@pulumi/auth0 2.25.0-alpha.1696283760 → 3.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/action.d.ts +5 -5
- package/action.js +2 -2
- package/attackProtection.d.ts +1 -1
- package/attackProtection.js +1 -1
- package/branding.d.ts +1 -1
- package/branding.js +1 -1
- package/brandingTheme.d.ts +2 -2
- package/brandingTheme.js +2 -2
- package/client.d.ts +21 -88
- package/client.js +5 -10
- package/client.js.map +1 -1
- package/clientCredentials.d.ts +2 -2
- package/clientCredentials.js +2 -2
- package/clientGrant.d.ts +2 -30
- package/clientGrant.js +2 -30
- package/clientGrant.js.map +1 -1
- package/connection.d.ts +2 -45
- package/connection.js +2 -39
- package/connection.js.map +1 -1
- package/connectionClient.d.ts +2 -2
- package/connectionClient.js +2 -2
- package/connectionClients.d.ts +1 -1
- package/connectionClients.js +1 -1
- package/customDomain.d.ts +1 -1
- package/customDomain.js +1 -1
- package/customDomainVerification.d.ts +1 -1
- package/customDomainVerification.js +1 -1
- package/{email.d.ts → emailProvider.d.ts} +30 -31
- package/{email.js → emailProvider.js} +20 -21
- package/emailProvider.js.map +1 -0
- package/emailTemplate.d.ts +1 -30
- package/emailTemplate.js +1 -30
- package/emailTemplate.js.map +1 -1
- package/getClient.d.ts +9 -2
- package/getClient.js.map +1 -1
- package/getPages.d.ts +53 -0
- package/{getGlobalClient.js → getPages.js} +14 -10
- package/getPages.js.map +1 -0
- package/getResourceServer.d.ts +3 -3
- package/getRole.d.ts +8 -1
- package/getRole.js.map +1 -1
- package/getSigningKeys.d.ts +23 -0
- package/getSigningKeys.js +23 -0
- package/getSigningKeys.js.map +1 -0
- package/getTenant.d.ts +8 -4
- package/getTenant.js.map +1 -1
- package/guardian.d.ts +1 -1
- package/guardian.js +1 -1
- package/hook.d.ts +2 -5
- package/hook.js +2 -5
- package/hook.js.map +1 -1
- package/index.d.ts +9 -12
- package/index.js +13 -20
- package/index.js.map +1 -1
- package/logStream.d.ts +5 -5
- package/logStream.js +2 -2
- package/organization.d.ts +2 -2
- package/organization.js +2 -2
- package/organizationConnection.d.ts +2 -2
- package/organizationConnection.js +2 -2
- package/organizationConnections.d.ts +1 -1
- package/organizationConnections.js +1 -1
- package/organizationMember.d.ts +2 -32
- package/organizationMember.js +2 -4
- package/organizationMember.js.map +1 -1
- package/organizationMemberRole.d.ts +1 -1
- package/organizationMemberRole.js +1 -1
- package/organizationMemberRoles.d.ts +2 -2
- package/organizationMemberRoles.js +2 -2
- package/package.json +1 -1
- package/pages.d.ts +1 -1
- package/pages.js +1 -1
- package/prompt.d.ts +5 -5
- package/prompt.js +1 -1
- package/promptCustomText.d.ts +5 -5
- package/promptCustomText.js +2 -2
- package/resourceServer.d.ts +1 -43
- package/resourceServer.js +1 -13
- package/resourceServer.js.map +1 -1
- package/role.d.ts +8 -63
- package/role.js +2 -30
- package/role.js.map +1 -1
- package/rule.d.ts +1 -4
- package/rule.js +1 -4
- package/rule.js.map +1 -1
- package/ruleConfig.d.ts +1 -1
- package/ruleConfig.js +1 -1
- package/tenant.d.ts +28 -129
- package/tenant.js +8 -29
- package/tenant.js.map +1 -1
- package/triggerAction.d.ts +5 -5
- package/triggerAction.js +2 -2
- package/triggerActions.d.ts +3 -3
- package/types/input.d.ts +318 -400
- package/types/output.d.ts +550 -671
- package/user.d.ts +4 -47
- package/user.js +4 -10
- package/user.js.map +1 -1
- package/email.js.map +0 -1
- package/getGlobalClient.d.ts +0 -177
- package/getGlobalClient.js.map +0 -1
- package/globalClient.d.ts +0 -580
- package/globalClient.js +0 -152
- package/globalClient.js.map +0 -1
- package/triggerBinding.d.ts +0 -114
- package/triggerBinding.js +0 -109
- package/triggerBinding.js.map +0 -1
package/README.md
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
[](https://www.npmjs.com/package/@pulumi/auth0)
|
|
4
4
|
[](https://pypi.org/project/pulumi-auth0)
|
|
5
5
|
[](https://badge.fury.io/nu/pulumi.auth0)
|
|
6
|
-
[](https://pkg.go.dev/github.com/pulumi/pulumi-auth0/sdk/v3/go)
|
|
7
7
|
[](https://github.com/pulumi/pulumi-auth0/blob/master/LICENSE)
|
|
8
8
|
|
|
9
9
|
# Auth0 Resource Provider
|
|
@@ -34,7 +34,7 @@ To use from Python, install using `pip`:
|
|
|
34
34
|
|
|
35
35
|
To use from Go, use `go get` to grab the latest version of the library
|
|
36
36
|
|
|
37
|
-
$ go get github.com/pulumi/pulumi-auth0/sdk/
|
|
37
|
+
$ go get github.com/pulumi/pulumi-auth0/sdk/v3
|
|
38
38
|
|
|
39
39
|
### .NET
|
|
40
40
|
|
package/action.d.ts
CHANGED
|
@@ -6,10 +6,10 @@ import * as outputs from "./types/output";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Import
|
|
8
8
|
*
|
|
9
|
-
*
|
|
9
|
+
* This resource can be imported by specifying the action ID. # Example
|
|
10
10
|
*
|
|
11
11
|
* ```sh
|
|
12
|
-
* $ pulumi import auth0:index/action:Action my_action 12f4f21b-017a-319d-92e7-2291c1ca36c4
|
|
12
|
+
* $ pulumi import auth0:index/action:Action my_action "12f4f21b-017a-319d-92e7-2291c1ca36c4"
|
|
13
13
|
* ```
|
|
14
14
|
*
|
|
15
15
|
* ~> For security reasons importing `secrets` is not allowed. Therefore, it is advised to import the action without secrets and adding them back after the action has been imported.
|
|
@@ -47,7 +47,7 @@ export declare class Action extends pulumi.CustomResource {
|
|
|
47
47
|
*/
|
|
48
48
|
readonly name: pulumi.Output<string>;
|
|
49
49
|
/**
|
|
50
|
-
* The Node runtime. Defaults to `
|
|
50
|
+
* The Node runtime. Defaults to `node18`. Possible values are: `node16` (not recommended), or `node18` (recommended).
|
|
51
51
|
*/
|
|
52
52
|
readonly runtime: pulumi.Output<string>;
|
|
53
53
|
/**
|
|
@@ -92,7 +92,7 @@ export interface ActionState {
|
|
|
92
92
|
*/
|
|
93
93
|
name?: pulumi.Input<string>;
|
|
94
94
|
/**
|
|
95
|
-
* The Node runtime. Defaults to `
|
|
95
|
+
* The Node runtime. Defaults to `node18`. Possible values are: `node16` (not recommended), or `node18` (recommended).
|
|
96
96
|
*/
|
|
97
97
|
runtime?: pulumi.Input<string>;
|
|
98
98
|
/**
|
|
@@ -129,7 +129,7 @@ export interface ActionArgs {
|
|
|
129
129
|
*/
|
|
130
130
|
name?: pulumi.Input<string>;
|
|
131
131
|
/**
|
|
132
|
-
* The Node runtime. Defaults to `
|
|
132
|
+
* The Node runtime. Defaults to `node18`. Possible values are: `node16` (not recommended), or `node18` (recommended).
|
|
133
133
|
*/
|
|
134
134
|
runtime?: pulumi.Input<string>;
|
|
135
135
|
/**
|
package/action.js
CHANGED
|
@@ -10,10 +10,10 @@ const utilities = require("./utilities");
|
|
|
10
10
|
*
|
|
11
11
|
* ## Import
|
|
12
12
|
*
|
|
13
|
-
*
|
|
13
|
+
* This resource can be imported by specifying the action ID. # Example
|
|
14
14
|
*
|
|
15
15
|
* ```sh
|
|
16
|
-
* $ pulumi import auth0:index/action:Action my_action 12f4f21b-017a-319d-92e7-2291c1ca36c4
|
|
16
|
+
* $ pulumi import auth0:index/action:Action my_action "12f4f21b-017a-319d-92e7-2291c1ca36c4"
|
|
17
17
|
* ```
|
|
18
18
|
*
|
|
19
19
|
* ~> For security reasons importing `secrets` is not allowed. Therefore, it is advised to import the action without secrets and adding them back after the action has been imported.
|
package/attackProtection.d.ts
CHANGED
|
@@ -57,7 +57,7 @@ import * as outputs from "./types/output";
|
|
|
57
57
|
* As this is not a resource identifiable by an ID within the Auth0 Management API, attack_protection can be imported using a random string. # We recommend [Version 4 UUID](https://www.uuidgenerator.net/version4) # Example
|
|
58
58
|
*
|
|
59
59
|
* ```sh
|
|
60
|
-
* $ pulumi import auth0:index/attackProtection:AttackProtection my_protection 24940d4b-4bd4-44e7-894e-f92e4de36a40
|
|
60
|
+
* $ pulumi import auth0:index/attackProtection:AttackProtection my_protection "24940d4b-4bd4-44e7-894e-f92e4de36a40"
|
|
61
61
|
* ```
|
|
62
62
|
*/
|
|
63
63
|
export declare class AttackProtection extends pulumi.CustomResource {
|
package/attackProtection.js
CHANGED
|
@@ -61,7 +61,7 @@ const utilities = require("./utilities");
|
|
|
61
61
|
* As this is not a resource identifiable by an ID within the Auth0 Management API, attack_protection can be imported using a random string. # We recommend [Version 4 UUID](https://www.uuidgenerator.net/version4) # Example
|
|
62
62
|
*
|
|
63
63
|
* ```sh
|
|
64
|
-
* $ pulumi import auth0:index/attackProtection:AttackProtection my_protection 24940d4b-4bd4-44e7-894e-f92e4de36a40
|
|
64
|
+
* $ pulumi import auth0:index/attackProtection:AttackProtection my_protection "24940d4b-4bd4-44e7-894e-f92e4de36a40"
|
|
65
65
|
* ```
|
|
66
66
|
*/
|
|
67
67
|
class AttackProtection extends pulumi.CustomResource {
|
package/branding.d.ts
CHANGED
|
@@ -28,7 +28,7 @@ import * as outputs from "./types/output";
|
|
|
28
28
|
* As this is not a resource identifiable by an ID within the Auth0 Management API, branding can be imported using a random string. # We recommend [Version 4 UUID](https://www.uuidgenerator.net/version4) # Example
|
|
29
29
|
*
|
|
30
30
|
* ```sh
|
|
31
|
-
* $ pulumi import auth0:index/branding:Branding my_brand 22f4f21b-017a-319d-92e7-2291c1ca36c4
|
|
31
|
+
* $ pulumi import auth0:index/branding:Branding my_brand "22f4f21b-017a-319d-92e7-2291c1ca36c4"
|
|
32
32
|
* ```
|
|
33
33
|
*/
|
|
34
34
|
export declare class Branding extends pulumi.CustomResource {
|
package/branding.js
CHANGED
|
@@ -32,7 +32,7 @@ const utilities = require("./utilities");
|
|
|
32
32
|
* As this is not a resource identifiable by an ID within the Auth0 Management API, branding can be imported using a random string. # We recommend [Version 4 UUID](https://www.uuidgenerator.net/version4) # Example
|
|
33
33
|
*
|
|
34
34
|
* ```sh
|
|
35
|
-
* $ pulumi import auth0:index/branding:Branding my_brand 22f4f21b-017a-319d-92e7-2291c1ca36c4
|
|
35
|
+
* $ pulumi import auth0:index/branding:Branding my_brand "22f4f21b-017a-319d-92e7-2291c1ca36c4"
|
|
36
36
|
* ```
|
|
37
37
|
*/
|
|
38
38
|
class Branding extends pulumi.CustomResource {
|
package/brandingTheme.d.ts
CHANGED
|
@@ -87,10 +87,10 @@ import * as outputs from "./types/output";
|
|
|
87
87
|
*
|
|
88
88
|
* ## Import
|
|
89
89
|
*
|
|
90
|
-
*
|
|
90
|
+
* This resource can be imported by specifying the Branding Theme ID. # Example
|
|
91
91
|
*
|
|
92
92
|
* ```sh
|
|
93
|
-
* $ pulumi import auth0:index/brandingTheme:BrandingTheme my_theme XXXXXXXXXXXXXXXXXXXX
|
|
93
|
+
* $ pulumi import auth0:index/brandingTheme:BrandingTheme my_theme "XXXXXXXXXXXXXXXXXXXX"
|
|
94
94
|
* ```
|
|
95
95
|
*/
|
|
96
96
|
export declare class BrandingTheme extends pulumi.CustomResource {
|
package/brandingTheme.js
CHANGED
|
@@ -91,10 +91,10 @@ const utilities = require("./utilities");
|
|
|
91
91
|
*
|
|
92
92
|
* ## Import
|
|
93
93
|
*
|
|
94
|
-
*
|
|
94
|
+
* This resource can be imported by specifying the Branding Theme ID. # Example
|
|
95
95
|
*
|
|
96
96
|
* ```sh
|
|
97
|
-
* $ pulumi import auth0:index/brandingTheme:BrandingTheme my_theme XXXXXXXXXXXXXXXXXXXX
|
|
97
|
+
* $ pulumi import auth0:index/brandingTheme:BrandingTheme my_theme "XXXXXXXXXXXXXXXXXXXX"
|
|
98
98
|
* ```
|
|
99
99
|
*/
|
|
100
100
|
class BrandingTheme extends pulumi.CustomResource {
|
package/client.d.ts
CHANGED
|
@@ -72,17 +72,16 @@ import * as outputs from "./types/output";
|
|
|
72
72
|
* rotationType: "rotating",
|
|
73
73
|
* tokenLifetime: 2592000,
|
|
74
74
|
* },
|
|
75
|
-
* tokenEndpointAuthMethod: "client_secret_post",
|
|
76
75
|
* webOrigins: ["https://example.com"],
|
|
77
76
|
* });
|
|
78
77
|
* ```
|
|
79
78
|
*
|
|
80
79
|
* ## Import
|
|
81
80
|
*
|
|
82
|
-
*
|
|
81
|
+
* This resource can be imported by specifying the client ID. # Example
|
|
83
82
|
*
|
|
84
83
|
* ```sh
|
|
85
|
-
* $ pulumi import auth0:index/client:Client my_client AaiyAPdpYdesoKnqjj8HJqRn4T5titww
|
|
84
|
+
* $ pulumi import auth0:index/client:Client my_client "AaiyAPdpYdesoKnqjj8HJqRn4T5titww"
|
|
86
85
|
* ```
|
|
87
86
|
*/
|
|
88
87
|
export declare class Client extends pulumi.CustomResource {
|
|
@@ -104,7 +103,7 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
104
103
|
/**
|
|
105
104
|
* Addons enabled for this client and their associated configurations.
|
|
106
105
|
*/
|
|
107
|
-
readonly addons: pulumi.Output<outputs.ClientAddons>;
|
|
106
|
+
readonly addons: pulumi.Output<outputs.ClientAddons | undefined>;
|
|
108
107
|
/**
|
|
109
108
|
* List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
|
|
110
109
|
*/
|
|
@@ -140,24 +139,7 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
140
139
|
[key: string]: any;
|
|
141
140
|
} | undefined>;
|
|
142
141
|
/**
|
|
143
|
-
*
|
|
144
|
-
* Terraform client. Otherwise, the attribute will contain an empty string. Use this attribute on the
|
|
145
|
-
* `auth0_client_credentials` resource instead, to allow managing it directly or use the `auth0_client` data source to read
|
|
146
|
-
* this property.
|
|
147
|
-
*
|
|
148
|
-
* @deprecated Reading the client secret through this attribute is deprecated and it will be removed in a future version. Migrate to the `auth0_client_credentials` resource to manage a client's secret instead or use the `auth0_client` data source to read this property.
|
|
149
|
-
*/
|
|
150
|
-
readonly clientSecret: pulumi.Output<string>;
|
|
151
|
-
/**
|
|
152
|
-
* Custom metadata for the rotation. The contents of this map are arbitrary and are hashed by the provider. When the hash changes, a rotation is triggered. For example, the map could contain the user making the change, the date of the change, and a text reason for the change. For more info: rotate-client-secret for instructions on how to rotate client secrets with zero downtime.
|
|
153
|
-
*
|
|
154
|
-
* @deprecated Rotating a client's secret through this attribute is deprecated and it will be removed in a future version. Migrate to the `auth0_client_credentials` resource to manage a client's secret instead. Refer to the [client secret rotation guide](https://registry.terraform.io/providers/auth0/auth0/latest/docs/guides/client_secret_rotation) for instructions on how to rotate client secrets with zero downtime.
|
|
155
|
-
*/
|
|
156
|
-
readonly clientSecretRotationTrigger: pulumi.Output<{
|
|
157
|
-
[key: string]: any;
|
|
158
|
-
} | undefined>;
|
|
159
|
-
/**
|
|
160
|
-
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`). Requires the `coaToggleEnabled` feature flag to be enabled on the tenant by the support team.
|
|
142
|
+
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`).
|
|
161
143
|
*/
|
|
162
144
|
readonly crossOriginAuth: pulumi.Output<boolean | undefined>;
|
|
163
145
|
/**
|
|
@@ -199,7 +181,7 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
199
181
|
*/
|
|
200
182
|
readonly isFirstParty: pulumi.Output<boolean>;
|
|
201
183
|
/**
|
|
202
|
-
* Indicates whether the token endpoint IP header is trusted.
|
|
184
|
+
* Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to `clientSecretPost` or `clientSecretBasic`. Setting this property when creating the resource, will default the authentication method to `clientSecretPost`. To change the authentication method to `clientSecretBasic` use the `auth0.ClientCredentials` resource.
|
|
203
185
|
*/
|
|
204
186
|
readonly isTokenEndpointIpHeaderTrusted: pulumi.Output<boolean>;
|
|
205
187
|
/**
|
|
@@ -242,6 +224,10 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
242
224
|
* Configuration settings for the refresh tokens issued for this client.
|
|
243
225
|
*/
|
|
244
226
|
readonly refreshToken: pulumi.Output<outputs.ClientRefreshToken>;
|
|
227
|
+
/**
|
|
228
|
+
* Makes the use of Pushed Authorization Requests mandatory for this client.
|
|
229
|
+
*/
|
|
230
|
+
readonly requirePushedAuthorizationRequests: pulumi.Output<boolean | undefined>;
|
|
245
231
|
/**
|
|
246
232
|
* List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
|
|
247
233
|
*/
|
|
@@ -256,18 +242,6 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
256
242
|
* Indicates whether or not SSO is disabled.
|
|
257
243
|
*/
|
|
258
244
|
readonly ssoDisabled: pulumi.Output<boolean | undefined>;
|
|
259
|
-
/**
|
|
260
|
-
* Defines the requested authentication method for the token endpoint. Options include `none` (public client without a
|
|
261
|
-
* client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic).
|
|
262
|
-
* Managing the authentication method through this attribute is deprecated and it will be removed in a future major
|
|
263
|
-
* version. Migrate to the `auth0_client_credentials` resource to manage a client's authentication method instead. Check
|
|
264
|
-
* the [MIGRATION
|
|
265
|
-
* GUIDE](https://github.com/auth0/terraform-provider-auth0/blob/main/MIGRATION_GUIDE.md#client-authentication-method) on
|
|
266
|
-
* how to do that.
|
|
267
|
-
*
|
|
268
|
-
* @deprecated Managing the authentication method through this attribute is deprecated and it will be changed to read-only in a future version. Migrate to the `auth0_client_credentials` resource to manage a client's authentication method instead. Check the [MIGRATION GUIDE](https://github.com/auth0/terraform-provider-auth0/blob/main/MIGRATION_GUIDE.md#client-authentication-method) on how to do that.
|
|
269
|
-
*/
|
|
270
|
-
readonly tokenEndpointAuthMethod: pulumi.Output<string>;
|
|
271
245
|
/**
|
|
272
246
|
* URLs that represent valid web origins for use with web message response mode.
|
|
273
247
|
*/
|
|
@@ -324,24 +298,7 @@ export interface ClientState {
|
|
|
324
298
|
[key: string]: any;
|
|
325
299
|
}>;
|
|
326
300
|
/**
|
|
327
|
-
*
|
|
328
|
-
* Terraform client. Otherwise, the attribute will contain an empty string. Use this attribute on the
|
|
329
|
-
* `auth0_client_credentials` resource instead, to allow managing it directly or use the `auth0_client` data source to read
|
|
330
|
-
* this property.
|
|
331
|
-
*
|
|
332
|
-
* @deprecated Reading the client secret through this attribute is deprecated and it will be removed in a future version. Migrate to the `auth0_client_credentials` resource to manage a client's secret instead or use the `auth0_client` data source to read this property.
|
|
333
|
-
*/
|
|
334
|
-
clientSecret?: pulumi.Input<string>;
|
|
335
|
-
/**
|
|
336
|
-
* Custom metadata for the rotation. The contents of this map are arbitrary and are hashed by the provider. When the hash changes, a rotation is triggered. For example, the map could contain the user making the change, the date of the change, and a text reason for the change. For more info: rotate-client-secret for instructions on how to rotate client secrets with zero downtime.
|
|
337
|
-
*
|
|
338
|
-
* @deprecated Rotating a client's secret through this attribute is deprecated and it will be removed in a future version. Migrate to the `auth0_client_credentials` resource to manage a client's secret instead. Refer to the [client secret rotation guide](https://registry.terraform.io/providers/auth0/auth0/latest/docs/guides/client_secret_rotation) for instructions on how to rotate client secrets with zero downtime.
|
|
339
|
-
*/
|
|
340
|
-
clientSecretRotationTrigger?: pulumi.Input<{
|
|
341
|
-
[key: string]: any;
|
|
342
|
-
}>;
|
|
343
|
-
/**
|
|
344
|
-
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`). Requires the `coaToggleEnabled` feature flag to be enabled on the tenant by the support team.
|
|
301
|
+
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`).
|
|
345
302
|
*/
|
|
346
303
|
crossOriginAuth?: pulumi.Input<boolean>;
|
|
347
304
|
/**
|
|
@@ -383,7 +340,7 @@ export interface ClientState {
|
|
|
383
340
|
*/
|
|
384
341
|
isFirstParty?: pulumi.Input<boolean>;
|
|
385
342
|
/**
|
|
386
|
-
* Indicates whether the token endpoint IP header is trusted.
|
|
343
|
+
* Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to `clientSecretPost` or `clientSecretBasic`. Setting this property when creating the resource, will default the authentication method to `clientSecretPost`. To change the authentication method to `clientSecretBasic` use the `auth0.ClientCredentials` resource.
|
|
387
344
|
*/
|
|
388
345
|
isTokenEndpointIpHeaderTrusted?: pulumi.Input<boolean>;
|
|
389
346
|
/**
|
|
@@ -426,6 +383,10 @@ export interface ClientState {
|
|
|
426
383
|
* Configuration settings for the refresh tokens issued for this client.
|
|
427
384
|
*/
|
|
428
385
|
refreshToken?: pulumi.Input<inputs.ClientRefreshToken>;
|
|
386
|
+
/**
|
|
387
|
+
* Makes the use of Pushed Authorization Requests mandatory for this client.
|
|
388
|
+
*/
|
|
389
|
+
requirePushedAuthorizationRequests?: pulumi.Input<boolean>;
|
|
429
390
|
/**
|
|
430
391
|
* List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
|
|
431
392
|
*/
|
|
@@ -440,18 +401,6 @@ export interface ClientState {
|
|
|
440
401
|
* Indicates whether or not SSO is disabled.
|
|
441
402
|
*/
|
|
442
403
|
ssoDisabled?: pulumi.Input<boolean>;
|
|
443
|
-
/**
|
|
444
|
-
* Defines the requested authentication method for the token endpoint. Options include `none` (public client without a
|
|
445
|
-
* client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic).
|
|
446
|
-
* Managing the authentication method through this attribute is deprecated and it will be removed in a future major
|
|
447
|
-
* version. Migrate to the `auth0_client_credentials` resource to manage a client's authentication method instead. Check
|
|
448
|
-
* the [MIGRATION
|
|
449
|
-
* GUIDE](https://github.com/auth0/terraform-provider-auth0/blob/main/MIGRATION_GUIDE.md#client-authentication-method) on
|
|
450
|
-
* how to do that.
|
|
451
|
-
*
|
|
452
|
-
* @deprecated Managing the authentication method through this attribute is deprecated and it will be changed to read-only in a future version. Migrate to the `auth0_client_credentials` resource to manage a client's authentication method instead. Check the [MIGRATION GUIDE](https://github.com/auth0/terraform-provider-auth0/blob/main/MIGRATION_GUIDE.md#client-authentication-method) on how to do that.
|
|
453
|
-
*/
|
|
454
|
-
tokenEndpointAuthMethod?: pulumi.Input<string>;
|
|
455
404
|
/**
|
|
456
405
|
* URLs that represent valid web origins for use with web message response mode.
|
|
457
406
|
*/
|
|
@@ -496,15 +445,7 @@ export interface ClientArgs {
|
|
|
496
445
|
[key: string]: any;
|
|
497
446
|
}>;
|
|
498
447
|
/**
|
|
499
|
-
*
|
|
500
|
-
*
|
|
501
|
-
* @deprecated Rotating a client's secret through this attribute is deprecated and it will be removed in a future version. Migrate to the `auth0_client_credentials` resource to manage a client's secret instead. Refer to the [client secret rotation guide](https://registry.terraform.io/providers/auth0/auth0/latest/docs/guides/client_secret_rotation) for instructions on how to rotate client secrets with zero downtime.
|
|
502
|
-
*/
|
|
503
|
-
clientSecretRotationTrigger?: pulumi.Input<{
|
|
504
|
-
[key: string]: any;
|
|
505
|
-
}>;
|
|
506
|
-
/**
|
|
507
|
-
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`). Requires the `coaToggleEnabled` feature flag to be enabled on the tenant by the support team.
|
|
448
|
+
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`).
|
|
508
449
|
*/
|
|
509
450
|
crossOriginAuth?: pulumi.Input<boolean>;
|
|
510
451
|
/**
|
|
@@ -546,7 +487,7 @@ export interface ClientArgs {
|
|
|
546
487
|
*/
|
|
547
488
|
isFirstParty?: pulumi.Input<boolean>;
|
|
548
489
|
/**
|
|
549
|
-
* Indicates whether the token endpoint IP header is trusted.
|
|
490
|
+
* Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to `clientSecretPost` or `clientSecretBasic`. Setting this property when creating the resource, will default the authentication method to `clientSecretPost`. To change the authentication method to `clientSecretBasic` use the `auth0.ClientCredentials` resource.
|
|
550
491
|
*/
|
|
551
492
|
isTokenEndpointIpHeaderTrusted?: pulumi.Input<boolean>;
|
|
552
493
|
/**
|
|
@@ -589,6 +530,10 @@ export interface ClientArgs {
|
|
|
589
530
|
* Configuration settings for the refresh tokens issued for this client.
|
|
590
531
|
*/
|
|
591
532
|
refreshToken?: pulumi.Input<inputs.ClientRefreshToken>;
|
|
533
|
+
/**
|
|
534
|
+
* Makes the use of Pushed Authorization Requests mandatory for this client.
|
|
535
|
+
*/
|
|
536
|
+
requirePushedAuthorizationRequests?: pulumi.Input<boolean>;
|
|
592
537
|
/**
|
|
593
538
|
* Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
|
|
594
539
|
*/
|
|
@@ -597,18 +542,6 @@ export interface ClientArgs {
|
|
|
597
542
|
* Indicates whether or not SSO is disabled.
|
|
598
543
|
*/
|
|
599
544
|
ssoDisabled?: pulumi.Input<boolean>;
|
|
600
|
-
/**
|
|
601
|
-
* Defines the requested authentication method for the token endpoint. Options include `none` (public client without a
|
|
602
|
-
* client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic).
|
|
603
|
-
* Managing the authentication method through this attribute is deprecated and it will be removed in a future major
|
|
604
|
-
* version. Migrate to the `auth0_client_credentials` resource to manage a client's authentication method instead. Check
|
|
605
|
-
* the [MIGRATION
|
|
606
|
-
* GUIDE](https://github.com/auth0/terraform-provider-auth0/blob/main/MIGRATION_GUIDE.md#client-authentication-method) on
|
|
607
|
-
* how to do that.
|
|
608
|
-
*
|
|
609
|
-
* @deprecated Managing the authentication method through this attribute is deprecated and it will be changed to read-only in a future version. Migrate to the `auth0_client_credentials` resource to manage a client's authentication method instead. Check the [MIGRATION GUIDE](https://github.com/auth0/terraform-provider-auth0/blob/main/MIGRATION_GUIDE.md#client-authentication-method) on how to do that.
|
|
610
|
-
*/
|
|
611
|
-
tokenEndpointAuthMethod?: pulumi.Input<string>;
|
|
612
545
|
/**
|
|
613
546
|
* URLs that represent valid web origins for use with web message response mode.
|
|
614
547
|
*/
|
package/client.js
CHANGED
|
@@ -76,17 +76,16 @@ const utilities = require("./utilities");
|
|
|
76
76
|
* rotationType: "rotating",
|
|
77
77
|
* tokenLifetime: 2592000,
|
|
78
78
|
* },
|
|
79
|
-
* tokenEndpointAuthMethod: "client_secret_post",
|
|
80
79
|
* webOrigins: ["https://example.com"],
|
|
81
80
|
* });
|
|
82
81
|
* ```
|
|
83
82
|
*
|
|
84
83
|
* ## Import
|
|
85
84
|
*
|
|
86
|
-
*
|
|
85
|
+
* This resource can be imported by specifying the client ID. # Example
|
|
87
86
|
*
|
|
88
87
|
* ```sh
|
|
89
|
-
* $ pulumi import auth0:index/client:Client my_client AaiyAPdpYdesoKnqjj8HJqRn4T5titww
|
|
88
|
+
* $ pulumi import auth0:index/client:Client my_client "AaiyAPdpYdesoKnqjj8HJqRn4T5titww"
|
|
90
89
|
* ```
|
|
91
90
|
*/
|
|
92
91
|
class Client extends pulumi.CustomResource {
|
|
@@ -127,8 +126,6 @@ class Client extends pulumi.CustomResource {
|
|
|
127
126
|
resourceInputs["clientAliases"] = state ? state.clientAliases : undefined;
|
|
128
127
|
resourceInputs["clientId"] = state ? state.clientId : undefined;
|
|
129
128
|
resourceInputs["clientMetadata"] = state ? state.clientMetadata : undefined;
|
|
130
|
-
resourceInputs["clientSecret"] = state ? state.clientSecret : undefined;
|
|
131
|
-
resourceInputs["clientSecretRotationTrigger"] = state ? state.clientSecretRotationTrigger : undefined;
|
|
132
129
|
resourceInputs["crossOriginAuth"] = state ? state.crossOriginAuth : undefined;
|
|
133
130
|
resourceInputs["crossOriginLoc"] = state ? state.crossOriginLoc : undefined;
|
|
134
131
|
resourceInputs["customLoginPage"] = state ? state.customLoginPage : undefined;
|
|
@@ -150,10 +147,10 @@ class Client extends pulumi.CustomResource {
|
|
|
150
147
|
resourceInputs["organizationRequireBehavior"] = state ? state.organizationRequireBehavior : undefined;
|
|
151
148
|
resourceInputs["organizationUsage"] = state ? state.organizationUsage : undefined;
|
|
152
149
|
resourceInputs["refreshToken"] = state ? state.refreshToken : undefined;
|
|
150
|
+
resourceInputs["requirePushedAuthorizationRequests"] = state ? state.requirePushedAuthorizationRequests : undefined;
|
|
153
151
|
resourceInputs["signingKeys"] = state ? state.signingKeys : undefined;
|
|
154
152
|
resourceInputs["sso"] = state ? state.sso : undefined;
|
|
155
153
|
resourceInputs["ssoDisabled"] = state ? state.ssoDisabled : undefined;
|
|
156
|
-
resourceInputs["tokenEndpointAuthMethod"] = state ? state.tokenEndpointAuthMethod : undefined;
|
|
157
154
|
resourceInputs["webOrigins"] = state ? state.webOrigins : undefined;
|
|
158
155
|
}
|
|
159
156
|
else {
|
|
@@ -166,7 +163,6 @@ class Client extends pulumi.CustomResource {
|
|
|
166
163
|
resourceInputs["callbacks"] = args ? args.callbacks : undefined;
|
|
167
164
|
resourceInputs["clientAliases"] = args ? args.clientAliases : undefined;
|
|
168
165
|
resourceInputs["clientMetadata"] = args ? args.clientMetadata : undefined;
|
|
169
|
-
resourceInputs["clientSecretRotationTrigger"] = args ? args.clientSecretRotationTrigger : undefined;
|
|
170
166
|
resourceInputs["crossOriginAuth"] = args ? args.crossOriginAuth : undefined;
|
|
171
167
|
resourceInputs["crossOriginLoc"] = args ? args.crossOriginLoc : undefined;
|
|
172
168
|
resourceInputs["customLoginPage"] = args ? args.customLoginPage : undefined;
|
|
@@ -188,16 +184,15 @@ class Client extends pulumi.CustomResource {
|
|
|
188
184
|
resourceInputs["organizationRequireBehavior"] = args ? args.organizationRequireBehavior : undefined;
|
|
189
185
|
resourceInputs["organizationUsage"] = args ? args.organizationUsage : undefined;
|
|
190
186
|
resourceInputs["refreshToken"] = args ? args.refreshToken : undefined;
|
|
187
|
+
resourceInputs["requirePushedAuthorizationRequests"] = args ? args.requirePushedAuthorizationRequests : undefined;
|
|
191
188
|
resourceInputs["sso"] = args ? args.sso : undefined;
|
|
192
189
|
resourceInputs["ssoDisabled"] = args ? args.ssoDisabled : undefined;
|
|
193
|
-
resourceInputs["tokenEndpointAuthMethod"] = args ? args.tokenEndpointAuthMethod : undefined;
|
|
194
190
|
resourceInputs["webOrigins"] = args ? args.webOrigins : undefined;
|
|
195
191
|
resourceInputs["clientId"] = undefined /*out*/;
|
|
196
|
-
resourceInputs["clientSecret"] = undefined /*out*/;
|
|
197
192
|
resourceInputs["signingKeys"] = undefined /*out*/;
|
|
198
193
|
}
|
|
199
194
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
200
|
-
const secretOpts = { additionalSecretOutputs: ["
|
|
195
|
+
const secretOpts = { additionalSecretOutputs: ["signingKeys"] };
|
|
201
196
|
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
202
197
|
super(Client.__pulumiType, name, resourceInputs, opts);
|
|
203
198
|
}
|
package/client.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.js","sourceRoot":"","sources":["../client.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"client.js","sourceRoot":"","sources":["../client.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAuJD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gCAAgC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,oCAAoC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpH,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,MAAA,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,mCAAI,mBAAmB,CAAC;YAC7F,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1G,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,oCAAoC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAnQL,wBAoQC;AAtPG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}
|
package/clientCredentials.d.ts
CHANGED
|
@@ -61,10 +61,10 @@ import * as outputs from "./types/output";
|
|
|
61
61
|
*
|
|
62
62
|
* ## Import
|
|
63
63
|
*
|
|
64
|
-
*
|
|
64
|
+
* This resource can be imported by specifying the client ID. # Example
|
|
65
65
|
*
|
|
66
66
|
* ```sh
|
|
67
|
-
* $ pulumi import auth0:index/clientCredentials:ClientCredentials my_creds AaiyAPdpYdesoKnqjj8HJqRn4T5titww
|
|
67
|
+
* $ pulumi import auth0:index/clientCredentials:ClientCredentials my_creds "AaiyAPdpYdesoKnqjj8HJqRn4T5titww"
|
|
68
68
|
* ```
|
|
69
69
|
*
|
|
70
70
|
* ~> Importing this resource when the `authentication_method` is set to `private_key_jwt` will force the resource to be recreated. This is to be expected, because the pem file can't be checked for differences.
|
package/clientCredentials.js
CHANGED
|
@@ -65,10 +65,10 @@ const utilities = require("./utilities");
|
|
|
65
65
|
*
|
|
66
66
|
* ## Import
|
|
67
67
|
*
|
|
68
|
-
*
|
|
68
|
+
* This resource can be imported by specifying the client ID. # Example
|
|
69
69
|
*
|
|
70
70
|
* ```sh
|
|
71
|
-
* $ pulumi import auth0:index/clientCredentials:ClientCredentials my_creds AaiyAPdpYdesoKnqjj8HJqRn4T5titww
|
|
71
|
+
* $ pulumi import auth0:index/clientCredentials:ClientCredentials my_creds "AaiyAPdpYdesoKnqjj8HJqRn4T5titww"
|
|
72
72
|
* ```
|
|
73
73
|
*
|
|
74
74
|
* ~> Importing this resource when the `authentication_method` is set to `private_key_jwt` will force the resource to be recreated. This is to be expected, because the pem file can't be checked for differences.
|
package/clientGrant.d.ts
CHANGED
|
@@ -2,40 +2,12 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
/**
|
|
3
3
|
* Auth0 uses various grant types, or methods by which you grant limited access to your resources to another entity without exposing credentials. The OAuth 2.0 protocol supports several types of grants, which allow different types of access. This resource allows you to create and manage client grants used with configured Auth0 clients.
|
|
4
4
|
*
|
|
5
|
-
* ## Example Usage
|
|
6
|
-
*
|
|
7
|
-
* ```typescript
|
|
8
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
9
|
-
* import * as auth0 from "@pulumi/auth0";
|
|
10
|
-
*
|
|
11
|
-
* // The following example grants a client the "create:foo" permission (scope).
|
|
12
|
-
* const myClient = new auth0.Client("myClient", {});
|
|
13
|
-
* const myResourceServer = new auth0.ResourceServer("myResourceServer", {
|
|
14
|
-
* identifier: "https://api.example.com/client-grant",
|
|
15
|
-
* scopes: [
|
|
16
|
-
* {
|
|
17
|
-
* value: "create:foo",
|
|
18
|
-
* description: "Create foos",
|
|
19
|
-
* },
|
|
20
|
-
* {
|
|
21
|
-
* value: "create:bar",
|
|
22
|
-
* description: "Create bars",
|
|
23
|
-
* },
|
|
24
|
-
* ],
|
|
25
|
-
* });
|
|
26
|
-
* const myClientGrant = new auth0.ClientGrant("myClientGrant", {
|
|
27
|
-
* clientId: myClient.id,
|
|
28
|
-
* audience: myResourceServer.identifier,
|
|
29
|
-
* scopes: ["create:foo"],
|
|
30
|
-
* });
|
|
31
|
-
* ```
|
|
32
|
-
*
|
|
33
5
|
* ## Import
|
|
34
6
|
*
|
|
35
|
-
*
|
|
7
|
+
* This resource can be imported by specifying the client grant ID. You can find this within the Management Dashboard in Application -> APIs -> Expand the required API. # Example
|
|
36
8
|
*
|
|
37
9
|
* ```sh
|
|
38
|
-
* $ pulumi import auth0:index/clientGrant:ClientGrant my_client_grant cgr_XXXXXXXXXXXXXXXX
|
|
10
|
+
* $ pulumi import auth0:index/clientGrant:ClientGrant my_client_grant "cgr_XXXXXXXXXXXXXXXX"
|
|
39
11
|
* ```
|
|
40
12
|
*/
|
|
41
13
|
export declare class ClientGrant extends pulumi.CustomResource {
|
package/clientGrant.js
CHANGED
|
@@ -8,40 +8,12 @@ const utilities = require("./utilities");
|
|
|
8
8
|
/**
|
|
9
9
|
* Auth0 uses various grant types, or methods by which you grant limited access to your resources to another entity without exposing credentials. The OAuth 2.0 protocol supports several types of grants, which allow different types of access. This resource allows you to create and manage client grants used with configured Auth0 clients.
|
|
10
10
|
*
|
|
11
|
-
* ## Example Usage
|
|
12
|
-
*
|
|
13
|
-
* ```typescript
|
|
14
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
15
|
-
* import * as auth0 from "@pulumi/auth0";
|
|
16
|
-
*
|
|
17
|
-
* // The following example grants a client the "create:foo" permission (scope).
|
|
18
|
-
* const myClient = new auth0.Client("myClient", {});
|
|
19
|
-
* const myResourceServer = new auth0.ResourceServer("myResourceServer", {
|
|
20
|
-
* identifier: "https://api.example.com/client-grant",
|
|
21
|
-
* scopes: [
|
|
22
|
-
* {
|
|
23
|
-
* value: "create:foo",
|
|
24
|
-
* description: "Create foos",
|
|
25
|
-
* },
|
|
26
|
-
* {
|
|
27
|
-
* value: "create:bar",
|
|
28
|
-
* description: "Create bars",
|
|
29
|
-
* },
|
|
30
|
-
* ],
|
|
31
|
-
* });
|
|
32
|
-
* const myClientGrant = new auth0.ClientGrant("myClientGrant", {
|
|
33
|
-
* clientId: myClient.id,
|
|
34
|
-
* audience: myResourceServer.identifier,
|
|
35
|
-
* scopes: ["create:foo"],
|
|
36
|
-
* });
|
|
37
|
-
* ```
|
|
38
|
-
*
|
|
39
11
|
* ## Import
|
|
40
12
|
*
|
|
41
|
-
*
|
|
13
|
+
* This resource can be imported by specifying the client grant ID. You can find this within the Management Dashboard in Application -> APIs -> Expand the required API. # Example
|
|
42
14
|
*
|
|
43
15
|
* ```sh
|
|
44
|
-
* $ pulumi import auth0:index/clientGrant:ClientGrant my_client_grant cgr_XXXXXXXXXXXXXXXX
|
|
16
|
+
* $ pulumi import auth0:index/clientGrant:ClientGrant my_client_grant "cgr_XXXXXXXXXXXXXXXX"
|
|
45
17
|
* ```
|
|
46
18
|
*/
|
|
47
19
|
class ClientGrant extends pulumi.CustomResource {
|
package/clientGrant.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"clientGrant.js","sourceRoot":"","sources":["../clientGrant.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"clientGrant.js","sourceRoot":"","sources":["../clientGrant.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;GAUG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IAuBD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AA1EL,kCA2EC;AA7DG,gBAAgB;AACO,wBAAY,GAAG,qCAAqC,CAAC"}
|