@pulumi/auth0 2.14.0-alpha.1663280530 → 2.14.0-alpha.1666810964
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/action.d.ts +25 -72
- package/action.js +2 -50
- package/action.js.map +1 -1
- package/attackProtection.d.ts +9 -8
- package/attackProtection.js +4 -4
- package/attackProtection.js.map +1 -1
- package/branding.d.ts +31 -30
- package/branding.js +14 -8
- package/branding.js.map +1 -1
- package/brandingTheme.d.ts +156 -0
- package/brandingTheme.js +165 -0
- package/brandingTheme.js.map +1 -0
- package/client.d.ts +145 -126
- package/client.js +26 -22
- package/client.js.map +1 -1
- package/clientGrant.d.ts +12 -13
- package/clientGrant.js +3 -4
- package/clientGrant.js.map +1 -1
- package/config/vars.d.ts +22 -0
- package/config/vars.js +6 -0
- package/config/vars.js.map +1 -1
- package/connection.d.ts +256 -41
- package/connection.js +236 -4
- package/connection.js.map +1 -1
- package/customDomain.d.ts +42 -18
- package/customDomain.js +6 -3
- package/customDomain.js.map +1 -1
- package/customDomainVerification.d.ts +15 -9
- package/customDomainVerification.js +4 -4
- package/customDomainVerification.js.map +1 -1
- package/email.d.ts +37 -18
- package/email.js +23 -5
- package/email.js.map +1 -1
- package/emailTemplate.d.ts +29 -32
- package/emailTemplate.js +2 -5
- package/emailTemplate.js.map +1 -1
- package/getClient.d.ts +111 -6
- package/getClient.js +3 -1
- package/getClient.js.map +1 -1
- package/getGlobalClient.d.ts +98 -31
- package/getGlobalClient.js +3 -11
- package/getGlobalClient.js.map +1 -1
- package/getTenant.d.ts +3 -3
- package/getTenant.js +1 -1
- package/globalClient.d.ts +333 -2
- package/globalClient.js +7 -3
- package/globalClient.js.map +1 -1
- package/guardian.d.ts +32 -56
- package/guardian.js +3 -4
- package/guardian.js.map +1 -1
- package/hook.d.ts +12 -18
- package/hook.js +9 -10
- package/hook.js.map +1 -1
- package/index.d.ts +91 -30
- package/index.js +94 -101
- package/index.js.map +1 -1
- package/logStream.d.ts +34 -18
- package/logStream.js +17 -2
- package/logStream.js.map +1 -1
- package/organization.d.ts +22 -55
- package/organization.js +8 -17
- package/organization.js.map +1 -1
- package/organizationConnection.d.ts +7 -5
- package/organizationConnection.js +7 -5
- package/organizationConnection.js.map +1 -1
- package/organizationMember.d.ts +27 -15
- package/organizationMember.js +18 -6
- package/organizationMember.js.map +1 -1
- package/package.json +2 -2
- package/package.json.dev +2 -2
- package/prompt.d.ts +12 -12
- package/prompt.js +4 -4
- package/promptCustomText.d.ts +8 -9
- package/promptCustomText.js +2 -3
- package/promptCustomText.js.map +1 -1
- package/provider.d.ts +41 -0
- package/provider.js +1 -0
- package/provider.js.map +1 -1
- package/resourceServer.d.ts +47 -46
- package/resourceServer.js +4 -1
- package/resourceServer.js.map +1 -1
- package/role.d.ts +13 -17
- package/role.js +2 -4
- package/role.js.map +1 -1
- package/rule.d.ts +19 -25
- package/rule.js +6 -12
- package/rule.js.map +1 -1
- package/ruleConfig.d.ts +12 -14
- package/ruleConfig.js +9 -9
- package/ruleConfig.js.map +1 -1
- package/tenant.d.ts +91 -80
- package/tenant.js +35 -25
- package/tenant.js.map +1 -1
- package/triggerBinding.d.ts +19 -26
- package/triggerBinding.js +11 -16
- package/triggerBinding.js.map +1 -1
- package/types/index.js.map +1 -1
- package/types/input.d.ts +488 -425
- package/types/output.d.ts +500 -435
- package/user.d.ts +87 -44
- package/user.js +6 -6
- package/user.js.map +1 -1
- package/utilities.js +13 -1
- package/utilities.js.map +1 -1
package/getGlobalClient.js
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.
|
|
5
|
+
exports.getGlobalClient = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
@@ -17,20 +17,12 @@ const utilities = require("./utilities");
|
|
|
17
17
|
* const global = pulumi.output(auth0.getGlobalClient());
|
|
18
18
|
* ```
|
|
19
19
|
*/
|
|
20
|
-
function getGlobalClient(
|
|
21
|
-
args = args || {};
|
|
20
|
+
function getGlobalClient(opts) {
|
|
22
21
|
if (!opts) {
|
|
23
22
|
opts = {};
|
|
24
23
|
}
|
|
25
24
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
26
|
-
return pulumi.runtime.invoke("auth0:index/getGlobalClient:getGlobalClient", {
|
|
27
|
-
"clientId": args.clientId,
|
|
28
|
-
"name": args.name,
|
|
29
|
-
}, opts);
|
|
25
|
+
return pulumi.runtime.invoke("auth0:index/getGlobalClient:getGlobalClient", {}, opts);
|
|
30
26
|
}
|
|
31
27
|
exports.getGlobalClient = getGlobalClient;
|
|
32
|
-
function getGlobalClientOutput(args, opts) {
|
|
33
|
-
return pulumi.output(args).apply(a => getGlobalClient(a, opts));
|
|
34
|
-
}
|
|
35
|
-
exports.getGlobalClientOutput = getGlobalClientOutput;
|
|
36
28
|
//# sourceMappingURL=getGlobalClient.js.map
|
package/getGlobalClient.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getGlobalClient.js","sourceRoot":"","sources":["../getGlobalClient.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;
|
|
1
|
+
{"version":3,"file":"getGlobalClient.js","sourceRoot":"","sources":["../getGlobalClient.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;GAWG;AACH,SAAgB,eAAe,CAAC,IAA2B;IACvD,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,6CAA6C,EAAE,EAC3E,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AARD,0CAQC"}
|
package/getTenant.d.ts
CHANGED
|
@@ -8,7 +8,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
8
8
|
* import * as pulumi from "@pulumi/pulumi";
|
|
9
9
|
* import * as auth0 from "@pulumi/auth0";
|
|
10
10
|
*
|
|
11
|
-
* const
|
|
11
|
+
* const myTenant = pulumi.output(auth0.getTenant());
|
|
12
12
|
* ```
|
|
13
13
|
*/
|
|
14
14
|
export declare function getTenant(opts?: pulumi.InvokeOptions): Promise<GetTenantResult>;
|
|
@@ -17,7 +17,7 @@ export declare function getTenant(opts?: pulumi.InvokeOptions): Promise<GetTenan
|
|
|
17
17
|
*/
|
|
18
18
|
export interface GetTenantResult {
|
|
19
19
|
/**
|
|
20
|
-
*
|
|
20
|
+
* Your Auth0 domain name.
|
|
21
21
|
*/
|
|
22
22
|
readonly domain: string;
|
|
23
23
|
/**
|
|
@@ -25,7 +25,7 @@ export interface GetTenantResult {
|
|
|
25
25
|
*/
|
|
26
26
|
readonly id: string;
|
|
27
27
|
/**
|
|
28
|
-
*
|
|
28
|
+
* The identifier value of the built-in Management API resource server, which can be used as an audience when configuring client grants.
|
|
29
29
|
*/
|
|
30
30
|
readonly managementApiIdentifier: string;
|
|
31
31
|
}
|
package/getTenant.js
CHANGED
|
@@ -14,7 +14,7 @@ const utilities = require("./utilities");
|
|
|
14
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
15
|
* import * as auth0 from "@pulumi/auth0";
|
|
16
16
|
*
|
|
17
|
-
* const
|
|
17
|
+
* const myTenant = pulumi.output(auth0.getTenant());
|
|
18
18
|
* ```
|
|
19
19
|
*/
|
|
20
20
|
function getTenant(opts) {
|
package/globalClient.d.ts
CHANGED
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
-
import
|
|
2
|
+
import * as inputs from "./types/input";
|
|
3
|
+
import * as outputs from "./types/output";
|
|
3
4
|
/**
|
|
4
5
|
* Use a tenant's global Auth0 Application client.
|
|
5
6
|
*
|
|
@@ -25,7 +26,7 @@ import { input as inputs, output as outputs } from "./types";
|
|
|
25
26
|
*
|
|
26
27
|
* ## Import
|
|
27
28
|
*
|
|
28
|
-
* The auth0_global_client can be imported using the client's ID. You can find the ID of the global client by going to the [API Explorer](https://auth0.com/docs/api/management/v2#!/Clients/get_clients) and fetching the clients that have `"global"true`.
|
|
29
|
+
* The auth0_global_client can be imported using the global client's ID. # You can find the ID of the global client by going to the [API Explorer](https://auth0.com/docs/api/management/v2#!/Clients/get_clients) and fetching the clients that have `"global"true`. # Example
|
|
29
30
|
*
|
|
30
31
|
* ```sh
|
|
31
32
|
* $ pulumi import auth0:index/globalClient:GlobalClient global XaiyAXXXYdXXXXnqjj8HXXXXXT5titww
|
|
@@ -47,48 +48,158 @@ export declare class GlobalClient extends pulumi.CustomResource {
|
|
|
47
48
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
48
49
|
*/
|
|
49
50
|
static isInstance(obj: any): obj is GlobalClient;
|
|
51
|
+
/**
|
|
52
|
+
* Addons enabled for this client and their associated configurations.
|
|
53
|
+
*/
|
|
50
54
|
readonly addons: pulumi.Output<outputs.GlobalClientAddons>;
|
|
55
|
+
/**
|
|
56
|
+
* List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
|
|
57
|
+
*/
|
|
51
58
|
readonly allowedClients: pulumi.Output<string[]>;
|
|
59
|
+
/**
|
|
60
|
+
* URLs that Auth0 may redirect to after logout.
|
|
61
|
+
*/
|
|
52
62
|
readonly allowedLogoutUrls: pulumi.Output<string[]>;
|
|
63
|
+
/**
|
|
64
|
+
* URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
|
|
65
|
+
*/
|
|
53
66
|
readonly allowedOrigins: pulumi.Output<string[]>;
|
|
67
|
+
/**
|
|
68
|
+
* Type of application the client represents. Possible values are: `native`, `spa`, `regularWeb`, `nonInteractive`, `ssoIntegration`. Specific SSO integrations types accepted as well are: `rms`, `box`, `cloudbees`, `concur`, `dropbox`, `mscrm`, `echosign`, `egnyte`, `newrelic`, `office365`, `salesforce`, `sentry`, `sharepoint`, `slack`, `springcm`, `zendesk`, `zoom`.
|
|
69
|
+
*/
|
|
54
70
|
readonly appType: pulumi.Output<string>;
|
|
71
|
+
/**
|
|
72
|
+
* URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
|
|
73
|
+
*/
|
|
55
74
|
readonly callbacks: pulumi.Output<string[]>;
|
|
75
|
+
/**
|
|
76
|
+
* List of audiences/realms for SAML protocol. Used by the wsfed addon.
|
|
77
|
+
*/
|
|
78
|
+
readonly clientAliases: pulumi.Output<string[]>;
|
|
79
|
+
/**
|
|
80
|
+
* The ID of the client.
|
|
81
|
+
*/
|
|
56
82
|
readonly clientId: pulumi.Output<string>;
|
|
83
|
+
/**
|
|
84
|
+
* Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: `:,-+=_*?"/\()<>@ [Tab] [Space]`.
|
|
85
|
+
*/
|
|
57
86
|
readonly clientMetadata: pulumi.Output<{
|
|
58
87
|
[key: string]: any;
|
|
59
88
|
}>;
|
|
89
|
+
/**
|
|
90
|
+
* Secret for the client. Keep this private. To access this attribute you need to add the `read:client_keys` scope to the
|
|
91
|
+
* Terraform client. Otherwise, the attribute will contain an empty string.
|
|
92
|
+
*/
|
|
60
93
|
readonly clientSecret: pulumi.Output<string>;
|
|
94
|
+
/**
|
|
95
|
+
* Custom metadata for the rotation. For more info: [rotate-client-secret](https://auth0.com/docs/get-started/applications/rotate-client-secret).
|
|
96
|
+
*/
|
|
61
97
|
readonly clientSecretRotationTrigger: pulumi.Output<{
|
|
62
98
|
[key: string]: any;
|
|
63
99
|
} | undefined>;
|
|
100
|
+
/**
|
|
101
|
+
* Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
|
|
102
|
+
*/
|
|
64
103
|
readonly crossOriginAuth: pulumi.Output<boolean>;
|
|
104
|
+
/**
|
|
105
|
+
* URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
|
|
106
|
+
*/
|
|
65
107
|
readonly crossOriginLoc: pulumi.Output<string>;
|
|
108
|
+
/**
|
|
109
|
+
* The content (HTML, CSS, JS) of the custom login page.
|
|
110
|
+
*/
|
|
66
111
|
readonly customLoginPage: pulumi.Output<string>;
|
|
112
|
+
/**
|
|
113
|
+
* Indicates whether a custom login page is to be used.
|
|
114
|
+
*/
|
|
67
115
|
readonly customLoginPageOn: pulumi.Output<boolean>;
|
|
116
|
+
/**
|
|
117
|
+
* Description of the purpose of the client.
|
|
118
|
+
*/
|
|
68
119
|
readonly description: pulumi.Output<string>;
|
|
120
|
+
/**
|
|
121
|
+
* Encryption used for WS-Fed responses with this client.
|
|
122
|
+
*/
|
|
69
123
|
readonly encryptionKey: pulumi.Output<{
|
|
70
124
|
[key: string]: string;
|
|
71
125
|
}>;
|
|
126
|
+
/**
|
|
127
|
+
* HTML form template to be used for WS-Federation.
|
|
128
|
+
*/
|
|
72
129
|
readonly formTemplate: pulumi.Output<string>;
|
|
130
|
+
/**
|
|
131
|
+
* Types of grants that this client is authorized to use.
|
|
132
|
+
*/
|
|
73
133
|
readonly grantTypes: pulumi.Output<string[]>;
|
|
134
|
+
/**
|
|
135
|
+
* Initiate login URI, must be HTTPS.
|
|
136
|
+
*/
|
|
74
137
|
readonly initiateLoginUri: pulumi.Output<string>;
|
|
138
|
+
/**
|
|
139
|
+
* Indicates whether this client is a first-party client.
|
|
140
|
+
*/
|
|
75
141
|
readonly isFirstParty: pulumi.Output<boolean>;
|
|
142
|
+
/**
|
|
143
|
+
* Indicates whether the token endpoint IP header is trusted.
|
|
144
|
+
*/
|
|
76
145
|
readonly isTokenEndpointIpHeaderTrusted: pulumi.Output<boolean>;
|
|
146
|
+
/**
|
|
147
|
+
* Configuration settings for the JWTs issued for this client.
|
|
148
|
+
*/
|
|
77
149
|
readonly jwtConfiguration: pulumi.Output<outputs.GlobalClientJwtConfiguration>;
|
|
150
|
+
/**
|
|
151
|
+
* URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
|
|
152
|
+
*/
|
|
78
153
|
readonly logoUri: pulumi.Output<string>;
|
|
154
|
+
/**
|
|
155
|
+
* Additional configuration for native mobile apps.
|
|
156
|
+
*/
|
|
79
157
|
readonly mobile: pulumi.Output<outputs.GlobalClientMobile>;
|
|
158
|
+
/**
|
|
159
|
+
* Name of the client.
|
|
160
|
+
*/
|
|
80
161
|
readonly name: pulumi.Output<string>;
|
|
162
|
+
/**
|
|
163
|
+
* Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to `false` in order to change the `appType`.
|
|
164
|
+
*/
|
|
81
165
|
readonly nativeSocialLogin: pulumi.Output<outputs.GlobalClientNativeSocialLogin>;
|
|
166
|
+
/**
|
|
167
|
+
* Indicates whether this client will conform to strict OIDC specifications.
|
|
168
|
+
*/
|
|
82
169
|
readonly oidcConformant: pulumi.Output<boolean>;
|
|
170
|
+
/**
|
|
171
|
+
* Defines how to proceed during an authentication transaction when `organizationUsage = "require"`. Can be `noPrompt` (default) or `preLoginPrompt`.
|
|
172
|
+
*/
|
|
83
173
|
readonly organizationRequireBehavior: pulumi.Output<string>;
|
|
174
|
+
/**
|
|
175
|
+
* Defines how to proceed during an authentication transaction with regards to an organization. Can be `deny` (default), `allow` or `require`.
|
|
176
|
+
*/
|
|
84
177
|
readonly organizationUsage: pulumi.Output<string>;
|
|
178
|
+
/**
|
|
179
|
+
* Configuration settings for the refresh tokens issued for this client.
|
|
180
|
+
*/
|
|
85
181
|
readonly refreshToken: pulumi.Output<outputs.GlobalClientRefreshToken>;
|
|
182
|
+
/**
|
|
183
|
+
* List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
|
|
184
|
+
*/
|
|
86
185
|
readonly signingKeys: pulumi.Output<{
|
|
87
186
|
[key: string]: any;
|
|
88
187
|
}[]>;
|
|
188
|
+
/**
|
|
189
|
+
* Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
|
|
190
|
+
*/
|
|
89
191
|
readonly sso: pulumi.Output<boolean>;
|
|
192
|
+
/**
|
|
193
|
+
* Indicates whether or not SSO is disabled.
|
|
194
|
+
*/
|
|
90
195
|
readonly ssoDisabled: pulumi.Output<boolean>;
|
|
196
|
+
/**
|
|
197
|
+
* Defines the requested authentication method for the token endpoint. Options include `none` (public client without a client secret), `clientSecretPost` (client uses HTTP POST parameters), `clientSecretBasic` (client uses HTTP Basic).
|
|
198
|
+
*/
|
|
91
199
|
readonly tokenEndpointAuthMethod: pulumi.Output<string>;
|
|
200
|
+
/**
|
|
201
|
+
* URLs that represent valid web origins for use with web message response mode.
|
|
202
|
+
*/
|
|
92
203
|
readonly webOrigins: pulumi.Output<string[]>;
|
|
93
204
|
/**
|
|
94
205
|
* Create a GlobalClient resource with the given unique name, arguments, and options.
|
|
@@ -103,95 +214,315 @@ export declare class GlobalClient extends pulumi.CustomResource {
|
|
|
103
214
|
* Input properties used for looking up and filtering GlobalClient resources.
|
|
104
215
|
*/
|
|
105
216
|
export interface GlobalClientState {
|
|
217
|
+
/**
|
|
218
|
+
* Addons enabled for this client and their associated configurations.
|
|
219
|
+
*/
|
|
106
220
|
addons?: pulumi.Input<inputs.GlobalClientAddons>;
|
|
221
|
+
/**
|
|
222
|
+
* List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
|
|
223
|
+
*/
|
|
107
224
|
allowedClients?: pulumi.Input<pulumi.Input<string>[]>;
|
|
225
|
+
/**
|
|
226
|
+
* URLs that Auth0 may redirect to after logout.
|
|
227
|
+
*/
|
|
108
228
|
allowedLogoutUrls?: pulumi.Input<pulumi.Input<string>[]>;
|
|
229
|
+
/**
|
|
230
|
+
* URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
|
|
231
|
+
*/
|
|
109
232
|
allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
|
|
233
|
+
/**
|
|
234
|
+
* Type of application the client represents. Possible values are: `native`, `spa`, `regularWeb`, `nonInteractive`, `ssoIntegration`. Specific SSO integrations types accepted as well are: `rms`, `box`, `cloudbees`, `concur`, `dropbox`, `mscrm`, `echosign`, `egnyte`, `newrelic`, `office365`, `salesforce`, `sentry`, `sharepoint`, `slack`, `springcm`, `zendesk`, `zoom`.
|
|
235
|
+
*/
|
|
110
236
|
appType?: pulumi.Input<string>;
|
|
237
|
+
/**
|
|
238
|
+
* URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
|
|
239
|
+
*/
|
|
111
240
|
callbacks?: pulumi.Input<pulumi.Input<string>[]>;
|
|
241
|
+
/**
|
|
242
|
+
* List of audiences/realms for SAML protocol. Used by the wsfed addon.
|
|
243
|
+
*/
|
|
244
|
+
clientAliases?: pulumi.Input<pulumi.Input<string>[]>;
|
|
245
|
+
/**
|
|
246
|
+
* The ID of the client.
|
|
247
|
+
*/
|
|
112
248
|
clientId?: pulumi.Input<string>;
|
|
249
|
+
/**
|
|
250
|
+
* Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: `:,-+=_*?"/\()<>@ [Tab] [Space]`.
|
|
251
|
+
*/
|
|
113
252
|
clientMetadata?: pulumi.Input<{
|
|
114
253
|
[key: string]: any;
|
|
115
254
|
}>;
|
|
255
|
+
/**
|
|
256
|
+
* Secret for the client. Keep this private. To access this attribute you need to add the `read:client_keys` scope to the
|
|
257
|
+
* Terraform client. Otherwise, the attribute will contain an empty string.
|
|
258
|
+
*/
|
|
116
259
|
clientSecret?: pulumi.Input<string>;
|
|
260
|
+
/**
|
|
261
|
+
* Custom metadata for the rotation. For more info: [rotate-client-secret](https://auth0.com/docs/get-started/applications/rotate-client-secret).
|
|
262
|
+
*/
|
|
117
263
|
clientSecretRotationTrigger?: pulumi.Input<{
|
|
118
264
|
[key: string]: any;
|
|
119
265
|
}>;
|
|
266
|
+
/**
|
|
267
|
+
* Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
|
|
268
|
+
*/
|
|
120
269
|
crossOriginAuth?: pulumi.Input<boolean>;
|
|
270
|
+
/**
|
|
271
|
+
* URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
|
|
272
|
+
*/
|
|
121
273
|
crossOriginLoc?: pulumi.Input<string>;
|
|
274
|
+
/**
|
|
275
|
+
* The content (HTML, CSS, JS) of the custom login page.
|
|
276
|
+
*/
|
|
122
277
|
customLoginPage?: pulumi.Input<string>;
|
|
278
|
+
/**
|
|
279
|
+
* Indicates whether a custom login page is to be used.
|
|
280
|
+
*/
|
|
123
281
|
customLoginPageOn?: pulumi.Input<boolean>;
|
|
282
|
+
/**
|
|
283
|
+
* Description of the purpose of the client.
|
|
284
|
+
*/
|
|
124
285
|
description?: pulumi.Input<string>;
|
|
286
|
+
/**
|
|
287
|
+
* Encryption used for WS-Fed responses with this client.
|
|
288
|
+
*/
|
|
125
289
|
encryptionKey?: pulumi.Input<{
|
|
126
290
|
[key: string]: pulumi.Input<string>;
|
|
127
291
|
}>;
|
|
292
|
+
/**
|
|
293
|
+
* HTML form template to be used for WS-Federation.
|
|
294
|
+
*/
|
|
128
295
|
formTemplate?: pulumi.Input<string>;
|
|
296
|
+
/**
|
|
297
|
+
* Types of grants that this client is authorized to use.
|
|
298
|
+
*/
|
|
129
299
|
grantTypes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
300
|
+
/**
|
|
301
|
+
* Initiate login URI, must be HTTPS.
|
|
302
|
+
*/
|
|
130
303
|
initiateLoginUri?: pulumi.Input<string>;
|
|
304
|
+
/**
|
|
305
|
+
* Indicates whether this client is a first-party client.
|
|
306
|
+
*/
|
|
131
307
|
isFirstParty?: pulumi.Input<boolean>;
|
|
308
|
+
/**
|
|
309
|
+
* Indicates whether the token endpoint IP header is trusted.
|
|
310
|
+
*/
|
|
132
311
|
isTokenEndpointIpHeaderTrusted?: pulumi.Input<boolean>;
|
|
312
|
+
/**
|
|
313
|
+
* Configuration settings for the JWTs issued for this client.
|
|
314
|
+
*/
|
|
133
315
|
jwtConfiguration?: pulumi.Input<inputs.GlobalClientJwtConfiguration>;
|
|
316
|
+
/**
|
|
317
|
+
* URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
|
|
318
|
+
*/
|
|
134
319
|
logoUri?: pulumi.Input<string>;
|
|
320
|
+
/**
|
|
321
|
+
* Additional configuration for native mobile apps.
|
|
322
|
+
*/
|
|
135
323
|
mobile?: pulumi.Input<inputs.GlobalClientMobile>;
|
|
324
|
+
/**
|
|
325
|
+
* Name of the client.
|
|
326
|
+
*/
|
|
136
327
|
name?: pulumi.Input<string>;
|
|
328
|
+
/**
|
|
329
|
+
* Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to `false` in order to change the `appType`.
|
|
330
|
+
*/
|
|
137
331
|
nativeSocialLogin?: pulumi.Input<inputs.GlobalClientNativeSocialLogin>;
|
|
332
|
+
/**
|
|
333
|
+
* Indicates whether this client will conform to strict OIDC specifications.
|
|
334
|
+
*/
|
|
138
335
|
oidcConformant?: pulumi.Input<boolean>;
|
|
336
|
+
/**
|
|
337
|
+
* Defines how to proceed during an authentication transaction when `organizationUsage = "require"`. Can be `noPrompt` (default) or `preLoginPrompt`.
|
|
338
|
+
*/
|
|
139
339
|
organizationRequireBehavior?: pulumi.Input<string>;
|
|
340
|
+
/**
|
|
341
|
+
* Defines how to proceed during an authentication transaction with regards to an organization. Can be `deny` (default), `allow` or `require`.
|
|
342
|
+
*/
|
|
140
343
|
organizationUsage?: pulumi.Input<string>;
|
|
344
|
+
/**
|
|
345
|
+
* Configuration settings for the refresh tokens issued for this client.
|
|
346
|
+
*/
|
|
141
347
|
refreshToken?: pulumi.Input<inputs.GlobalClientRefreshToken>;
|
|
348
|
+
/**
|
|
349
|
+
* List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
|
|
350
|
+
*/
|
|
142
351
|
signingKeys?: pulumi.Input<pulumi.Input<{
|
|
143
352
|
[key: string]: any;
|
|
144
353
|
}>[]>;
|
|
354
|
+
/**
|
|
355
|
+
* Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
|
|
356
|
+
*/
|
|
145
357
|
sso?: pulumi.Input<boolean>;
|
|
358
|
+
/**
|
|
359
|
+
* Indicates whether or not SSO is disabled.
|
|
360
|
+
*/
|
|
146
361
|
ssoDisabled?: pulumi.Input<boolean>;
|
|
362
|
+
/**
|
|
363
|
+
* Defines the requested authentication method for the token endpoint. Options include `none` (public client without a client secret), `clientSecretPost` (client uses HTTP POST parameters), `clientSecretBasic` (client uses HTTP Basic).
|
|
364
|
+
*/
|
|
147
365
|
tokenEndpointAuthMethod?: pulumi.Input<string>;
|
|
366
|
+
/**
|
|
367
|
+
* URLs that represent valid web origins for use with web message response mode.
|
|
368
|
+
*/
|
|
148
369
|
webOrigins?: pulumi.Input<pulumi.Input<string>[]>;
|
|
149
370
|
}
|
|
150
371
|
/**
|
|
151
372
|
* The set of arguments for constructing a GlobalClient resource.
|
|
152
373
|
*/
|
|
153
374
|
export interface GlobalClientArgs {
|
|
375
|
+
/**
|
|
376
|
+
* Addons enabled for this client and their associated configurations.
|
|
377
|
+
*/
|
|
154
378
|
addons?: pulumi.Input<inputs.GlobalClientAddons>;
|
|
379
|
+
/**
|
|
380
|
+
* List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
|
|
381
|
+
*/
|
|
155
382
|
allowedClients?: pulumi.Input<pulumi.Input<string>[]>;
|
|
383
|
+
/**
|
|
384
|
+
* URLs that Auth0 may redirect to after logout.
|
|
385
|
+
*/
|
|
156
386
|
allowedLogoutUrls?: pulumi.Input<pulumi.Input<string>[]>;
|
|
387
|
+
/**
|
|
388
|
+
* URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
|
|
389
|
+
*/
|
|
157
390
|
allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
|
|
391
|
+
/**
|
|
392
|
+
* Type of application the client represents. Possible values are: `native`, `spa`, `regularWeb`, `nonInteractive`, `ssoIntegration`. Specific SSO integrations types accepted as well are: `rms`, `box`, `cloudbees`, `concur`, `dropbox`, `mscrm`, `echosign`, `egnyte`, `newrelic`, `office365`, `salesforce`, `sentry`, `sharepoint`, `slack`, `springcm`, `zendesk`, `zoom`.
|
|
393
|
+
*/
|
|
158
394
|
appType?: pulumi.Input<string>;
|
|
395
|
+
/**
|
|
396
|
+
* URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
|
|
397
|
+
*/
|
|
159
398
|
callbacks?: pulumi.Input<pulumi.Input<string>[]>;
|
|
399
|
+
/**
|
|
400
|
+
* List of audiences/realms for SAML protocol. Used by the wsfed addon.
|
|
401
|
+
*/
|
|
402
|
+
clientAliases?: pulumi.Input<pulumi.Input<string>[]>;
|
|
403
|
+
/**
|
|
404
|
+
* The ID of the client.
|
|
405
|
+
*/
|
|
160
406
|
clientId?: pulumi.Input<string>;
|
|
407
|
+
/**
|
|
408
|
+
* Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: `:,-+=_*?"/\()<>@ [Tab] [Space]`.
|
|
409
|
+
*/
|
|
161
410
|
clientMetadata?: pulumi.Input<{
|
|
162
411
|
[key: string]: any;
|
|
163
412
|
}>;
|
|
413
|
+
/**
|
|
414
|
+
* Secret for the client. Keep this private. To access this attribute you need to add the `read:client_keys` scope to the
|
|
415
|
+
* Terraform client. Otherwise, the attribute will contain an empty string.
|
|
416
|
+
*/
|
|
164
417
|
clientSecret?: pulumi.Input<string>;
|
|
418
|
+
/**
|
|
419
|
+
* Custom metadata for the rotation. For more info: [rotate-client-secret](https://auth0.com/docs/get-started/applications/rotate-client-secret).
|
|
420
|
+
*/
|
|
165
421
|
clientSecretRotationTrigger?: pulumi.Input<{
|
|
166
422
|
[key: string]: any;
|
|
167
423
|
}>;
|
|
424
|
+
/**
|
|
425
|
+
* Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
|
|
426
|
+
*/
|
|
168
427
|
crossOriginAuth?: pulumi.Input<boolean>;
|
|
428
|
+
/**
|
|
429
|
+
* URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
|
|
430
|
+
*/
|
|
169
431
|
crossOriginLoc?: pulumi.Input<string>;
|
|
432
|
+
/**
|
|
433
|
+
* The content (HTML, CSS, JS) of the custom login page.
|
|
434
|
+
*/
|
|
170
435
|
customLoginPage?: pulumi.Input<string>;
|
|
436
|
+
/**
|
|
437
|
+
* Indicates whether a custom login page is to be used.
|
|
438
|
+
*/
|
|
171
439
|
customLoginPageOn?: pulumi.Input<boolean>;
|
|
440
|
+
/**
|
|
441
|
+
* Description of the purpose of the client.
|
|
442
|
+
*/
|
|
172
443
|
description?: pulumi.Input<string>;
|
|
444
|
+
/**
|
|
445
|
+
* Encryption used for WS-Fed responses with this client.
|
|
446
|
+
*/
|
|
173
447
|
encryptionKey?: pulumi.Input<{
|
|
174
448
|
[key: string]: pulumi.Input<string>;
|
|
175
449
|
}>;
|
|
450
|
+
/**
|
|
451
|
+
* HTML form template to be used for WS-Federation.
|
|
452
|
+
*/
|
|
176
453
|
formTemplate?: pulumi.Input<string>;
|
|
454
|
+
/**
|
|
455
|
+
* Types of grants that this client is authorized to use.
|
|
456
|
+
*/
|
|
177
457
|
grantTypes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
458
|
+
/**
|
|
459
|
+
* Initiate login URI, must be HTTPS.
|
|
460
|
+
*/
|
|
178
461
|
initiateLoginUri?: pulumi.Input<string>;
|
|
462
|
+
/**
|
|
463
|
+
* Indicates whether this client is a first-party client.
|
|
464
|
+
*/
|
|
179
465
|
isFirstParty?: pulumi.Input<boolean>;
|
|
466
|
+
/**
|
|
467
|
+
* Indicates whether the token endpoint IP header is trusted.
|
|
468
|
+
*/
|
|
180
469
|
isTokenEndpointIpHeaderTrusted?: pulumi.Input<boolean>;
|
|
470
|
+
/**
|
|
471
|
+
* Configuration settings for the JWTs issued for this client.
|
|
472
|
+
*/
|
|
181
473
|
jwtConfiguration?: pulumi.Input<inputs.GlobalClientJwtConfiguration>;
|
|
474
|
+
/**
|
|
475
|
+
* URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
|
|
476
|
+
*/
|
|
182
477
|
logoUri?: pulumi.Input<string>;
|
|
478
|
+
/**
|
|
479
|
+
* Additional configuration for native mobile apps.
|
|
480
|
+
*/
|
|
183
481
|
mobile?: pulumi.Input<inputs.GlobalClientMobile>;
|
|
482
|
+
/**
|
|
483
|
+
* Name of the client.
|
|
484
|
+
*/
|
|
184
485
|
name?: pulumi.Input<string>;
|
|
486
|
+
/**
|
|
487
|
+
* Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to `false` in order to change the `appType`.
|
|
488
|
+
*/
|
|
185
489
|
nativeSocialLogin?: pulumi.Input<inputs.GlobalClientNativeSocialLogin>;
|
|
490
|
+
/**
|
|
491
|
+
* Indicates whether this client will conform to strict OIDC specifications.
|
|
492
|
+
*/
|
|
186
493
|
oidcConformant?: pulumi.Input<boolean>;
|
|
494
|
+
/**
|
|
495
|
+
* Defines how to proceed during an authentication transaction when `organizationUsage = "require"`. Can be `noPrompt` (default) or `preLoginPrompt`.
|
|
496
|
+
*/
|
|
187
497
|
organizationRequireBehavior?: pulumi.Input<string>;
|
|
498
|
+
/**
|
|
499
|
+
* Defines how to proceed during an authentication transaction with regards to an organization. Can be `deny` (default), `allow` or `require`.
|
|
500
|
+
*/
|
|
188
501
|
organizationUsage?: pulumi.Input<string>;
|
|
502
|
+
/**
|
|
503
|
+
* Configuration settings for the refresh tokens issued for this client.
|
|
504
|
+
*/
|
|
189
505
|
refreshToken?: pulumi.Input<inputs.GlobalClientRefreshToken>;
|
|
506
|
+
/**
|
|
507
|
+
* List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
|
|
508
|
+
*/
|
|
190
509
|
signingKeys?: pulumi.Input<pulumi.Input<{
|
|
191
510
|
[key: string]: any;
|
|
192
511
|
}>[]>;
|
|
512
|
+
/**
|
|
513
|
+
* Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
|
|
514
|
+
*/
|
|
193
515
|
sso?: pulumi.Input<boolean>;
|
|
516
|
+
/**
|
|
517
|
+
* Indicates whether or not SSO is disabled.
|
|
518
|
+
*/
|
|
194
519
|
ssoDisabled?: pulumi.Input<boolean>;
|
|
520
|
+
/**
|
|
521
|
+
* Defines the requested authentication method for the token endpoint. Options include `none` (public client without a client secret), `clientSecretPost` (client uses HTTP POST parameters), `clientSecretBasic` (client uses HTTP Basic).
|
|
522
|
+
*/
|
|
195
523
|
tokenEndpointAuthMethod?: pulumi.Input<string>;
|
|
524
|
+
/**
|
|
525
|
+
* URLs that represent valid web origins for use with web message response mode.
|
|
526
|
+
*/
|
|
196
527
|
webOrigins?: pulumi.Input<pulumi.Input<string>[]>;
|
|
197
528
|
}
|
package/globalClient.js
CHANGED
|
@@ -30,7 +30,7 @@ const utilities = require("./utilities");
|
|
|
30
30
|
*
|
|
31
31
|
* ## Import
|
|
32
32
|
*
|
|
33
|
-
* The auth0_global_client can be imported using the client's ID. You can find the ID of the global client by going to the [API Explorer](https://auth0.com/docs/api/management/v2#!/Clients/get_clients) and fetching the clients that have `"global"true`.
|
|
33
|
+
* The auth0_global_client can be imported using the global client's ID. # You can find the ID of the global client by going to the [API Explorer](https://auth0.com/docs/api/management/v2#!/Clients/get_clients) and fetching the clients that have `"global"true`. # Example
|
|
34
34
|
*
|
|
35
35
|
* ```sh
|
|
36
36
|
* $ pulumi import auth0:index/globalClient:GlobalClient global XaiyAXXXYdXXXXnqjj8HXXXXXT5titww
|
|
@@ -48,6 +48,7 @@ class GlobalClient extends pulumi.CustomResource {
|
|
|
48
48
|
resourceInputs["allowedOrigins"] = state ? state.allowedOrigins : undefined;
|
|
49
49
|
resourceInputs["appType"] = state ? state.appType : undefined;
|
|
50
50
|
resourceInputs["callbacks"] = state ? state.callbacks : undefined;
|
|
51
|
+
resourceInputs["clientAliases"] = state ? state.clientAliases : undefined;
|
|
51
52
|
resourceInputs["clientId"] = state ? state.clientId : undefined;
|
|
52
53
|
resourceInputs["clientMetadata"] = state ? state.clientMetadata : undefined;
|
|
53
54
|
resourceInputs["clientSecret"] = state ? state.clientSecret : undefined;
|
|
@@ -86,9 +87,10 @@ class GlobalClient extends pulumi.CustomResource {
|
|
|
86
87
|
resourceInputs["allowedOrigins"] = args ? args.allowedOrigins : undefined;
|
|
87
88
|
resourceInputs["appType"] = args ? args.appType : undefined;
|
|
88
89
|
resourceInputs["callbacks"] = args ? args.callbacks : undefined;
|
|
90
|
+
resourceInputs["clientAliases"] = args ? args.clientAliases : undefined;
|
|
89
91
|
resourceInputs["clientId"] = args ? args.clientId : undefined;
|
|
90
92
|
resourceInputs["clientMetadata"] = args ? args.clientMetadata : undefined;
|
|
91
|
-
resourceInputs["clientSecret"] = args ? args.clientSecret : undefined;
|
|
93
|
+
resourceInputs["clientSecret"] = (args === null || args === void 0 ? void 0 : args.clientSecret) ? pulumi.secret(args.clientSecret) : undefined;
|
|
92
94
|
resourceInputs["clientSecretRotationTrigger"] = args ? args.clientSecretRotationTrigger : undefined;
|
|
93
95
|
resourceInputs["crossOriginAuth"] = args ? args.crossOriginAuth : undefined;
|
|
94
96
|
resourceInputs["crossOriginLoc"] = args ? args.crossOriginLoc : undefined;
|
|
@@ -110,13 +112,15 @@ class GlobalClient extends pulumi.CustomResource {
|
|
|
110
112
|
resourceInputs["organizationRequireBehavior"] = args ? args.organizationRequireBehavior : undefined;
|
|
111
113
|
resourceInputs["organizationUsage"] = args ? args.organizationUsage : undefined;
|
|
112
114
|
resourceInputs["refreshToken"] = args ? args.refreshToken : undefined;
|
|
113
|
-
resourceInputs["signingKeys"] = args ? args.signingKeys : undefined;
|
|
115
|
+
resourceInputs["signingKeys"] = (args === null || args === void 0 ? void 0 : args.signingKeys) ? pulumi.secret(args.signingKeys) : undefined;
|
|
114
116
|
resourceInputs["sso"] = args ? args.sso : undefined;
|
|
115
117
|
resourceInputs["ssoDisabled"] = args ? args.ssoDisabled : undefined;
|
|
116
118
|
resourceInputs["tokenEndpointAuthMethod"] = args ? args.tokenEndpointAuthMethod : undefined;
|
|
117
119
|
resourceInputs["webOrigins"] = args ? args.webOrigins : undefined;
|
|
118
120
|
}
|
|
119
121
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
122
|
+
const secretOpts = { additionalSecretOutputs: ["clientSecret", "signingKeys"] };
|
|
123
|
+
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
120
124
|
super(GlobalClient.__pulumiType, name, resourceInputs, opts);
|
|
121
125
|
}
|
|
122
126
|
/**
|
package/globalClient.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"globalClient.js","sourceRoot":"","sources":["../globalClient.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;
|
|
1
|
+
{"version":3,"file":"globalClient.js","sourceRoot":"","sources":["../globalClient.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IAsLnD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gCAAgC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1G,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC;QAChF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAzQD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;;AA1BL,oCA2QC;AA7PG,gBAAgB;AACO,yBAAY,GAAG,uCAAuC,CAAC"}
|