@mstuercke/pulumi-modules 1.2.4 → 1.4.0

package/sdks/clerk/samlConnection.ts

@@ -0,0 +1,361 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+import * as utilities from "./utilities";
+
+export class SamlConnection extends pulumi.CustomResource {
+    /**
+     * Get an existing SamlConnection resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SamlConnectionState, opts?: pulumi.CustomResourceOptions): SamlConnection {
+        return new SamlConnection(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'clerk:index/samlConnection:SamlConnection';
+
+    /**
+     * Returns true if the given object is an instance of SamlConnection.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is SamlConnection {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === SamlConnection.__pulumiType;
+    }
+
+    /**
+     * Assertion Consumer Service URL.
+     */
+    declare public /*out*/ readonly acsUrl: pulumi.Output<string>;
+    /**
+     * Whether the SAML connection is active.
+     */
+    declare public readonly active: pulumi.Output<boolean>;
+    /**
+     * Whether to allow IdP-initiated SSO.
+     */
+    declare public readonly allowIdpInitiated: pulumi.Output<boolean>;
+    /**
+     * Whether to allow subdomains.
+     */
+    declare public readonly allowSubdomains: pulumi.Output<boolean>;
+    /**
+     * Mapping of SAML attributes to Clerk user fields.
+     */
+    declare public readonly attributeMapping: pulumi.Output<outputs.SamlConnectionAttributeMapping | undefined>;
+    /**
+     * Timestamp when the SAML connection was created.
+     */
+    declare public /*out*/ readonly createdAt: pulumi.Output<string>;
+    /**
+     * Whether to disable additional identifications.
+     */
+    declare public readonly disableAdditionalIdentifications: pulumi.Output<boolean>;
+    /**
+     * Domain for the SAML connection.
+     */
+    declare public readonly domain: pulumi.Output<string>;
+    /**
+     * Whether to force authentication on every sign-in.
+     */
+    declare public readonly forceAuthn: pulumi.Output<boolean>;
+    /**
+     * X.509 certificate of the identity provider.
+     */
+    declare public readonly idpCertificate: pulumi.Output<string | undefined>;
+    /**
+     * Entity ID of the identity provider.
+     */
+    declare public readonly idpEntityId: pulumi.Output<string | undefined>;
+    /**
+     * Raw metadata XML of the identity provider.
+     */
+    declare public readonly idpMetadata: pulumi.Output<string | undefined>;
+    /**
+     * Metadata URL of the identity provider.
+     */
+    declare public readonly idpMetadataUrl: pulumi.Output<string | undefined>;
+    /**
+     * Single sign-on URL of the identity provider.
+     */
+    declare public readonly idpSsoUrl: pulumi.Output<string | undefined>;
+    /**
+     * Name of the SAML connection.
+     */
+    declare public readonly name: pulumi.Output<string>;
+    /**
+     * Organization ID to associate with this SAML connection.
+     */
+    declare public readonly organizationId: pulumi.Output<string | undefined>;
+    /**
+     * SAML provider type (e.g. saml_custom, saml_okta, saml_google). Cannot be changed after creation.
+     */
+    declare public readonly providerType: pulumi.Output<string>;
+    /**
+     * Service Provider entity ID.
+     */
+    declare public /*out*/ readonly spEntityId: pulumi.Output<string>;
+    /**
+     * Service Provider metadata URL.
+     */
+    declare public /*out*/ readonly spMetadataUrl: pulumi.Output<string>;
+    /**
+     * Whether to sync user attributes from the identity provider.
+     */
+    declare public readonly syncUserAttributes: pulumi.Output<boolean>;
+    /**
+     * Timestamp when the SAML connection was last updated.
+     */
+    declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
+    /**
+     * Number of users associated with this SAML connection.
+     */
+    declare public /*out*/ readonly userCount: pulumi.Output<number>;
+
+    /**
+     * Create a SamlConnection resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: SamlConnectionArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: SamlConnectionArgs | SamlConnectionState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as SamlConnectionState | undefined;
+            resourceInputs["acsUrl"] = state?.acsUrl;
+            resourceInputs["active"] = state?.active;
+            resourceInputs["allowIdpInitiated"] = state?.allowIdpInitiated;
+            resourceInputs["allowSubdomains"] = state?.allowSubdomains;
+            resourceInputs["attributeMapping"] = state?.attributeMapping;
+            resourceInputs["createdAt"] = state?.createdAt;
+            resourceInputs["disableAdditionalIdentifications"] = state?.disableAdditionalIdentifications;
+            resourceInputs["domain"] = state?.domain;
+            resourceInputs["forceAuthn"] = state?.forceAuthn;
+            resourceInputs["idpCertificate"] = state?.idpCertificate;
+            resourceInputs["idpEntityId"] = state?.idpEntityId;
+            resourceInputs["idpMetadata"] = state?.idpMetadata;
+            resourceInputs["idpMetadataUrl"] = state?.idpMetadataUrl;
+            resourceInputs["idpSsoUrl"] = state?.idpSsoUrl;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["organizationId"] = state?.organizationId;
+            resourceInputs["providerType"] = state?.providerType;
+            resourceInputs["spEntityId"] = state?.spEntityId;
+            resourceInputs["spMetadataUrl"] = state?.spMetadataUrl;
+            resourceInputs["syncUserAttributes"] = state?.syncUserAttributes;
+            resourceInputs["updatedAt"] = state?.updatedAt;
+            resourceInputs["userCount"] = state?.userCount;
+        } else {
+            const args = argsOrState as SamlConnectionArgs | undefined;
+            if (args?.domain === undefined && !opts.urn) {
+                throw new Error("Missing required property 'domain'");
+            }
+            if (args?.providerType === undefined && !opts.urn) {
+                throw new Error("Missing required property 'providerType'");
+            }
+            resourceInputs["active"] = args?.active;
+            resourceInputs["allowIdpInitiated"] = args?.allowIdpInitiated;
+            resourceInputs["allowSubdomains"] = args?.allowSubdomains;
+            resourceInputs["attributeMapping"] = args?.attributeMapping;
+            resourceInputs["disableAdditionalIdentifications"] = args?.disableAdditionalIdentifications;
+            resourceInputs["domain"] = args?.domain;
+            resourceInputs["forceAuthn"] = args?.forceAuthn;
+            resourceInputs["idpCertificate"] = args?.idpCertificate ? pulumi.secret(args.idpCertificate) : undefined;
+            resourceInputs["idpEntityId"] = args?.idpEntityId;
+            resourceInputs["idpMetadata"] = args?.idpMetadata;
+            resourceInputs["idpMetadataUrl"] = args?.idpMetadataUrl;
+            resourceInputs["idpSsoUrl"] = args?.idpSsoUrl;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["organizationId"] = args?.organizationId;
+            resourceInputs["providerType"] = args?.providerType;
+            resourceInputs["syncUserAttributes"] = args?.syncUserAttributes;
+            resourceInputs["acsUrl"] = undefined /*out*/;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["spEntityId"] = undefined /*out*/;
+            resourceInputs["spMetadataUrl"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
+            resourceInputs["userCount"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["idpCertificate"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(SamlConnection.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering SamlConnection resources.
+ */
+export interface SamlConnectionState {
+    /**
+     * Assertion Consumer Service URL.
+     */
+    acsUrl?: pulumi.Input<string | undefined>;
+    /**
+     * Whether the SAML connection is active.
+     */
+    active?: pulumi.Input<boolean | undefined>;
+    /**
+     * Whether to allow IdP-initiated SSO.
+     */
+    allowIdpInitiated?: pulumi.Input<boolean | undefined>;
+    /**
+     * Whether to allow subdomains.
+     */
+    allowSubdomains?: pulumi.Input<boolean | undefined>;
+    /**
+     * Mapping of SAML attributes to Clerk user fields.
+     */
+    attributeMapping?: pulumi.Input<inputs.SamlConnectionAttributeMapping | undefined>;
+    /**
+     * Timestamp when the SAML connection was created.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * Whether to disable additional identifications.
+     */
+    disableAdditionalIdentifications?: pulumi.Input<boolean | undefined>;
+    /**
+     * Domain for the SAML connection.
+     */
+    domain?: pulumi.Input<string | undefined>;
+    /**
+     * Whether to force authentication on every sign-in.
+     */
+    forceAuthn?: pulumi.Input<boolean | undefined>;
+    /**
+     * X.509 certificate of the identity provider.
+     */
+    idpCertificate?: pulumi.Input<string | undefined>;
+    /**
+     * Entity ID of the identity provider.
+     */
+    idpEntityId?: pulumi.Input<string | undefined>;
+    /**
+     * Raw metadata XML of the identity provider.
+     */
+    idpMetadata?: pulumi.Input<string | undefined>;
+    /**
+     * Metadata URL of the identity provider.
+     */
+    idpMetadataUrl?: pulumi.Input<string | undefined>;
+    /**
+     * Single sign-on URL of the identity provider.
+     */
+    idpSsoUrl?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the SAML connection.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Organization ID to associate with this SAML connection.
+     */
+    organizationId?: pulumi.Input<string | undefined>;
+    /**
+     * SAML provider type (e.g. saml_custom, saml_okta, saml_google). Cannot be changed after creation.
+     */
+    providerType?: pulumi.Input<string | undefined>;
+    /**
+     * Service Provider entity ID.
+     */
+    spEntityId?: pulumi.Input<string | undefined>;
+    /**
+     * Service Provider metadata URL.
+     */
+    spMetadataUrl?: pulumi.Input<string | undefined>;
+    /**
+     * Whether to sync user attributes from the identity provider.
+     */
+    syncUserAttributes?: pulumi.Input<boolean | undefined>;
+    /**
+     * Timestamp when the SAML connection was last updated.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Number of users associated with this SAML connection.
+     */
+    userCount?: pulumi.Input<number | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a SamlConnection resource.
+ */
+export interface SamlConnectionArgs {
+    /**
+     * Whether the SAML connection is active.
+     */
+    active?: pulumi.Input<boolean | undefined>;
+    /**
+     * Whether to allow IdP-initiated SSO.
+     */
+    allowIdpInitiated?: pulumi.Input<boolean | undefined>;
+    /**
+     * Whether to allow subdomains.
+     */
+    allowSubdomains?: pulumi.Input<boolean | undefined>;
+    /**
+     * Mapping of SAML attributes to Clerk user fields.
+     */
+    attributeMapping?: pulumi.Input<inputs.SamlConnectionAttributeMapping | undefined>;
+    /**
+     * Whether to disable additional identifications.
+     */
+    disableAdditionalIdentifications?: pulumi.Input<boolean | undefined>;
+    /**
+     * Domain for the SAML connection.
+     */
+    domain: pulumi.Input<string>;
+    /**
+     * Whether to force authentication on every sign-in.
+     */
+    forceAuthn?: pulumi.Input<boolean | undefined>;
+    /**
+     * X.509 certificate of the identity provider.
+     */
+    idpCertificate?: pulumi.Input<string | undefined>;
+    /**
+     * Entity ID of the identity provider.
+     */
+    idpEntityId?: pulumi.Input<string | undefined>;
+    /**
+     * Raw metadata XML of the identity provider.
+     */
+    idpMetadata?: pulumi.Input<string | undefined>;
+    /**
+     * Metadata URL of the identity provider.
+     */
+    idpMetadataUrl?: pulumi.Input<string | undefined>;
+    /**
+     * Single sign-on URL of the identity provider.
+     */
+    idpSsoUrl?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the SAML connection.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Organization ID to associate with this SAML connection.
+     */
+    organizationId?: pulumi.Input<string | undefined>;
+    /**
+     * SAML provider type (e.g. saml_custom, saml_okta, saml_google). Cannot be changed after creation.
+     */
+    providerType: pulumi.Input<string>;
+    /**
+     * Whether to sync user attributes from the identity provider.
+     */
+    syncUserAttributes?: pulumi.Input<boolean | undefined>;
+}

package/sdks/clerk/scripts/postinstall.js

@@ -0,0 +1,20 @@
+const fs = require("node:fs");
+const path = require("node:path");
+const process = require("node:process");
+const { execSync } = require('node:child_process');
+// We want to run "tsc --types node --types something-else ..." for each @types package.
+const packageJSON = JSON.parse(fs.readFileSync("package.json") ?? "{}");
+const deps = Object.keys(packageJSON.dependencies ?? []).concat(Object.keys(packageJSON.devDependencies ?? []));
+const types = deps.filter(d => d.startsWith("@types/")).map(d => d.slice("@types/".length)).join(",");
+const typesFlag = types.length > 0 ? " --types " + types : "";
+try {
+  execSync("tsc"+typesFlag, { cwd: path.join(__dirname, "..") });
+} catch (error) {
+  console.error("Failed to run 'tsc'", {
+    stdout: error.stdout.toString(),
+    stderr: error.stderr.toString(),
+  });
+  process.exit(1);
+}
+// TypeScript is compiled to "./bin", copy package.json to that directory so it can be read in "getVersion".
+fs.copyFileSync(path.join(__dirname, "..", "package.json"), path.join(__dirname, "..", "bin", "package.json"));

package/sdks/clerk/svixWebhook.ts

@@ -0,0 +1,77 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "./utilities";
+
+export class SvixWebhook extends pulumi.CustomResource {
+    /**
+     * Get an existing SvixWebhook resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SvixWebhookState, opts?: pulumi.CustomResourceOptions): SvixWebhook {
+        return new SvixWebhook(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'clerk:index/svixWebhook:SvixWebhook';
+
+    /**
+     * Returns true if the given object is an instance of SvixWebhook.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is SvixWebhook {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === SvixWebhook.__pulumiType;
+    }
+
+    /**
+     * The Svix dashboard URL for managing webhooks.
+     */
+    declare public /*out*/ readonly svixUrl: pulumi.Output<string>;
+
+    /**
+     * Create a SvixWebhook resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: SvixWebhookArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: SvixWebhookArgs | SvixWebhookState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as SvixWebhookState | undefined;
+            resourceInputs["svixUrl"] = state?.svixUrl;
+        } else {
+            const args = argsOrState as SvixWebhookArgs | undefined;
+            resourceInputs["svixUrl"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(SvixWebhook.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering SvixWebhook resources.
+ */
+export interface SvixWebhookState {
+    /**
+     * The Svix dashboard URL for managing webhooks.
+     */
+    svixUrl?: pulumi.Input<string | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a SvixWebhook resource.
+ */
+export interface SvixWebhookArgs {
+}

package/sdks/clerk/tsconfig.json

@@ -0,0 +1,53 @@
+{
+    "compilerOptions": {
+        // Output
+        "outDir": "bin",
+        "declaration": true,
+        "declarationMap": true,
+        "sourceMap": true,
+        "stripInternal": true,
+        // Environment
+        "target": "ES2022",
+        "module": "nodenext",
+        "moduleResolution": "nodenext",
+        "moduleDetection": "force",
+        "types": ["node"],
+        // Type Checking
+        "strict": true,
+        "noFallthroughCasesInSwitch": true,
+        "noImplicitReturns": true,
+        "skipLibCheck": true
+    },
+    "files": [
+        "allowlistIdentifier.ts",
+        "apiKey.ts",
+        "application.ts",
+        "applicationSettings.ts",
+        "blocklistIdentifier.ts",
+        "config/index.ts",
+        "config/vars.ts",
+        "domain.ts",
+        "getApplication.ts",
+        "index.ts",
+        "instanceConfig.ts",
+        "instanceDomain.ts",
+        "jwtTemplate.ts",
+        "machine.ts",
+        "oauthApplication.ts",
+        "organization.ts",
+        "organizationDomain.ts",
+        "organizationMembership.ts",
+        "organizationPermission.ts",
+        "organizationRole.ts",
+        "provider.ts",
+        "redirectUrl.ts",
+        "roleSet.ts",
+        "samlConnection.ts",
+        "svixWebhook.ts",
+        "types/index.ts",
+        "types/input.ts",
+        "types/output.ts",
+        "user.ts",
+        "utilities.ts"
+    ]
+}

package/sdks/clerk/types/index.ts

@@ -0,0 +1,13 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as utilities from "../utilities";
+
+// Export sub-modules:
+import * as input from "./input";
+import * as output from "./output";
+
+export {
+    input,
+    output,
+};

package/sdks/clerk/types/input.ts

@@ -0,0 +1,59 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+
+export interface ApplicationInstance {
+    /**
+     * Environment type (e.g. development, production).
+     */
+    environmentType?: pulumi.Input<string | undefined>;
+    /**
+     * Unique identifier of the instance.
+     */
+    instanceId?: pulumi.Input<string | undefined>;
+    /**
+     * Publishable key for this instance.
+     */
+    publishableKey?: pulumi.Input<string | undefined>;
+    /**
+     * Secret key for this instance.
+     */
+    secretKey?: pulumi.Input<string | undefined>;
+}
+
+export interface DomainCnameTarget {
+    /**
+     * The CNAME host.
+     */
+    host?: pulumi.Input<string | undefined>;
+    /**
+     * Whether this CNAME record is required.
+     */
+    required?: pulumi.Input<boolean | undefined>;
+    /**
+     * The CNAME value.
+     */
+    value?: pulumi.Input<string | undefined>;
+}
+
+export interface SamlConnectionAttributeMapping {
+    /**
+     * SAML attribute name for email address.
+     */
+    emailAddress: pulumi.Input<string>;
+    /**
+     * SAML attribute name for first name.
+     */
+    firstName: pulumi.Input<string>;
+    /**
+     * SAML attribute name for last name.
+     */
+    lastName: pulumi.Input<string>;
+    /**
+     * SAML attribute name for user ID.
+     */
+    userId: pulumi.Input<string>;
+}

package/sdks/clerk/types/output.ts

@@ -0,0 +1,79 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+
+export interface ApplicationInstance {
+    /**
+     * Environment type (e.g. development, production).
+     */
+    environmentType: string;
+    /**
+     * Unique identifier of the instance.
+     */
+    instanceId: string;
+    /**
+     * Publishable key for this instance.
+     */
+    publishableKey: string;
+    /**
+     * Secret key for this instance.
+     */
+    secretKey: string;
+}
+
+export interface DomainCnameTarget {
+    /**
+     * The CNAME host.
+     */
+    host: string;
+    /**
+     * Whether this CNAME record is required.
+     */
+    required: boolean;
+    /**
+     * The CNAME value.
+     */
+    value: string;
+}
+
+export interface GetApplicationInstance {
+    /**
+     * Environment type (e.g. development, production).
+     */
+    environmentType: string;
+    /**
+     * Unique identifier of the instance.
+     */
+    instanceId: string;
+    /**
+     * Publishable key for this instance.
+     */
+    publishableKey: string;
+    /**
+     * Secret key for this instance.
+     */
+    secretKey: string;
+}
+
+export interface SamlConnectionAttributeMapping {
+    /**
+     * SAML attribute name for email address.
+     */
+    emailAddress: string;
+    /**
+     * SAML attribute name for first name.
+     */
+    firstName: string;
+    /**
+     * SAML attribute name for last name.
+     */
+    lastName: string;
+    /**
+     * SAML attribute name for user ID.
+     */
+    userId: string;
+}
+