@maxim_mazurok/gapi.client.accesscontextmanager-v1 0.0.20240831 → 0.0.20240908

package/index.d.ts

@@ -9,7 +9,7 @@
 // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
 // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
 // Generated from: https://accesscontextmanager.googleapis.com/$discovery/rest?version=v1
-// Revision: 20240831
+// Revision: 20240908
 
 /// <reference types="gapi.client" />
 
@@ -53,6 +53,16 @@ declare namespace gapi.client {
       /** Required. Human readable title. Does not affect behavior. */
       title?: string;
     }
+    interface AccessScope {
+      /** Optional. Client scope for this access scope. */
+      clientScope?: ClientScope;
+    }
+    interface AccessSettings {
+      /** Optional. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted" */
+      accessLevels?: string[];
+      /** Optional. Reauth settings applied to user access on a given AccessScope. */
+      reauthSettings?: ReauthSettings;
+    }
     interface ApiOperation {
       /** API methods or permissions to allow. Method or permission must belong to the service specified by `service_name` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `service_name`. */
       methodSelectors?: MethodSelector[];
@@ -104,6 +114,10 @@ declare namespace gapi.client {
       role?: string;
     }
     interface CancelOperationRequest {}
+    interface ClientScope {
+      /** Optional. The application that is subject to this binding's scope. */
+      restrictedClientApplication?: Application;
+    }
     interface CommitServicePerimetersRequest {
       /** Optional. The etag for the version of the Access Policy that this commit operation is to be performed on. If, at the time of commit, the etag for the Access Policy stored in Access Context Manager is different from the specified etag, then the commit operation will not be performed and the call will fail. This field is not required. If etag is not provided, the operation will be performed as if a valid etag is provided. */
       etag?: string;
@@ -194,8 +208,12 @@ declare namespace gapi.client {
       groupKey?: string;
       /** Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N" */
       name?: string;
+      /** Optional. GCSL policy for the group key. */
+      reauthSettings?: ReauthSettings;
       /** Optional. A list of applications that are subject to this binding's restrictions. If the list is empty, the binding restrictions will universally apply to all applications. */
       restrictedClientApplications?: Application[];
+      /** Optional. A list of scoped access settings that set this binding's restrictions on a subset of applications. This field cannot be set if restricted_client_applications is set. */
+      scopedAccessSettings?: ScopedAccessSettings[];
     }
     interface GcpUserAccessBindingOperationMetadata {}
     interface GetIamPolicyRequest {
@@ -310,6 +328,18 @@ declare namespace gapi.client {
       /** Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). */
       version?: number;
     }
+    interface ReauthSettings {
+      /** Optional. How long a user is allowed to take between actions before a new access token must be issued. Presently only set for Cloud Apps. */
+      maxInactivity?: string;
+      /** Optional. Reauth method when users GCP session is up. */
+      reauthMethod?: string;
+      /** Optional. The session length. Setting this field to zero is equal to disabling. Reauth. Also can set infinite session by flipping the enabled bit to false below. If use_oidc_max_age is true, for OIDC apps, the session length will be the minimum of this field and OIDC max_age param. */
+      sessionLength?: string;
+      /** Optional. Big red button to turn off GCSL. When false, all fields set above will be disregarded and the session length is basically infinite. */
+      sessionLengthEnabled?: boolean;
+      /** Optional. Only useful for OIDC apps. When false, the OIDC max_age param, if passed in the authentication request will be ignored. When true, the re-auth period will be the minimum of the session_length field and the max_age OIDC param. */
+      useOidcMaxAge?: boolean;
+    }
     interface ReplaceAccessLevelsRequest {
       /** Required. The desired Access Levels that should replace all existing Access Levels in the Access Policy. */
       accessLevels?: AccessLevel[];
@@ -330,6 +360,14 @@ declare namespace gapi.client {
       /** List of the Service Perimeter instances. */
       servicePerimeters?: ServicePerimeter[];
     }
+    interface ScopedAccessSettings {
+      /** Optional. Access settings for this scoped access settings. This field may be empty if dry_run_settings is set. */
+      activeSettings?: AccessSettings;
+      /** Optional. Dry-run access settings for this scoped access settings. This field may be empty if active_settings is set. */
+      dryRunSettings?: AccessSettings;
+      /** Optional. Application, etc. to which the access settings will be applied to. Implicitly, this is the scoped access settings key; as such, it must be unique and non-empty. */
+      scope?: AccessScope;
+    }
     interface ServicePerimeter {
       /** Description of the `ServicePerimeter` and its use. Does not affect behavior. */
       description?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maxim_mazurok/gapi.client.accesscontextmanager-v1",
-  "version": "0.0.20240831",
+  "version": "0.0.20240908",
   "description": "TypeScript typings for Access Context Manager API v1",
   "repository": {
     "type": "git",