@pulumi/keycloak 5.3.0 → 5.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/attributeImporterIdentityProviderMapper.d.ts +46 -63
- package/attributeImporterIdentityProviderMapper.js +25 -33
- package/attributeImporterIdentityProviderMapper.js.map +1 -1
- package/attributeToRoleIdentityMapper.d.ts +10 -2
- package/attributeToRoleIdentityMapper.js +10 -2
- package/attributeToRoleIdentityMapper.js.map +1 -1
- package/authentication/bindings.d.ts +2 -0
- package/authentication/bindings.js +2 -0
- package/authentication/bindings.js.map +1 -1
- package/authentication/execution.d.ts +8 -2
- package/authentication/execution.js +8 -2
- package/authentication/execution.js.map +1 -1
- package/authentication/executionConfig.d.ts +12 -2
- package/authentication/executionConfig.js +12 -2
- package/authentication/executionConfig.js.map +1 -1
- package/authentication/flow.d.ts +16 -2
- package/authentication/flow.js +16 -2
- package/authentication/flow.js.map +1 -1
- package/authentication/subflow.d.ts +18 -2
- package/authentication/subflow.js +18 -2
- package/authentication/subflow.js.map +1 -1
- package/customIdentityProviderMapping.d.ts +13 -5
- package/customIdentityProviderMapping.js +10 -2
- package/customIdentityProviderMapping.js.map +1 -1
- package/customUserFederation.d.ts +51 -50
- package/customUserFederation.js +27 -14
- package/customUserFederation.js.map +1 -1
- package/defaultGroups.d.ts +19 -27
- package/defaultGroups.js +19 -9
- package/defaultGroups.js.map +1 -1
- package/defaultRoles.d.ts +13 -2
- package/defaultRoles.js +13 -2
- package/defaultRoles.js.map +1 -1
- package/genericClientProtocolMapper.d.ts +40 -37
- package/genericClientProtocolMapper.js +25 -13
- package/genericClientProtocolMapper.js.map +1 -1
- package/genericClientRoleMapper.d.ts +22 -2
- package/genericClientRoleMapper.js +22 -2
- package/genericClientRoleMapper.js.map +1 -1
- package/genericProtocolMapper.d.ts +8 -2
- package/genericProtocolMapper.js +8 -2
- package/genericProtocolMapper.js.map +1 -1
- package/genericRoleMapper.d.ts +22 -2
- package/genericRoleMapper.js +22 -2
- package/genericRoleMapper.js.map +1 -1
- package/getAuthenticationExecution.d.ts +4 -0
- package/getAuthenticationExecution.js +4 -0
- package/getAuthenticationExecution.js.map +1 -1
- package/getAuthenticationFlow.d.ts +4 -0
- package/getAuthenticationFlow.js +4 -0
- package/getAuthenticationFlow.js.map +1 -1
- package/getClientDescriptionConverter.d.ts +4 -0
- package/getClientDescriptionConverter.js +4 -0
- package/getClientDescriptionConverter.js.map +1 -1
- package/getGroup.d.ts +4 -62
- package/getGroup.js +4 -50
- package/getGroup.js.map +1 -1
- package/getRealm.d.ts +32 -10
- package/getRealm.js +32 -4
- package/getRealm.js.map +1 -1
- package/getRealmKeys.d.ts +8 -28
- package/getRealmKeys.js +8 -4
- package/getRealmKeys.js.map +1 -1
- package/getRole.d.ts +4 -65
- package/getRole.js +4 -44
- package/getRole.js.map +1 -1
- package/getUser.d.ts +4 -0
- package/getUser.js +4 -0
- package/getUser.js.map +1 -1
- package/getUserRealmRoles.d.ts +4 -0
- package/getUserRealmRoles.js +4 -0
- package/getUserRealmRoles.js.map +1 -1
- package/group.d.ts +35 -58
- package/group.js +35 -16
- package/group.js.map +1 -1
- package/groupMemberships.d.ts +27 -43
- package/groupMemberships.js +27 -16
- package/groupMemberships.js.map +1 -1
- package/groupPermissions.d.ts +13 -0
- package/groupPermissions.js +13 -0
- package/groupPermissions.js.map +1 -1
- package/groupRoles.d.ts +32 -91
- package/groupRoles.js +32 -55
- package/groupRoles.js.map +1 -1
- package/hardcodedAttributeIdentityProviderMapper.d.ts +2 -0
- package/hardcodedAttributeIdentityProviderMapper.js +2 -0
- package/hardcodedAttributeIdentityProviderMapper.js.map +1 -1
- package/hardcodedRoleIdentityMapper.d.ts +2 -0
- package/hardcodedRoleIdentityMapper.js +2 -0
- package/hardcodedRoleIdentityMapper.js.map +1 -1
- package/identityProviderTokenExchangeScopePermission.d.ts +10 -2
- package/identityProviderTokenExchangeScopePermission.js +10 -2
- package/identityProviderTokenExchangeScopePermission.js.map +1 -1
- package/ldap/customMapper.d.ts +10 -2
- package/ldap/customMapper.js +10 -2
- package/ldap/customMapper.js.map +1 -1
- package/ldap/fullNameMapper.d.ts +41 -54
- package/ldap/fullNameMapper.js +32 -18
- package/ldap/fullNameMapper.js.map +1 -1
- package/ldap/groupMapper.d.ts +55 -164
- package/ldap/groupMapper.js +46 -20
- package/ldap/groupMapper.js.map +1 -1
- package/ldap/hardcodedAttributeMapper.d.ts +10 -2
- package/ldap/hardcodedAttributeMapper.js +10 -2
- package/ldap/hardcodedAttributeMapper.js.map +1 -1
- package/ldap/hardcodedGroupMapper.d.ts +10 -2
- package/ldap/hardcodedGroupMapper.js +10 -2
- package/ldap/hardcodedGroupMapper.js.map +1 -1
- package/ldap/hardcodedRoleMapper.d.ts +29 -64
- package/ldap/hardcodedRoleMapper.js +17 -52
- package/ldap/hardcodedRoleMapper.js.map +1 -1
- package/ldap/msadLdsUserAccountControlMapper.d.ts +10 -2
- package/ldap/msadLdsUserAccountControlMapper.js +10 -2
- package/ldap/msadLdsUserAccountControlMapper.js.map +1 -1
- package/ldap/msadUserAccountControlMapper.d.ts +34 -32
- package/ldap/msadUserAccountControlMapper.js +25 -14
- package/ldap/msadUserAccountControlMapper.js.map +1 -1
- package/ldap/roleMapper.d.ts +10 -2
- package/ldap/roleMapper.js +10 -2
- package/ldap/roleMapper.js.map +1 -1
- package/ldap/userAttributeMapper.d.ts +60 -45
- package/ldap/userAttributeMapper.js +30 -15
- package/ldap/userAttributeMapper.js.map +1 -1
- package/ldap/userFederation.d.ts +125 -95
- package/ldap/userFederation.js +53 -20
- package/ldap/userFederation.js.map +1 -1
- package/oidc/googleIdentityProvider.d.ts +8 -2
- package/oidc/googleIdentityProvider.js +8 -2
- package/oidc/googleIdentityProvider.js.map +1 -1
- package/oidc/identityProvider.d.ts +8 -2
- package/oidc/identityProvider.js +8 -2
- package/oidc/identityProvider.js.map +1 -1
- package/openid/audienceProtocolMapper.d.ts +62 -45
- package/openid/audienceProtocolMapper.js +38 -21
- package/openid/audienceProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMapper.d.ts +17 -3
- package/openid/audienceResolveProtocolMapper.js +17 -3
- package/openid/audienceResolveProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMappter.d.ts +17 -3
- package/openid/audienceResolveProtocolMappter.js +17 -3
- package/openid/audienceResolveProtocolMappter.js.map +1 -1
- package/openid/client.d.ts +48 -431
- package/openid/client.js +48 -14
- package/openid/client.js.map +1 -1
- package/openid/clientAuthorizationPermission.d.ts +6 -2
- package/openid/clientAuthorizationPermission.js +6 -2
- package/openid/clientAuthorizationPermission.js.map +1 -1
- package/openid/clientDefaultScopes.d.ts +17 -33
- package/openid/clientDefaultScopes.js +17 -6
- package/openid/clientDefaultScopes.js.map +1 -1
- package/openid/clientOptionalScopes.d.ts +17 -34
- package/openid/clientOptionalScopes.js +17 -7
- package/openid/clientOptionalScopes.js.map +1 -1
- package/openid/clientPolicy.d.ts +2 -0
- package/openid/clientPolicy.js +2 -0
- package/openid/clientPolicy.js.map +1 -1
- package/openid/clientScope.d.ts +27 -67
- package/openid/clientScope.js +27 -13
- package/openid/clientScope.js.map +1 -1
- package/openid/clientServiceAccountRealmRole.d.ts +8 -2
- package/openid/clientServiceAccountRealmRole.js +8 -2
- package/openid/clientServiceAccountRealmRole.js.map +1 -1
- package/openid/clientServiceAccountRole.d.ts +8 -2
- package/openid/clientServiceAccountRole.js +8 -2
- package/openid/clientServiceAccountRole.js.map +1 -1
- package/openid/fullNameProtocolMapper.d.ts +49 -61
- package/openid/fullNameProtocolMapper.js +37 -22
- package/openid/fullNameProtocolMapper.js.map +1 -1
- package/openid/getClient.d.ts +32 -14
- package/openid/getClient.js +32 -2
- package/openid/getClient.js.map +1 -1
- package/openid/getClientAuthorizationPolicy.d.ts +4 -0
- package/openid/getClientAuthorizationPolicy.js +4 -0
- package/openid/getClientAuthorizationPolicy.js.map +1 -1
- package/openid/getClientScope.d.ts +4 -0
- package/openid/getClientScope.js +4 -0
- package/openid/getClientScope.js.map +1 -1
- package/openid/getClientServiceAccountUser.d.ts +4 -0
- package/openid/getClientServiceAccountUser.js +4 -0
- package/openid/getClientServiceAccountUser.js.map +1 -1
- package/openid/groupMembershipProtocolMapper.d.ts +53 -81
- package/openid/groupMembershipProtocolMapper.js +41 -24
- package/openid/groupMembershipProtocolMapper.js.map +1 -1
- package/openid/hardcodedClaimProtocolMapper.d.ts +66 -66
- package/openid/hardcodedClaimProtocolMapper.js +42 -24
- package/openid/hardcodedClaimProtocolMapper.js.map +1 -1
- package/openid/hardcodedRoleProtocolMapper.d.ts +48 -43
- package/openid/hardcodedRoleProtocolMapper.js +36 -22
- package/openid/hardcodedRoleProtocolMapper.js.map +1 -1
- package/openid/scriptProtocolMapper.d.ts +17 -3
- package/openid/scriptProtocolMapper.js +17 -3
- package/openid/scriptProtocolMapper.js.map +1 -1
- package/openid/userAttributeProtocolMapper.d.ts +73 -72
- package/openid/userAttributeProtocolMapper.js +43 -24
- package/openid/userAttributeProtocolMapper.js.map +1 -1
- package/openid/userClientRoleProtocolMapper.d.ts +17 -3
- package/openid/userClientRoleProtocolMapper.js +17 -3
- package/openid/userClientRoleProtocolMapper.js.map +1 -1
- package/openid/userPropertyProtocolMapper.d.ts +66 -67
- package/openid/userPropertyProtocolMapper.js +42 -25
- package/openid/userPropertyProtocolMapper.js.map +1 -1
- package/openid/userRealmRoleProtocolMapper.d.ts +73 -63
- package/openid/userRealmRoleProtocolMapper.js +43 -24
- package/openid/userRealmRoleProtocolMapper.js.map +1 -1
- package/openid/userSessionNoteProtocolMapper.d.ts +17 -3
- package/openid/userSessionNoteProtocolMapper.js +17 -3
- package/openid/userSessionNoteProtocolMapper.js.map +1 -1
- package/package.json +1 -1
- package/realm.d.ts +30 -509
- package/realm.js +0 -83
- package/realm.js.map +1 -1
- package/realmEvents.d.ts +20 -74
- package/realmEvents.js +20 -11
- package/realmEvents.js.map +1 -1
- package/realmKeystoreAesGenerated.d.ts +8 -2
- package/realmKeystoreAesGenerated.js +8 -2
- package/realmKeystoreAesGenerated.js.map +1 -1
- package/realmKeystoreEcdsaGenerated.d.ts +8 -2
- package/realmKeystoreEcdsaGenerated.js +8 -2
- package/realmKeystoreEcdsaGenerated.js.map +1 -1
- package/realmKeystoreHmacGenerated.d.ts +8 -2
- package/realmKeystoreHmacGenerated.js +8 -2
- package/realmKeystoreHmacGenerated.js.map +1 -1
- package/realmKeystoreJavaGenerated.d.ts +8 -2
- package/realmKeystoreJavaGenerated.js +8 -2
- package/realmKeystoreJavaGenerated.js.map +1 -1
- package/realmKeystoreRsa.d.ts +6 -2
- package/realmKeystoreRsa.js +6 -2
- package/realmKeystoreRsa.js.map +1 -1
- package/realmKeystoreRsaGenerated.d.ts +8 -2
- package/realmKeystoreRsaGenerated.js +8 -2
- package/realmKeystoreRsaGenerated.js.map +1 -1
- package/realmUserProfile.d.ts +2 -0
- package/realmUserProfile.js +2 -0
- package/realmUserProfile.js.map +1 -1
- package/requiredAction.d.ts +8 -2
- package/requiredAction.js +8 -2
- package/requiredAction.js.map +1 -1
- package/role.d.ts +58 -125
- package/role.js +58 -71
- package/role.js.map +1 -1
- package/saml/client.d.ts +46 -327
- package/saml/client.js +46 -12
- package/saml/client.js.map +1 -1
- package/saml/clientDefaultScope.d.ts +5 -1
- package/saml/clientDefaultScope.js +5 -1
- package/saml/clientDefaultScope.js.map +1 -1
- package/saml/clientScope.d.ts +10 -2
- package/saml/clientScope.js +10 -2
- package/saml/clientScope.js.map +1 -1
- package/saml/getClient.d.ts +4 -0
- package/saml/getClient.js +4 -0
- package/saml/getClient.js.map +1 -1
- package/saml/getClientInstallationProvider.d.ts +4 -0
- package/saml/getClientInstallationProvider.js +4 -0
- package/saml/getClientInstallationProvider.js.map +1 -1
- package/saml/identityProvider.d.ts +163 -117
- package/saml/identityProvider.js +52 -21
- package/saml/identityProvider.js.map +1 -1
- package/saml/scriptProtocolMapper.d.ts +13 -3
- package/saml/scriptProtocolMapper.js +13 -3
- package/saml/scriptProtocolMapper.js.map +1 -1
- package/saml/userAttributeProtocolMapper.d.ts +32 -91
- package/saml/userAttributeProtocolMapper.js +32 -19
- package/saml/userAttributeProtocolMapper.js.map +1 -1
- package/saml/userPropertyProtocolMapper.d.ts +32 -91
- package/saml/userPropertyProtocolMapper.js +32 -19
- package/saml/userPropertyProtocolMapper.js.map +1 -1
- package/types/input.d.ts +74 -183
- package/types/output.d.ts +44 -207
- package/user.d.ts +36 -112
- package/user.js +36 -22
- package/user.js.map +1 -1
- package/userGroups.d.ts +9 -1
- package/userGroups.js +9 -1
- package/userGroups.js.map +1 -1
- package/userRoles.d.ts +11 -2
- package/userRoles.js +11 -2
- package/userRoles.js.map +1 -1
- package/userTemplateImporterIdentityProviderMapper.d.ts +10 -2
- package/userTemplateImporterIdentityProviderMapper.js +10 -2
- package/userTemplateImporterIdentityProviderMapper.js.map +1 -1
- package/usersPermissions.d.ts +10 -25
- package/usersPermissions.js +10 -25
- package/usersPermissions.js.map +1 -1
|
@@ -1,65 +1,84 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* ## # keycloak.openid.UserRealmRoleProtocolMapper
|
|
4
4
|
*
|
|
5
|
-
*
|
|
5
|
+
* Allows for creating and managing user realm role protocol mappers within
|
|
6
|
+
* Keycloak.
|
|
6
7
|
*
|
|
7
|
-
*
|
|
8
|
-
*
|
|
8
|
+
* User realm role protocol mappers allow you to define a claim containing the list of the realm roles.
|
|
9
|
+
* Protocol mappers can be defined for a single client, or they can
|
|
10
|
+
* be defined for a client scope which can be shared between multiple different
|
|
11
|
+
* clients.
|
|
9
12
|
*
|
|
10
|
-
*
|
|
11
|
-
* ### Client)
|
|
13
|
+
* ### Example Usage (Client)
|
|
12
14
|
*
|
|
15
|
+
* <!--Start PulumiCodeChooser -->
|
|
13
16
|
* ```typescript
|
|
14
17
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
18
|
* import * as keycloak from "@pulumi/keycloak";
|
|
16
19
|
*
|
|
17
20
|
* const realm = new keycloak.Realm("realm", {
|
|
18
|
-
* realm: "my-realm",
|
|
19
21
|
* enabled: true,
|
|
22
|
+
* realm: "my-realm",
|
|
20
23
|
* });
|
|
21
24
|
* const openidClient = new keycloak.openid.Client("openidClient", {
|
|
22
|
-
* realmId: realm.id,
|
|
23
|
-
* clientId: "client",
|
|
24
|
-
* enabled: true,
|
|
25
25
|
* accessType: "CONFIDENTIAL",
|
|
26
|
+
* clientId: "test-client",
|
|
27
|
+
* enabled: true,
|
|
28
|
+
* realmId: realm.id,
|
|
26
29
|
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
27
30
|
* });
|
|
28
31
|
* const userRealmRoleMapper = new keycloak.openid.UserRealmRoleProtocolMapper("userRealmRoleMapper", {
|
|
29
|
-
* realmId: realm.id,
|
|
30
|
-
* clientId: openidClient.id,
|
|
31
32
|
* claimName: "foo",
|
|
33
|
+
* clientId: openidClient.id,
|
|
34
|
+
* realmId: realm.id,
|
|
32
35
|
* });
|
|
33
36
|
* ```
|
|
34
|
-
*
|
|
37
|
+
* <!--End PulumiCodeChooser -->
|
|
35
38
|
*
|
|
39
|
+
* ### Example Usage (Client Scope)
|
|
40
|
+
*
|
|
41
|
+
* <!--Start PulumiCodeChooser -->
|
|
36
42
|
* ```typescript
|
|
37
43
|
* import * as pulumi from "@pulumi/pulumi";
|
|
38
44
|
* import * as keycloak from "@pulumi/keycloak";
|
|
39
45
|
*
|
|
40
46
|
* const realm = new keycloak.Realm("realm", {
|
|
41
|
-
* realm: "my-realm",
|
|
42
47
|
* enabled: true,
|
|
48
|
+
* realm: "my-realm",
|
|
43
49
|
* });
|
|
44
50
|
* const clientScope = new keycloak.openid.ClientScope("clientScope", {realmId: realm.id});
|
|
45
51
|
* const userRealmRoleMapper = new keycloak.openid.UserRealmRoleProtocolMapper("userRealmRoleMapper", {
|
|
46
|
-
* realmId: realm.id,
|
|
47
|
-
* clientScopeId: clientScope.id,
|
|
48
52
|
* claimName: "foo",
|
|
53
|
+
* clientScopeId: clientScope.id,
|
|
54
|
+
* realmId: realm.id,
|
|
49
55
|
* });
|
|
50
56
|
* ```
|
|
57
|
+
* <!--End PulumiCodeChooser -->
|
|
51
58
|
*
|
|
52
|
-
*
|
|
59
|
+
* ### Argument Reference
|
|
53
60
|
*
|
|
54
|
-
*
|
|
61
|
+
* The following arguments are supported:
|
|
55
62
|
*
|
|
56
|
-
*
|
|
57
|
-
*
|
|
58
|
-
*
|
|
63
|
+
* - `realmId` - (Required) The realm this protocol mapper exists within.
|
|
64
|
+
* - `clientId` - (Required if `clientScopeId` is not specified) The client this protocol mapper is attached to.
|
|
65
|
+
* - `clientScopeId` - (Required if `clientId` is not specified) The client scope this protocol mapper is attached to.
|
|
66
|
+
* - `name` - (Required) The display name of this protocol mapper in the GUI.
|
|
67
|
+
* - `claimName` - (Required) The name of the claim to insert into a token.
|
|
68
|
+
* - `claimValueType` - (Optional) The claim type used when serializing JSON tokens. Can be one of `String`, `long`, `int`, or `boolean`. Defaults to `String`.
|
|
69
|
+
* - `multivalued` - (Optional) Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to `true`.
|
|
70
|
+
* - `realmRolePrefix` - (Optional) A prefix for each Realm Role.
|
|
71
|
+
* - `addToIdToken` - (Optional) Indicates if the property should be added as a claim to the id token. Defaults to `true`.
|
|
72
|
+
* - `addToAccessToken` - (Optional) Indicates if the property should be added as a claim to the access token. Defaults to `true`.
|
|
73
|
+
* - `addToUserinfo` - (Optional) Indicates if the property should be added as a claim to the UserInfo response body. Defaults to `true`.
|
|
59
74
|
*
|
|
60
|
-
*
|
|
61
|
-
*
|
|
62
|
-
*
|
|
75
|
+
* ### Import
|
|
76
|
+
*
|
|
77
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
78
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
79
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
80
|
+
*
|
|
81
|
+
* Example:
|
|
63
82
|
*/
|
|
64
83
|
export declare class UserRealmRoleProtocolMapper extends pulumi.CustomResource {
|
|
65
84
|
/**
|
|
@@ -78,47 +97,44 @@ export declare class UserRealmRoleProtocolMapper extends pulumi.CustomResource {
|
|
|
78
97
|
*/
|
|
79
98
|
static isInstance(obj: any): obj is UserRealmRoleProtocolMapper;
|
|
80
99
|
/**
|
|
81
|
-
* Indicates if the
|
|
100
|
+
* Indicates if the attribute should be a claim in the access token.
|
|
82
101
|
*/
|
|
83
102
|
readonly addToAccessToken: pulumi.Output<boolean | undefined>;
|
|
84
103
|
/**
|
|
85
|
-
* Indicates if the
|
|
104
|
+
* Indicates if the attribute should be a claim in the id token.
|
|
86
105
|
*/
|
|
87
106
|
readonly addToIdToken: pulumi.Output<boolean | undefined>;
|
|
88
107
|
/**
|
|
89
|
-
* Indicates if the
|
|
108
|
+
* Indicates if the attribute should appear in the userinfo response body.
|
|
90
109
|
*/
|
|
91
110
|
readonly addToUserinfo: pulumi.Output<boolean | undefined>;
|
|
92
|
-
/**
|
|
93
|
-
* The name of the claim to insert into a token.
|
|
94
|
-
*/
|
|
95
111
|
readonly claimName: pulumi.Output<string>;
|
|
96
112
|
/**
|
|
97
|
-
*
|
|
113
|
+
* Claim type used when serializing tokens.
|
|
98
114
|
*/
|
|
99
115
|
readonly claimValueType: pulumi.Output<string | undefined>;
|
|
100
116
|
/**
|
|
101
|
-
* The
|
|
117
|
+
* The mapper's associated client. Cannot be used at the same time as client_scope_id.
|
|
102
118
|
*/
|
|
103
119
|
readonly clientId: pulumi.Output<string | undefined>;
|
|
104
120
|
/**
|
|
105
|
-
* The
|
|
121
|
+
* The mapper's associated client scope. Cannot be used at the same time as client_id.
|
|
106
122
|
*/
|
|
107
123
|
readonly clientScopeId: pulumi.Output<string | undefined>;
|
|
108
124
|
/**
|
|
109
|
-
* Indicates
|
|
125
|
+
* Indicates whether this attribute is a single value or an array of values.
|
|
110
126
|
*/
|
|
111
127
|
readonly multivalued: pulumi.Output<boolean | undefined>;
|
|
112
128
|
/**
|
|
113
|
-
*
|
|
129
|
+
* A human-friendly name that will appear in the Keycloak console.
|
|
114
130
|
*/
|
|
115
131
|
readonly name: pulumi.Output<string>;
|
|
116
132
|
/**
|
|
117
|
-
* The realm
|
|
133
|
+
* The realm id where the associated client or client scope exists.
|
|
118
134
|
*/
|
|
119
135
|
readonly realmId: pulumi.Output<string>;
|
|
120
136
|
/**
|
|
121
|
-
*
|
|
137
|
+
* Prefix that will be added to each realm role.
|
|
122
138
|
*/
|
|
123
139
|
readonly realmRolePrefix: pulumi.Output<string | undefined>;
|
|
124
140
|
/**
|
|
@@ -135,47 +151,44 @@ export declare class UserRealmRoleProtocolMapper extends pulumi.CustomResource {
|
|
|
135
151
|
*/
|
|
136
152
|
export interface UserRealmRoleProtocolMapperState {
|
|
137
153
|
/**
|
|
138
|
-
* Indicates if the
|
|
154
|
+
* Indicates if the attribute should be a claim in the access token.
|
|
139
155
|
*/
|
|
140
156
|
addToAccessToken?: pulumi.Input<boolean>;
|
|
141
157
|
/**
|
|
142
|
-
* Indicates if the
|
|
158
|
+
* Indicates if the attribute should be a claim in the id token.
|
|
143
159
|
*/
|
|
144
160
|
addToIdToken?: pulumi.Input<boolean>;
|
|
145
161
|
/**
|
|
146
|
-
* Indicates if the
|
|
162
|
+
* Indicates if the attribute should appear in the userinfo response body.
|
|
147
163
|
*/
|
|
148
164
|
addToUserinfo?: pulumi.Input<boolean>;
|
|
149
|
-
/**
|
|
150
|
-
* The name of the claim to insert into a token.
|
|
151
|
-
*/
|
|
152
165
|
claimName?: pulumi.Input<string>;
|
|
153
166
|
/**
|
|
154
|
-
*
|
|
167
|
+
* Claim type used when serializing tokens.
|
|
155
168
|
*/
|
|
156
169
|
claimValueType?: pulumi.Input<string>;
|
|
157
170
|
/**
|
|
158
|
-
* The
|
|
171
|
+
* The mapper's associated client. Cannot be used at the same time as client_scope_id.
|
|
159
172
|
*/
|
|
160
173
|
clientId?: pulumi.Input<string>;
|
|
161
174
|
/**
|
|
162
|
-
* The
|
|
175
|
+
* The mapper's associated client scope. Cannot be used at the same time as client_id.
|
|
163
176
|
*/
|
|
164
177
|
clientScopeId?: pulumi.Input<string>;
|
|
165
178
|
/**
|
|
166
|
-
* Indicates
|
|
179
|
+
* Indicates whether this attribute is a single value or an array of values.
|
|
167
180
|
*/
|
|
168
181
|
multivalued?: pulumi.Input<boolean>;
|
|
169
182
|
/**
|
|
170
|
-
*
|
|
183
|
+
* A human-friendly name that will appear in the Keycloak console.
|
|
171
184
|
*/
|
|
172
185
|
name?: pulumi.Input<string>;
|
|
173
186
|
/**
|
|
174
|
-
* The realm
|
|
187
|
+
* The realm id where the associated client or client scope exists.
|
|
175
188
|
*/
|
|
176
189
|
realmId?: pulumi.Input<string>;
|
|
177
190
|
/**
|
|
178
|
-
*
|
|
191
|
+
* Prefix that will be added to each realm role.
|
|
179
192
|
*/
|
|
180
193
|
realmRolePrefix?: pulumi.Input<string>;
|
|
181
194
|
}
|
|
@@ -184,47 +197,44 @@ export interface UserRealmRoleProtocolMapperState {
|
|
|
184
197
|
*/
|
|
185
198
|
export interface UserRealmRoleProtocolMapperArgs {
|
|
186
199
|
/**
|
|
187
|
-
* Indicates if the
|
|
200
|
+
* Indicates if the attribute should be a claim in the access token.
|
|
188
201
|
*/
|
|
189
202
|
addToAccessToken?: pulumi.Input<boolean>;
|
|
190
203
|
/**
|
|
191
|
-
* Indicates if the
|
|
204
|
+
* Indicates if the attribute should be a claim in the id token.
|
|
192
205
|
*/
|
|
193
206
|
addToIdToken?: pulumi.Input<boolean>;
|
|
194
207
|
/**
|
|
195
|
-
* Indicates if the
|
|
208
|
+
* Indicates if the attribute should appear in the userinfo response body.
|
|
196
209
|
*/
|
|
197
210
|
addToUserinfo?: pulumi.Input<boolean>;
|
|
198
|
-
/**
|
|
199
|
-
* The name of the claim to insert into a token.
|
|
200
|
-
*/
|
|
201
211
|
claimName: pulumi.Input<string>;
|
|
202
212
|
/**
|
|
203
|
-
*
|
|
213
|
+
* Claim type used when serializing tokens.
|
|
204
214
|
*/
|
|
205
215
|
claimValueType?: pulumi.Input<string>;
|
|
206
216
|
/**
|
|
207
|
-
* The
|
|
217
|
+
* The mapper's associated client. Cannot be used at the same time as client_scope_id.
|
|
208
218
|
*/
|
|
209
219
|
clientId?: pulumi.Input<string>;
|
|
210
220
|
/**
|
|
211
|
-
* The
|
|
221
|
+
* The mapper's associated client scope. Cannot be used at the same time as client_id.
|
|
212
222
|
*/
|
|
213
223
|
clientScopeId?: pulumi.Input<string>;
|
|
214
224
|
/**
|
|
215
|
-
* Indicates
|
|
225
|
+
* Indicates whether this attribute is a single value or an array of values.
|
|
216
226
|
*/
|
|
217
227
|
multivalued?: pulumi.Input<boolean>;
|
|
218
228
|
/**
|
|
219
|
-
*
|
|
229
|
+
* A human-friendly name that will appear in the Keycloak console.
|
|
220
230
|
*/
|
|
221
231
|
name?: pulumi.Input<string>;
|
|
222
232
|
/**
|
|
223
|
-
* The realm
|
|
233
|
+
* The realm id where the associated client or client scope exists.
|
|
224
234
|
*/
|
|
225
235
|
realmId: pulumi.Input<string>;
|
|
226
236
|
/**
|
|
227
|
-
*
|
|
237
|
+
* Prefix that will be added to each realm role.
|
|
228
238
|
*/
|
|
229
239
|
realmRolePrefix?: pulumi.Input<string>;
|
|
230
240
|
}
|
|
@@ -6,66 +6,85 @@ exports.UserRealmRoleProtocolMapper = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* ## # keycloak.openid.UserRealmRoleProtocolMapper
|
|
10
10
|
*
|
|
11
|
-
*
|
|
11
|
+
* Allows for creating and managing user realm role protocol mappers within
|
|
12
|
+
* Keycloak.
|
|
12
13
|
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
14
|
+
* User realm role protocol mappers allow you to define a claim containing the list of the realm roles.
|
|
15
|
+
* Protocol mappers can be defined for a single client, or they can
|
|
16
|
+
* be defined for a client scope which can be shared between multiple different
|
|
17
|
+
* clients.
|
|
15
18
|
*
|
|
16
|
-
*
|
|
17
|
-
* ### Client)
|
|
19
|
+
* ### Example Usage (Client)
|
|
18
20
|
*
|
|
21
|
+
* <!--Start PulumiCodeChooser -->
|
|
19
22
|
* ```typescript
|
|
20
23
|
* import * as pulumi from "@pulumi/pulumi";
|
|
21
24
|
* import * as keycloak from "@pulumi/keycloak";
|
|
22
25
|
*
|
|
23
26
|
* const realm = new keycloak.Realm("realm", {
|
|
24
|
-
* realm: "my-realm",
|
|
25
27
|
* enabled: true,
|
|
28
|
+
* realm: "my-realm",
|
|
26
29
|
* });
|
|
27
30
|
* const openidClient = new keycloak.openid.Client("openidClient", {
|
|
28
|
-
* realmId: realm.id,
|
|
29
|
-
* clientId: "client",
|
|
30
|
-
* enabled: true,
|
|
31
31
|
* accessType: "CONFIDENTIAL",
|
|
32
|
+
* clientId: "test-client",
|
|
33
|
+
* enabled: true,
|
|
34
|
+
* realmId: realm.id,
|
|
32
35
|
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
33
36
|
* });
|
|
34
37
|
* const userRealmRoleMapper = new keycloak.openid.UserRealmRoleProtocolMapper("userRealmRoleMapper", {
|
|
35
|
-
* realmId: realm.id,
|
|
36
|
-
* clientId: openidClient.id,
|
|
37
38
|
* claimName: "foo",
|
|
39
|
+
* clientId: openidClient.id,
|
|
40
|
+
* realmId: realm.id,
|
|
38
41
|
* });
|
|
39
42
|
* ```
|
|
40
|
-
*
|
|
43
|
+
* <!--End PulumiCodeChooser -->
|
|
41
44
|
*
|
|
45
|
+
* ### Example Usage (Client Scope)
|
|
46
|
+
*
|
|
47
|
+
* <!--Start PulumiCodeChooser -->
|
|
42
48
|
* ```typescript
|
|
43
49
|
* import * as pulumi from "@pulumi/pulumi";
|
|
44
50
|
* import * as keycloak from "@pulumi/keycloak";
|
|
45
51
|
*
|
|
46
52
|
* const realm = new keycloak.Realm("realm", {
|
|
47
|
-
* realm: "my-realm",
|
|
48
53
|
* enabled: true,
|
|
54
|
+
* realm: "my-realm",
|
|
49
55
|
* });
|
|
50
56
|
* const clientScope = new keycloak.openid.ClientScope("clientScope", {realmId: realm.id});
|
|
51
57
|
* const userRealmRoleMapper = new keycloak.openid.UserRealmRoleProtocolMapper("userRealmRoleMapper", {
|
|
52
|
-
* realmId: realm.id,
|
|
53
|
-
* clientScopeId: clientScope.id,
|
|
54
58
|
* claimName: "foo",
|
|
59
|
+
* clientScopeId: clientScope.id,
|
|
60
|
+
* realmId: realm.id,
|
|
55
61
|
* });
|
|
56
62
|
* ```
|
|
63
|
+
* <!--End PulumiCodeChooser -->
|
|
57
64
|
*
|
|
58
|
-
*
|
|
65
|
+
* ### Argument Reference
|
|
59
66
|
*
|
|
60
|
-
*
|
|
67
|
+
* The following arguments are supported:
|
|
61
68
|
*
|
|
62
|
-
*
|
|
63
|
-
*
|
|
64
|
-
*
|
|
69
|
+
* - `realmId` - (Required) The realm this protocol mapper exists within.
|
|
70
|
+
* - `clientId` - (Required if `clientScopeId` is not specified) The client this protocol mapper is attached to.
|
|
71
|
+
* - `clientScopeId` - (Required if `clientId` is not specified) The client scope this protocol mapper is attached to.
|
|
72
|
+
* - `name` - (Required) The display name of this protocol mapper in the GUI.
|
|
73
|
+
* - `claimName` - (Required) The name of the claim to insert into a token.
|
|
74
|
+
* - `claimValueType` - (Optional) The claim type used when serializing JSON tokens. Can be one of `String`, `long`, `int`, or `boolean`. Defaults to `String`.
|
|
75
|
+
* - `multivalued` - (Optional) Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to `true`.
|
|
76
|
+
* - `realmRolePrefix` - (Optional) A prefix for each Realm Role.
|
|
77
|
+
* - `addToIdToken` - (Optional) Indicates if the property should be added as a claim to the id token. Defaults to `true`.
|
|
78
|
+
* - `addToAccessToken` - (Optional) Indicates if the property should be added as a claim to the access token. Defaults to `true`.
|
|
79
|
+
* - `addToUserinfo` - (Optional) Indicates if the property should be added as a claim to the UserInfo response body. Defaults to `true`.
|
|
65
80
|
*
|
|
66
|
-
*
|
|
67
|
-
*
|
|
68
|
-
*
|
|
81
|
+
* ### Import
|
|
82
|
+
*
|
|
83
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
84
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
85
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
86
|
+
*
|
|
87
|
+
* Example:
|
|
69
88
|
*/
|
|
70
89
|
class UserRealmRoleProtocolMapper extends pulumi.CustomResource {
|
|
71
90
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"userRealmRoleProtocolMapper.js","sourceRoot":"","sources":["../../openid/userRealmRoleProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"userRealmRoleProtocolMapper.js","sourceRoot":"","sources":["../../openid/userRealmRoleProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;AACH,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IAClE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwC,EAAE,IAAmC;QACtI,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;IAoDD,YAAY,IAAY,EAAE,WAAgF,EAAE,IAAmC;QAC3I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2D,CAAC;YAC1E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;SACjF;aAAM;YACH,MAAM,IAAI,GAAG,WAA0D,CAAC;YACxE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/E;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;;AApHL,kEAqHC;AAvGG,gBAAgB;AACO,wCAAY,GAAG,yEAAyE,CAAC"}
|
|
@@ -8,8 +8,10 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
8
8
|
* multiple different clients.
|
|
9
9
|
*
|
|
10
10
|
* ## Example Usage
|
|
11
|
+
*
|
|
11
12
|
* ### Client)
|
|
12
13
|
*
|
|
14
|
+
* <!--Start PulumiCodeChooser -->
|
|
13
15
|
* ```typescript
|
|
14
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -33,8 +35,11 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
33
35
|
* sessionNote: "bar",
|
|
34
36
|
* });
|
|
35
37
|
* ```
|
|
38
|
+
* <!--End PulumiCodeChooser -->
|
|
39
|
+
*
|
|
36
40
|
* ### Client Scope)
|
|
37
41
|
*
|
|
42
|
+
* <!--Start PulumiCodeChooser -->
|
|
38
43
|
* ```typescript
|
|
39
44
|
* import * as pulumi from "@pulumi/pulumi";
|
|
40
45
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -52,17 +57,26 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
52
57
|
* sessionNote: "bar",
|
|
53
58
|
* });
|
|
54
59
|
* ```
|
|
60
|
+
* <!--End PulumiCodeChooser -->
|
|
55
61
|
*
|
|
56
62
|
* ## Import
|
|
57
63
|
*
|
|
58
|
-
* Protocol mappers can be imported using one of the following formats
|
|
64
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
65
|
+
*
|
|
66
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
67
|
+
*
|
|
68
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
69
|
+
*
|
|
70
|
+
* Example:
|
|
71
|
+
*
|
|
72
|
+
* bash
|
|
59
73
|
*
|
|
60
74
|
* ```sh
|
|
61
|
-
*
|
|
75
|
+
* $ pulumi import keycloak:openid/userSessionNoteProtocolMapper:UserSessionNoteProtocolMapper user_session_note_mapper my-realm/client/a7202154-8793-4656-b655-1dd18c181e14/71602afa-f7d1-4788-8c49-ef8fd00af0f4
|
|
62
76
|
* ```
|
|
63
77
|
*
|
|
64
78
|
* ```sh
|
|
65
|
-
*
|
|
79
|
+
* $ pulumi import keycloak:openid/userSessionNoteProtocolMapper:UserSessionNoteProtocolMapper user_session_note_mapper my-realm/client-scope/b799ea7e-73ee-4a73-990a-1eafebe8e20a/71602afa-f7d1-4788-8c49-ef8fd00af0f4
|
|
66
80
|
* ```
|
|
67
81
|
*/
|
|
68
82
|
export declare class UserSessionNoteProtocolMapper extends pulumi.CustomResource {
|
|
@@ -14,8 +14,10 @@ const utilities = require("../utilities");
|
|
|
14
14
|
* multiple different clients.
|
|
15
15
|
*
|
|
16
16
|
* ## Example Usage
|
|
17
|
+
*
|
|
17
18
|
* ### Client)
|
|
18
19
|
*
|
|
20
|
+
* <!--Start PulumiCodeChooser -->
|
|
19
21
|
* ```typescript
|
|
20
22
|
* import * as pulumi from "@pulumi/pulumi";
|
|
21
23
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -39,8 +41,11 @@ const utilities = require("../utilities");
|
|
|
39
41
|
* sessionNote: "bar",
|
|
40
42
|
* });
|
|
41
43
|
* ```
|
|
44
|
+
* <!--End PulumiCodeChooser -->
|
|
45
|
+
*
|
|
42
46
|
* ### Client Scope)
|
|
43
47
|
*
|
|
48
|
+
* <!--Start PulumiCodeChooser -->
|
|
44
49
|
* ```typescript
|
|
45
50
|
* import * as pulumi from "@pulumi/pulumi";
|
|
46
51
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -58,17 +63,26 @@ const utilities = require("../utilities");
|
|
|
58
63
|
* sessionNote: "bar",
|
|
59
64
|
* });
|
|
60
65
|
* ```
|
|
66
|
+
* <!--End PulumiCodeChooser -->
|
|
61
67
|
*
|
|
62
68
|
* ## Import
|
|
63
69
|
*
|
|
64
|
-
* Protocol mappers can be imported using one of the following formats
|
|
70
|
+
* Protocol mappers can be imported using one of the following formats:
|
|
71
|
+
*
|
|
72
|
+
* - Client: `{{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}`
|
|
73
|
+
*
|
|
74
|
+
* - Client Scope: `{{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}}`
|
|
75
|
+
*
|
|
76
|
+
* Example:
|
|
77
|
+
*
|
|
78
|
+
* bash
|
|
65
79
|
*
|
|
66
80
|
* ```sh
|
|
67
|
-
*
|
|
81
|
+
* $ pulumi import keycloak:openid/userSessionNoteProtocolMapper:UserSessionNoteProtocolMapper user_session_note_mapper my-realm/client/a7202154-8793-4656-b655-1dd18c181e14/71602afa-f7d1-4788-8c49-ef8fd00af0f4
|
|
68
82
|
* ```
|
|
69
83
|
*
|
|
70
84
|
* ```sh
|
|
71
|
-
*
|
|
85
|
+
* $ pulumi import keycloak:openid/userSessionNoteProtocolMapper:UserSessionNoteProtocolMapper user_session_note_mapper my-realm/client-scope/b799ea7e-73ee-4a73-990a-1eafebe8e20a/71602afa-f7d1-4788-8c49-ef8fd00af0f4
|
|
72
86
|
* ```
|
|
73
87
|
*/
|
|
74
88
|
class UserSessionNoteProtocolMapper extends pulumi.CustomResource {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"userSessionNoteProtocolMapper.js","sourceRoot":"","sources":["../../openid/userSessionNoteProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"userSessionNoteProtocolMapper.js","sourceRoot":"","sources":["../../openid/userSessionNoteProtocolMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,MAAa,6BAA8B,SAAQ,MAAM,CAAC,cAAc;IACpE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0C,EAAE,IAAmC;QACxI,OAAO,IAAI,6BAA6B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACpF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,6BAA6B,CAAC,YAAY,CAAC;IAC9E,CAAC;IA+CD,YAAY,IAAY,EAAE,WAAoF,EAAE,IAAmC;QAC/I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6D,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;aAAM;YACH,MAAM,IAAI,GAAG,WAA4D,CAAC;YAC1E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,6BAA6B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;;AA3GL,sEA4GC;AA9FG,gBAAgB;AACO,0CAAY,GAAG,6EAA6E,CAAC"}
|