer.
+   * The OIDC issuer information.
    * 
    * @example
    * https://demo.com/fe974231-3454-4b70-9326-70fb71e41bce/v2.0/
@@ -21,7 +21,7 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
   issuer?: string;
   /**
    * @remarks
-   * The OIDC JSON Web Key Set (JWKS) URI.
+   * The OIDC JWKS URI.
    * 
    * @example
    * https://demo.com/oauth2/v1/keys
@@ -29,7 +29,7 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
   jwksUri?: string;
   /**
    * @remarks
-   * The OAuth 2.0 token endpoint.
+   * The OAuth2 token endpoint.
    * 
    * @example
    * https://demo.com/api/bff/v1.2/developer/oidc/token
@@ -37,7 +37,7 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
   tokenEndpoint?: string;
   /**
    * @remarks
-   * The OIDC userinfo endpoint.
+   * The OIDC UserInfo endpoint.
    * 
    * @example
    * https://demo.com/api/bff/v1.2/developer/oidc/userinfo
@@ -75,7 +75,7 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
 export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProviderMetadataSamlMetadataConfigurationCertificates extends $dara.Model {
   /**
    * @remarks
-   * The content of the certificate.
+   * The certificate content.
    * 
    * @example
    * -----BEGIN CERTIFICATE----- MIIE+zCCA0egAwIBAgIJAJZY0ZY0ZY0Z -----END CERTIFICATE-----
@@ -105,12 +105,12 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
 export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProviderMetadataSamlMetadataConfiguration extends $dara.Model {
   /**
    * @remarks
-   * The certificates.
+   * The list of IdP certificates.
    */
   certificates?: ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProviderMetadataSamlMetadataConfigurationCertificates[];
   /**
    * @remarks
-   * The entity ID of the SAML identity provider.
+   * The entity ID of the IdP.
    * 
    * @example
    * http://dc.test.com/adfs/services/trust
@@ -118,7 +118,7 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
   idPEntityId?: string;
   /**
    * @remarks
-   * The SSO URL of the SAML identity provider.
+   * The single sign-on URL of the IdP.
    * 
    * @example
    * https://dc.test.com/adfs/ls/
@@ -155,12 +155,12 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
 export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProviderMetadata extends $dara.Model {
   /**
    * @remarks
-   * The OIDC identity provider metadata.
+   * The metadata of the OIDC IdP.
    */
   oidcOpenIdConfiguration?: ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProviderMetadataOidcOpenIdConfiguration;
   /**
    * @remarks
-   * The SAML identity provider metadata.
+   * The metadata of the SAML IdP.
    */
   samlMetadataConfiguration?: ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProviderMetadataSamlMetadataConfiguration;
   static names(): { [key: string]: string } {
@@ -195,7 +195,7 @@ export class ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProvid
 export class ExecIdentityProviderMetadataUrlResolutionResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The identity provider metadata.
+   * The metadata of the identity provider.
    */
   identityProviderMetadata?: ExecIdentityProviderMetadataUrlResolutionResponseBodyIdentityProviderMetadata;
   /**

package/src/models/GenerateOauthTokenRequest.ts

@@ -23,6 +23,13 @@ export class GenerateOauthTokenRequest extends $dara.Model {
    * https://example.com
    */
   audience?: string;
+  /**
+   * @remarks
+   * The grant type.
+   * 
+   * @example
+   * client_credentials
+   */
   grantType?: string;
   /**
    * @remarks
@@ -34,15 +41,36 @@ export class GenerateOauthTokenRequest extends $dara.Model {
    * idaas_ue2jvisn35ea5lmthk267xxxxx
    */
   instanceId?: string;
+  /**
+   * @remarks
+   * The requested token type.
+   * 
+   * @example
+   * urn:ietf:params:oauth:token-type:access_token
+   */
   requestedTokenType?: string;
   /**
    * @remarks
-   * The permission scopes.
+   * The permission scope.
    * 
    * This parameter is required.
    */
   scopeValues?: string[];
+  /**
+   * @remarks
+   * The subject token.
+   * 
+   * @example
+   * subject001
+   */
   subjectToken?: string;
+  /**
+   * @remarks
+   * The subject token type.
+   * 
+   * @example
+   * urn:ietf:params:oauth:token-type:access_token
+   */
   subjectTokenType?: string;
   static names(): { [key: string]: string } {
     return {

package/src/models/GenerateOauthTokenResponseBody.ts

@@ -5,10 +5,10 @@ import * as $dara from '@darabonba/typescript';
 export class GenerateOauthTokenResponseBodyTokenResponse extends $dara.Model {
   /**
    * @remarks
-   * Access Token。
+   * The access token.
    * 
    * @example
-   * ***
+   * eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJlaWFtIn0.signature
    */
   accessToken?: string;
   /**
@@ -27,6 +27,13 @@ export class GenerateOauthTokenResponseBodyTokenResponse extends $dara.Model {
    * 1200
    */
   expiresIn?: number;
+  /**
+   * @remarks
+   * The issued token type.
+   * 
+   * @example
+   * standard
+   */
   issuedTokenType?: string;
   /**
    * @remarks

package/src/models/GetApplicationFederatedCredentialResponseBody.ts

@@ -45,7 +45,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
 export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigAzureVmConfig extends $dara.Model {
   /**
    * @remarks
-   * The principal ID.
+   * The identity identifier.
    * 
    * @example
    * 5dee234a-1b4c-4ad7-a19f-fxxxxx
@@ -110,7 +110,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   instanceIds?: string[];
   /**
    * @remarks
-   * The GCP project ID.
+   * The GCP project ID to which the resource belongs.
    * 
    * @example
    * turnkey-axiom-475109-xx
@@ -118,7 +118,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   projectId?: string;
   /**
    * @remarks
-   * The subject corresponding to the service account.
+   * The sub claim that corresponds to the service account.
    * 
    * @example
    * 123456789
@@ -376,7 +376,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   attributeMappings?: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialAttributeMappings[];
   /**
    * @remarks
-   * The creation time.
+   * The creation time. The value is a UNIX timestamp in milliseconds.
    * 
    * @example
    * 1758785994982
@@ -408,7 +408,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   instanceId?: string;
   /**
    * @remarks
-   * The last used time.
+   * The last used time. The value is a UNIX timestamp in milliseconds.
    * 
    * @example
    * 1758785994982
@@ -434,7 +434,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   status?: string;
   /**
    * @remarks
-   * The update time.
+   * The update time. The value is a UNIX timestamp in milliseconds.
    * 
    * @example
    * 1758785994982