@pulumi/keycloak 4.8.0 → 4.9.0-alpha.1653684456
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/authentication/subflow.d.ts +103 -3
- package/authentication/subflow.js +37 -0
- package/authentication/subflow.js.map +1 -1
- package/customUserFederation.d.ts +24 -0
- package/customUserFederation.js +4 -0
- package/customUserFederation.js.map +1 -1
- package/getRealm.d.ts +2 -0
- package/getRealm.js.map +1 -1
- package/openid/client.d.ts +15 -3
- package/openid/client.js +2 -0
- package/openid/client.js.map +1 -1
- package/openid/getClient.d.ts +1 -0
- package/openid/getClient.js.map +1 -1
- package/package.json +2 -2
- package/package.json.dev +2 -2
- package/realm.d.ts +30 -6
- package/realm.js +4 -0
- package/realm.js.map +1 -1
- package/realmKeystoreAesGenerated.d.ts +2 -2
- package/realmKeystoreAesGenerated.js +2 -2
- package/realmKeystoreEcdsaGenerated.d.ts +2 -2
- package/realmKeystoreEcdsaGenerated.js +2 -2
- package/realmKeystoreHmacGenerated.d.ts +2 -2
- package/realmKeystoreHmacGenerated.js +2 -2
- package/realmKeystoreJavaGenerated.d.ts +1 -1
- package/realmKeystoreJavaGenerated.js +1 -1
- package/realmKeystoreRsa.d.ts +1 -20
- package/realmKeystoreRsa.js +1 -20
- package/realmKeystoreRsa.js.map +1 -1
- package/realmKeystoreRsaGenerated.d.ts +1 -18
- package/realmKeystoreRsaGenerated.js +1 -18
- package/realmKeystoreRsaGenerated.js.map +1 -1
- package/requiredAction.d.ts +84 -0
- package/requiredAction.js +30 -0
- package/requiredAction.js.map +1 -1
- package/saml/identityProvider.d.ts +12 -0
- package/saml/identityProvider.js +2 -0
- package/saml/identityProvider.js.map +1 -1
package/README.md
CHANGED
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
# Keycloak Resource Provider
|
|
10
10
|
|
|
11
11
|
The Keycloak resource provider for Pulumi lets you manage Keycloak resources in your cloud programs. To use
|
|
12
|
-
this package, please [install the Pulumi CLI first](https://www.
|
|
12
|
+
this package, please [install the Pulumi CLI first](https://www.pulumi.com/docs/reference/cli/).
|
|
13
13
|
|
|
14
14
|
## Installing
|
|
15
15
|
|
|
@@ -1,4 +1,41 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
/**
|
|
3
|
+
* Allows for creating and managing an authentication subflow within Keycloak.
|
|
4
|
+
*
|
|
5
|
+
* Like authentication flows, authentication subflows are containers for authentication executions.
|
|
6
|
+
* As its name implies, an authentication subflow is contained in an authentication flow.
|
|
7
|
+
*
|
|
8
|
+
* ## Example Usage
|
|
9
|
+
*
|
|
10
|
+
* ```typescript
|
|
11
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
12
|
+
* import * as keycloak from "@pulumi/keycloak";
|
|
13
|
+
*
|
|
14
|
+
* const realm = new keycloak.Realm("realm", {
|
|
15
|
+
* realm: "my-realm",
|
|
16
|
+
* enabled: true,
|
|
17
|
+
* });
|
|
18
|
+
* const flow = new keycloak.authentication.Flow("flow", {
|
|
19
|
+
* realmId: realm.id,
|
|
20
|
+
* alias: "my-flow-alias",
|
|
21
|
+
* });
|
|
22
|
+
* const subflow = new keycloak.authentication.Subflow("subflow", {
|
|
23
|
+
* realmId: realm.id,
|
|
24
|
+
* alias: "my-subflow-alias",
|
|
25
|
+
* parentFlowAlias: flow.alias,
|
|
26
|
+
* providerId: "basic-flow",
|
|
27
|
+
* requirement: "ALTERNATIVE",
|
|
28
|
+
* });
|
|
29
|
+
* ```
|
|
30
|
+
*
|
|
31
|
+
* ## Import
|
|
32
|
+
*
|
|
33
|
+
* Authentication flows can be imported using the format `{{realmId}}/{{parentFlowAlias}}/{{authenticationSubflowId}}`. The authentication subflow ID is typically a GUID which is autogenerated when the subflow is created via Keycloak. Unfortunately, it is not trivial to retrieve the authentication subflow ID from the UI. The best way to do this is to visit the "Authentication" page in Keycloak, and use the network tab of your browser to view the response of the API call to `/auth/admin/realms/${realm}/authentication/flows/{flow}/executions`, which will be a list of executions, where the subflow will be. __The subflow ID is contained in the `flowID` field__ (not, as one could guess, the `id` field). Examplebash
|
|
34
|
+
*
|
|
35
|
+
* ```sh
|
|
36
|
+
* $ pulumi import keycloak:authentication/subflow:Subflow subflow my-realm/"Parent Flow"/3bad1172-bb5c-4a77-9615-c2606eb03081
|
|
37
|
+
* ```
|
|
38
|
+
*/
|
|
2
39
|
export declare class Subflow extends pulumi.CustomResource {
|
|
3
40
|
/**
|
|
4
41
|
* Get an existing Subflow resource's state with the given name, ID, and optional extra
|
|
@@ -15,15 +52,36 @@ export declare class Subflow extends pulumi.CustomResource {
|
|
|
15
52
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
16
53
|
*/
|
|
17
54
|
static isInstance(obj: any): obj is Subflow;
|
|
55
|
+
/**
|
|
56
|
+
* The alias for this authentication subflow.
|
|
57
|
+
*/
|
|
18
58
|
readonly alias: pulumi.Output<string>;
|
|
19
59
|
/**
|
|
20
|
-
* Might be needed to be set with certain custom
|
|
60
|
+
* The name of the authenticator. Might be needed to be set with certain custom subflows with specific
|
|
61
|
+
* authenticators. In general this will remain empty.
|
|
21
62
|
*/
|
|
22
63
|
readonly authenticator: pulumi.Output<string | undefined>;
|
|
64
|
+
/**
|
|
65
|
+
* A description for the authentication subflow.
|
|
66
|
+
*/
|
|
23
67
|
readonly description: pulumi.Output<string | undefined>;
|
|
68
|
+
/**
|
|
69
|
+
* The alias for the parent authentication flow.
|
|
70
|
+
*/
|
|
24
71
|
readonly parentFlowAlias: pulumi.Output<string>;
|
|
72
|
+
/**
|
|
73
|
+
* The type of authentication subflow to create. Valid choices include `basic-flow`, `form-flow`
|
|
74
|
+
* and `client-flow`. Defaults to `basic-flow`.
|
|
75
|
+
*/
|
|
25
76
|
readonly providerId: pulumi.Output<string | undefined>;
|
|
77
|
+
/**
|
|
78
|
+
* The realm that the authentication subflow exists in.
|
|
79
|
+
*/
|
|
26
80
|
readonly realmId: pulumi.Output<string>;
|
|
81
|
+
/**
|
|
82
|
+
* The requirement setting, which can be one of `REQUIRED`, `ALTERNATIVE`, `OPTIONAL`, `CONDITIONAL`,
|
|
83
|
+
* or `DISABLED`. Defaults to `DISABLED`.
|
|
84
|
+
*/
|
|
27
85
|
readonly requirement: pulumi.Output<string | undefined>;
|
|
28
86
|
/**
|
|
29
87
|
* Create a Subflow resource with the given unique name, arguments, and options.
|
|
@@ -38,29 +96,71 @@ export declare class Subflow extends pulumi.CustomResource {
|
|
|
38
96
|
* Input properties used for looking up and filtering Subflow resources.
|
|
39
97
|
*/
|
|
40
98
|
export interface SubflowState {
|
|
99
|
+
/**
|
|
100
|
+
* The alias for this authentication subflow.
|
|
101
|
+
*/
|
|
41
102
|
alias?: pulumi.Input<string>;
|
|
42
103
|
/**
|
|
43
|
-
* Might be needed to be set with certain custom
|
|
104
|
+
* The name of the authenticator. Might be needed to be set with certain custom subflows with specific
|
|
105
|
+
* authenticators. In general this will remain empty.
|
|
44
106
|
*/
|
|
45
107
|
authenticator?: pulumi.Input<string>;
|
|
108
|
+
/**
|
|
109
|
+
* A description for the authentication subflow.
|
|
110
|
+
*/
|
|
46
111
|
description?: pulumi.Input<string>;
|
|
112
|
+
/**
|
|
113
|
+
* The alias for the parent authentication flow.
|
|
114
|
+
*/
|
|
47
115
|
parentFlowAlias?: pulumi.Input<string>;
|
|
116
|
+
/**
|
|
117
|
+
* The type of authentication subflow to create. Valid choices include `basic-flow`, `form-flow`
|
|
118
|
+
* and `client-flow`. Defaults to `basic-flow`.
|
|
119
|
+
*/
|
|
48
120
|
providerId?: pulumi.Input<string>;
|
|
121
|
+
/**
|
|
122
|
+
* The realm that the authentication subflow exists in.
|
|
123
|
+
*/
|
|
49
124
|
realmId?: pulumi.Input<string>;
|
|
125
|
+
/**
|
|
126
|
+
* The requirement setting, which can be one of `REQUIRED`, `ALTERNATIVE`, `OPTIONAL`, `CONDITIONAL`,
|
|
127
|
+
* or `DISABLED`. Defaults to `DISABLED`.
|
|
128
|
+
*/
|
|
50
129
|
requirement?: pulumi.Input<string>;
|
|
51
130
|
}
|
|
52
131
|
/**
|
|
53
132
|
* The set of arguments for constructing a Subflow resource.
|
|
54
133
|
*/
|
|
55
134
|
export interface SubflowArgs {
|
|
135
|
+
/**
|
|
136
|
+
* The alias for this authentication subflow.
|
|
137
|
+
*/
|
|
56
138
|
alias: pulumi.Input<string>;
|
|
57
139
|
/**
|
|
58
|
-
* Might be needed to be set with certain custom
|
|
140
|
+
* The name of the authenticator. Might be needed to be set with certain custom subflows with specific
|
|
141
|
+
* authenticators. In general this will remain empty.
|
|
59
142
|
*/
|
|
60
143
|
authenticator?: pulumi.Input<string>;
|
|
144
|
+
/**
|
|
145
|
+
* A description for the authentication subflow.
|
|
146
|
+
*/
|
|
61
147
|
description?: pulumi.Input<string>;
|
|
148
|
+
/**
|
|
149
|
+
* The alias for the parent authentication flow.
|
|
150
|
+
*/
|
|
62
151
|
parentFlowAlias: pulumi.Input<string>;
|
|
152
|
+
/**
|
|
153
|
+
* The type of authentication subflow to create. Valid choices include `basic-flow`, `form-flow`
|
|
154
|
+
* and `client-flow`. Defaults to `basic-flow`.
|
|
155
|
+
*/
|
|
63
156
|
providerId?: pulumi.Input<string>;
|
|
157
|
+
/**
|
|
158
|
+
* The realm that the authentication subflow exists in.
|
|
159
|
+
*/
|
|
64
160
|
realmId: pulumi.Input<string>;
|
|
161
|
+
/**
|
|
162
|
+
* The requirement setting, which can be one of `REQUIRED`, `ALTERNATIVE`, `OPTIONAL`, `CONDITIONAL`,
|
|
163
|
+
* or `DISABLED`. Defaults to `DISABLED`.
|
|
164
|
+
*/
|
|
65
165
|
requirement?: pulumi.Input<string>;
|
|
66
166
|
}
|
|
@@ -5,6 +5,43 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
5
5
|
exports.Subflow = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
|
+
/**
|
|
9
|
+
* Allows for creating and managing an authentication subflow within Keycloak.
|
|
10
|
+
*
|
|
11
|
+
* Like authentication flows, authentication subflows are containers for authentication executions.
|
|
12
|
+
* As its name implies, an authentication subflow is contained in an authentication flow.
|
|
13
|
+
*
|
|
14
|
+
* ## Example Usage
|
|
15
|
+
*
|
|
16
|
+
* ```typescript
|
|
17
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
18
|
+
* import * as keycloak from "@pulumi/keycloak";
|
|
19
|
+
*
|
|
20
|
+
* const realm = new keycloak.Realm("realm", {
|
|
21
|
+
* realm: "my-realm",
|
|
22
|
+
* enabled: true,
|
|
23
|
+
* });
|
|
24
|
+
* const flow = new keycloak.authentication.Flow("flow", {
|
|
25
|
+
* realmId: realm.id,
|
|
26
|
+
* alias: "my-flow-alias",
|
|
27
|
+
* });
|
|
28
|
+
* const subflow = new keycloak.authentication.Subflow("subflow", {
|
|
29
|
+
* realmId: realm.id,
|
|
30
|
+
* alias: "my-subflow-alias",
|
|
31
|
+
* parentFlowAlias: flow.alias,
|
|
32
|
+
* providerId: "basic-flow",
|
|
33
|
+
* requirement: "ALTERNATIVE",
|
|
34
|
+
* });
|
|
35
|
+
* ```
|
|
36
|
+
*
|
|
37
|
+
* ## Import
|
|
38
|
+
*
|
|
39
|
+
* Authentication flows can be imported using the format `{{realmId}}/{{parentFlowAlias}}/{{authenticationSubflowId}}`. The authentication subflow ID is typically a GUID which is autogenerated when the subflow is created via Keycloak. Unfortunately, it is not trivial to retrieve the authentication subflow ID from the UI. The best way to do this is to visit the "Authentication" page in Keycloak, and use the network tab of your browser to view the response of the API call to `/auth/admin/realms/${realm}/authentication/flows/{flow}/executions`, which will be a list of executions, where the subflow will be. __The subflow ID is contained in the `flowID` field__ (not, as one could guess, the `id` field). Examplebash
|
|
40
|
+
*
|
|
41
|
+
* ```sh
|
|
42
|
+
* $ pulumi import keycloak:authentication/subflow:Subflow subflow my-realm/"Parent Flow"/3bad1172-bb5c-4a77-9615-c2606eb03081
|
|
43
|
+
* ```
|
|
44
|
+
*/
|
|
8
45
|
class Subflow extends pulumi.CustomResource {
|
|
9
46
|
constructor(name, argsOrState, opts) {
|
|
10
47
|
let resourceInputs = {};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"subflow.js","sourceRoot":"","sources":["../../authentication/subflow.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;
|
|
1
|
+
{"version":3,"file":"subflow.js","sourceRoot":"","sources":["../../authentication/subflow.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAoE9C,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IApGD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;;AA1BL,0BAsGC;AAxFG,gBAAgB;AACO,oBAAY,GAAG,yCAAyC,CAAC"}
|
|
@@ -49,6 +49,10 @@ export declare class CustomUserFederation extends pulumi.CustomResource {
|
|
|
49
49
|
* Can be one of `DEFAULT`, `EVICT_DAILY`, `EVICT_WEEKLY`, `MAX_LIFESPAN`, or `NO_CACHE`. Defaults to `DEFAULT`.
|
|
50
50
|
*/
|
|
51
51
|
readonly cachePolicy: pulumi.Output<string | undefined>;
|
|
52
|
+
/**
|
|
53
|
+
* How frequently Keycloak should sync changed users, in seconds. Omit this property to disable periodic changed users sync.
|
|
54
|
+
*/
|
|
55
|
+
readonly changedSyncPeriod: pulumi.Output<number | undefined>;
|
|
52
56
|
/**
|
|
53
57
|
* The provider configuration handed over to your custom user federation provider.
|
|
54
58
|
*/
|
|
@@ -59,6 +63,10 @@ export declare class CustomUserFederation extends pulumi.CustomResource {
|
|
|
59
63
|
* When `false`, this provider will not be used when performing queries for users. Defaults to `true`.
|
|
60
64
|
*/
|
|
61
65
|
readonly enabled: pulumi.Output<boolean | undefined>;
|
|
66
|
+
/**
|
|
67
|
+
* How frequently Keycloak should sync all users, in seconds. Omit this property to disable periodic full sync.
|
|
68
|
+
*/
|
|
69
|
+
readonly fullSyncPeriod: pulumi.Output<number | undefined>;
|
|
62
70
|
/**
|
|
63
71
|
* Display name of the provider when displayed in the console.
|
|
64
72
|
*/
|
|
@@ -96,6 +104,10 @@ export interface CustomUserFederationState {
|
|
|
96
104
|
* Can be one of `DEFAULT`, `EVICT_DAILY`, `EVICT_WEEKLY`, `MAX_LIFESPAN`, or `NO_CACHE`. Defaults to `DEFAULT`.
|
|
97
105
|
*/
|
|
98
106
|
cachePolicy?: pulumi.Input<string>;
|
|
107
|
+
/**
|
|
108
|
+
* How frequently Keycloak should sync changed users, in seconds. Omit this property to disable periodic changed users sync.
|
|
109
|
+
*/
|
|
110
|
+
changedSyncPeriod?: pulumi.Input<number>;
|
|
99
111
|
/**
|
|
100
112
|
* The provider configuration handed over to your custom user federation provider.
|
|
101
113
|
*/
|
|
@@ -106,6 +118,10 @@ export interface CustomUserFederationState {
|
|
|
106
118
|
* When `false`, this provider will not be used when performing queries for users. Defaults to `true`.
|
|
107
119
|
*/
|
|
108
120
|
enabled?: pulumi.Input<boolean>;
|
|
121
|
+
/**
|
|
122
|
+
* How frequently Keycloak should sync all users, in seconds. Omit this property to disable periodic full sync.
|
|
123
|
+
*/
|
|
124
|
+
fullSyncPeriod?: pulumi.Input<number>;
|
|
109
125
|
/**
|
|
110
126
|
* Display name of the provider when displayed in the console.
|
|
111
127
|
*/
|
|
@@ -135,6 +151,10 @@ export interface CustomUserFederationArgs {
|
|
|
135
151
|
* Can be one of `DEFAULT`, `EVICT_DAILY`, `EVICT_WEEKLY`, `MAX_LIFESPAN`, or `NO_CACHE`. Defaults to `DEFAULT`.
|
|
136
152
|
*/
|
|
137
153
|
cachePolicy?: pulumi.Input<string>;
|
|
154
|
+
/**
|
|
155
|
+
* How frequently Keycloak should sync changed users, in seconds. Omit this property to disable periodic changed users sync.
|
|
156
|
+
*/
|
|
157
|
+
changedSyncPeriod?: pulumi.Input<number>;
|
|
138
158
|
/**
|
|
139
159
|
* The provider configuration handed over to your custom user federation provider.
|
|
140
160
|
*/
|
|
@@ -145,6 +165,10 @@ export interface CustomUserFederationArgs {
|
|
|
145
165
|
* When `false`, this provider will not be used when performing queries for users. Defaults to `true`.
|
|
146
166
|
*/
|
|
147
167
|
enabled?: pulumi.Input<boolean>;
|
|
168
|
+
/**
|
|
169
|
+
* How frequently Keycloak should sync all users, in seconds. Omit this property to disable periodic full sync.
|
|
170
|
+
*/
|
|
171
|
+
fullSyncPeriod?: pulumi.Input<number>;
|
|
148
172
|
/**
|
|
149
173
|
* Display name of the provider when displayed in the console.
|
|
150
174
|
*/
|
package/customUserFederation.js
CHANGED
|
@@ -42,8 +42,10 @@ class CustomUserFederation extends pulumi.CustomResource {
|
|
|
42
42
|
if (opts.id) {
|
|
43
43
|
const state = argsOrState;
|
|
44
44
|
resourceInputs["cachePolicy"] = state ? state.cachePolicy : undefined;
|
|
45
|
+
resourceInputs["changedSyncPeriod"] = state ? state.changedSyncPeriod : undefined;
|
|
45
46
|
resourceInputs["config"] = state ? state.config : undefined;
|
|
46
47
|
resourceInputs["enabled"] = state ? state.enabled : undefined;
|
|
48
|
+
resourceInputs["fullSyncPeriod"] = state ? state.fullSyncPeriod : undefined;
|
|
47
49
|
resourceInputs["name"] = state ? state.name : undefined;
|
|
48
50
|
resourceInputs["parentId"] = state ? state.parentId : undefined;
|
|
49
51
|
resourceInputs["priority"] = state ? state.priority : undefined;
|
|
@@ -59,8 +61,10 @@ class CustomUserFederation extends pulumi.CustomResource {
|
|
|
59
61
|
throw new Error("Missing required property 'realmId'");
|
|
60
62
|
}
|
|
61
63
|
resourceInputs["cachePolicy"] = args ? args.cachePolicy : undefined;
|
|
64
|
+
resourceInputs["changedSyncPeriod"] = args ? args.changedSyncPeriod : undefined;
|
|
62
65
|
resourceInputs["config"] = args ? args.config : undefined;
|
|
63
66
|
resourceInputs["enabled"] = args ? args.enabled : undefined;
|
|
67
|
+
resourceInputs["fullSyncPeriod"] = args ? args.fullSyncPeriod : undefined;
|
|
64
68
|
resourceInputs["name"] = args ? args.name : undefined;
|
|
65
69
|
resourceInputs["parentId"] = args ? args.parentId : undefined;
|
|
66
70
|
resourceInputs["priority"] = args ? args.priority : undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"customUserFederation.js","sourceRoot":"","sources":["../customUserFederation.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;
|
|
1
|
+
{"version":3,"file":"customUserFederation.js","sourceRoot":"","sources":["../customUserFederation.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IA6E3D,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;IAhHD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;;AA1BL,oDAkHC;AApGG,gBAAgB;AACO,iCAAY,GAAG,0DAA0D,CAAC"}
|
package/getRealm.d.ts
CHANGED
|
@@ -56,6 +56,8 @@ export interface GetRealmResult {
|
|
|
56
56
|
};
|
|
57
57
|
readonly browserFlow: string;
|
|
58
58
|
readonly clientAuthenticationFlow: string;
|
|
59
|
+
readonly clientSessionIdleTimeout: string;
|
|
60
|
+
readonly clientSessionMaxLifespan: string;
|
|
59
61
|
readonly defaultDefaultClientScopes: string[];
|
|
60
62
|
readonly defaultOptionalClientScopes: string[];
|
|
61
63
|
readonly defaultSignatureAlgorithm: string;
|
package/getRealm.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getRealm.js","sourceRoot":"","sources":["../getRealm.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,QAAQ,CAAC,IAAkB,EAAE,IAA2B;IACpE,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE;QAC7D,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,4BAA4B,EAAE,IAAI,CAAC,0BAA0B;QAC7D,6BAA6B,EAAE,IAAI,CAAC,2BAA2B;QAC/D,iBAAiB,EAAE,IAAI,CAAC,eAAe;QACvC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB;QACnD,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,OAAO,EAAE,IAAI,CAAC,KAAK;QACnB,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,4BAA4B,EAAE,IAAI,CAAC,0BAA0B;QAC7D,gBAAgB,EAAE,IAAI,CAAC,cAAc;KACxC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAnBD,4BAmBC;
|
|
1
|
+
{"version":3,"file":"getRealm.js","sourceRoot":"","sources":["../getRealm.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,QAAQ,CAAC,IAAkB,EAAE,IAA2B;IACpE,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE;QAC7D,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,4BAA4B,EAAE,IAAI,CAAC,0BAA0B;QAC7D,6BAA6B,EAAE,IAAI,CAAC,2BAA2B;QAC/D,iBAAiB,EAAE,IAAI,CAAC,eAAe;QACvC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB;QACnD,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,OAAO,EAAE,IAAI,CAAC,KAAK;QACnB,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,4BAA4B,EAAE,IAAI,CAAC,0BAA0B;QAC7D,gBAAgB,EAAE,IAAI,CAAC,cAAc;KACxC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAnBD,4BAmBC;AAwFD,SAAgB,cAAc,CAAC,IAAwB,EAAE,IAA2B;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC5D,CAAC;AAFD,wCAEC"}
|
package/openid/client.d.ts
CHANGED
|
@@ -222,6 +222,10 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
222
222
|
* If this is `true`, a refreshToken will be created and added to the token response. If this is `false` then no refreshToken will be generated. Defaults to `true`.
|
|
223
223
|
*/
|
|
224
224
|
readonly useRefreshTokens: pulumi.Output<boolean | undefined>;
|
|
225
|
+
/**
|
|
226
|
+
* If this is `true`, a refreshToken will be created and added to the token response if the clientCredentials grant is used and a user session will be created. If this is `false` then no refreshToken will be generated and the associated user session will be removed, in accordance with OAuth 2.0 RFC6749 Section 4.4.3. Defaults to `false`.
|
|
227
|
+
*/
|
|
228
|
+
readonly useRefreshTokensClientCredentials: pulumi.Output<boolean | undefined>;
|
|
225
229
|
/**
|
|
226
230
|
* A list of valid URIs a browser is permitted to redirect to after a successful login or logout. Simple
|
|
227
231
|
* wildcards in the form of an asterisk can be used here. This attribute must be set if either `standardFlowEnabled` or `implicitFlowEnabled`
|
|
@@ -229,7 +233,7 @@ export declare class Client extends pulumi.CustomResource {
|
|
|
229
233
|
*/
|
|
230
234
|
readonly validRedirectUris: pulumi.Output<string[] | undefined>;
|
|
231
235
|
/**
|
|
232
|
-
* A list of allowed CORS origins.
|
|
236
|
+
* A list of allowed CORS origins. To permit all valid redirect URIs, add `+`. Note that this will not include the `*` wildcard. To permit all origins, explicitly add `*`."
|
|
233
237
|
*/
|
|
234
238
|
readonly webOrigins: pulumi.Output<string[] | undefined>;
|
|
235
239
|
/**
|
|
@@ -412,6 +416,10 @@ export interface ClientState {
|
|
|
412
416
|
* If this is `true`, a refreshToken will be created and added to the token response. If this is `false` then no refreshToken will be generated. Defaults to `true`.
|
|
413
417
|
*/
|
|
414
418
|
useRefreshTokens?: pulumi.Input<boolean>;
|
|
419
|
+
/**
|
|
420
|
+
* If this is `true`, a refreshToken will be created and added to the token response if the clientCredentials grant is used and a user session will be created. If this is `false` then no refreshToken will be generated and the associated user session will be removed, in accordance with OAuth 2.0 RFC6749 Section 4.4.3. Defaults to `false`.
|
|
421
|
+
*/
|
|
422
|
+
useRefreshTokensClientCredentials?: pulumi.Input<boolean>;
|
|
415
423
|
/**
|
|
416
424
|
* A list of valid URIs a browser is permitted to redirect to after a successful login or logout. Simple
|
|
417
425
|
* wildcards in the form of an asterisk can be used here. This attribute must be set if either `standardFlowEnabled` or `implicitFlowEnabled`
|
|
@@ -419,7 +427,7 @@ export interface ClientState {
|
|
|
419
427
|
*/
|
|
420
428
|
validRedirectUris?: pulumi.Input<pulumi.Input<string>[]>;
|
|
421
429
|
/**
|
|
422
|
-
* A list of allowed CORS origins.
|
|
430
|
+
* A list of allowed CORS origins. To permit all valid redirect URIs, add `+`. Note that this will not include the `*` wildcard. To permit all origins, explicitly add `*`."
|
|
423
431
|
*/
|
|
424
432
|
webOrigins?: pulumi.Input<pulumi.Input<string>[]>;
|
|
425
433
|
}
|
|
@@ -586,6 +594,10 @@ export interface ClientArgs {
|
|
|
586
594
|
* If this is `true`, a refreshToken will be created and added to the token response. If this is `false` then no refreshToken will be generated. Defaults to `true`.
|
|
587
595
|
*/
|
|
588
596
|
useRefreshTokens?: pulumi.Input<boolean>;
|
|
597
|
+
/**
|
|
598
|
+
* If this is `true`, a refreshToken will be created and added to the token response if the clientCredentials grant is used and a user session will be created. If this is `false` then no refreshToken will be generated and the associated user session will be removed, in accordance with OAuth 2.0 RFC6749 Section 4.4.3. Defaults to `false`.
|
|
599
|
+
*/
|
|
600
|
+
useRefreshTokensClientCredentials?: pulumi.Input<boolean>;
|
|
589
601
|
/**
|
|
590
602
|
* A list of valid URIs a browser is permitted to redirect to after a successful login or logout. Simple
|
|
591
603
|
* wildcards in the form of an asterisk can be used here. This attribute must be set if either `standardFlowEnabled` or `implicitFlowEnabled`
|
|
@@ -593,7 +605,7 @@ export interface ClientArgs {
|
|
|
593
605
|
*/
|
|
594
606
|
validRedirectUris?: pulumi.Input<pulumi.Input<string>[]>;
|
|
595
607
|
/**
|
|
596
|
-
* A list of allowed CORS origins.
|
|
608
|
+
* A list of allowed CORS origins. To permit all valid redirect URIs, add `+`. Note that this will not include the `*` wildcard. To permit all origins, explicitly add `*`."
|
|
597
609
|
*/
|
|
598
610
|
webOrigins?: pulumi.Input<pulumi.Input<string>[]>;
|
|
599
611
|
}
|
package/openid/client.js
CHANGED
|
@@ -91,6 +91,7 @@ class Client extends pulumi.CustomResource {
|
|
|
91
91
|
resourceInputs["serviceAccountsEnabled"] = state ? state.serviceAccountsEnabled : undefined;
|
|
92
92
|
resourceInputs["standardFlowEnabled"] = state ? state.standardFlowEnabled : undefined;
|
|
93
93
|
resourceInputs["useRefreshTokens"] = state ? state.useRefreshTokens : undefined;
|
|
94
|
+
resourceInputs["useRefreshTokensClientCredentials"] = state ? state.useRefreshTokensClientCredentials : undefined;
|
|
94
95
|
resourceInputs["validRedirectUris"] = state ? state.validRedirectUris : undefined;
|
|
95
96
|
resourceInputs["webOrigins"] = state ? state.webOrigins : undefined;
|
|
96
97
|
}
|
|
@@ -144,6 +145,7 @@ class Client extends pulumi.CustomResource {
|
|
|
144
145
|
resourceInputs["serviceAccountsEnabled"] = args ? args.serviceAccountsEnabled : undefined;
|
|
145
146
|
resourceInputs["standardFlowEnabled"] = args ? args.standardFlowEnabled : undefined;
|
|
146
147
|
resourceInputs["useRefreshTokens"] = args ? args.useRefreshTokens : undefined;
|
|
148
|
+
resourceInputs["useRefreshTokensClientCredentials"] = args ? args.useRefreshTokensClientCredentials : undefined;
|
|
147
149
|
resourceInputs["validRedirectUris"] = args ? args.validRedirectUris : undefined;
|
|
148
150
|
resourceInputs["webOrigins"] = args ? args.webOrigins : undefined;
|
|
149
151
|
resourceInputs["resourceServerId"] = undefined /*out*/;
|
package/openid/client.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.js","sourceRoot":"","sources":["../../openid/client.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;
|
|
1
|
+
{"version":3,"file":"client.js","sourceRoot":"","sources":["../../openid/client.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAwN7C,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,oCAAoC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpH,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,wCAAwC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5H,cAAc,CAAC,kCAAkC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChH,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iCAAiC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9G,cAAc,CAAC,iCAAiC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9G,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,qCAAqC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtH,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,uCAAuC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1H,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,mCAAmC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,oCAAoC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,wCAAwC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1H,cAAc,CAAC,kCAAkC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9G,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,iCAAiC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,cAAc,CAAC,iCAAiC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,qCAAqC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpH,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,uCAAuC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxH,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,mCAAmC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChH,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAlUD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;;AA1BL,wBAoUC;AAtTG,gBAAgB;AACO,mBAAY,GAAG,+BAA+B,CAAC"}
|
package/openid/getClient.d.ts
CHANGED
|
@@ -93,6 +93,7 @@ export interface GetClientResult {
|
|
|
93
93
|
readonly serviceAccountsEnabled: boolean;
|
|
94
94
|
readonly standardFlowEnabled: boolean;
|
|
95
95
|
readonly useRefreshTokens: boolean;
|
|
96
|
+
readonly useRefreshTokensClientCredentials: boolean;
|
|
96
97
|
readonly validRedirectUris: string[];
|
|
97
98
|
readonly webOrigins: string[];
|
|
98
99
|
}
|
package/openid/getClient.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getClient.js","sourceRoot":"","sources":["../../openid/getClient.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,SAAS,CAAC,IAAmB,EAAE,IAA2B;IACtE,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qCAAqC,EAAE;QAChE,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;QAC3C,wBAAwB,EAAE,IAAI,CAAC,sBAAsB;QACrD,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,uCAAuC,EAAE,IAAI,CAAC,qCAAqC;QACnF,0BAA0B,EAAE,IAAI,CAAC,wBAAwB;QACzD,6BAA6B,EAAE,IAAI,CAAC,2BAA2B;QAC/D,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAhBD,8BAgBC;
|
|
1
|
+
{"version":3,"file":"getClient.js","sourceRoot":"","sources":["../../openid/getClient.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,SAAS,CAAC,IAAmB,EAAE,IAA2B;IACtE,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qCAAqC,EAAE;QAChE,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;QAC3C,wBAAwB,EAAE,IAAI,CAAC,sBAAsB;QACrD,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,uCAAuC,EAAE,IAAI,CAAC,qCAAqC;QACnF,0BAA0B,EAAE,IAAI,CAAC,wBAAwB;QACzD,6BAA6B,EAAE,IAAI,CAAC,2BAA2B;QAC/D,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAhBD,8BAgBC;AA4ED,SAAgB,eAAe,CAAC,IAAyB,EAAE,IAA2B;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7D,CAAC;AAFD,0CAEC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/keycloak",
|
|
3
|
-
"version": "v4.
|
|
3
|
+
"version": "v4.9.0-alpha.1653684456+750bab17",
|
|
4
4
|
"description": "A Pulumi package for creating and managing keycloak cloud resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"license": "Apache-2.0",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc",
|
|
14
|
-
"install": "node scripts/install-pulumi-plugin.js resource keycloak v4.
|
|
14
|
+
"install": "node scripts/install-pulumi-plugin.js resource keycloak v4.9.0-alpha.1653684456+750bab17"
|
|
15
15
|
},
|
|
16
16
|
"dependencies": {
|
|
17
17
|
"@pulumi/pulumi": "^3.0.0"
|
package/package.json.dev
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/keycloak",
|
|
3
|
-
"version": "v4.
|
|
3
|
+
"version": "v4.9.0-alpha.1653684456+750bab17",
|
|
4
4
|
"description": "A Pulumi package for creating and managing keycloak cloud resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"license": "Apache-2.0",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc",
|
|
14
|
-
"install": "node scripts/install-pulumi-plugin.js resource keycloak v4.
|
|
14
|
+
"install": "node scripts/install-pulumi-plugin.js resource keycloak v4.9.0-alpha.1653684456+750bab17"
|
|
15
15
|
},
|
|
16
16
|
"dependencies": {
|
|
17
17
|
"@pulumi/pulumi": "^3.0.0"
|
package/realm.d.ts
CHANGED
|
@@ -144,11 +144,19 @@ export declare class Realm extends pulumi.CustomResource {
|
|
|
144
144
|
/**
|
|
145
145
|
* The desired flow for browser authentication. Defaults to `browser`.
|
|
146
146
|
*/
|
|
147
|
-
readonly browserFlow: pulumi.Output<string
|
|
147
|
+
readonly browserFlow: pulumi.Output<string>;
|
|
148
148
|
/**
|
|
149
149
|
* The desired flow for client authentication. Defaults to `clients`.
|
|
150
150
|
*/
|
|
151
|
-
readonly clientAuthenticationFlow: pulumi.Output<string
|
|
151
|
+
readonly clientAuthenticationFlow: pulumi.Output<string>;
|
|
152
|
+
/**
|
|
153
|
+
* The amount of time a session can be idle before it expires. Users can override it for individual clients.
|
|
154
|
+
*/
|
|
155
|
+
readonly clientSessionIdleTimeout: pulumi.Output<string>;
|
|
156
|
+
/**
|
|
157
|
+
* The maximum amount of time before a session expires regardless of activity. Users can override it for individual clients.
|
|
158
|
+
*/
|
|
159
|
+
readonly clientSessionMaxLifespan: pulumi.Output<string>;
|
|
152
160
|
readonly defaultDefaultClientScopes: pulumi.Output<string[] | undefined>;
|
|
153
161
|
readonly defaultOptionalClientScopes: pulumi.Output<string[] | undefined>;
|
|
154
162
|
/**
|
|
@@ -158,7 +166,7 @@ export declare class Realm extends pulumi.CustomResource {
|
|
|
158
166
|
/**
|
|
159
167
|
* The desired flow for direct access authentication. Defaults to `direct grant`.
|
|
160
168
|
*/
|
|
161
|
-
readonly directGrantFlow: pulumi.Output<string
|
|
169
|
+
readonly directGrantFlow: pulumi.Output<string>;
|
|
162
170
|
/**
|
|
163
171
|
* The display name for the realm that is shown when logging in to the admin console.
|
|
164
172
|
*/
|
|
@@ -170,7 +178,7 @@ export declare class Realm extends pulumi.CustomResource {
|
|
|
170
178
|
/**
|
|
171
179
|
* The desired flow for Docker authentication. Defaults to `docker auth`.
|
|
172
180
|
*/
|
|
173
|
-
readonly dockerAuthenticationFlow: pulumi.Output<string
|
|
181
|
+
readonly dockerAuthenticationFlow: pulumi.Output<string>;
|
|
174
182
|
/**
|
|
175
183
|
* When true, multiple users will be allowed to have the same email address. This argument must be set to `false` if `loginWithEmailAllowed` is set to `true`.
|
|
176
184
|
*/
|
|
@@ -241,7 +249,7 @@ export declare class Realm extends pulumi.CustomResource {
|
|
|
241
249
|
/**
|
|
242
250
|
* The desired flow for user registration. Defaults to `registration`.
|
|
243
251
|
*/
|
|
244
|
-
readonly registrationFlow: pulumi.Output<string
|
|
252
|
+
readonly registrationFlow: pulumi.Output<string>;
|
|
245
253
|
/**
|
|
246
254
|
* When true, a "remember me" checkbox will be displayed on the login page, and the user's session will not expire between browser restarts.
|
|
247
255
|
*/
|
|
@@ -249,7 +257,7 @@ export declare class Realm extends pulumi.CustomResource {
|
|
|
249
257
|
/**
|
|
250
258
|
* The desired flow to use when a user attempts to reset their credentials. Defaults to `reset credentials`.
|
|
251
259
|
*/
|
|
252
|
-
readonly resetCredentialsFlow: pulumi.Output<string
|
|
260
|
+
readonly resetCredentialsFlow: pulumi.Output<string>;
|
|
253
261
|
/**
|
|
254
262
|
* When true, a "forgot password" link will be displayed on the login page.
|
|
255
263
|
*/
|
|
@@ -353,6 +361,14 @@ export interface RealmState {
|
|
|
353
361
|
* The desired flow for client authentication. Defaults to `clients`.
|
|
354
362
|
*/
|
|
355
363
|
clientAuthenticationFlow?: pulumi.Input<string>;
|
|
364
|
+
/**
|
|
365
|
+
* The amount of time a session can be idle before it expires. Users can override it for individual clients.
|
|
366
|
+
*/
|
|
367
|
+
clientSessionIdleTimeout?: pulumi.Input<string>;
|
|
368
|
+
/**
|
|
369
|
+
* The maximum amount of time before a session expires regardless of activity. Users can override it for individual clients.
|
|
370
|
+
*/
|
|
371
|
+
clientSessionMaxLifespan?: pulumi.Input<string>;
|
|
356
372
|
defaultDefaultClientScopes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
357
373
|
defaultOptionalClientScopes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
358
374
|
/**
|
|
@@ -549,6 +565,14 @@ export interface RealmArgs {
|
|
|
549
565
|
* The desired flow for client authentication. Defaults to `clients`.
|
|
550
566
|
*/
|
|
551
567
|
clientAuthenticationFlow?: pulumi.Input<string>;
|
|
568
|
+
/**
|
|
569
|
+
* The amount of time a session can be idle before it expires. Users can override it for individual clients.
|
|
570
|
+
*/
|
|
571
|
+
clientSessionIdleTimeout?: pulumi.Input<string>;
|
|
572
|
+
/**
|
|
573
|
+
* The maximum amount of time before a session expires regardless of activity. Users can override it for individual clients.
|
|
574
|
+
*/
|
|
575
|
+
clientSessionMaxLifespan?: pulumi.Input<string>;
|
|
552
576
|
defaultDefaultClientScopes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
553
577
|
defaultOptionalClientScopes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
554
578
|
/**
|
package/realm.js
CHANGED
|
@@ -106,6 +106,8 @@ class Realm extends pulumi.CustomResource {
|
|
|
106
106
|
resourceInputs["attributes"] = state ? state.attributes : undefined;
|
|
107
107
|
resourceInputs["browserFlow"] = state ? state.browserFlow : undefined;
|
|
108
108
|
resourceInputs["clientAuthenticationFlow"] = state ? state.clientAuthenticationFlow : undefined;
|
|
109
|
+
resourceInputs["clientSessionIdleTimeout"] = state ? state.clientSessionIdleTimeout : undefined;
|
|
110
|
+
resourceInputs["clientSessionMaxLifespan"] = state ? state.clientSessionMaxLifespan : undefined;
|
|
109
111
|
resourceInputs["defaultDefaultClientScopes"] = state ? state.defaultDefaultClientScopes : undefined;
|
|
110
112
|
resourceInputs["defaultOptionalClientScopes"] = state ? state.defaultOptionalClientScopes : undefined;
|
|
111
113
|
resourceInputs["defaultSignatureAlgorithm"] = state ? state.defaultSignatureAlgorithm : undefined;
|
|
@@ -166,6 +168,8 @@ class Realm extends pulumi.CustomResource {
|
|
|
166
168
|
resourceInputs["attributes"] = args ? args.attributes : undefined;
|
|
167
169
|
resourceInputs["browserFlow"] = args ? args.browserFlow : undefined;
|
|
168
170
|
resourceInputs["clientAuthenticationFlow"] = args ? args.clientAuthenticationFlow : undefined;
|
|
171
|
+
resourceInputs["clientSessionIdleTimeout"] = args ? args.clientSessionIdleTimeout : undefined;
|
|
172
|
+
resourceInputs["clientSessionMaxLifespan"] = args ? args.clientSessionMaxLifespan : undefined;
|
|
169
173
|
resourceInputs["defaultDefaultClientScopes"] = args ? args.defaultDefaultClientScopes : undefined;
|
|
170
174
|
resourceInputs["defaultOptionalClientScopes"] = args ? args.defaultOptionalClientScopes : undefined;
|
|
171
175
|
resourceInputs["defaultSignatureAlgorithm"] = args ? args.defaultSignatureAlgorithm : undefined;
|