@descope/pulumi-descope 0.3.2 → 0.3.13

package/descoper.js

@@ -0,0 +1,175 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Descoper = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * Manages a Descope console user and their access control settings. Console users (referred to as "Descopers") are team members who access the [Descope console](https://app.descope.com) to manage projects.
+ *
+ * Access is controlled via RBAC, where each Descoper can be granted one of four roles:
+ * - `admin` – Full access to project settings
+ * - `developer` – Can edit flows and configurations
+ * - `support` – Can view user data and audit logs
+ * - `auditor` – Read-only access to audit logs
+ *
+ * Roles can be scoped to the entire company, to specific projects by ID, or to all projects with a given tag.
+ *
+ * ## Example Usage
+ *
+ * ### Company Admin
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as descope from "@descope/pulumi-descope";
+ *
+ * const admin = new descope.Descoper("admin", {
+ *     email: "admin@example.com",
+ *     name: "Alice Admin",
+ *     rbac: {
+ *         isCompanyAdmin: true,
+ *     },
+ * });
+ * ```
+ *
+ * ### Developer for Specific Projects
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as descope from "@descope/pulumi-descope";
+ *
+ * const developer = new descope.Descoper("developer", {
+ *     email: "dev@example.com",
+ *     name: "Bob Dev",
+ *     rbac: {
+ *         projectRoles: [{
+ *             role: "developer",
+ *             projectIds: [
+ *                 "P123abc",
+ *                 "P456def",
+ *             ],
+ *         }],
+ *     },
+ * });
+ * ```
+ *
+ * ### Support Access via Project Tags
+ *
+ * Grant a support engineer access to all projects tagged `production`:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as descope from "@descope/pulumi-descope";
+ *
+ * const support = new descope.Descoper("support", {
+ *     email: "support@example.com",
+ *     rbac: {
+ *         tagRoles: [{
+ *             role: "support",
+ *             tags: ["production"],
+ *         }],
+ *     },
+ * });
+ * ```
+ *
+ * ### Multi-Role Access
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as descope from "@descope/pulumi-descope";
+ *
+ * const multiRole = new descope.Descoper("multi_role", {
+ *     email: "lead@example.com",
+ *     rbac: {
+ *         projectRoles: [
+ *             {
+ *                 role: "admin",
+ *                 projectIds: ["P123abc"],
+ *             },
+ *             {
+ *                 role: "developer",
+ *                 projectIds: ["P789ghi"],
+ *             },
+ *         ],
+ *     },
+ * });
+ * ```
+ */
+class Descoper extends pulumi.CustomResource {
+    /**
+     * Get an existing Descoper resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Descoper(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'descope:index/descoper:Descoper';
+    /**
+     * Returns true if the given object is an instance of Descoper.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Descoper.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["email"] = state?.email;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["phone"] = state?.phone;
+            resourceInputs["rbac"] = state?.rbac;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.email === undefined && !opts.urn) {
+                throw new Error("Missing required property 'email'");
+            }
+            if (args?.rbac === undefined && !opts.urn) {
+                throw new Error("Missing required property 'rbac'");
+            }
+            resourceInputs["email"] = args?.email;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["phone"] = args?.phone;
+            resourceInputs["rbac"] = args?.rbac;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Descoper.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Descoper = Descoper;
+//# sourceMappingURL=descoper.js.map

package/descoper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descoper.js","sourceRoot":"","sources":["../descoper.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0FG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqB,EAAE,IAAmC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,iCAAiC,CAAC;IAExE;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;IA2BD,YAAY,IAAY,EAAE,WAA0C,EAAE,IAAmC;QACrG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwC,CAAC;YACvD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;SACxC;aAAM;YACH,MAAM,IAAI,GAAG,WAAuC,CAAC;YACrD,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;SACvC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;;AA7EL,4BA8EC"}

package/engine.d.ts

@@ -0,0 +1,77 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare class Engine extends pulumi.CustomResource {
+    /**
+     * Get an existing Engine resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: EngineState, opts?: pulumi.CustomResourceOptions): Engine;
+    /**
+     * Returns true if the given object is an instance of Engine.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Engine;
+    /**
+     * The creation time of the engine as a Unix timestamp.
+     */
+    readonly createdTime: pulumi.Output<number>;
+    /**
+     * A name for the engine.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The ID of the Descope project this engine belongs to. Changing this value will require the resource to be deleted and recreated.
+     */
+    readonly projectId: pulumi.Output<string>;
+    /**
+     * The plaintext secret for the engine. This is only available after the engine is created and cannot be retrieved later. Store this value securely as it is used to authenticate the engine.
+     */
+    readonly secret: pulumi.Output<string>;
+    /**
+     * Create a Engine resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: EngineArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Engine resources.
+ */
+export interface EngineState {
+    /**
+     * The creation time of the engine as a Unix timestamp.
+     */
+    createdTime?: pulumi.Input<number | undefined>;
+    /**
+     * A name for the engine.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the Descope project this engine belongs to. Changing this value will require the resource to be deleted and recreated.
+     */
+    projectId?: pulumi.Input<string | undefined>;
+    /**
+     * The plaintext secret for the engine. This is only available after the engine is created and cannot be retrieved later. Store this value securely as it is used to authenticate the engine.
+     */
+    secret?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a Engine resource.
+ */
+export interface EngineArgs {
+    /**
+     * A name for the engine.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the Descope project this engine belongs to. Changing this value will require the resource to be deleted and recreated.
+     */
+    projectId: pulumi.Input<string>;
+}
+//# sourceMappingURL=engine.d.ts.map

package/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../engine.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,qBAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,MAAM;IAO9H;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,MAAM;IAOjD;;OAEG;IACH,SAAgC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAgC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE9D;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAyBlF;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACnC"}

package/engine.js

@@ -0,0 +1,83 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Engine = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+class Engine extends pulumi.CustomResource {
+    /**
+     * Get an existing Engine resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Engine(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'descope:index/engine:Engine';
+    /**
+     * Returns true if the given object is an instance of Engine.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Engine.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["createdTime"] = state?.createdTime;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["projectId"] = state?.projectId;
+            resourceInputs["secret"] = state?.secret;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.projectId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'projectId'");
+            }
+            resourceInputs["name"] = args?.name;
+            resourceInputs["projectId"] = args?.projectId;
+            resourceInputs["createdTime"] = undefined /*out*/;
+            resourceInputs["secret"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["secret"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(Engine.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Engine = Engine;
+//# sourceMappingURL=engine.js.map

package/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../engine.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,6BAA6B,CAAC;IAEpE;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA2BD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;SAC5C;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AA5EL,wBA6EC"}

package/inboundApp.d.ts

@@ -0,0 +1,243 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+export declare class InboundApp extends pulumi.CustomResource {
+    /**
+     * Get an existing InboundApp resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: InboundAppState, opts?: pulumi.CustomResourceOptions): InboundApp;
+    /**
+     * Returns true if the given object is an instance of InboundApp.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is InboundApp;
+    /**
+     * A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
+     */
+    readonly approvedCallbackUrls: pulumi.Output<string[]>;
+    /**
+     * A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
+     */
+    readonly attributesScopes: pulumi.Output<outputs.InboundAppAttributesScope[]>;
+    /**
+     * A set of allowed custom `aud` claim values that the inbound app can request via the `resource` parameter, per RFC 8707.
+     */
+    readonly audienceWhitelists: pulumi.Output<string[]>;
+    /**
+     * A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
+     */
+    readonly clientId: pulumi.Output<string>;
+    /**
+     * The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
+     */
+    readonly clientSecret: pulumi.Output<string>;
+    /**
+     * A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
+     */
+    readonly connectionsScopes: pulumi.Output<outputs.InboundAppConnectionsScope[]>;
+    /**
+     * The default `aud` claim to include in tokens issued for this app. Use `projectId` to set the project ID as the audience, `clientId` to set the app's client ID, or leave empty to include both.
+     */
+    readonly defaultAudience: pulumi.Output<string>;
+    /**
+     * A description for the inbound app.
+     */
+    readonly description: pulumi.Output<string>;
+    /**
+     * When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
+     */
+    readonly forceAddAllAuthorizationInfo: pulumi.Output<boolean>;
+    /**
+     * When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE `codeVerifier`. Public clients always use PKCE regardless of this setting.
+     */
+    readonly forcePkce: pulumi.Output<boolean>;
+    /**
+     * The Flow Hosting URL.
+     */
+    readonly loginPageUrl: pulumi.Output<string>;
+    /**
+     * A URL to the inbound app's logo image.
+     */
+    readonly logoUrl: pulumi.Output<string>;
+    /**
+     * A name for the inbound app.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
+     */
+    readonly nonConfidentialClient: pulumi.Output<boolean>;
+    /**
+     * A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
+     */
+    readonly permissionsScopes: pulumi.Output<outputs.InboundAppPermissionsScope[]>;
+    /**
+     * The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
+     */
+    readonly projectId: pulumi.Output<string>;
+    /**
+     * Custom session management settings for this inbound app, overriding the project defaults.
+     */
+    readonly sessionSettings: pulumi.Output<outputs.InboundAppSessionSettings>;
+    /**
+     * Create a InboundApp resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: InboundAppArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering InboundApp resources.
+ */
+export interface InboundAppState {
+    /**
+     * A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
+     */
+    approvedCallbackUrls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
+     */
+    attributesScopes?: pulumi.Input<pulumi.Input<inputs.InboundAppAttributesScope>[] | undefined>;
+    /**
+     * A set of allowed custom `aud` claim values that the inbound app can request via the `resource` parameter, per RFC 8707.
+     */
+    audienceWhitelists?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
+     */
+    clientId?: pulumi.Input<string | undefined>;
+    /**
+     * The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
+     */
+    clientSecret?: pulumi.Input<string | undefined>;
+    /**
+     * A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
+     */
+    connectionsScopes?: pulumi.Input<pulumi.Input<inputs.InboundAppConnectionsScope>[] | undefined>;
+    /**
+     * The default `aud` claim to include in tokens issued for this app. Use `projectId` to set the project ID as the audience, `clientId` to set the app's client ID, or leave empty to include both.
+     */
+    defaultAudience?: pulumi.Input<string | undefined>;
+    /**
+     * A description for the inbound app.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
+     */
+    forceAddAllAuthorizationInfo?: pulumi.Input<boolean | undefined>;
+    /**
+     * When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE `codeVerifier`. Public clients always use PKCE regardless of this setting.
+     */
+    forcePkce?: pulumi.Input<boolean | undefined>;
+    /**
+     * The Flow Hosting URL.
+     */
+    loginPageUrl?: pulumi.Input<string | undefined>;
+    /**
+     * A URL to the inbound app's logo image.
+     */
+    logoUrl?: pulumi.Input<string | undefined>;
+    /**
+     * A name for the inbound app.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
+     */
+    nonConfidentialClient?: pulumi.Input<boolean | undefined>;
+    /**
+     * A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
+     */
+    permissionsScopes?: pulumi.Input<pulumi.Input<inputs.InboundAppPermissionsScope>[] | undefined>;
+    /**
+     * The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
+     */
+    projectId?: pulumi.Input<string | undefined>;
+    /**
+     * Custom session management settings for this inbound app, overriding the project defaults.
+     */
+    sessionSettings?: pulumi.Input<inputs.InboundAppSessionSettings | undefined>;
+}
+/**
+ * The set of arguments for constructing a InboundApp resource.
+ */
+export interface InboundAppArgs {
+    /**
+     * A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
+     */
+    approvedCallbackUrls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
+     */
+    attributesScopes?: pulumi.Input<pulumi.Input<inputs.InboundAppAttributesScope>[] | undefined>;
+    /**
+     * A set of allowed custom `aud` claim values that the inbound app can request via the `resource` parameter, per RFC 8707.
+     */
+    audienceWhitelists?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
+     */
+    clientId?: pulumi.Input<string | undefined>;
+    /**
+     * The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
+     */
+    clientSecret?: pulumi.Input<string | undefined>;
+    /**
+     * A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
+     */
+    connectionsScopes?: pulumi.Input<pulumi.Input<inputs.InboundAppConnectionsScope>[] | undefined>;
+    /**
+     * The default `aud` claim to include in tokens issued for this app. Use `projectId` to set the project ID as the audience, `clientId` to set the app's client ID, or leave empty to include both.
+     */
+    defaultAudience?: pulumi.Input<string | undefined>;
+    /**
+     * A description for the inbound app.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
+     */
+    forceAddAllAuthorizationInfo?: pulumi.Input<boolean | undefined>;
+    /**
+     * When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE `codeVerifier`. Public clients always use PKCE regardless of this setting.
+     */
+    forcePkce?: pulumi.Input<boolean | undefined>;
+    /**
+     * The Flow Hosting URL.
+     */
+    loginPageUrl?: pulumi.Input<string | undefined>;
+    /**
+     * A URL to the inbound app's logo image.
+     */
+    logoUrl?: pulumi.Input<string | undefined>;
+    /**
+     * A name for the inbound app.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
+     */
+    nonConfidentialClient?: pulumi.Input<boolean | undefined>;
+    /**
+     * A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
+     */
+    permissionsScopes?: pulumi.Input<pulumi.Input<inputs.InboundAppPermissionsScope>[] | undefined>;
+    /**
+     * The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
+     */
+    projectId: pulumi.Input<string>;
+    /**
+     * Custom session management settings for this inbound app, overriding the project defaults.
+     */
+    sessionSettings?: pulumi.Input<inputs.InboundAppSessionSettings | undefined>;
+}
+//# sourceMappingURL=inboundApp.d.ts.map

package/inboundApp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inboundApp.d.ts","sourceRoot":"","sources":["../inboundApp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C,qBAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,UAAU;IAOtI;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,UAAU;IAOrD;;OAEG;IACH,SAAwB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC;IAC7F;;OAEG;IACH,SAAwB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D;;OAEG;IACH,SAAwB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;IAC/F;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtE;;OAEG;IACH,SAAwB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;IAC/F;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAE1F;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAmDtF;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACxE;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC9F;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC1D;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;CAChF;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACxE;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC9F;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC1D;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;CAChF"}