@pulumi/auth0 3.8.0-alpha.1728637555 → 3.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/client.d.ts +26 -0
- package/client.js +6 -0
- package/client.js.map +1 -1
- package/clientCredentials.d.ts +40 -4
- package/clientCredentials.js +6 -3
- package/clientCredentials.js.map +1 -1
- package/clientGrant.d.ts +24 -0
- package/clientGrant.js +4 -0
- package/clientGrant.js.map +1 -1
- package/connection.d.ts +7 -1
- package/connection.js +6 -0
- package/connection.js.map +1 -1
- package/encryptionKeyManager.d.ts +73 -0
- package/encryptionKeyManager.js +56 -0
- package/encryptionKeyManager.js.map +1 -0
- package/flow.d.ts +104 -0
- package/flow.js +95 -0
- package/flow.js.map +1 -0
- package/flowVaultConnection.d.ts +160 -0
- package/flowVaultConnection.js +100 -0
- package/flowVaultConnection.js.map +1 -0
- package/form.d.ts +240 -0
- package/form.js +169 -0
- package/form.js.map +1 -0
- package/getClient.d.ts +17 -1
- package/getClient.js.map +1 -1
- package/getFlow.d.ts +68 -0
- package/getFlow.js +52 -0
- package/getFlow.js.map +1 -0
- package/getFlowVaultConnection.d.ts +90 -0
- package/getFlowVaultConnection.js +52 -0
- package/getFlowVaultConnection.js.map +1 -0
- package/getForm.d.ts +93 -0
- package/getForm.js +52 -0
- package/getForm.js.map +1 -0
- package/getOrganization.d.ts +4 -0
- package/getOrganization.js.map +1 -1
- package/getResourceServer.d.ts +17 -1
- package/getResourceServer.js.map +1 -1
- package/getTenant.d.ts +16 -0
- package/getTenant.js.map +1 -1
- package/index.d.ts +24 -0
- package/index.js +36 -2
- package/index.js.map +1 -1
- package/organizationClientGrant.d.ts +63 -0
- package/organizationClientGrant.js +60 -0
- package/organizationClientGrant.js.map +1 -0
- package/package.json +2 -2
- package/resourceServer.d.ts +77 -3
- package/resourceServer.js +32 -0
- package/resourceServer.js.map +1 -1
- package/tenant.d.ts +48 -0
- package/tenant.js +8 -0
- package/tenant.js.map +1 -1
- package/types/input.d.ts +284 -2
- package/types/output.d.ts +534 -4
package/client.d.ts
CHANGED
|
@@ -14,6 +14,7 @@ import * as outputs from "./types/output";
|
|
|
14
14
|
* name: "Application - Acceptance Test",
|
|
15
15
|
* description: "Test Applications Long Description",
|
|
16
16
|
* appType: "non_interactive",
|
|
17
|
+
* complianceLevel: "none",
|
|
17
18
|
* customLoginPageOn: true,
|
|
18
19
|
* isFirstParty: true,
|
|
19
20
|
* isTokenEndpointIpHeaderTrusted: true,
|
|
@@ -22,6 +23,7 @@ import * as outputs from "./types/output";
|
|
|
22
23
|
* allowedOrigins: ["https://example.com"],
|
|
23
24
|
* allowedLogoutUrls: ["https://example.com"],
|
|
24
25
|
* webOrigins: ["https://example.com"],
|
|
26
|
+
* requireProofOfPossession: false,
|
|
25
27
|
* grantTypes: [
|
|
26
28
|
* "authorization_code",
|
|
27
29
|
* "http://auth0.com/oauth/grant-type/password-realm",
|
|
@@ -142,6 +144,10 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
142
144
|
readonly clientMetadata: pulumi.Output<{
|
|
143
145
|
[key: string]: string;
|
|
144
146
|
} | undefined>;
|
|
147
|
+
/**
|
|
148
|
+
* Defines the compliance level for this client, which may restrict it's capabilities. Can be one of `none`, `fapi1AdvPkjPar`, `fapi1AdvMtlsPar`.
|
|
149
|
+
*/
|
|
150
|
+
readonly complianceLevel: pulumi.Output<string | undefined>;
|
|
145
151
|
/**
|
|
146
152
|
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`).
|
|
147
153
|
*/
|
|
@@ -232,6 +238,10 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
232
238
|
* Configuration settings for the refresh tokens issued for this client.
|
|
233
239
|
*/
|
|
234
240
|
readonly refreshToken: pulumi.Output<outputs.ClientRefreshToken>;
|
|
241
|
+
/**
|
|
242
|
+
* Makes the use of Proof-of-Possession mandatory for this client.
|
|
243
|
+
*/
|
|
244
|
+
readonly requireProofOfPossession: pulumi.Output<boolean | undefined>;
|
|
235
245
|
/**
|
|
236
246
|
* Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
|
|
237
247
|
*/
|
|
@@ -305,6 +315,10 @@ export interface ClientState {
|
|
|
305
315
|
clientMetadata?: pulumi.Input<{
|
|
306
316
|
[key: string]: pulumi.Input<string>;
|
|
307
317
|
}>;
|
|
318
|
+
/**
|
|
319
|
+
* Defines the compliance level for this client, which may restrict it's capabilities. Can be one of `none`, `fapi1AdvPkjPar`, `fapi1AdvMtlsPar`.
|
|
320
|
+
*/
|
|
321
|
+
complianceLevel?: pulumi.Input<string>;
|
|
308
322
|
/**
|
|
309
323
|
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`).
|
|
310
324
|
*/
|
|
@@ -395,6 +409,10 @@ export interface ClientState {
|
|
|
395
409
|
* Configuration settings for the refresh tokens issued for this client.
|
|
396
410
|
*/
|
|
397
411
|
refreshToken?: pulumi.Input<inputs.ClientRefreshToken>;
|
|
412
|
+
/**
|
|
413
|
+
* Makes the use of Proof-of-Possession mandatory for this client.
|
|
414
|
+
*/
|
|
415
|
+
requireProofOfPossession?: pulumi.Input<boolean>;
|
|
398
416
|
/**
|
|
399
417
|
* Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
|
|
400
418
|
*/
|
|
@@ -456,6 +474,10 @@ export interface ClientArgs {
|
|
|
456
474
|
clientMetadata?: pulumi.Input<{
|
|
457
475
|
[key: string]: pulumi.Input<string>;
|
|
458
476
|
}>;
|
|
477
|
+
/**
|
|
478
|
+
* Defines the compliance level for this client, which may restrict it's capabilities. Can be one of `none`, `fapi1AdvPkjPar`, `fapi1AdvMtlsPar`.
|
|
479
|
+
*/
|
|
480
|
+
complianceLevel?: pulumi.Input<string>;
|
|
459
481
|
/**
|
|
460
482
|
* Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`).
|
|
461
483
|
*/
|
|
@@ -546,6 +568,10 @@ export interface ClientArgs {
|
|
|
546
568
|
* Configuration settings for the refresh tokens issued for this client.
|
|
547
569
|
*/
|
|
548
570
|
refreshToken?: pulumi.Input<inputs.ClientRefreshToken>;
|
|
571
|
+
/**
|
|
572
|
+
* Makes the use of Proof-of-Possession mandatory for this client.
|
|
573
|
+
*/
|
|
574
|
+
requireProofOfPossession?: pulumi.Input<boolean>;
|
|
549
575
|
/**
|
|
550
576
|
* Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
|
|
551
577
|
*/
|
package/client.js
CHANGED
|
@@ -18,6 +18,7 @@ const utilities = require("./utilities");
|
|
|
18
18
|
* name: "Application - Acceptance Test",
|
|
19
19
|
* description: "Test Applications Long Description",
|
|
20
20
|
* appType: "non_interactive",
|
|
21
|
+
* complianceLevel: "none",
|
|
21
22
|
* customLoginPageOn: true,
|
|
22
23
|
* isFirstParty: true,
|
|
23
24
|
* isTokenEndpointIpHeaderTrusted: true,
|
|
@@ -26,6 +27,7 @@ const utilities = require("./utilities");
|
|
|
26
27
|
* allowedOrigins: ["https://example.com"],
|
|
27
28
|
* allowedLogoutUrls: ["https://example.com"],
|
|
28
29
|
* webOrigins: ["https://example.com"],
|
|
30
|
+
* requireProofOfPossession: false,
|
|
29
31
|
* grantTypes: [
|
|
30
32
|
* "authorization_code",
|
|
31
33
|
* "http://auth0.com/oauth/grant-type/password-realm",
|
|
@@ -130,6 +132,7 @@ class Client extends pulumi.CustomResource {
|
|
|
130
132
|
resourceInputs["clientAliases"] = state ? state.clientAliases : undefined;
|
|
131
133
|
resourceInputs["clientId"] = state ? state.clientId : undefined;
|
|
132
134
|
resourceInputs["clientMetadata"] = state ? state.clientMetadata : undefined;
|
|
135
|
+
resourceInputs["complianceLevel"] = state ? state.complianceLevel : undefined;
|
|
133
136
|
resourceInputs["crossOriginAuth"] = state ? state.crossOriginAuth : undefined;
|
|
134
137
|
resourceInputs["crossOriginLoc"] = state ? state.crossOriginLoc : undefined;
|
|
135
138
|
resourceInputs["customLoginPage"] = state ? state.customLoginPage : undefined;
|
|
@@ -152,6 +155,7 @@ class Client extends pulumi.CustomResource {
|
|
|
152
155
|
resourceInputs["organizationRequireBehavior"] = state ? state.organizationRequireBehavior : undefined;
|
|
153
156
|
resourceInputs["organizationUsage"] = state ? state.organizationUsage : undefined;
|
|
154
157
|
resourceInputs["refreshToken"] = state ? state.refreshToken : undefined;
|
|
158
|
+
resourceInputs["requireProofOfPossession"] = state ? state.requireProofOfPossession : undefined;
|
|
155
159
|
resourceInputs["requirePushedAuthorizationRequests"] = state ? state.requirePushedAuthorizationRequests : undefined;
|
|
156
160
|
resourceInputs["signingKeys"] = state ? state.signingKeys : undefined;
|
|
157
161
|
resourceInputs["sso"] = state ? state.sso : undefined;
|
|
@@ -168,6 +172,7 @@ class Client extends pulumi.CustomResource {
|
|
|
168
172
|
resourceInputs["callbacks"] = args ? args.callbacks : undefined;
|
|
169
173
|
resourceInputs["clientAliases"] = args ? args.clientAliases : undefined;
|
|
170
174
|
resourceInputs["clientMetadata"] = args ? args.clientMetadata : undefined;
|
|
175
|
+
resourceInputs["complianceLevel"] = args ? args.complianceLevel : undefined;
|
|
171
176
|
resourceInputs["crossOriginAuth"] = args ? args.crossOriginAuth : undefined;
|
|
172
177
|
resourceInputs["crossOriginLoc"] = args ? args.crossOriginLoc : undefined;
|
|
173
178
|
resourceInputs["customLoginPage"] = args ? args.customLoginPage : undefined;
|
|
@@ -190,6 +195,7 @@ class Client extends pulumi.CustomResource {
|
|
|
190
195
|
resourceInputs["organizationRequireBehavior"] = args ? args.organizationRequireBehavior : undefined;
|
|
191
196
|
resourceInputs["organizationUsage"] = args ? args.organizationUsage : undefined;
|
|
192
197
|
resourceInputs["refreshToken"] = args ? args.refreshToken : undefined;
|
|
198
|
+
resourceInputs["requireProofOfPossession"] = args ? args.requireProofOfPossession : undefined;
|
|
193
199
|
resourceInputs["requirePushedAuthorizationRequests"] = args ? args.requirePushedAuthorizationRequests : undefined;
|
|
194
200
|
resourceInputs["sso"] = args ? args.sso : undefined;
|
|
195
201
|
resourceInputs["ssoDisabled"] = args ? args.ssoDisabled : undefined;
|
package/client.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.js","sourceRoot":"","sources":["../client.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"client.js","sourceRoot":"","sources":["../client.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAmKD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gCAAgC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,oCAAoC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpH,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,aAAa,CAAC,GAAG,MAAA,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,mCAAI,mBAAmB,CAAC;YAC7F,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1G,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,oCAAoC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AArRL,wBAsRC;AAxQG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}
|
package/clientCredentials.d.ts
CHANGED
|
@@ -40,7 +40,7 @@ export declare class ClientCredentials extends pulumi.CustomResource {
|
|
|
40
40
|
*/
|
|
41
41
|
static isInstance(obj: any): obj is ClientCredentials;
|
|
42
42
|
/**
|
|
43
|
-
* Configure the method to use when making requests to any endpoint that requires this client to authenticate. Options include `none` (public client without a client secret), `clientSecretPost` (confidential client using HTTP POST parameters), `clientSecretBasic` (confidential client using HTTP Basic), `privateKeyJwt` (confidential client using a Private Key JWT).
|
|
43
|
+
* Configure the method to use when making requests to any endpoint that requires this client to authenticate. Options include `none` (public client without a client secret), `clientSecretPost` (confidential client using HTTP POST parameters), `clientSecretBasic` (confidential client using HTTP Basic), `privateKeyJwt` (confidential client using a Private Key JWT), `tlsClientAuth` (confidential client using CA-based mTLS authentication), `selfSignedTlsClientAuth` (confidential client using mTLS authentication utilizing a self-signed certificate).
|
|
44
44
|
*/
|
|
45
45
|
readonly authenticationMethod: pulumi.Output<string>;
|
|
46
46
|
/**
|
|
@@ -52,6 +52,18 @@ export declare class ClientCredentials extends pulumi.CustomResource {
|
|
|
52
52
|
* Defines `privateKeyJwt` client authentication method.
|
|
53
53
|
*/
|
|
54
54
|
readonly privateKeyJwt: pulumi.Output<outputs.ClientCredentialsPrivateKeyJwt | undefined>;
|
|
55
|
+
/**
|
|
56
|
+
* Defines `tlsClientAuth` client authentication method.
|
|
57
|
+
*/
|
|
58
|
+
readonly selfSignedTlsClientAuth: pulumi.Output<outputs.ClientCredentialsSelfSignedTlsClientAuth | undefined>;
|
|
59
|
+
/**
|
|
60
|
+
* Configuration for JWT-secured Authorization Requests(JAR).
|
|
61
|
+
*/
|
|
62
|
+
readonly signedRequestObject: pulumi.Output<outputs.ClientCredentialsSignedRequestObject | undefined>;
|
|
63
|
+
/**
|
|
64
|
+
* Defines `tlsClientAuth` client authentication method.
|
|
65
|
+
*/
|
|
66
|
+
readonly tlsClientAuth: pulumi.Output<outputs.ClientCredentialsTlsClientAuth | undefined>;
|
|
55
67
|
/**
|
|
56
68
|
* Create a ClientCredentials resource with the given unique name, arguments, and options.
|
|
57
69
|
*
|
|
@@ -66,7 +78,7 @@ export declare class ClientCredentials extends pulumi.CustomResource {
|
|
|
66
78
|
*/
|
|
67
79
|
export interface ClientCredentialsState {
|
|
68
80
|
/**
|
|
69
|
-
* Configure the method to use when making requests to any endpoint that requires this client to authenticate. Options include `none` (public client without a client secret), `clientSecretPost` (confidential client using HTTP POST parameters), `clientSecretBasic` (confidential client using HTTP Basic), `privateKeyJwt` (confidential client using a Private Key JWT).
|
|
81
|
+
* Configure the method to use when making requests to any endpoint that requires this client to authenticate. Options include `none` (public client without a client secret), `clientSecretPost` (confidential client using HTTP POST parameters), `clientSecretBasic` (confidential client using HTTP Basic), `privateKeyJwt` (confidential client using a Private Key JWT), `tlsClientAuth` (confidential client using CA-based mTLS authentication), `selfSignedTlsClientAuth` (confidential client using mTLS authentication utilizing a self-signed certificate).
|
|
70
82
|
*/
|
|
71
83
|
authenticationMethod?: pulumi.Input<string>;
|
|
72
84
|
/**
|
|
@@ -78,15 +90,27 @@ export interface ClientCredentialsState {
|
|
|
78
90
|
* Defines `privateKeyJwt` client authentication method.
|
|
79
91
|
*/
|
|
80
92
|
privateKeyJwt?: pulumi.Input<inputs.ClientCredentialsPrivateKeyJwt>;
|
|
93
|
+
/**
|
|
94
|
+
* Defines `tlsClientAuth` client authentication method.
|
|
95
|
+
*/
|
|
96
|
+
selfSignedTlsClientAuth?: pulumi.Input<inputs.ClientCredentialsSelfSignedTlsClientAuth>;
|
|
97
|
+
/**
|
|
98
|
+
* Configuration for JWT-secured Authorization Requests(JAR).
|
|
99
|
+
*/
|
|
100
|
+
signedRequestObject?: pulumi.Input<inputs.ClientCredentialsSignedRequestObject>;
|
|
101
|
+
/**
|
|
102
|
+
* Defines `tlsClientAuth` client authentication method.
|
|
103
|
+
*/
|
|
104
|
+
tlsClientAuth?: pulumi.Input<inputs.ClientCredentialsTlsClientAuth>;
|
|
81
105
|
}
|
|
82
106
|
/**
|
|
83
107
|
* The set of arguments for constructing a ClientCredentials resource.
|
|
84
108
|
*/
|
|
85
109
|
export interface ClientCredentialsArgs {
|
|
86
110
|
/**
|
|
87
|
-
* Configure the method to use when making requests to any endpoint that requires this client to authenticate. Options include `none` (public client without a client secret), `clientSecretPost` (confidential client using HTTP POST parameters), `clientSecretBasic` (confidential client using HTTP Basic), `privateKeyJwt` (confidential client using a Private Key JWT).
|
|
111
|
+
* Configure the method to use when making requests to any endpoint that requires this client to authenticate. Options include `none` (public client without a client secret), `clientSecretPost` (confidential client using HTTP POST parameters), `clientSecretBasic` (confidential client using HTTP Basic), `privateKeyJwt` (confidential client using a Private Key JWT), `tlsClientAuth` (confidential client using CA-based mTLS authentication), `selfSignedTlsClientAuth` (confidential client using mTLS authentication utilizing a self-signed certificate).
|
|
88
112
|
*/
|
|
89
|
-
authenticationMethod
|
|
113
|
+
authenticationMethod?: pulumi.Input<string>;
|
|
90
114
|
/**
|
|
91
115
|
* The ID of the client for which to configure the authentication method.
|
|
92
116
|
*/
|
|
@@ -96,4 +120,16 @@ export interface ClientCredentialsArgs {
|
|
|
96
120
|
* Defines `privateKeyJwt` client authentication method.
|
|
97
121
|
*/
|
|
98
122
|
privateKeyJwt?: pulumi.Input<inputs.ClientCredentialsPrivateKeyJwt>;
|
|
123
|
+
/**
|
|
124
|
+
* Defines `tlsClientAuth` client authentication method.
|
|
125
|
+
*/
|
|
126
|
+
selfSignedTlsClientAuth?: pulumi.Input<inputs.ClientCredentialsSelfSignedTlsClientAuth>;
|
|
127
|
+
/**
|
|
128
|
+
* Configuration for JWT-secured Authorization Requests(JAR).
|
|
129
|
+
*/
|
|
130
|
+
signedRequestObject?: pulumi.Input<inputs.ClientCredentialsSignedRequestObject>;
|
|
131
|
+
/**
|
|
132
|
+
* Defines `tlsClientAuth` client authentication method.
|
|
133
|
+
*/
|
|
134
|
+
tlsClientAuth?: pulumi.Input<inputs.ClientCredentialsTlsClientAuth>;
|
|
99
135
|
}
|
package/clientCredentials.js
CHANGED
|
@@ -59,12 +59,12 @@ class ClientCredentials extends pulumi.CustomResource {
|
|
|
59
59
|
resourceInputs["clientId"] = state ? state.clientId : undefined;
|
|
60
60
|
resourceInputs["clientSecret"] = state ? state.clientSecret : undefined;
|
|
61
61
|
resourceInputs["privateKeyJwt"] = state ? state.privateKeyJwt : undefined;
|
|
62
|
+
resourceInputs["selfSignedTlsClientAuth"] = state ? state.selfSignedTlsClientAuth : undefined;
|
|
63
|
+
resourceInputs["signedRequestObject"] = state ? state.signedRequestObject : undefined;
|
|
64
|
+
resourceInputs["tlsClientAuth"] = state ? state.tlsClientAuth : undefined;
|
|
62
65
|
}
|
|
63
66
|
else {
|
|
64
67
|
const args = argsOrState;
|
|
65
|
-
if ((!args || args.authenticationMethod === undefined) && !opts.urn) {
|
|
66
|
-
throw new Error("Missing required property 'authenticationMethod'");
|
|
67
|
-
}
|
|
68
68
|
if ((!args || args.clientId === undefined) && !opts.urn) {
|
|
69
69
|
throw new Error("Missing required property 'clientId'");
|
|
70
70
|
}
|
|
@@ -72,6 +72,9 @@ class ClientCredentials extends pulumi.CustomResource {
|
|
|
72
72
|
resourceInputs["clientId"] = args ? args.clientId : undefined;
|
|
73
73
|
resourceInputs["clientSecret"] = (args === null || args === void 0 ? void 0 : args.clientSecret) ? pulumi.secret(args.clientSecret) : undefined;
|
|
74
74
|
resourceInputs["privateKeyJwt"] = args ? args.privateKeyJwt : undefined;
|
|
75
|
+
resourceInputs["selfSignedTlsClientAuth"] = args ? args.selfSignedTlsClientAuth : undefined;
|
|
76
|
+
resourceInputs["signedRequestObject"] = args ? args.signedRequestObject : undefined;
|
|
77
|
+
resourceInputs["tlsClientAuth"] = args ? args.tlsClientAuth : undefined;
|
|
75
78
|
}
|
|
76
79
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
77
80
|
const secretOpts = { additionalSecretOutputs: ["clientSecret"] };
|
package/clientCredentials.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"clientCredentials.js","sourceRoot":"","sources":["../clientCredentials.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;
|
|
1
|
+
{"version":3,"file":"clientCredentials.js","sourceRoot":"","sources":["../clientCredentials.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;IAoCD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7E;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;;AA3FL,8CA4FC;AA9EG,gBAAgB;AACO,8BAAY,GAAG,iDAAiD,CAAC"}
|
package/clientGrant.d.ts
CHANGED
|
@@ -32,6 +32,10 @@ export declare class ClientGrant extends pulumi.CustomResource {
|
|
|
32
32
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
33
33
|
*/
|
|
34
34
|
static isInstance(obj: any): obj is ClientGrant;
|
|
35
|
+
/**
|
|
36
|
+
* If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations.
|
|
37
|
+
*/
|
|
38
|
+
readonly allowAnyOrganization: pulumi.Output<boolean | undefined>;
|
|
35
39
|
/**
|
|
36
40
|
* Audience or API Identifier for this grant.
|
|
37
41
|
*/
|
|
@@ -40,6 +44,10 @@ export declare class ClientGrant extends pulumi.CustomResource {
|
|
|
40
44
|
* ID of the client for this grant.
|
|
41
45
|
*/
|
|
42
46
|
readonly clientId: pulumi.Output<string>;
|
|
47
|
+
/**
|
|
48
|
+
* Defines whether organizations can be used with client credentials exchanges for this grant. (defaults to deny when not defined)
|
|
49
|
+
*/
|
|
50
|
+
readonly organizationUsage: pulumi.Output<string | undefined>;
|
|
43
51
|
/**
|
|
44
52
|
* Permissions (scopes) included in this grant.
|
|
45
53
|
*/
|
|
@@ -57,6 +65,10 @@ export declare class ClientGrant extends pulumi.CustomResource {
|
|
|
57
65
|
* Input properties used for looking up and filtering ClientGrant resources.
|
|
58
66
|
*/
|
|
59
67
|
export interface ClientGrantState {
|
|
68
|
+
/**
|
|
69
|
+
* If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations.
|
|
70
|
+
*/
|
|
71
|
+
allowAnyOrganization?: pulumi.Input<boolean>;
|
|
60
72
|
/**
|
|
61
73
|
* Audience or API Identifier for this grant.
|
|
62
74
|
*/
|
|
@@ -65,6 +77,10 @@ export interface ClientGrantState {
|
|
|
65
77
|
* ID of the client for this grant.
|
|
66
78
|
*/
|
|
67
79
|
clientId?: pulumi.Input<string>;
|
|
80
|
+
/**
|
|
81
|
+
* Defines whether organizations can be used with client credentials exchanges for this grant. (defaults to deny when not defined)
|
|
82
|
+
*/
|
|
83
|
+
organizationUsage?: pulumi.Input<string>;
|
|
68
84
|
/**
|
|
69
85
|
* Permissions (scopes) included in this grant.
|
|
70
86
|
*/
|
|
@@ -74,6 +90,10 @@ export interface ClientGrantState {
|
|
|
74
90
|
* The set of arguments for constructing a ClientGrant resource.
|
|
75
91
|
*/
|
|
76
92
|
export interface ClientGrantArgs {
|
|
93
|
+
/**
|
|
94
|
+
* If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations.
|
|
95
|
+
*/
|
|
96
|
+
allowAnyOrganization?: pulumi.Input<boolean>;
|
|
77
97
|
/**
|
|
78
98
|
* Audience or API Identifier for this grant.
|
|
79
99
|
*/
|
|
@@ -82,6 +102,10 @@ export interface ClientGrantArgs {
|
|
|
82
102
|
* ID of the client for this grant.
|
|
83
103
|
*/
|
|
84
104
|
clientId: pulumi.Input<string>;
|
|
105
|
+
/**
|
|
106
|
+
* Defines whether organizations can be used with client credentials exchanges for this grant. (defaults to deny when not defined)
|
|
107
|
+
*/
|
|
108
|
+
organizationUsage?: pulumi.Input<string>;
|
|
85
109
|
/**
|
|
86
110
|
* Permissions (scopes) included in this grant.
|
|
87
111
|
*/
|
package/clientGrant.js
CHANGED
|
@@ -50,8 +50,10 @@ class ClientGrant extends pulumi.CustomResource {
|
|
|
50
50
|
opts = opts || {};
|
|
51
51
|
if (opts.id) {
|
|
52
52
|
const state = argsOrState;
|
|
53
|
+
resourceInputs["allowAnyOrganization"] = state ? state.allowAnyOrganization : undefined;
|
|
53
54
|
resourceInputs["audience"] = state ? state.audience : undefined;
|
|
54
55
|
resourceInputs["clientId"] = state ? state.clientId : undefined;
|
|
56
|
+
resourceInputs["organizationUsage"] = state ? state.organizationUsage : undefined;
|
|
55
57
|
resourceInputs["scopes"] = state ? state.scopes : undefined;
|
|
56
58
|
}
|
|
57
59
|
else {
|
|
@@ -65,8 +67,10 @@ class ClientGrant extends pulumi.CustomResource {
|
|
|
65
67
|
if ((!args || args.scopes === undefined) && !opts.urn) {
|
|
66
68
|
throw new Error("Missing required property 'scopes'");
|
|
67
69
|
}
|
|
70
|
+
resourceInputs["allowAnyOrganization"] = args ? args.allowAnyOrganization : undefined;
|
|
68
71
|
resourceInputs["audience"] = args ? args.audience : undefined;
|
|
69
72
|
resourceInputs["clientId"] = args ? args.clientId : undefined;
|
|
73
|
+
resourceInputs["organizationUsage"] = args ? args.organizationUsage : undefined;
|
|
70
74
|
resourceInputs["scopes"] = args ? args.scopes : undefined;
|
|
71
75
|
}
|
|
72
76
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
package/clientGrant.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"clientGrant.js","sourceRoot":"","sources":["../clientGrant.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;
|
|
1
|
+
{"version":3,"file":"clientGrant.js","sourceRoot":"","sources":["../clientGrant.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAtFL,kCAuFC;AAzEG,gBAAgB;AACO,wBAAY,GAAG,qCAAqC,CAAC"}
|
package/connection.d.ts
CHANGED
|
@@ -27,6 +27,7 @@ import * as outputs from "./types/output";
|
|
|
27
27
|
* options: {
|
|
28
28
|
* passwordPolicy: "excellent",
|
|
29
29
|
* bruteForceProtection: true,
|
|
30
|
+
* strategyVersion: 2,
|
|
30
31
|
* enabledDatabaseCustomization: true,
|
|
31
32
|
* importMode: false,
|
|
32
33
|
* requiresUsername: true,
|
|
@@ -308,6 +309,7 @@ import * as outputs from "./types/output";
|
|
|
308
309
|
* options: {
|
|
309
310
|
* clientId: "<client-id>",
|
|
310
311
|
* clientSecret: "<client-secret>",
|
|
312
|
+
* strategyVersion: 2,
|
|
311
313
|
* scopes: [
|
|
312
314
|
* "basic_profile",
|
|
313
315
|
* "profile",
|
|
@@ -347,6 +349,7 @@ import * as outputs from "./types/output";
|
|
|
347
349
|
* disableSelfServiceChangePassword: true,
|
|
348
350
|
* bruteForceProtection: true,
|
|
349
351
|
* tenantDomain: "example.com",
|
|
352
|
+
* strategyVersion: 2,
|
|
350
353
|
* iconUrl: "https://example.com/assets/logo.png",
|
|
351
354
|
* domainAliases: [
|
|
352
355
|
* "example.com",
|
|
@@ -387,6 +390,8 @@ import * as outputs from "./types/output";
|
|
|
387
390
|
* identityApi: "azure-active-directory-v1.0",
|
|
388
391
|
* clientId: "123456",
|
|
389
392
|
* clientSecret: "123456",
|
|
393
|
+
* strategyVersion: 2,
|
|
394
|
+
* userIdAttribute: "userName",
|
|
390
395
|
* appId: "app-id-123",
|
|
391
396
|
* tenantDomain: "example.onmicrosoft.com",
|
|
392
397
|
* domain: "example.onmicrosoft.com",
|
|
@@ -470,6 +475,7 @@ import * as outputs from "./types/output";
|
|
|
470
475
|
* signInEndpoint: "https://saml.provider/sign_in",
|
|
471
476
|
* signOutEndpoint: "https://saml.provider/sign_out",
|
|
472
477
|
* disableSignOut: true,
|
|
478
|
+
* strategyVersion: 2,
|
|
473
479
|
* tenantDomain: "example.com",
|
|
474
480
|
* domainAliases: [
|
|
475
481
|
* "example.com",
|
|
@@ -701,7 +707,7 @@ export declare class Connection extends pulumi.CustomResource {
|
|
|
701
707
|
/**
|
|
702
708
|
* Name used in login screen.
|
|
703
709
|
*/
|
|
704
|
-
readonly displayName: pulumi.Output<string
|
|
710
|
+
readonly displayName: pulumi.Output<string>;
|
|
705
711
|
/**
|
|
706
712
|
* Indicates whether the connection is domain level.
|
|
707
713
|
*/
|
package/connection.js
CHANGED
|
@@ -31,6 +31,7 @@ const utilities = require("./utilities");
|
|
|
31
31
|
* options: {
|
|
32
32
|
* passwordPolicy: "excellent",
|
|
33
33
|
* bruteForceProtection: true,
|
|
34
|
+
* strategyVersion: 2,
|
|
34
35
|
* enabledDatabaseCustomization: true,
|
|
35
36
|
* importMode: false,
|
|
36
37
|
* requiresUsername: true,
|
|
@@ -312,6 +313,7 @@ const utilities = require("./utilities");
|
|
|
312
313
|
* options: {
|
|
313
314
|
* clientId: "<client-id>",
|
|
314
315
|
* clientSecret: "<client-secret>",
|
|
316
|
+
* strategyVersion: 2,
|
|
315
317
|
* scopes: [
|
|
316
318
|
* "basic_profile",
|
|
317
319
|
* "profile",
|
|
@@ -351,6 +353,7 @@ const utilities = require("./utilities");
|
|
|
351
353
|
* disableSelfServiceChangePassword: true,
|
|
352
354
|
* bruteForceProtection: true,
|
|
353
355
|
* tenantDomain: "example.com",
|
|
356
|
+
* strategyVersion: 2,
|
|
354
357
|
* iconUrl: "https://example.com/assets/logo.png",
|
|
355
358
|
* domainAliases: [
|
|
356
359
|
* "example.com",
|
|
@@ -391,6 +394,8 @@ const utilities = require("./utilities");
|
|
|
391
394
|
* identityApi: "azure-active-directory-v1.0",
|
|
392
395
|
* clientId: "123456",
|
|
393
396
|
* clientSecret: "123456",
|
|
397
|
+
* strategyVersion: 2,
|
|
398
|
+
* userIdAttribute: "userName",
|
|
394
399
|
* appId: "app-id-123",
|
|
395
400
|
* tenantDomain: "example.onmicrosoft.com",
|
|
396
401
|
* domain: "example.onmicrosoft.com",
|
|
@@ -474,6 +479,7 @@ const utilities = require("./utilities");
|
|
|
474
479
|
* signInEndpoint: "https://saml.provider/sign_in",
|
|
475
480
|
* signOutEndpoint: "https://saml.provider/sign_out",
|
|
476
481
|
* disableSignOut: true,
|
|
482
|
+
* strategyVersion: 2,
|
|
477
483
|
* tenantDomain: "example.com",
|
|
478
484
|
* domainAliases: [
|
|
479
485
|
* "example.com",
|
package/connection.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connection.js","sourceRoot":"","sources":["../connection.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"connection.js","sourceRoot":"","sources":["../connection.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8qBG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IA2CD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AAlGL,gCAmGC;AArFG,gBAAgB;AACO,uBAAY,GAAG,mCAAmC,CAAC"}
|
|
@@ -0,0 +1,73 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
import * as inputs from "./types/input";
|
|
3
|
+
import * as outputs from "./types/output";
|
|
4
|
+
/**
|
|
5
|
+
* Resource to allow the rekeying of your tenant master key.
|
|
6
|
+
*/
|
|
7
|
+
export declare class EncryptionKeyManager extends pulumi.CustomResource {
|
|
8
|
+
/**
|
|
9
|
+
* Get an existing EncryptionKeyManager resource's state with the given name, ID, and optional extra
|
|
10
|
+
* properties used to qualify the lookup.
|
|
11
|
+
*
|
|
12
|
+
* @param name The _unique_ name of the resulting resource.
|
|
13
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
14
|
+
* @param state Any extra arguments used during the lookup.
|
|
15
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
16
|
+
*/
|
|
17
|
+
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: EncryptionKeyManagerState, opts?: pulumi.CustomResourceOptions): EncryptionKeyManager;
|
|
18
|
+
/**
|
|
19
|
+
* Returns true if the given object is an instance of EncryptionKeyManager. This is designed to work even
|
|
20
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
21
|
+
*/
|
|
22
|
+
static isInstance(obj: any): obj is EncryptionKeyManager;
|
|
23
|
+
/**
|
|
24
|
+
* This attribute is used for provisioning the customer provided root key. To initiate the provisioning process, create a new empty `customerProvidedRootKey` block. After applying this, the `publicWrappingKey` can be retreived from the resource, and the new root key should be generated by the customer and wrapped with the wrapping key, then base64-encoded and added as the `wrappedKey` attribute.
|
|
25
|
+
*/
|
|
26
|
+
readonly customerProvidedRootKey: pulumi.Output<outputs.EncryptionKeyManagerCustomerProvidedRootKey | undefined>;
|
|
27
|
+
/**
|
|
28
|
+
* All encryption keys.
|
|
29
|
+
*/
|
|
30
|
+
readonly encryptionKeys: pulumi.Output<outputs.EncryptionKeyManagerEncryptionKey[]>;
|
|
31
|
+
/**
|
|
32
|
+
* If this value is changed, the encryption keys will be rotated. A UUID is recommended for the `keyRotationId`.
|
|
33
|
+
*/
|
|
34
|
+
readonly keyRotationId: pulumi.Output<string | undefined>;
|
|
35
|
+
/**
|
|
36
|
+
* Create a EncryptionKeyManager resource with the given unique name, arguments, and options.
|
|
37
|
+
*
|
|
38
|
+
* @param name The _unique_ name of the resource.
|
|
39
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
40
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
41
|
+
*/
|
|
42
|
+
constructor(name: string, args?: EncryptionKeyManagerArgs, opts?: pulumi.CustomResourceOptions);
|
|
43
|
+
}
|
|
44
|
+
/**
|
|
45
|
+
* Input properties used for looking up and filtering EncryptionKeyManager resources.
|
|
46
|
+
*/
|
|
47
|
+
export interface EncryptionKeyManagerState {
|
|
48
|
+
/**
|
|
49
|
+
* This attribute is used for provisioning the customer provided root key. To initiate the provisioning process, create a new empty `customerProvidedRootKey` block. After applying this, the `publicWrappingKey` can be retreived from the resource, and the new root key should be generated by the customer and wrapped with the wrapping key, then base64-encoded and added as the `wrappedKey` attribute.
|
|
50
|
+
*/
|
|
51
|
+
customerProvidedRootKey?: pulumi.Input<inputs.EncryptionKeyManagerCustomerProvidedRootKey>;
|
|
52
|
+
/**
|
|
53
|
+
* All encryption keys.
|
|
54
|
+
*/
|
|
55
|
+
encryptionKeys?: pulumi.Input<pulumi.Input<inputs.EncryptionKeyManagerEncryptionKey>[]>;
|
|
56
|
+
/**
|
|
57
|
+
* If this value is changed, the encryption keys will be rotated. A UUID is recommended for the `keyRotationId`.
|
|
58
|
+
*/
|
|
59
|
+
keyRotationId?: pulumi.Input<string>;
|
|
60
|
+
}
|
|
61
|
+
/**
|
|
62
|
+
* The set of arguments for constructing a EncryptionKeyManager resource.
|
|
63
|
+
*/
|
|
64
|
+
export interface EncryptionKeyManagerArgs {
|
|
65
|
+
/**
|
|
66
|
+
* This attribute is used for provisioning the customer provided root key. To initiate the provisioning process, create a new empty `customerProvidedRootKey` block. After applying this, the `publicWrappingKey` can be retreived from the resource, and the new root key should be generated by the customer and wrapped with the wrapping key, then base64-encoded and added as the `wrappedKey` attribute.
|
|
67
|
+
*/
|
|
68
|
+
customerProvidedRootKey?: pulumi.Input<inputs.EncryptionKeyManagerCustomerProvidedRootKey>;
|
|
69
|
+
/**
|
|
70
|
+
* If this value is changed, the encryption keys will be rotated. A UUID is recommended for the `keyRotationId`.
|
|
71
|
+
*/
|
|
72
|
+
keyRotationId?: pulumi.Input<string>;
|
|
73
|
+
}
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.EncryptionKeyManager = void 0;
|
|
6
|
+
const pulumi = require("@pulumi/pulumi");
|
|
7
|
+
const utilities = require("./utilities");
|
|
8
|
+
/**
|
|
9
|
+
* Resource to allow the rekeying of your tenant master key.
|
|
10
|
+
*/
|
|
11
|
+
class EncryptionKeyManager extends pulumi.CustomResource {
|
|
12
|
+
/**
|
|
13
|
+
* Get an existing EncryptionKeyManager resource's state with the given name, ID, and optional extra
|
|
14
|
+
* properties used to qualify the lookup.
|
|
15
|
+
*
|
|
16
|
+
* @param name The _unique_ name of the resulting resource.
|
|
17
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
18
|
+
* @param state Any extra arguments used during the lookup.
|
|
19
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
20
|
+
*/
|
|
21
|
+
static get(name, id, state, opts) {
|
|
22
|
+
return new EncryptionKeyManager(name, state, Object.assign(Object.assign({}, opts), { id: id }));
|
|
23
|
+
}
|
|
24
|
+
/**
|
|
25
|
+
* Returns true if the given object is an instance of EncryptionKeyManager. This is designed to work even
|
|
26
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
27
|
+
*/
|
|
28
|
+
static isInstance(obj) {
|
|
29
|
+
if (obj === undefined || obj === null) {
|
|
30
|
+
return false;
|
|
31
|
+
}
|
|
32
|
+
return obj['__pulumiType'] === EncryptionKeyManager.__pulumiType;
|
|
33
|
+
}
|
|
34
|
+
constructor(name, argsOrState, opts) {
|
|
35
|
+
let resourceInputs = {};
|
|
36
|
+
opts = opts || {};
|
|
37
|
+
if (opts.id) {
|
|
38
|
+
const state = argsOrState;
|
|
39
|
+
resourceInputs["customerProvidedRootKey"] = state ? state.customerProvidedRootKey : undefined;
|
|
40
|
+
resourceInputs["encryptionKeys"] = state ? state.encryptionKeys : undefined;
|
|
41
|
+
resourceInputs["keyRotationId"] = state ? state.keyRotationId : undefined;
|
|
42
|
+
}
|
|
43
|
+
else {
|
|
44
|
+
const args = argsOrState;
|
|
45
|
+
resourceInputs["customerProvidedRootKey"] = args ? args.customerProvidedRootKey : undefined;
|
|
46
|
+
resourceInputs["keyRotationId"] = args ? args.keyRotationId : undefined;
|
|
47
|
+
resourceInputs["encryptionKeys"] = undefined /*out*/;
|
|
48
|
+
}
|
|
49
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
50
|
+
super(EncryptionKeyManager.__pulumiType, name, resourceInputs, opts);
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
exports.EncryptionKeyManager = EncryptionKeyManager;
|
|
54
|
+
/** @internal */
|
|
55
|
+
EncryptionKeyManager.__pulumiType = 'auth0:index/encryptionKeyManager:EncryptionKeyManager';
|
|
56
|
+
//# sourceMappingURL=encryptionKeyManager.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"encryptionKeyManager.js","sourceRoot":"","sources":["../encryptionKeyManager.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;GAEG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IAC3D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;IAuBD,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7E;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACxD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;;AAjEL,oDAkEC;AApDG,gBAAgB;AACO,iCAAY,GAAG,uDAAuD,CAAC"}
|