@mstuercke/pulumi-modules 1.2.4 → 1.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/clerk/Clerk.d.ts +27 -0
- package/dist/clerk/Clerk.js +88 -0
- package/dist/clerk/index.d.ts +5 -0
- package/dist/clerk/index.js +5 -0
- package/dist/index.d.ts +4 -0
- package/dist/index.js +3 -0
- package/package.json +21 -5
- package/sdks/clerk/.gitattributes +1 -0
- package/sdks/clerk/README.md +3 -0
- package/sdks/clerk/allowlistIdentifier.ts +121 -0
- package/sdks/clerk/apiKey.ts +254 -0
- package/sdks/clerk/application.ts +182 -0
- package/sdks/clerk/applicationSettings.ts +171 -0
- package/sdks/clerk/blocklistIdentifier.ts +114 -0
- package/sdks/clerk/config/index.ts +5 -0
- package/sdks/clerk/config/vars.ts +34 -0
- package/sdks/clerk/domain.ts +154 -0
- package/sdks/clerk/getApplication.ts +42 -0
- package/sdks/clerk/index.ts +213 -0
- package/sdks/clerk/instanceConfig.ts +128 -0
- package/sdks/clerk/instanceDomain.ts +129 -0
- package/sdks/clerk/jwtTemplate.ts +190 -0
- package/sdks/clerk/machine.ts +127 -0
- package/sdks/clerk/oauthApplication.ts +228 -0
- package/sdks/clerk/organization.ts +190 -0
- package/sdks/clerk/organizationDomain.ts +166 -0
- package/sdks/clerk/organizationMembership.ts +148 -0
- package/sdks/clerk/organizationPermission.ts +142 -0
- package/sdks/clerk/organizationRole.ts +156 -0
- package/sdks/clerk/package.json +26 -0
- package/sdks/clerk/provider.ts +76 -0
- package/sdks/clerk/redirectUrl.ts +104 -0
- package/sdks/clerk/roleSet.ts +197 -0
- package/sdks/clerk/samlConnection.ts +361 -0
- package/sdks/clerk/scripts/postinstall.js +20 -0
- package/sdks/clerk/svixWebhook.ts +77 -0
- package/sdks/clerk/tsconfig.json +53 -0
- package/sdks/clerk/types/index.ts +13 -0
- package/sdks/clerk/types/input.ts +59 -0
- package/sdks/clerk/types/output.ts +79 -0
- package/sdks/clerk/user.ts +458 -0
- package/sdks/clerk/utilities.ts +107 -0
|
@@ -0,0 +1,190 @@
|
|
|
1
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
2
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
3
|
+
|
|
4
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
5
|
+
import * as utilities from "./utilities";
|
|
6
|
+
|
|
7
|
+
export class JwtTemplate extends pulumi.CustomResource {
|
|
8
|
+
/**
|
|
9
|
+
* Get an existing JwtTemplate resource's state with the given name, ID, and optional extra
|
|
10
|
+
* properties used to qualify the lookup.
|
|
11
|
+
*
|
|
12
|
+
* @param name The _unique_ name of the resulting resource.
|
|
13
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
14
|
+
* @param state Any extra arguments used during the lookup.
|
|
15
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
16
|
+
*/
|
|
17
|
+
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: JwtTemplateState, opts?: pulumi.CustomResourceOptions): JwtTemplate {
|
|
18
|
+
return new JwtTemplate(name, <any>state, { ...opts, id: id });
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
/** @internal */
|
|
22
|
+
public static readonly __pulumiType = 'clerk:index/jwtTemplate:JwtTemplate';
|
|
23
|
+
|
|
24
|
+
/**
|
|
25
|
+
* Returns true if the given object is an instance of JwtTemplate. This is designed to work even
|
|
26
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
27
|
+
*/
|
|
28
|
+
public static isInstance(obj: any): obj is JwtTemplate {
|
|
29
|
+
if (obj === undefined || obj === null) {
|
|
30
|
+
return false;
|
|
31
|
+
}
|
|
32
|
+
return obj['__pulumiType'] === JwtTemplate.__pulumiType;
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
/**
|
|
36
|
+
* Allowed clock skew in seconds.
|
|
37
|
+
*/
|
|
38
|
+
declare public readonly allowedClockSkew: pulumi.Output<number>;
|
|
39
|
+
/**
|
|
40
|
+
* JSON string of custom claims for the JWT.
|
|
41
|
+
*/
|
|
42
|
+
declare public readonly claims: pulumi.Output<string>;
|
|
43
|
+
/**
|
|
44
|
+
* Timestamp when the template was created.
|
|
45
|
+
*/
|
|
46
|
+
declare public /*out*/ readonly createdAt: pulumi.Output<string>;
|
|
47
|
+
/**
|
|
48
|
+
* Whether to use a custom signing key.
|
|
49
|
+
*/
|
|
50
|
+
declare public readonly customSigningKey: pulumi.Output<boolean>;
|
|
51
|
+
/**
|
|
52
|
+
* Token lifetime in seconds.
|
|
53
|
+
*/
|
|
54
|
+
declare public readonly lifetime: pulumi.Output<number>;
|
|
55
|
+
/**
|
|
56
|
+
* Name of the JWT template.
|
|
57
|
+
*/
|
|
58
|
+
declare public readonly name: pulumi.Output<string>;
|
|
59
|
+
/**
|
|
60
|
+
* Signing algorithm (e.g. RS256, HS256).
|
|
61
|
+
*/
|
|
62
|
+
declare public readonly signingAlgorithm: pulumi.Output<string>;
|
|
63
|
+
/**
|
|
64
|
+
* Custom signing key. Write-only: not returned by the API on reads.
|
|
65
|
+
*/
|
|
66
|
+
declare public readonly signingKey: pulumi.Output<string | undefined>;
|
|
67
|
+
/**
|
|
68
|
+
* Timestamp when the template was last updated.
|
|
69
|
+
*/
|
|
70
|
+
declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
|
|
71
|
+
|
|
72
|
+
/**
|
|
73
|
+
* Create a JwtTemplate resource with the given unique name, arguments, and options.
|
|
74
|
+
*
|
|
75
|
+
* @param name The _unique_ name of the resource.
|
|
76
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
77
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
78
|
+
*/
|
|
79
|
+
constructor(name: string, args: JwtTemplateArgs, opts?: pulumi.CustomResourceOptions)
|
|
80
|
+
constructor(name: string, argsOrState?: JwtTemplateArgs | JwtTemplateState, opts?: pulumi.CustomResourceOptions) {
|
|
81
|
+
let resourceInputs: pulumi.Inputs = {};
|
|
82
|
+
opts = opts || {};
|
|
83
|
+
if (opts.id) {
|
|
84
|
+
const state = argsOrState as JwtTemplateState | undefined;
|
|
85
|
+
resourceInputs["allowedClockSkew"] = state?.allowedClockSkew;
|
|
86
|
+
resourceInputs["claims"] = state?.claims;
|
|
87
|
+
resourceInputs["createdAt"] = state?.createdAt;
|
|
88
|
+
resourceInputs["customSigningKey"] = state?.customSigningKey;
|
|
89
|
+
resourceInputs["lifetime"] = state?.lifetime;
|
|
90
|
+
resourceInputs["name"] = state?.name;
|
|
91
|
+
resourceInputs["signingAlgorithm"] = state?.signingAlgorithm;
|
|
92
|
+
resourceInputs["signingKey"] = state?.signingKey;
|
|
93
|
+
resourceInputs["updatedAt"] = state?.updatedAt;
|
|
94
|
+
} else {
|
|
95
|
+
const args = argsOrState as JwtTemplateArgs | undefined;
|
|
96
|
+
if (args?.claims === undefined && !opts.urn) {
|
|
97
|
+
throw new Error("Missing required property 'claims'");
|
|
98
|
+
}
|
|
99
|
+
resourceInputs["allowedClockSkew"] = args?.allowedClockSkew;
|
|
100
|
+
resourceInputs["claims"] = args?.claims;
|
|
101
|
+
resourceInputs["customSigningKey"] = args?.customSigningKey;
|
|
102
|
+
resourceInputs["lifetime"] = args?.lifetime;
|
|
103
|
+
resourceInputs["name"] = args?.name;
|
|
104
|
+
resourceInputs["signingAlgorithm"] = args?.signingAlgorithm;
|
|
105
|
+
resourceInputs["signingKey"] = args?.signingKey ? pulumi.secret(args.signingKey) : undefined;
|
|
106
|
+
resourceInputs["createdAt"] = undefined /*out*/;
|
|
107
|
+
resourceInputs["updatedAt"] = undefined /*out*/;
|
|
108
|
+
}
|
|
109
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
110
|
+
const secretOpts = { additionalSecretOutputs: ["signingKey"] };
|
|
111
|
+
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
112
|
+
super(JwtTemplate.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
|
|
116
|
+
/**
|
|
117
|
+
* Input properties used for looking up and filtering JwtTemplate resources.
|
|
118
|
+
*/
|
|
119
|
+
export interface JwtTemplateState {
|
|
120
|
+
/**
|
|
121
|
+
* Allowed clock skew in seconds.
|
|
122
|
+
*/
|
|
123
|
+
allowedClockSkew?: pulumi.Input<number | undefined>;
|
|
124
|
+
/**
|
|
125
|
+
* JSON string of custom claims for the JWT.
|
|
126
|
+
*/
|
|
127
|
+
claims?: pulumi.Input<string | undefined>;
|
|
128
|
+
/**
|
|
129
|
+
* Timestamp when the template was created.
|
|
130
|
+
*/
|
|
131
|
+
createdAt?: pulumi.Input<string | undefined>;
|
|
132
|
+
/**
|
|
133
|
+
* Whether to use a custom signing key.
|
|
134
|
+
*/
|
|
135
|
+
customSigningKey?: pulumi.Input<boolean | undefined>;
|
|
136
|
+
/**
|
|
137
|
+
* Token lifetime in seconds.
|
|
138
|
+
*/
|
|
139
|
+
lifetime?: pulumi.Input<number | undefined>;
|
|
140
|
+
/**
|
|
141
|
+
* Name of the JWT template.
|
|
142
|
+
*/
|
|
143
|
+
name?: pulumi.Input<string | undefined>;
|
|
144
|
+
/**
|
|
145
|
+
* Signing algorithm (e.g. RS256, HS256).
|
|
146
|
+
*/
|
|
147
|
+
signingAlgorithm?: pulumi.Input<string | undefined>;
|
|
148
|
+
/**
|
|
149
|
+
* Custom signing key. Write-only: not returned by the API on reads.
|
|
150
|
+
*/
|
|
151
|
+
signingKey?: pulumi.Input<string | undefined>;
|
|
152
|
+
/**
|
|
153
|
+
* Timestamp when the template was last updated.
|
|
154
|
+
*/
|
|
155
|
+
updatedAt?: pulumi.Input<string | undefined>;
|
|
156
|
+
}
|
|
157
|
+
|
|
158
|
+
/**
|
|
159
|
+
* The set of arguments for constructing a JwtTemplate resource.
|
|
160
|
+
*/
|
|
161
|
+
export interface JwtTemplateArgs {
|
|
162
|
+
/**
|
|
163
|
+
* Allowed clock skew in seconds.
|
|
164
|
+
*/
|
|
165
|
+
allowedClockSkew?: pulumi.Input<number | undefined>;
|
|
166
|
+
/**
|
|
167
|
+
* JSON string of custom claims for the JWT.
|
|
168
|
+
*/
|
|
169
|
+
claims: pulumi.Input<string>;
|
|
170
|
+
/**
|
|
171
|
+
* Whether to use a custom signing key.
|
|
172
|
+
*/
|
|
173
|
+
customSigningKey?: pulumi.Input<boolean | undefined>;
|
|
174
|
+
/**
|
|
175
|
+
* Token lifetime in seconds.
|
|
176
|
+
*/
|
|
177
|
+
lifetime?: pulumi.Input<number | undefined>;
|
|
178
|
+
/**
|
|
179
|
+
* Name of the JWT template.
|
|
180
|
+
*/
|
|
181
|
+
name?: pulumi.Input<string | undefined>;
|
|
182
|
+
/**
|
|
183
|
+
* Signing algorithm (e.g. RS256, HS256).
|
|
184
|
+
*/
|
|
185
|
+
signingAlgorithm?: pulumi.Input<string | undefined>;
|
|
186
|
+
/**
|
|
187
|
+
* Custom signing key. Write-only: not returned by the API on reads.
|
|
188
|
+
*/
|
|
189
|
+
signingKey?: pulumi.Input<string | undefined>;
|
|
190
|
+
}
|
|
@@ -0,0 +1,127 @@
|
|
|
1
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
2
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
3
|
+
|
|
4
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
5
|
+
import * as utilities from "./utilities";
|
|
6
|
+
|
|
7
|
+
export class Machine extends pulumi.CustomResource {
|
|
8
|
+
/**
|
|
9
|
+
* Get an existing Machine resource's state with the given name, ID, and optional extra
|
|
10
|
+
* properties used to qualify the lookup.
|
|
11
|
+
*
|
|
12
|
+
* @param name The _unique_ name of the resulting resource.
|
|
13
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
14
|
+
* @param state Any extra arguments used during the lookup.
|
|
15
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
16
|
+
*/
|
|
17
|
+
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: MachineState, opts?: pulumi.CustomResourceOptions): Machine {
|
|
18
|
+
return new Machine(name, <any>state, { ...opts, id: id });
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
/** @internal */
|
|
22
|
+
public static readonly __pulumiType = 'clerk:index/machine:Machine';
|
|
23
|
+
|
|
24
|
+
/**
|
|
25
|
+
* Returns true if the given object is an instance of Machine. This is designed to work even
|
|
26
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
27
|
+
*/
|
|
28
|
+
public static isInstance(obj: any): obj is Machine {
|
|
29
|
+
if (obj === undefined || obj === null) {
|
|
30
|
+
return false;
|
|
31
|
+
}
|
|
32
|
+
return obj['__pulumiType'] === Machine.__pulumiType;
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
/**
|
|
36
|
+
* Timestamp when the machine was created.
|
|
37
|
+
*/
|
|
38
|
+
declare public /*out*/ readonly createdAt: pulumi.Output<string>;
|
|
39
|
+
/**
|
|
40
|
+
* Default token TTL in seconds for this machine.
|
|
41
|
+
*/
|
|
42
|
+
declare public readonly defaultTokenTtl: pulumi.Output<number>;
|
|
43
|
+
/**
|
|
44
|
+
* Name of the machine.
|
|
45
|
+
*/
|
|
46
|
+
declare public readonly name: pulumi.Output<string>;
|
|
47
|
+
/**
|
|
48
|
+
* Machine secret key. Write-only: only returned on creation, not on subsequent reads.
|
|
49
|
+
*/
|
|
50
|
+
declare public /*out*/ readonly secretKey: pulumi.Output<string>;
|
|
51
|
+
/**
|
|
52
|
+
* Timestamp when the machine was last updated.
|
|
53
|
+
*/
|
|
54
|
+
declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
|
|
55
|
+
|
|
56
|
+
/**
|
|
57
|
+
* Create a Machine resource with the given unique name, arguments, and options.
|
|
58
|
+
*
|
|
59
|
+
* @param name The _unique_ name of the resource.
|
|
60
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
61
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
62
|
+
*/
|
|
63
|
+
constructor(name: string, args?: MachineArgs, opts?: pulumi.CustomResourceOptions)
|
|
64
|
+
constructor(name: string, argsOrState?: MachineArgs | MachineState, opts?: pulumi.CustomResourceOptions) {
|
|
65
|
+
let resourceInputs: pulumi.Inputs = {};
|
|
66
|
+
opts = opts || {};
|
|
67
|
+
if (opts.id) {
|
|
68
|
+
const state = argsOrState as MachineState | undefined;
|
|
69
|
+
resourceInputs["createdAt"] = state?.createdAt;
|
|
70
|
+
resourceInputs["defaultTokenTtl"] = state?.defaultTokenTtl;
|
|
71
|
+
resourceInputs["name"] = state?.name;
|
|
72
|
+
resourceInputs["secretKey"] = state?.secretKey;
|
|
73
|
+
resourceInputs["updatedAt"] = state?.updatedAt;
|
|
74
|
+
} else {
|
|
75
|
+
const args = argsOrState as MachineArgs | undefined;
|
|
76
|
+
resourceInputs["defaultTokenTtl"] = args?.defaultTokenTtl;
|
|
77
|
+
resourceInputs["name"] = args?.name;
|
|
78
|
+
resourceInputs["createdAt"] = undefined /*out*/;
|
|
79
|
+
resourceInputs["secretKey"] = undefined /*out*/;
|
|
80
|
+
resourceInputs["updatedAt"] = undefined /*out*/;
|
|
81
|
+
}
|
|
82
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
83
|
+
const secretOpts = { additionalSecretOutputs: ["secretKey"] };
|
|
84
|
+
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
85
|
+
super(Machine.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
|
|
86
|
+
}
|
|
87
|
+
}
|
|
88
|
+
|
|
89
|
+
/**
|
|
90
|
+
* Input properties used for looking up and filtering Machine resources.
|
|
91
|
+
*/
|
|
92
|
+
export interface MachineState {
|
|
93
|
+
/**
|
|
94
|
+
* Timestamp when the machine was created.
|
|
95
|
+
*/
|
|
96
|
+
createdAt?: pulumi.Input<string | undefined>;
|
|
97
|
+
/**
|
|
98
|
+
* Default token TTL in seconds for this machine.
|
|
99
|
+
*/
|
|
100
|
+
defaultTokenTtl?: pulumi.Input<number | undefined>;
|
|
101
|
+
/**
|
|
102
|
+
* Name of the machine.
|
|
103
|
+
*/
|
|
104
|
+
name?: pulumi.Input<string | undefined>;
|
|
105
|
+
/**
|
|
106
|
+
* Machine secret key. Write-only: only returned on creation, not on subsequent reads.
|
|
107
|
+
*/
|
|
108
|
+
secretKey?: pulumi.Input<string | undefined>;
|
|
109
|
+
/**
|
|
110
|
+
* Timestamp when the machine was last updated.
|
|
111
|
+
*/
|
|
112
|
+
updatedAt?: pulumi.Input<string | undefined>;
|
|
113
|
+
}
|
|
114
|
+
|
|
115
|
+
/**
|
|
116
|
+
* The set of arguments for constructing a Machine resource.
|
|
117
|
+
*/
|
|
118
|
+
export interface MachineArgs {
|
|
119
|
+
/**
|
|
120
|
+
* Default token TTL in seconds for this machine.
|
|
121
|
+
*/
|
|
122
|
+
defaultTokenTtl?: pulumi.Input<number | undefined>;
|
|
123
|
+
/**
|
|
124
|
+
* Name of the machine.
|
|
125
|
+
*/
|
|
126
|
+
name?: pulumi.Input<string | undefined>;
|
|
127
|
+
}
|
|
@@ -0,0 +1,228 @@
|
|
|
1
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
2
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
3
|
+
|
|
4
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
5
|
+
import * as utilities from "./utilities";
|
|
6
|
+
|
|
7
|
+
export class OauthApplication extends pulumi.CustomResource {
|
|
8
|
+
/**
|
|
9
|
+
* Get an existing OauthApplication resource's state with the given name, ID, and optional extra
|
|
10
|
+
* properties used to qualify the lookup.
|
|
11
|
+
*
|
|
12
|
+
* @param name The _unique_ name of the resulting resource.
|
|
13
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
14
|
+
* @param state Any extra arguments used during the lookup.
|
|
15
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
16
|
+
*/
|
|
17
|
+
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: OauthApplicationState, opts?: pulumi.CustomResourceOptions): OauthApplication {
|
|
18
|
+
return new OauthApplication(name, <any>state, { ...opts, id: id });
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
/** @internal */
|
|
22
|
+
public static readonly __pulumiType = 'clerk:index/oauthApplication:OauthApplication';
|
|
23
|
+
|
|
24
|
+
/**
|
|
25
|
+
* Returns true if the given object is an instance of OauthApplication. This is designed to work even
|
|
26
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
27
|
+
*/
|
|
28
|
+
public static isInstance(obj: any): obj is OauthApplication {
|
|
29
|
+
if (obj === undefined || obj === null) {
|
|
30
|
+
return false;
|
|
31
|
+
}
|
|
32
|
+
return obj['__pulumiType'] === OauthApplication.__pulumiType;
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
/**
|
|
36
|
+
* OAuth authorize URL.
|
|
37
|
+
*/
|
|
38
|
+
declare public /*out*/ readonly authorizeUrl: pulumi.Output<string>;
|
|
39
|
+
/**
|
|
40
|
+
* Callback URL for the OAuth application.
|
|
41
|
+
*/
|
|
42
|
+
declare public readonly callbackUrl: pulumi.Output<string>;
|
|
43
|
+
/**
|
|
44
|
+
* OAuth client ID.
|
|
45
|
+
*/
|
|
46
|
+
declare public /*out*/ readonly clientId: pulumi.Output<string>;
|
|
47
|
+
/**
|
|
48
|
+
* OAuth client secret. Write-only: only returned on creation, not on subsequent reads.
|
|
49
|
+
*/
|
|
50
|
+
declare public /*out*/ readonly clientSecret: pulumi.Output<string>;
|
|
51
|
+
/**
|
|
52
|
+
* Whether the consent screen is enabled for this OAuth application.
|
|
53
|
+
*/
|
|
54
|
+
declare public readonly consentScreenEnabled: pulumi.Output<boolean>;
|
|
55
|
+
/**
|
|
56
|
+
* Timestamp when the OAuth application was created.
|
|
57
|
+
*/
|
|
58
|
+
declare public /*out*/ readonly createdAt: pulumi.Output<string>;
|
|
59
|
+
/**
|
|
60
|
+
* OpenID Connect discovery URL.
|
|
61
|
+
*/
|
|
62
|
+
declare public /*out*/ readonly discoveryUrl: pulumi.Output<string>;
|
|
63
|
+
/**
|
|
64
|
+
* Name of the OAuth application.
|
|
65
|
+
*/
|
|
66
|
+
declare public readonly name: pulumi.Output<string>;
|
|
67
|
+
/**
|
|
68
|
+
* Whether this is a public OAuth application. Cannot be changed after creation.
|
|
69
|
+
*/
|
|
70
|
+
declare public readonly public: pulumi.Output<boolean>;
|
|
71
|
+
/**
|
|
72
|
+
* Space-separated OAuth scopes for the application.
|
|
73
|
+
*/
|
|
74
|
+
declare public readonly scopes: pulumi.Output<string>;
|
|
75
|
+
/**
|
|
76
|
+
* OAuth token fetch URL.
|
|
77
|
+
*/
|
|
78
|
+
declare public /*out*/ readonly tokenFetchUrl: pulumi.Output<string>;
|
|
79
|
+
/**
|
|
80
|
+
* Timestamp when the OAuth application was last updated.
|
|
81
|
+
*/
|
|
82
|
+
declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
|
|
83
|
+
/**
|
|
84
|
+
* OAuth user info URL.
|
|
85
|
+
*/
|
|
86
|
+
declare public /*out*/ readonly userInfoUrl: pulumi.Output<string>;
|
|
87
|
+
|
|
88
|
+
/**
|
|
89
|
+
* Create a OauthApplication resource with the given unique name, arguments, and options.
|
|
90
|
+
*
|
|
91
|
+
* @param name The _unique_ name of the resource.
|
|
92
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
93
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
94
|
+
*/
|
|
95
|
+
constructor(name: string, args: OauthApplicationArgs, opts?: pulumi.CustomResourceOptions)
|
|
96
|
+
constructor(name: string, argsOrState?: OauthApplicationArgs | OauthApplicationState, opts?: pulumi.CustomResourceOptions) {
|
|
97
|
+
let resourceInputs: pulumi.Inputs = {};
|
|
98
|
+
opts = opts || {};
|
|
99
|
+
if (opts.id) {
|
|
100
|
+
const state = argsOrState as OauthApplicationState | undefined;
|
|
101
|
+
resourceInputs["authorizeUrl"] = state?.authorizeUrl;
|
|
102
|
+
resourceInputs["callbackUrl"] = state?.callbackUrl;
|
|
103
|
+
resourceInputs["clientId"] = state?.clientId;
|
|
104
|
+
resourceInputs["clientSecret"] = state?.clientSecret;
|
|
105
|
+
resourceInputs["consentScreenEnabled"] = state?.consentScreenEnabled;
|
|
106
|
+
resourceInputs["createdAt"] = state?.createdAt;
|
|
107
|
+
resourceInputs["discoveryUrl"] = state?.discoveryUrl;
|
|
108
|
+
resourceInputs["name"] = state?.name;
|
|
109
|
+
resourceInputs["public"] = state?.public;
|
|
110
|
+
resourceInputs["scopes"] = state?.scopes;
|
|
111
|
+
resourceInputs["tokenFetchUrl"] = state?.tokenFetchUrl;
|
|
112
|
+
resourceInputs["updatedAt"] = state?.updatedAt;
|
|
113
|
+
resourceInputs["userInfoUrl"] = state?.userInfoUrl;
|
|
114
|
+
} else {
|
|
115
|
+
const args = argsOrState as OauthApplicationArgs | undefined;
|
|
116
|
+
if (args?.callbackUrl === undefined && !opts.urn) {
|
|
117
|
+
throw new Error("Missing required property 'callbackUrl'");
|
|
118
|
+
}
|
|
119
|
+
if (args?.public === undefined && !opts.urn) {
|
|
120
|
+
throw new Error("Missing required property 'public'");
|
|
121
|
+
}
|
|
122
|
+
if (args?.scopes === undefined && !opts.urn) {
|
|
123
|
+
throw new Error("Missing required property 'scopes'");
|
|
124
|
+
}
|
|
125
|
+
resourceInputs["callbackUrl"] = args?.callbackUrl;
|
|
126
|
+
resourceInputs["consentScreenEnabled"] = args?.consentScreenEnabled;
|
|
127
|
+
resourceInputs["name"] = args?.name;
|
|
128
|
+
resourceInputs["public"] = args?.public;
|
|
129
|
+
resourceInputs["scopes"] = args?.scopes;
|
|
130
|
+
resourceInputs["authorizeUrl"] = undefined /*out*/;
|
|
131
|
+
resourceInputs["clientId"] = undefined /*out*/;
|
|
132
|
+
resourceInputs["clientSecret"] = undefined /*out*/;
|
|
133
|
+
resourceInputs["createdAt"] = undefined /*out*/;
|
|
134
|
+
resourceInputs["discoveryUrl"] = undefined /*out*/;
|
|
135
|
+
resourceInputs["tokenFetchUrl"] = undefined /*out*/;
|
|
136
|
+
resourceInputs["updatedAt"] = undefined /*out*/;
|
|
137
|
+
resourceInputs["userInfoUrl"] = undefined /*out*/;
|
|
138
|
+
}
|
|
139
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
140
|
+
const secretOpts = { additionalSecretOutputs: ["clientSecret"] };
|
|
141
|
+
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
142
|
+
super(OauthApplication.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
|
|
143
|
+
}
|
|
144
|
+
}
|
|
145
|
+
|
|
146
|
+
/**
|
|
147
|
+
* Input properties used for looking up and filtering OauthApplication resources.
|
|
148
|
+
*/
|
|
149
|
+
export interface OauthApplicationState {
|
|
150
|
+
/**
|
|
151
|
+
* OAuth authorize URL.
|
|
152
|
+
*/
|
|
153
|
+
authorizeUrl?: pulumi.Input<string | undefined>;
|
|
154
|
+
/**
|
|
155
|
+
* Callback URL for the OAuth application.
|
|
156
|
+
*/
|
|
157
|
+
callbackUrl?: pulumi.Input<string | undefined>;
|
|
158
|
+
/**
|
|
159
|
+
* OAuth client ID.
|
|
160
|
+
*/
|
|
161
|
+
clientId?: pulumi.Input<string | undefined>;
|
|
162
|
+
/**
|
|
163
|
+
* OAuth client secret. Write-only: only returned on creation, not on subsequent reads.
|
|
164
|
+
*/
|
|
165
|
+
clientSecret?: pulumi.Input<string | undefined>;
|
|
166
|
+
/**
|
|
167
|
+
* Whether the consent screen is enabled for this OAuth application.
|
|
168
|
+
*/
|
|
169
|
+
consentScreenEnabled?: pulumi.Input<boolean | undefined>;
|
|
170
|
+
/**
|
|
171
|
+
* Timestamp when the OAuth application was created.
|
|
172
|
+
*/
|
|
173
|
+
createdAt?: pulumi.Input<string | undefined>;
|
|
174
|
+
/**
|
|
175
|
+
* OpenID Connect discovery URL.
|
|
176
|
+
*/
|
|
177
|
+
discoveryUrl?: pulumi.Input<string | undefined>;
|
|
178
|
+
/**
|
|
179
|
+
* Name of the OAuth application.
|
|
180
|
+
*/
|
|
181
|
+
name?: pulumi.Input<string | undefined>;
|
|
182
|
+
/**
|
|
183
|
+
* Whether this is a public OAuth application. Cannot be changed after creation.
|
|
184
|
+
*/
|
|
185
|
+
public?: pulumi.Input<boolean | undefined>;
|
|
186
|
+
/**
|
|
187
|
+
* Space-separated OAuth scopes for the application.
|
|
188
|
+
*/
|
|
189
|
+
scopes?: pulumi.Input<string | undefined>;
|
|
190
|
+
/**
|
|
191
|
+
* OAuth token fetch URL.
|
|
192
|
+
*/
|
|
193
|
+
tokenFetchUrl?: pulumi.Input<string | undefined>;
|
|
194
|
+
/**
|
|
195
|
+
* Timestamp when the OAuth application was last updated.
|
|
196
|
+
*/
|
|
197
|
+
updatedAt?: pulumi.Input<string | undefined>;
|
|
198
|
+
/**
|
|
199
|
+
* OAuth user info URL.
|
|
200
|
+
*/
|
|
201
|
+
userInfoUrl?: pulumi.Input<string | undefined>;
|
|
202
|
+
}
|
|
203
|
+
|
|
204
|
+
/**
|
|
205
|
+
* The set of arguments for constructing a OauthApplication resource.
|
|
206
|
+
*/
|
|
207
|
+
export interface OauthApplicationArgs {
|
|
208
|
+
/**
|
|
209
|
+
* Callback URL for the OAuth application.
|
|
210
|
+
*/
|
|
211
|
+
callbackUrl: pulumi.Input<string>;
|
|
212
|
+
/**
|
|
213
|
+
* Whether the consent screen is enabled for this OAuth application.
|
|
214
|
+
*/
|
|
215
|
+
consentScreenEnabled?: pulumi.Input<boolean | undefined>;
|
|
216
|
+
/**
|
|
217
|
+
* Name of the OAuth application.
|
|
218
|
+
*/
|
|
219
|
+
name?: pulumi.Input<string | undefined>;
|
|
220
|
+
/**
|
|
221
|
+
* Whether this is a public OAuth application. Cannot be changed after creation.
|
|
222
|
+
*/
|
|
223
|
+
public: pulumi.Input<boolean>;
|
|
224
|
+
/**
|
|
225
|
+
* Space-separated OAuth scopes for the application.
|
|
226
|
+
*/
|
|
227
|
+
scopes: pulumi.Input<string>;
|
|
228
|
+
}
|