@pulumi/keycloak 5.3.0 → 5.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/attributeImporterIdentityProviderMapper.d.ts +46 -63
- package/attributeImporterIdentityProviderMapper.js +25 -33
- package/attributeImporterIdentityProviderMapper.js.map +1 -1
- package/attributeToRoleIdentityMapper.d.ts +10 -2
- package/attributeToRoleIdentityMapper.js +10 -2
- package/attributeToRoleIdentityMapper.js.map +1 -1
- package/authentication/bindings.d.ts +2 -0
- package/authentication/bindings.js +2 -0
- package/authentication/bindings.js.map +1 -1
- package/authentication/execution.d.ts +8 -2
- package/authentication/execution.js +8 -2
- package/authentication/execution.js.map +1 -1
- package/authentication/executionConfig.d.ts +12 -2
- package/authentication/executionConfig.js +12 -2
- package/authentication/executionConfig.js.map +1 -1
- package/authentication/flow.d.ts +16 -2
- package/authentication/flow.js +16 -2
- package/authentication/flow.js.map +1 -1
- package/authentication/subflow.d.ts +18 -2
- package/authentication/subflow.js +18 -2
- package/authentication/subflow.js.map +1 -1
- package/customIdentityProviderMapping.d.ts +13 -5
- package/customIdentityProviderMapping.js +10 -2
- package/customIdentityProviderMapping.js.map +1 -1
- package/customUserFederation.d.ts +51 -50
- package/customUserFederation.js +27 -14
- package/customUserFederation.js.map +1 -1
- package/defaultGroups.d.ts +19 -27
- package/defaultGroups.js +19 -9
- package/defaultGroups.js.map +1 -1
- package/defaultRoles.d.ts +13 -2
- package/defaultRoles.js +13 -2
- package/defaultRoles.js.map +1 -1
- package/genericClientProtocolMapper.d.ts +40 -37
- package/genericClientProtocolMapper.js +25 -13
- package/genericClientProtocolMapper.js.map +1 -1
- package/genericClientRoleMapper.d.ts +22 -2
- package/genericClientRoleMapper.js +22 -2
- package/genericClientRoleMapper.js.map +1 -1
- package/genericProtocolMapper.d.ts +8 -2
- package/genericProtocolMapper.js +8 -2
- package/genericProtocolMapper.js.map +1 -1
- package/genericRoleMapper.d.ts +22 -2
- package/genericRoleMapper.js +22 -2
- package/genericRoleMapper.js.map +1 -1
- package/getAuthenticationExecution.d.ts +4 -0
- package/getAuthenticationExecution.js +4 -0
- package/getAuthenticationExecution.js.map +1 -1
- package/getAuthenticationFlow.d.ts +4 -0
- package/getAuthenticationFlow.js +4 -0
- package/getAuthenticationFlow.js.map +1 -1
- package/getClientDescriptionConverter.d.ts +4 -0
- package/getClientDescriptionConverter.js +4 -0
- package/getClientDescriptionConverter.js.map +1 -1
- package/getGroup.d.ts +4 -62
- package/getGroup.js +4 -50
- package/getGroup.js.map +1 -1
- package/getRealm.d.ts +32 -10
- package/getRealm.js +32 -4
- package/getRealm.js.map +1 -1
- package/getRealmKeys.d.ts +8 -28
- package/getRealmKeys.js +8 -4
- package/getRealmKeys.js.map +1 -1
- package/getRole.d.ts +4 -65
- package/getRole.js +4 -44
- package/getRole.js.map +1 -1
- package/getUser.d.ts +4 -0
- package/getUser.js +4 -0
- package/getUser.js.map +1 -1
- package/getUserRealmRoles.d.ts +4 -0
- package/getUserRealmRoles.js +4 -0
- package/getUserRealmRoles.js.map +1 -1
- package/group.d.ts +35 -58
- package/group.js +35 -16
- package/group.js.map +1 -1
- package/groupMemberships.d.ts +27 -43
- package/groupMemberships.js +27 -16
- package/groupMemberships.js.map +1 -1
- package/groupPermissions.d.ts +13 -0
- package/groupPermissions.js +13 -0
- package/groupPermissions.js.map +1 -1
- package/groupRoles.d.ts +32 -91
- package/groupRoles.js +32 -55
- package/groupRoles.js.map +1 -1
- package/hardcodedAttributeIdentityProviderMapper.d.ts +2 -0
- package/hardcodedAttributeIdentityProviderMapper.js +2 -0
- package/hardcodedAttributeIdentityProviderMapper.js.map +1 -1
- package/hardcodedRoleIdentityMapper.d.ts +2 -0
- package/hardcodedRoleIdentityMapper.js +2 -0
- package/hardcodedRoleIdentityMapper.js.map +1 -1
- package/identityProviderTokenExchangeScopePermission.d.ts +10 -2
- package/identityProviderTokenExchangeScopePermission.js +10 -2
- package/identityProviderTokenExchangeScopePermission.js.map +1 -1
- package/ldap/customMapper.d.ts +10 -2
- package/ldap/customMapper.js +10 -2
- package/ldap/customMapper.js.map +1 -1
- package/ldap/fullNameMapper.d.ts +41 -54
- package/ldap/fullNameMapper.js +32 -18
- package/ldap/fullNameMapper.js.map +1 -1
- package/ldap/groupMapper.d.ts +55 -164
- package/ldap/groupMapper.js +46 -20
- package/ldap/groupMapper.js.map +1 -1
- package/ldap/hardcodedAttributeMapper.d.ts +10 -2
- package/ldap/hardcodedAttributeMapper.js +10 -2
- package/ldap/hardcodedAttributeMapper.js.map +1 -1
- package/ldap/hardcodedGroupMapper.d.ts +10 -2
- package/ldap/hardcodedGroupMapper.js +10 -2
- package/ldap/hardcodedGroupMapper.js.map +1 -1
- package/ldap/hardcodedRoleMapper.d.ts +29 -64
- package/ldap/hardcodedRoleMapper.js +17 -52
- package/ldap/hardcodedRoleMapper.js.map +1 -1
- package/ldap/msadLdsUserAccountControlMapper.d.ts +10 -2
- package/ldap/msadLdsUserAccountControlMapper.js +10 -2
- package/ldap/msadLdsUserAccountControlMapper.js.map +1 -1
- package/ldap/msadUserAccountControlMapper.d.ts +34 -32
- package/ldap/msadUserAccountControlMapper.js +25 -14
- package/ldap/msadUserAccountControlMapper.js.map +1 -1
- package/ldap/roleMapper.d.ts +10 -2
- package/ldap/roleMapper.js +10 -2
- package/ldap/roleMapper.js.map +1 -1
- package/ldap/userAttributeMapper.d.ts +60 -45
- package/ldap/userAttributeMapper.js +30 -15
- package/ldap/userAttributeMapper.js.map +1 -1
- package/ldap/userFederation.d.ts +125 -95
- package/ldap/userFederation.js +53 -20
- package/ldap/userFederation.js.map +1 -1
- package/oidc/googleIdentityProvider.d.ts +8 -2
- package/oidc/googleIdentityProvider.js +8 -2
- package/oidc/googleIdentityProvider.js.map +1 -1
- package/oidc/identityProvider.d.ts +8 -2
- package/oidc/identityProvider.js +8 -2
- package/oidc/identityProvider.js.map +1 -1
- package/openid/audienceProtocolMapper.d.ts +62 -45
- package/openid/audienceProtocolMapper.js +38 -21
- package/openid/audienceProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMapper.d.ts +17 -3
- package/openid/audienceResolveProtocolMapper.js +17 -3
- package/openid/audienceResolveProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMappter.d.ts +17 -3
- package/openid/audienceResolveProtocolMappter.js +17 -3
- package/openid/audienceResolveProtocolMappter.js.map +1 -1
- package/openid/client.d.ts +48 -431
- package/openid/client.js +48 -14
- package/openid/client.js.map +1 -1
- package/openid/clientAuthorizationPermission.d.ts +6 -2
- package/openid/clientAuthorizationPermission.js +6 -2
- package/openid/clientAuthorizationPermission.js.map +1 -1
- package/openid/clientDefaultScopes.d.ts +17 -33
- package/openid/clientDefaultScopes.js +17 -6
- package/openid/clientDefaultScopes.js.map +1 -1
- package/openid/clientOptionalScopes.d.ts +17 -34
- package/openid/clientOptionalScopes.js +17 -7
- package/openid/clientOptionalScopes.js.map +1 -1
- package/openid/clientPolicy.d.ts +2 -0
- package/openid/clientPolicy.js +2 -0
- package/openid/clientPolicy.js.map +1 -1
- package/openid/clientScope.d.ts +27 -67
- package/openid/clientScope.js +27 -13
- package/openid/clientScope.js.map +1 -1
- package/openid/clientServiceAccountRealmRole.d.ts +8 -2
- package/openid/clientServiceAccountRealmRole.js +8 -2
- package/openid/clientServiceAccountRealmRole.js.map +1 -1
- package/openid/clientServiceAccountRole.d.ts +8 -2
- package/openid/clientServiceAccountRole.js +8 -2
- package/openid/clientServiceAccountRole.js.map +1 -1
- package/openid/fullNameProtocolMapper.d.ts +49 -61
- package/openid/fullNameProtocolMapper.js +37 -22
- package/openid/fullNameProtocolMapper.js.map +1 -1
- package/openid/getClient.d.ts +32 -14
- package/openid/getClient.js +32 -2
- package/openid/getClient.js.map +1 -1
- package/openid/getClientAuthorizationPolicy.d.ts +4 -0
- package/openid/getClientAuthorizationPolicy.js +4 -0
- package/openid/getClientAuthorizationPolicy.js.map +1 -1
- package/openid/getClientScope.d.ts +4 -0
- package/openid/getClientScope.js +4 -0
- package/openid/getClientScope.js.map +1 -1
- package/openid/getClientServiceAccountUser.d.ts +4 -0
- package/openid/getClientServiceAccountUser.js +4 -0
- package/openid/getClientServiceAccountUser.js.map +1 -1
- package/openid/groupMembershipProtocolMapper.d.ts +53 -81
- package/openid/groupMembershipProtocolMapper.js +41 -24
- package/openid/groupMembershipProtocolMapper.js.map +1 -1
- package/openid/hardcodedClaimProtocolMapper.d.ts +66 -66
- package/openid/hardcodedClaimProtocolMapper.js +42 -24
- package/openid/hardcodedClaimProtocolMapper.js.map +1 -1
- package/openid/hardcodedRoleProtocolMapper.d.ts +48 -43
- package/openid/hardcodedRoleProtocolMapper.js +36 -22
- package/openid/hardcodedRoleProtocolMapper.js.map +1 -1
- package/openid/scriptProtocolMapper.d.ts +17 -3
- package/openid/scriptProtocolMapper.js +17 -3
- package/openid/scriptProtocolMapper.js.map +1 -1
- package/openid/userAttributeProtocolMapper.d.ts +73 -72
- package/openid/userAttributeProtocolMapper.js +43 -24
- package/openid/userAttributeProtocolMapper.js.map +1 -1
- package/openid/userClientRoleProtocolMapper.d.ts +17 -3
- package/openid/userClientRoleProtocolMapper.js +17 -3
- package/openid/userClientRoleProtocolMapper.js.map +1 -1
- package/openid/userPropertyProtocolMapper.d.ts +66 -67
- package/openid/userPropertyProtocolMapper.js +42 -25
- package/openid/userPropertyProtocolMapper.js.map +1 -1
- package/openid/userRealmRoleProtocolMapper.d.ts +73 -63
- package/openid/userRealmRoleProtocolMapper.js +43 -24
- package/openid/userRealmRoleProtocolMapper.js.map +1 -1
- package/openid/userSessionNoteProtocolMapper.d.ts +17 -3
- package/openid/userSessionNoteProtocolMapper.js +17 -3
- package/openid/userSessionNoteProtocolMapper.js.map +1 -1
- package/package.json +1 -1
- package/realm.d.ts +30 -509
- package/realm.js +0 -83
- package/realm.js.map +1 -1
- package/realmEvents.d.ts +20 -74
- package/realmEvents.js +20 -11
- package/realmEvents.js.map +1 -1
- package/realmKeystoreAesGenerated.d.ts +8 -2
- package/realmKeystoreAesGenerated.js +8 -2
- package/realmKeystoreAesGenerated.js.map +1 -1
- package/realmKeystoreEcdsaGenerated.d.ts +8 -2
- package/realmKeystoreEcdsaGenerated.js +8 -2
- package/realmKeystoreEcdsaGenerated.js.map +1 -1
- package/realmKeystoreHmacGenerated.d.ts +8 -2
- package/realmKeystoreHmacGenerated.js +8 -2
- package/realmKeystoreHmacGenerated.js.map +1 -1
- package/realmKeystoreJavaGenerated.d.ts +8 -2
- package/realmKeystoreJavaGenerated.js +8 -2
- package/realmKeystoreJavaGenerated.js.map +1 -1
- package/realmKeystoreRsa.d.ts +6 -2
- package/realmKeystoreRsa.js +6 -2
- package/realmKeystoreRsa.js.map +1 -1
- package/realmKeystoreRsaGenerated.d.ts +8 -2
- package/realmKeystoreRsaGenerated.js +8 -2
- package/realmKeystoreRsaGenerated.js.map +1 -1
- package/realmUserProfile.d.ts +2 -0
- package/realmUserProfile.js +2 -0
- package/realmUserProfile.js.map +1 -1
- package/requiredAction.d.ts +8 -2
- package/requiredAction.js +8 -2
- package/requiredAction.js.map +1 -1
- package/role.d.ts +58 -125
- package/role.js +58 -71
- package/role.js.map +1 -1
- package/saml/client.d.ts +46 -327
- package/saml/client.js +46 -12
- package/saml/client.js.map +1 -1
- package/saml/clientDefaultScope.d.ts +5 -1
- package/saml/clientDefaultScope.js +5 -1
- package/saml/clientDefaultScope.js.map +1 -1
- package/saml/clientScope.d.ts +10 -2
- package/saml/clientScope.js +10 -2
- package/saml/clientScope.js.map +1 -1
- package/saml/getClient.d.ts +4 -0
- package/saml/getClient.js +4 -0
- package/saml/getClient.js.map +1 -1
- package/saml/getClientInstallationProvider.d.ts +4 -0
- package/saml/getClientInstallationProvider.js +4 -0
- package/saml/getClientInstallationProvider.js.map +1 -1
- package/saml/identityProvider.d.ts +163 -117
- package/saml/identityProvider.js +52 -21
- package/saml/identityProvider.js.map +1 -1
- package/saml/scriptProtocolMapper.d.ts +13 -3
- package/saml/scriptProtocolMapper.js +13 -3
- package/saml/scriptProtocolMapper.js.map +1 -1
- package/saml/userAttributeProtocolMapper.d.ts +32 -91
- package/saml/userAttributeProtocolMapper.js +32 -19
- package/saml/userAttributeProtocolMapper.js.map +1 -1
- package/saml/userPropertyProtocolMapper.d.ts +32 -91
- package/saml/userPropertyProtocolMapper.js +32 -19
- package/saml/userPropertyProtocolMapper.js.map +1 -1
- package/types/input.d.ts +74 -183
- package/types/output.d.ts +44 -207
- package/user.d.ts +36 -112
- package/user.js +36 -22
- package/user.js.map +1 -1
- package/userGroups.d.ts +9 -1
- package/userGroups.js +9 -1
- package/userGroups.js.map +1 -1
- package/userRoles.d.ts +11 -2
- package/userRoles.js +11 -2
- package/userRoles.js.map +1 -1
- package/userTemplateImporterIdentityProviderMapper.d.ts +10 -2
- package/userTemplateImporterIdentityProviderMapper.js +10 -2
- package/userTemplateImporterIdentityProviderMapper.js.map +1 -1
- package/usersPermissions.d.ts +10 -25
- package/usersPermissions.js +10 -25
- package/usersPermissions.js.map +1 -1
|
@@ -6,68 +6,86 @@ exports.HardcodedClaimProtocolMapper = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* ## # keycloak.openid.HardcodedClaimProtocolMapper
|
|
10
10
|
*
|
|
11
|
-
*
|
|
11
|
+
* Allows for creating and managing hardcoded claim protocol mappers within
|
|
12
|
+
* Keycloak.
|
|
12
13
|
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
14
|
+
* Hardcoded claim protocol mappers allow you to define a claim with a hardcoded
|
|
15
|
+
* value. Protocol mappers can be defined for a single client, or they can
|
|
16
|
+
* be defined for a client scope which can be shared between multiple different
|
|
17
|
+
* clients.
|
|
15
18
|
*
|
|
16
|
-
*
|
|
17
|
-
* ### Client)
|
|
19
|
+
* ### Example Usage (Client)
|
|
18
20
|
*
|
|
21
|
+
* <!--Start PulumiCodeChooser -->
|
|
19
22
|
* ```typescript
|
|
20
23
|
* import * as pulumi from "@pulumi/pulumi";
|
|
21
24
|
* import * as keycloak from "@pulumi/keycloak";
|
|
22
25
|
*
|
|
23
26
|
* const realm = new keycloak.Realm("realm", {
|
|
24
|
-
* realm: "my-realm",
|
|
25
27
|
* enabled: true,
|
|
28
|
+
* realm: "my-realm",
|
|
26
29
|
* });
|
|
27
30
|
* const openidClient = new keycloak.openid.Client("openidClient", {
|
|
28
|
-
* realmId: realm.id,
|
|
29
|
-
* clientId: "client",
|
|
30
|
-
* enabled: true,
|
|
31
31
|
* accessType: "CONFIDENTIAL",
|
|
32
|
+
* clientId: "test-client",
|
|
33
|
+
* enabled: true,
|
|
34
|
+
* realmId: realm.id,
|
|
32
35
|
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
33
36
|
* });
|
|
34
37
|
* const hardcodedClaimMapper = new keycloak.openid.HardcodedClaimProtocolMapper("hardcodedClaimMapper", {
|
|
35
|
-
* realmId: realm.id,
|
|
36
|
-
* clientId: openidClient.id,
|
|
37
38
|
* claimName: "foo",
|
|
38
39
|
* claimValue: "bar",
|
|
40
|
+
* clientId: openidClient.id,
|
|
41
|
+
* realmId: realm.id,
|
|
39
42
|
* });
|
|
40
43
|
* ```
|
|
41
|
-
*
|
|
44
|
+
* <!--End PulumiCodeChooser -->
|
|
45
|
+
*
|
|
46
|
+
* ### Example Usage (Client Scope)
|
|
42
47
|
*
|
|
48
|
+
* <!--Start PulumiCodeChooser -->
|
|
43
49
|
* ```typescript
|
|
44
50
|
* import * as pulumi from "@pulumi/pulumi";
|
|
45
51
|
* import * as keycloak from "@pulumi/keycloak";
|
|
46
52
|
*
|
|
47
53
|
* const realm = new keycloak.Realm("realm", {
|
|
48
|
-
* realm: "my-realm",
|
|
49
54
|
* enabled: true,
|
|
55
|
+
* realm: "my-realm",
|
|
50
56
|
* });
|
|
51
57
|
* const clientScope = new keycloak.openid.ClientScope("clientScope", {realmId: realm.id});
|
|
52
58
|
* const hardcodedClaimMapper = new keycloak.openid.HardcodedClaimProtocolMapper("hardcodedClaimMapper", {
|
|
53
|
-
* realmId: realm.id,
|
|
54
|
-
* clientScopeId: clientScope.id,
|
|
55
59
|
* claimName: "foo",
|
|
56
60
|
* claimValue: "bar",
|
|
61
|
+
* clientScopeId: clientScope.id,
|
|
62
|
+
* realmId: realm.id,
|
|
57
63
|
* });
|
|
58
64
|
* ```
|
|
65
|
+
* <!--End PulumiCodeChooser -->
|
|
59
66
|
*
|
|
60
|
-
*
|
|
67
|
+
* ### Argument Reference
|
|
61
68
|
*
|
|
62
|
-
*
|
|
69
|
+
* The following arguments are supported:
|
|
63
70
|
*
|
|
64
|
-
*
|
|
65
|
-
*
|
|
66
|
-
*
|
|
71
|
+
* - `realmId` - (Required) The realm this protocol mapper exists within.
|
|
72
|
+
* - `clientId` - (Required if `clientScopeId` is not specified) The client this protocol mapper is attached to.
|
|
73
|
+
* - `clientScopeId` - (Required if `clientId` is not specified) The client scope this protocol mapper is attached to.
|
|
74
|
+
* - `name` - (Required) The display name of this protocol mapper in the GUI.
|
|
75
|
+
* - `claimName` - (Required) The name of the claim to insert into a token.
|
|
76
|
+
* - `claimValue` - (Required) The hardcoded value of the claim.
|
|
77
|
+
* - `claimValueType` - (Optional) The claim type used when serializing JSON tokens. Can be one of `String`, `long`, `int`, or `boolean`. Defaults to `String`.
|
|
78
|
+
* - `addToIdToken` - (Optional) Indicates if the property should be added as a claim to the id token. Defaults to `true`.
|
|
79
|
+
* - `addToAccessToken` - (Optional) Indicates if the property should be added as a claim to the access token. Defaults to `true`.
|
|
80
|
+
* - `addToUserinfo` - (Optional) Indicates if the property should be added as a claim to the UserInfo response body. Defaults to `true`.
|
|
67
81
|
*
|
|
68
|
-
*
|
|
69
|
-
*
|
|
70
|
-
*
|
|
82
|
+
* ### Import
|
|
83
|
+
*
|
|
84
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
85
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
86
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
87
|
+
*
|
|
88
|
+
* Example:
|
|
71
89
|
*/
|
|
72
90
|
class HardcodedClaimProtocolMapper extends pulumi.CustomResource {
|
|
73
91
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hardcodedClaimProtocolMapper.js","sourceRoot":"","sources":["../../openid/hardcodedClaimProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"hardcodedClaimProtocolMapper.js","sourceRoot":"","sources":["../../openid/hardcodedClaimProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,MAAa,4BAA6B,SAAQ,MAAM,CAAC,cAAc;IACnE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyC,EAAE,IAAmC;QACvI,OAAO,IAAI,4BAA4B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,4BAA4B,CAAC,YAAY,CAAC;IAC7E,CAAC;IA6CD,YAAY,IAAY,EAAE,WAAkF,EAAE,IAAmC;QAC7I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4D,CAAC;YAC3E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2D,CAAC;YACzE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,4BAA4B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;;AA9GL,oEA+GC;AAjGG,gBAAgB;AACO,yCAAY,GAAG,2EAA2E,CAAC"}
|
|
@@ -1,67 +1,81 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* ## # keycloak.openid.HardcodedRoleProtocolMapper
|
|
4
4
|
*
|
|
5
|
-
*
|
|
5
|
+
* Allows for creating and managing hardcoded role protocol mappers within
|
|
6
|
+
* Keycloak.
|
|
6
7
|
*
|
|
7
|
-
*
|
|
8
|
-
*
|
|
8
|
+
* Hardcoded role protocol mappers allow you to specify a single role to
|
|
9
|
+
* always map to an access token for a client. Protocol mappers can be
|
|
10
|
+
* defined for a single client, or they can be defined for a client scope
|
|
11
|
+
* which can be shared between multiple different clients.
|
|
9
12
|
*
|
|
10
|
-
*
|
|
11
|
-
* ### Client)
|
|
13
|
+
* ### Example Usage (Client)
|
|
12
14
|
*
|
|
15
|
+
* <!--Start PulumiCodeChooser -->
|
|
13
16
|
* ```typescript
|
|
14
17
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
18
|
* import * as keycloak from "@pulumi/keycloak";
|
|
16
19
|
*
|
|
17
20
|
* const realm = new keycloak.Realm("realm", {
|
|
18
|
-
* realm: "my-realm",
|
|
19
21
|
* enabled: true,
|
|
22
|
+
* realm: "my-realm",
|
|
20
23
|
* });
|
|
21
24
|
* const role = new keycloak.Role("role", {realmId: realm.id});
|
|
22
25
|
* const openidClient = new keycloak.openid.Client("openidClient", {
|
|
23
|
-
* realmId: realm.id,
|
|
24
|
-
* clientId: "client",
|
|
25
|
-
* enabled: true,
|
|
26
26
|
* accessType: "CONFIDENTIAL",
|
|
27
|
+
* clientId: "test-client",
|
|
28
|
+
* enabled: true,
|
|
29
|
+
* realmId: realm.id,
|
|
27
30
|
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
28
31
|
* });
|
|
29
32
|
* const hardcodedRoleMapper = new keycloak.openid.HardcodedRoleProtocolMapper("hardcodedRoleMapper", {
|
|
30
|
-
* realmId: realm.id,
|
|
31
33
|
* clientId: openidClient.id,
|
|
34
|
+
* realmId: realm.id,
|
|
32
35
|
* roleId: role.id,
|
|
33
36
|
* });
|
|
34
37
|
* ```
|
|
35
|
-
*
|
|
38
|
+
* <!--End PulumiCodeChooser -->
|
|
39
|
+
*
|
|
40
|
+
* ### Example Usage (Client Scope)
|
|
36
41
|
*
|
|
42
|
+
* <!--Start PulumiCodeChooser -->
|
|
37
43
|
* ```typescript
|
|
38
44
|
* import * as pulumi from "@pulumi/pulumi";
|
|
39
45
|
* import * as keycloak from "@pulumi/keycloak";
|
|
40
46
|
*
|
|
41
47
|
* const realm = new keycloak.Realm("realm", {
|
|
42
|
-
* realm: "my-realm",
|
|
43
48
|
* enabled: true,
|
|
49
|
+
* realm: "my-realm",
|
|
44
50
|
* });
|
|
45
51
|
* const role = new keycloak.Role("role", {realmId: realm.id});
|
|
46
52
|
* const clientScope = new keycloak.openid.ClientScope("clientScope", {realmId: realm.id});
|
|
47
53
|
* const hardcodedRoleMapper = new keycloak.openid.HardcodedRoleProtocolMapper("hardcodedRoleMapper", {
|
|
48
|
-
* realmId: realm.id,
|
|
49
54
|
* clientScopeId: clientScope.id,
|
|
55
|
+
* realmId: realm.id,
|
|
50
56
|
* roleId: role.id,
|
|
51
57
|
* });
|
|
52
58
|
* ```
|
|
59
|
+
* <!--End PulumiCodeChooser -->
|
|
53
60
|
*
|
|
54
|
-
*
|
|
61
|
+
* ### Argument Reference
|
|
55
62
|
*
|
|
56
|
-
*
|
|
63
|
+
* The following arguments are supported:
|
|
57
64
|
*
|
|
58
|
-
*
|
|
59
|
-
*
|
|
60
|
-
*
|
|
65
|
+
* - `realmId` - (Required) The realm this protocol mapper exists within.
|
|
66
|
+
* - `clientId` - (Required if `clientScopeId` is not specified) The client this protocol mapper is attached to.
|
|
67
|
+
* - `clientScopeId` - (Required if `clientId` is not specified) The client scope this protocol mapper is attached to.
|
|
68
|
+
* - `name` - (Required) The display name of this protocol mapper in the
|
|
69
|
+
* GUI.
|
|
70
|
+
* - `roleId` - (Required) The ID of the role to map to an access token.
|
|
61
71
|
*
|
|
62
|
-
*
|
|
63
|
-
*
|
|
64
|
-
*
|
|
72
|
+
* ### Import
|
|
73
|
+
*
|
|
74
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
75
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
76
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
77
|
+
*
|
|
78
|
+
* Example:
|
|
65
79
|
*/
|
|
66
80
|
export declare class HardcodedRoleProtocolMapper extends pulumi.CustomResource {
|
|
67
81
|
/**
|
|
@@ -80,24 +94,21 @@ export declare class HardcodedRoleProtocolMapper extends pulumi.CustomResource {
|
|
|
80
94
|
*/
|
|
81
95
|
static isInstance(obj: any): obj is HardcodedRoleProtocolMapper;
|
|
82
96
|
/**
|
|
83
|
-
* The
|
|
97
|
+
* The mapper's associated client. Cannot be used at the same time as client_scope_id.
|
|
84
98
|
*/
|
|
85
99
|
readonly clientId: pulumi.Output<string | undefined>;
|
|
86
100
|
/**
|
|
87
|
-
* The
|
|
101
|
+
* The mapper's associated client scope. Cannot be used at the same time as client_id.
|
|
88
102
|
*/
|
|
89
103
|
readonly clientScopeId: pulumi.Output<string | undefined>;
|
|
90
104
|
/**
|
|
91
|
-
*
|
|
105
|
+
* A human-friendly name that will appear in the Keycloak console.
|
|
92
106
|
*/
|
|
93
107
|
readonly name: pulumi.Output<string>;
|
|
94
108
|
/**
|
|
95
|
-
* The realm
|
|
109
|
+
* The realm id where the associated client or client scope exists.
|
|
96
110
|
*/
|
|
97
111
|
readonly realmId: pulumi.Output<string>;
|
|
98
|
-
/**
|
|
99
|
-
* The ID of the role to map to an access token.
|
|
100
|
-
*/
|
|
101
112
|
readonly roleId: pulumi.Output<string>;
|
|
102
113
|
/**
|
|
103
114
|
* Create a HardcodedRoleProtocolMapper resource with the given unique name, arguments, and options.
|
|
@@ -113,24 +124,21 @@ export declare class HardcodedRoleProtocolMapper extends pulumi.CustomResource {
|
|
|
113
124
|
*/
|
|
114
125
|
export interface HardcodedRoleProtocolMapperState {
|
|
115
126
|
/**
|
|
116
|
-
* The
|
|
127
|
+
* The mapper's associated client. Cannot be used at the same time as client_scope_id.
|
|
117
128
|
*/
|
|
118
129
|
clientId?: pulumi.Input<string>;
|
|
119
130
|
/**
|
|
120
|
-
* The
|
|
131
|
+
* The mapper's associated client scope. Cannot be used at the same time as client_id.
|
|
121
132
|
*/
|
|
122
133
|
clientScopeId?: pulumi.Input<string>;
|
|
123
134
|
/**
|
|
124
|
-
*
|
|
135
|
+
* A human-friendly name that will appear in the Keycloak console.
|
|
125
136
|
*/
|
|
126
137
|
name?: pulumi.Input<string>;
|
|
127
138
|
/**
|
|
128
|
-
* The realm
|
|
139
|
+
* The realm id where the associated client or client scope exists.
|
|
129
140
|
*/
|
|
130
141
|
realmId?: pulumi.Input<string>;
|
|
131
|
-
/**
|
|
132
|
-
* The ID of the role to map to an access token.
|
|
133
|
-
*/
|
|
134
142
|
roleId?: pulumi.Input<string>;
|
|
135
143
|
}
|
|
136
144
|
/**
|
|
@@ -138,23 +146,20 @@ export interface HardcodedRoleProtocolMapperState {
|
|
|
138
146
|
*/
|
|
139
147
|
export interface HardcodedRoleProtocolMapperArgs {
|
|
140
148
|
/**
|
|
141
|
-
* The
|
|
149
|
+
* The mapper's associated client. Cannot be used at the same time as client_scope_id.
|
|
142
150
|
*/
|
|
143
151
|
clientId?: pulumi.Input<string>;
|
|
144
152
|
/**
|
|
145
|
-
* The
|
|
153
|
+
* The mapper's associated client scope. Cannot be used at the same time as client_id.
|
|
146
154
|
*/
|
|
147
155
|
clientScopeId?: pulumi.Input<string>;
|
|
148
156
|
/**
|
|
149
|
-
*
|
|
157
|
+
* A human-friendly name that will appear in the Keycloak console.
|
|
150
158
|
*/
|
|
151
159
|
name?: pulumi.Input<string>;
|
|
152
160
|
/**
|
|
153
|
-
* The realm
|
|
161
|
+
* The realm id where the associated client or client scope exists.
|
|
154
162
|
*/
|
|
155
163
|
realmId: pulumi.Input<string>;
|
|
156
|
-
/**
|
|
157
|
-
* The ID of the role to map to an access token.
|
|
158
|
-
*/
|
|
159
164
|
roleId: pulumi.Input<string>;
|
|
160
165
|
}
|
|
@@ -6,68 +6,82 @@ exports.HardcodedRoleProtocolMapper = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* ## # keycloak.openid.HardcodedRoleProtocolMapper
|
|
10
10
|
*
|
|
11
|
-
*
|
|
11
|
+
* Allows for creating and managing hardcoded role protocol mappers within
|
|
12
|
+
* Keycloak.
|
|
12
13
|
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
14
|
+
* Hardcoded role protocol mappers allow you to specify a single role to
|
|
15
|
+
* always map to an access token for a client. Protocol mappers can be
|
|
16
|
+
* defined for a single client, or they can be defined for a client scope
|
|
17
|
+
* which can be shared between multiple different clients.
|
|
15
18
|
*
|
|
16
|
-
*
|
|
17
|
-
* ### Client)
|
|
19
|
+
* ### Example Usage (Client)
|
|
18
20
|
*
|
|
21
|
+
* <!--Start PulumiCodeChooser -->
|
|
19
22
|
* ```typescript
|
|
20
23
|
* import * as pulumi from "@pulumi/pulumi";
|
|
21
24
|
* import * as keycloak from "@pulumi/keycloak";
|
|
22
25
|
*
|
|
23
26
|
* const realm = new keycloak.Realm("realm", {
|
|
24
|
-
* realm: "my-realm",
|
|
25
27
|
* enabled: true,
|
|
28
|
+
* realm: "my-realm",
|
|
26
29
|
* });
|
|
27
30
|
* const role = new keycloak.Role("role", {realmId: realm.id});
|
|
28
31
|
* const openidClient = new keycloak.openid.Client("openidClient", {
|
|
29
|
-
* realmId: realm.id,
|
|
30
|
-
* clientId: "client",
|
|
31
|
-
* enabled: true,
|
|
32
32
|
* accessType: "CONFIDENTIAL",
|
|
33
|
+
* clientId: "test-client",
|
|
34
|
+
* enabled: true,
|
|
35
|
+
* realmId: realm.id,
|
|
33
36
|
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
34
37
|
* });
|
|
35
38
|
* const hardcodedRoleMapper = new keycloak.openid.HardcodedRoleProtocolMapper("hardcodedRoleMapper", {
|
|
36
|
-
* realmId: realm.id,
|
|
37
39
|
* clientId: openidClient.id,
|
|
40
|
+
* realmId: realm.id,
|
|
38
41
|
* roleId: role.id,
|
|
39
42
|
* });
|
|
40
43
|
* ```
|
|
41
|
-
*
|
|
44
|
+
* <!--End PulumiCodeChooser -->
|
|
45
|
+
*
|
|
46
|
+
* ### Example Usage (Client Scope)
|
|
42
47
|
*
|
|
48
|
+
* <!--Start PulumiCodeChooser -->
|
|
43
49
|
* ```typescript
|
|
44
50
|
* import * as pulumi from "@pulumi/pulumi";
|
|
45
51
|
* import * as keycloak from "@pulumi/keycloak";
|
|
46
52
|
*
|
|
47
53
|
* const realm = new keycloak.Realm("realm", {
|
|
48
|
-
* realm: "my-realm",
|
|
49
54
|
* enabled: true,
|
|
55
|
+
* realm: "my-realm",
|
|
50
56
|
* });
|
|
51
57
|
* const role = new keycloak.Role("role", {realmId: realm.id});
|
|
52
58
|
* const clientScope = new keycloak.openid.ClientScope("clientScope", {realmId: realm.id});
|
|
53
59
|
* const hardcodedRoleMapper = new keycloak.openid.HardcodedRoleProtocolMapper("hardcodedRoleMapper", {
|
|
54
|
-
* realmId: realm.id,
|
|
55
60
|
* clientScopeId: clientScope.id,
|
|
61
|
+
* realmId: realm.id,
|
|
56
62
|
* roleId: role.id,
|
|
57
63
|
* });
|
|
58
64
|
* ```
|
|
65
|
+
* <!--End PulumiCodeChooser -->
|
|
59
66
|
*
|
|
60
|
-
*
|
|
67
|
+
* ### Argument Reference
|
|
61
68
|
*
|
|
62
|
-
*
|
|
69
|
+
* The following arguments are supported:
|
|
63
70
|
*
|
|
64
|
-
*
|
|
65
|
-
*
|
|
66
|
-
*
|
|
71
|
+
* - `realmId` - (Required) The realm this protocol mapper exists within.
|
|
72
|
+
* - `clientId` - (Required if `clientScopeId` is not specified) The client this protocol mapper is attached to.
|
|
73
|
+
* - `clientScopeId` - (Required if `clientId` is not specified) The client scope this protocol mapper is attached to.
|
|
74
|
+
* - `name` - (Required) The display name of this protocol mapper in the
|
|
75
|
+
* GUI.
|
|
76
|
+
* - `roleId` - (Required) The ID of the role to map to an access token.
|
|
67
77
|
*
|
|
68
|
-
*
|
|
69
|
-
*
|
|
70
|
-
*
|
|
78
|
+
* ### Import
|
|
79
|
+
*
|
|
80
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
81
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
82
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
83
|
+
*
|
|
84
|
+
* Example:
|
|
71
85
|
*/
|
|
72
86
|
class HardcodedRoleProtocolMapper extends pulumi.CustomResource {
|
|
73
87
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hardcodedRoleProtocolMapper.js","sourceRoot":"","sources":["../../openid/hardcodedRoleProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"hardcodedRoleProtocolMapper.js","sourceRoot":"","sources":["../../openid/hardcodedRoleProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IAClE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwC,EAAE,IAAmC;QACtI,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;IA4BD,YAAY,IAAY,EAAE,WAAgF,EAAE,IAAmC;QAC3I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2D,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0D,CAAC;YACxE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;;AAhFL,kEAiFC;AAnEG,gBAAgB;AACO,wCAAY,GAAG,yEAAyE,CAAC"}
|
|
@@ -10,8 +10,10 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
10
10
|
* > Support for this protocol mapper was removed in Keycloak 18.
|
|
11
11
|
*
|
|
12
12
|
* ## Example Usage
|
|
13
|
+
*
|
|
13
14
|
* ### Client)
|
|
14
15
|
*
|
|
16
|
+
* <!--Start PulumiCodeChooser -->
|
|
15
17
|
* ```typescript
|
|
16
18
|
* import * as pulumi from "@pulumi/pulumi";
|
|
17
19
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -34,8 +36,11 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
34
36
|
* script: "exports = 'foo';",
|
|
35
37
|
* });
|
|
36
38
|
* ```
|
|
39
|
+
* <!--End PulumiCodeChooser -->
|
|
40
|
+
*
|
|
37
41
|
* ### Client Scope)
|
|
38
42
|
*
|
|
43
|
+
* <!--Start PulumiCodeChooser -->
|
|
39
44
|
* ```typescript
|
|
40
45
|
* import * as pulumi from "@pulumi/pulumi";
|
|
41
46
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -52,17 +57,26 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
52
57
|
* script: "exports = 'foo';",
|
|
53
58
|
* });
|
|
54
59
|
* ```
|
|
60
|
+
* <!--End PulumiCodeChooser -->
|
|
55
61
|
*
|
|
56
62
|
* ## Import
|
|
57
63
|
*
|
|
58
|
-
* Protocol mappers can be imported using one of the following formats
|
|
64
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
65
|
+
*
|
|
66
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
67
|
+
*
|
|
68
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
69
|
+
*
|
|
70
|
+
* Example:
|
|
71
|
+
*
|
|
72
|
+
* bash
|
|
59
73
|
*
|
|
60
74
|
* ```sh
|
|
61
|
-
*
|
|
75
|
+
* $ pulumi import keycloak:openid/scriptProtocolMapper:ScriptProtocolMapper script_mapper my-realm/client/a7202154-8793-4656-b655-1dd18c181e14/71602afa-f7d1-4788-8c49-ef8fd00af0f4
|
|
62
76
|
* ```
|
|
63
77
|
*
|
|
64
78
|
* ```sh
|
|
65
|
-
*
|
|
79
|
+
* $ pulumi import keycloak:openid/scriptProtocolMapper:ScriptProtocolMapper script_mapper my-realm/client-scope/b799ea7e-73ee-4a73-990a-1eafebe8e20a/71602afa-f7d1-4788-8c49-ef8fd00af0f4
|
|
66
80
|
* ```
|
|
67
81
|
*/
|
|
68
82
|
export declare class ScriptProtocolMapper extends pulumi.CustomResource {
|
|
@@ -16,8 +16,10 @@ const utilities = require("../utilities");
|
|
|
16
16
|
* > Support for this protocol mapper was removed in Keycloak 18.
|
|
17
17
|
*
|
|
18
18
|
* ## Example Usage
|
|
19
|
+
*
|
|
19
20
|
* ### Client)
|
|
20
21
|
*
|
|
22
|
+
* <!--Start PulumiCodeChooser -->
|
|
21
23
|
* ```typescript
|
|
22
24
|
* import * as pulumi from "@pulumi/pulumi";
|
|
23
25
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -40,8 +42,11 @@ const utilities = require("../utilities");
|
|
|
40
42
|
* script: "exports = 'foo';",
|
|
41
43
|
* });
|
|
42
44
|
* ```
|
|
45
|
+
* <!--End PulumiCodeChooser -->
|
|
46
|
+
*
|
|
43
47
|
* ### Client Scope)
|
|
44
48
|
*
|
|
49
|
+
* <!--Start PulumiCodeChooser -->
|
|
45
50
|
* ```typescript
|
|
46
51
|
* import * as pulumi from "@pulumi/pulumi";
|
|
47
52
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -58,17 +63,26 @@ const utilities = require("../utilities");
|
|
|
58
63
|
* script: "exports = 'foo';",
|
|
59
64
|
* });
|
|
60
65
|
* ```
|
|
66
|
+
* <!--End PulumiCodeChooser -->
|
|
61
67
|
*
|
|
62
68
|
* ## Import
|
|
63
69
|
*
|
|
64
|
-
* Protocol mappers can be imported using one of the following formats
|
|
70
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
71
|
+
*
|
|
72
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
73
|
+
*
|
|
74
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
75
|
+
*
|
|
76
|
+
* Example:
|
|
77
|
+
*
|
|
78
|
+
* bash
|
|
65
79
|
*
|
|
66
80
|
* ```sh
|
|
67
|
-
*
|
|
81
|
+
* $ pulumi import keycloak:openid/scriptProtocolMapper:ScriptProtocolMapper script_mapper my-realm/client/a7202154-8793-4656-b655-1dd18c181e14/71602afa-f7d1-4788-8c49-ef8fd00af0f4
|
|
68
82
|
* ```
|
|
69
83
|
*
|
|
70
84
|
* ```sh
|
|
71
|
-
*
|
|
85
|
+
* $ pulumi import keycloak:openid/scriptProtocolMapper:ScriptProtocolMapper script_mapper my-realm/client-scope/b799ea7e-73ee-4a73-990a-1eafebe8e20a/71602afa-f7d1-4788-8c49-ef8fd00af0f4
|
|
72
86
|
* ```
|
|
73
87
|
*/
|
|
74
88
|
class ScriptProtocolMapper extends pulumi.CustomResource {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scriptProtocolMapper.js","sourceRoot":"","sources":["../../openid/scriptProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"scriptProtocolMapper.js","sourceRoot":"","sources":["../../openid/scriptProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IAC3D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;IAuDD,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;;AA1HL,oDA2HC;AA7GG,gBAAgB;AACO,iCAAY,GAAG,2DAA2D,CAAC"}
|