@pulumi/keycloak 5.3.1 → 5.3.3-alpha.1721330331
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/attributeImporterIdentityProviderMapper.d.ts +4 -5
- package/attributeImporterIdentityProviderMapper.js +4 -5
- package/attributeImporterIdentityProviderMapper.js.map +1 -1
- package/attributeToRoleIdentityMapper.d.ts +6 -6
- package/attributeToRoleIdentityMapper.js +6 -6
- package/authentication/bindings.d.ts +3 -5
- package/authentication/bindings.js +3 -5
- package/authentication/bindings.js.map +1 -1
- package/authentication/execution.d.ts +2 -4
- package/authentication/execution.js +2 -4
- package/authentication/execution.js.map +1 -1
- package/authentication/executionConfig.d.ts +0 -2
- package/authentication/executionConfig.js +0 -2
- package/authentication/executionConfig.js.map +1 -1
- package/authentication/flow.d.ts +0 -2
- package/authentication/flow.js +0 -2
- package/authentication/flow.js.map +1 -1
- package/authentication/subflow.d.ts +0 -2
- package/authentication/subflow.js +0 -2
- package/authentication/subflow.js.map +1 -1
- package/customIdentityProviderMapping.d.ts +7 -8
- package/customIdentityProviderMapping.js +4 -5
- package/customIdentityProviderMapping.js.map +1 -1
- package/customUserFederation.d.ts +8 -9
- package/customUserFederation.js +5 -6
- package/customUserFederation.js.map +1 -1
- package/defaultGroups.d.ts +6 -5
- package/defaultGroups.js +6 -5
- package/defaultGroups.js.map +1 -1
- package/defaultRoles.d.ts +1 -3
- package/defaultRoles.js +1 -3
- package/defaultRoles.js.map +1 -1
- package/genericClientProtocolMapper.d.ts +8 -9
- package/genericClientProtocolMapper.js +8 -9
- package/genericClientProtocolMapper.js.map +1 -1
- package/genericClientRoleMapper.d.ts +28 -21
- package/genericClientRoleMapper.js +28 -21
- package/genericClientRoleMapper.js.map +1 -1
- package/genericProtocolMapper.d.ts +3 -4
- package/genericProtocolMapper.js +3 -4
- package/genericProtocolMapper.js.map +1 -1
- package/genericRoleMapper.d.ts +28 -21
- package/genericRoleMapper.js +28 -21
- package/genericRoleMapper.js.map +1 -1
- package/getAuthenticationExecution.d.ts +0 -4
- package/getAuthenticationExecution.js +0 -4
- package/getAuthenticationExecution.js.map +1 -1
- package/getAuthenticationFlow.d.ts +0 -4
- package/getAuthenticationFlow.js +0 -4
- package/getAuthenticationFlow.js.map +1 -1
- package/getClientDescriptionConverter.d.ts +50 -54
- package/getClientDescriptionConverter.js +50 -54
- package/getClientDescriptionConverter.js.map +1 -1
- package/getRealm.d.ts +10 -6
- package/getRealm.js +10 -6
- package/getRealm.js.map +1 -1
- package/getUser.d.ts +2 -4
- package/getUser.js +2 -4
- package/getUser.js.map +1 -1
- package/getUserRealmRoles.d.ts +4 -4
- package/getUserRealmRoles.js +4 -4
- package/group.d.ts +12 -9
- package/group.js +12 -9
- package/group.js.map +1 -1
- package/groupMemberships.d.ts +7 -6
- package/groupMemberships.js +7 -6
- package/groupMemberships.js.map +1 -1
- package/groupRoles.d.ts +16 -12
- package/groupRoles.js +16 -12
- package/groupRoles.js.map +1 -1
- package/hardcodedAttributeIdentityProviderMapper.d.ts +4 -5
- package/hardcodedAttributeIdentityProviderMapper.js +4 -5
- package/hardcodedAttributeIdentityProviderMapper.js.map +1 -1
- package/hardcodedRoleIdentityMapper.d.ts +6 -6
- package/hardcodedRoleIdentityMapper.js +6 -6
- package/identityProviderTokenExchangeScopePermission.d.ts +5 -6
- package/identityProviderTokenExchangeScopePermission.js +5 -6
- package/identityProviderTokenExchangeScopePermission.js.map +1 -1
- package/ldap/customMapper.d.ts +6 -6
- package/ldap/customMapper.js +6 -6
- package/ldap/fullNameMapper.d.ts +13 -13
- package/ldap/fullNameMapper.js +13 -13
- package/ldap/groupMapper.d.ts +15 -15
- package/ldap/groupMapper.js +15 -15
- package/ldap/hardcodedAttributeMapper.d.ts +4 -4
- package/ldap/hardcodedAttributeMapper.js +4 -4
- package/ldap/hardcodedGroupMapper.d.ts +8 -5
- package/ldap/hardcodedGroupMapper.js +8 -5
- package/ldap/hardcodedGroupMapper.js.map +1 -1
- package/ldap/hardcodedRoleMapper.d.ts +4 -4
- package/ldap/hardcodedRoleMapper.js +4 -4
- package/ldap/msadLdsUserAccountControlMapper.d.ts +4 -4
- package/ldap/msadLdsUserAccountControlMapper.js +4 -4
- package/ldap/msadUserAccountControlMapper.d.ts +12 -12
- package/ldap/msadUserAccountControlMapper.js +12 -12
- package/ldap/roleMapper.d.ts +4 -4
- package/ldap/roleMapper.js +4 -4
- package/ldap/userAttributeMapper.d.ts +16 -16
- package/ldap/userAttributeMapper.js +13 -13
- package/ldap/userFederation.d.ts +11 -12
- package/ldap/userFederation.js +11 -12
- package/ldap/userFederation.js.map +1 -1
- package/oidc/googleIdentityProvider.d.ts +2 -4
- package/oidc/googleIdentityProvider.js +2 -4
- package/oidc/googleIdentityProvider.js.map +1 -1
- package/oidc/identityProvider.d.ts +1 -3
- package/oidc/identityProvider.js +1 -3
- package/oidc/identityProvider.js.map +1 -1
- package/openid/audienceProtocolMapper.d.ts +16 -14
- package/openid/audienceProtocolMapper.js +16 -14
- package/openid/audienceProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMapper.d.ts +9 -8
- package/openid/audienceResolveProtocolMapper.js +9 -8
- package/openid/audienceResolveProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMappter.d.ts +9 -8
- package/openid/audienceResolveProtocolMappter.js +9 -8
- package/openid/audienceResolveProtocolMappter.js.map +1 -1
- package/openid/client.d.ts +5 -6
- package/openid/client.js +5 -6
- package/openid/client.js.map +1 -1
- package/openid/clientDefaultScopes.d.ts +8 -7
- package/openid/clientDefaultScopes.js +8 -7
- package/openid/clientDefaultScopes.js.map +1 -1
- package/openid/clientOptionalScopes.d.ts +8 -7
- package/openid/clientOptionalScopes.js +8 -7
- package/openid/clientOptionalScopes.js.map +1 -1
- package/openid/clientPolicy.d.ts +5 -5
- package/openid/clientPolicy.js +5 -5
- package/openid/clientScope.d.ts +4 -5
- package/openid/clientScope.js +4 -5
- package/openid/clientScope.js.map +1 -1
- package/openid/clientServiceAccountRealmRole.d.ts +6 -4
- package/openid/clientServiceAccountRealmRole.js +6 -4
- package/openid/clientServiceAccountRealmRole.js.map +1 -1
- package/openid/clientServiceAccountRole.d.ts +8 -5
- package/openid/clientServiceAccountRole.js +8 -5
- package/openid/clientServiceAccountRole.js.map +1 -1
- package/openid/fullNameProtocolMapper.d.ts +16 -14
- package/openid/fullNameProtocolMapper.js +16 -14
- package/openid/fullNameProtocolMapper.js.map +1 -1
- package/openid/getClient.d.ts +2 -4
- package/openid/getClient.js +2 -4
- package/openid/getClient.js.map +1 -1
- package/openid/getClientAuthorizationPolicy.d.ts +8 -6
- package/openid/getClientAuthorizationPolicy.js +8 -6
- package/openid/getClientAuthorizationPolicy.js.map +1 -1
- package/openid/getClientScope.d.ts +4 -6
- package/openid/getClientScope.js +4 -6
- package/openid/getClientScope.js.map +1 -1
- package/openid/getClientServiceAccountUser.d.ts +4 -6
- package/openid/getClientServiceAccountUser.js +4 -6
- package/openid/getClientServiceAccountUser.js.map +1 -1
- package/openid/groupMembershipProtocolMapper.d.ts +18 -16
- package/openid/groupMembershipProtocolMapper.js +18 -16
- package/openid/groupMembershipProtocolMapper.js.map +1 -1
- package/openid/hardcodedClaimProtocolMapper.d.ts +18 -16
- package/openid/hardcodedClaimProtocolMapper.js +18 -16
- package/openid/hardcodedClaimProtocolMapper.js.map +1 -1
- package/openid/hardcodedRoleProtocolMapper.d.ts +24 -16
- package/openid/hardcodedRoleProtocolMapper.js +24 -16
- package/openid/hardcodedRoleProtocolMapper.js.map +1 -1
- package/openid/scriptProtocolMapper.d.ts +10 -8
- package/openid/scriptProtocolMapper.js +10 -8
- package/openid/scriptProtocolMapper.js.map +1 -1
- package/openid/userAttributeProtocolMapper.d.ts +18 -16
- package/openid/userAttributeProtocolMapper.js +18 -16
- package/openid/userAttributeProtocolMapper.js.map +1 -1
- package/openid/userClientRoleProtocolMapper.d.ts +10 -8
- package/openid/userClientRoleProtocolMapper.js +10 -8
- package/openid/userClientRoleProtocolMapper.js.map +1 -1
- package/openid/userPropertyProtocolMapper.d.ts +18 -16
- package/openid/userPropertyProtocolMapper.js +18 -16
- package/openid/userPropertyProtocolMapper.js.map +1 -1
- package/openid/userRealmRoleProtocolMapper.d.ts +18 -16
- package/openid/userRealmRoleProtocolMapper.js +18 -16
- package/openid/userRealmRoleProtocolMapper.js.map +1 -1
- package/openid/userSessionNoteProtocolMapper.d.ts +10 -8
- package/openid/userSessionNoteProtocolMapper.js +10 -8
- package/openid/userSessionNoteProtocolMapper.js.map +1 -1
- package/package.json +3 -2
- package/realmEvents.d.ts +5 -7
- package/realmEvents.js +5 -7
- package/realmEvents.js.map +1 -1
- package/realmKeystoreAesGenerated.d.ts +2 -3
- package/realmKeystoreAesGenerated.js +2 -3
- package/realmKeystoreAesGenerated.js.map +1 -1
- package/realmKeystoreEcdsaGenerated.d.ts +2 -3
- package/realmKeystoreEcdsaGenerated.js +2 -3
- package/realmKeystoreEcdsaGenerated.js.map +1 -1
- package/realmKeystoreHmacGenerated.d.ts +2 -3
- package/realmKeystoreHmacGenerated.js +2 -3
- package/realmKeystoreHmacGenerated.js.map +1 -1
- package/realmKeystoreJavaGenerated.d.ts +2 -3
- package/realmKeystoreJavaGenerated.js +2 -3
- package/realmKeystoreJavaGenerated.js.map +1 -1
- package/realmKeystoreRsaGenerated.d.ts +2 -3
- package/realmKeystoreRsaGenerated.js +2 -3
- package/realmKeystoreRsaGenerated.js.map +1 -1
- package/realmUserProfile.d.ts +1 -3
- package/realmUserProfile.js +1 -3
- package/realmUserProfile.js.map +1 -1
- package/requiredAction.d.ts +2 -3
- package/requiredAction.js +2 -3
- package/requiredAction.js.map +1 -1
- package/role.d.ts +41 -27
- package/role.js +41 -27
- package/role.js.map +1 -1
- package/saml/client.d.ts +0 -54
- package/saml/client.js +0 -54
- package/saml/client.js.map +1 -1
- package/saml/clientDefaultScope.d.ts +0 -37
- package/saml/clientDefaultScope.js +0 -37
- package/saml/clientDefaultScope.js.map +1 -1
- package/saml/clientScope.d.ts +2 -3
- package/saml/clientScope.js +2 -3
- package/saml/clientScope.js.map +1 -1
- package/saml/getClient.d.ts +2 -4
- package/saml/getClient.js +2 -4
- package/saml/getClient.js.map +1 -1
- package/saml/getClientInstallationProvider.d.ts +0 -66
- package/saml/getClientInstallationProvider.js +0 -66
- package/saml/getClientInstallationProvider.js.map +1 -1
- package/saml/identityProvider.d.ts +7 -9
- package/saml/identityProvider.js +7 -9
- package/saml/identityProvider.js.map +1 -1
- package/saml/scriptProtocolMapper.d.ts +4 -4
- package/saml/scriptProtocolMapper.js +4 -4
- package/saml/userAttributeProtocolMapper.d.ts +8 -8
- package/saml/userAttributeProtocolMapper.js +8 -8
- package/saml/userPropertyProtocolMapper.d.ts +8 -8
- package/saml/userPropertyProtocolMapper.js +8 -8
- package/types/input.d.ts +0 -15
- package/types/output.d.ts +0 -15
- package/user.d.ts +10 -12
- package/user.js +10 -12
- package/user.js.map +1 -1
- package/userGroups.d.ts +4 -40
- package/userGroups.js +4 -40
- package/userGroups.js.map +1 -1
- package/userRoles.d.ts +7 -6
- package/userRoles.js +7 -6
- package/userRoles.js.map +1 -1
- package/userTemplateImporterIdentityProviderMapper.d.ts +2 -3
- package/userTemplateImporterIdentityProviderMapper.js +2 -3
- package/userTemplateImporterIdentityProviderMapper.js.map +1 -1
- package/package.json.bak +0 -27
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"realmKeystoreJavaGenerated.js","sourceRoot":"","sources":["../realmKeystoreJavaGenerated.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"realmKeystoreJavaGenerated.js","sourceRoot":"","sources":["../realmKeystoreJavaGenerated.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAa,0BAA2B,SAAQ,MAAM,CAAC,cAAc;IACjE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuC,EAAE,IAAmC;QACrI,OAAO,IAAI,0BAA0B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,0BAA0B,CAAC,YAAY,CAAC;IAC3E,CAAC;IAmDD,YAAY,IAAY,EAAE,WAA8E,EAAE,IAAmC;QACzI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0D,CAAC;YACzE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAyD,CAAC;YACvE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,0BAA0B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;;AA1HL,gEA2HC;AA7GG,gBAAgB;AACO,uCAAY,GAAG,sEAAsE,CAAC"}
|
|
@@ -6,13 +6,13 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
8
|
*
|
|
9
|
-
* <!--Start PulumiCodeChooser -->
|
|
10
9
|
* ```typescript
|
|
11
10
|
* import * as pulumi from "@pulumi/pulumi";
|
|
12
11
|
* import * as keycloak from "@pulumi/keycloak";
|
|
13
12
|
*
|
|
14
13
|
* const realm = new keycloak.Realm("realm", {realm: "my-realm"});
|
|
15
|
-
* const keystoreRsaGenerated = new keycloak.RealmKeystoreRsaGenerated("
|
|
14
|
+
* const keystoreRsaGenerated = new keycloak.RealmKeystoreRsaGenerated("keystore_rsa_generated", {
|
|
15
|
+
* name: "my-rsa-generated-key",
|
|
16
16
|
* realmId: realm.id,
|
|
17
17
|
* enabled: true,
|
|
18
18
|
* active: true,
|
|
@@ -21,7 +21,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
21
21
|
* keySize: 2048,
|
|
22
22
|
* });
|
|
23
23
|
* ```
|
|
24
|
-
* <!--End PulumiCodeChooser -->
|
|
25
24
|
*
|
|
26
25
|
* ## Import
|
|
27
26
|
*
|
|
@@ -12,13 +12,13 @@ const utilities = require("./utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ## Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
19
18
|
*
|
|
20
19
|
* const realm = new keycloak.Realm("realm", {realm: "my-realm"});
|
|
21
|
-
* const keystoreRsaGenerated = new keycloak.RealmKeystoreRsaGenerated("
|
|
20
|
+
* const keystoreRsaGenerated = new keycloak.RealmKeystoreRsaGenerated("keystore_rsa_generated", {
|
|
21
|
+
* name: "my-rsa-generated-key",
|
|
22
22
|
* realmId: realm.id,
|
|
23
23
|
* enabled: true,
|
|
24
24
|
* active: true,
|
|
@@ -27,7 +27,6 @@ const utilities = require("./utilities");
|
|
|
27
27
|
* keySize: 2048,
|
|
28
28
|
* });
|
|
29
29
|
* ```
|
|
30
|
-
* <!--End PulumiCodeChooser -->
|
|
31
30
|
*
|
|
32
31
|
* ## Import
|
|
33
32
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"realmKeystoreRsaGenerated.js","sourceRoot":"","sources":["../realmKeystoreRsaGenerated.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"realmKeystoreRsaGenerated.js","sourceRoot":"","sources":["../realmKeystoreRsaGenerated.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAa,yBAA0B,SAAQ,MAAM,CAAC,cAAc;IAChE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsC,EAAE,IAAmC;QACpI,OAAO,IAAI,yBAAyB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC1E,CAAC;IAuCD,YAAY,IAAY,EAAE,WAA4E,EAAE,IAAmC;QACvI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyD,CAAC;YACxE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAwD,CAAC;YACtE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,yBAAyB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9E,CAAC;;AA5FL,8DA6FC;AA/EG,gBAAgB;AACO,sCAAY,GAAG,oEAAoE,CAAC"}
|
package/realmUserProfile.d.ts
CHANGED
|
@@ -15,7 +15,6 @@ import * as outputs from "./types/output";
|
|
|
15
15
|
*
|
|
16
16
|
* ## Example Usage
|
|
17
17
|
*
|
|
18
|
-
* <!--Start PulumiCodeChooser -->
|
|
19
18
|
* ```typescript
|
|
20
19
|
* import * as pulumi from "@pulumi/pulumi";
|
|
21
20
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -27,7 +26,7 @@ import * as outputs from "./types/output";
|
|
|
27
26
|
* },
|
|
28
27
|
* });
|
|
29
28
|
* const userprofile = new keycloak.RealmUserProfile("userprofile", {
|
|
30
|
-
* realmId:
|
|
29
|
+
* realmId: myRealm.id,
|
|
31
30
|
* attributes: [
|
|
32
31
|
* {
|
|
33
32
|
* name: "field1",
|
|
@@ -95,7 +94,6 @@ import * as outputs from "./types/output";
|
|
|
95
94
|
* ],
|
|
96
95
|
* });
|
|
97
96
|
* ```
|
|
98
|
-
* <!--End PulumiCodeChooser -->
|
|
99
97
|
*
|
|
100
98
|
* ## Import
|
|
101
99
|
*
|
package/realmUserProfile.js
CHANGED
|
@@ -19,7 +19,6 @@ const utilities = require("./utilities");
|
|
|
19
19
|
*
|
|
20
20
|
* ## Example Usage
|
|
21
21
|
*
|
|
22
|
-
* <!--Start PulumiCodeChooser -->
|
|
23
22
|
* ```typescript
|
|
24
23
|
* import * as pulumi from "@pulumi/pulumi";
|
|
25
24
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -31,7 +30,7 @@ const utilities = require("./utilities");
|
|
|
31
30
|
* },
|
|
32
31
|
* });
|
|
33
32
|
* const userprofile = new keycloak.RealmUserProfile("userprofile", {
|
|
34
|
-
* realmId:
|
|
33
|
+
* realmId: myRealm.id,
|
|
35
34
|
* attributes: [
|
|
36
35
|
* {
|
|
37
36
|
* name: "field1",
|
|
@@ -99,7 +98,6 @@ const utilities = require("./utilities");
|
|
|
99
98
|
* ],
|
|
100
99
|
* });
|
|
101
100
|
* ```
|
|
102
|
-
* <!--End PulumiCodeChooser -->
|
|
103
101
|
*
|
|
104
102
|
* ## Import
|
|
105
103
|
*
|
package/realmUserProfile.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"realmUserProfile.js","sourceRoot":"","sources":["../realmUserProfile.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"realmUserProfile.js","sourceRoot":"","sources":["../realmUserProfile.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiGG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IAuBD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AApEL,4CAqEC;AAvDG,gBAAgB;AACO,6BAAY,GAAG,kDAAkD,CAAC"}
|
package/requiredAction.d.ts
CHANGED
|
@@ -6,7 +6,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
8
|
*
|
|
9
|
-
* <!--Start PulumiCodeChooser -->
|
|
10
9
|
* ```typescript
|
|
11
10
|
* import * as pulumi from "@pulumi/pulumi";
|
|
12
11
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -15,13 +14,13 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
15
14
|
* realm: "my-realm",
|
|
16
15
|
* enabled: true,
|
|
17
16
|
* });
|
|
18
|
-
* const requiredAction = new keycloak.RequiredAction("
|
|
17
|
+
* const requiredAction = new keycloak.RequiredAction("required_action", {
|
|
19
18
|
* realmId: realm.realm,
|
|
20
19
|
* alias: "webauthn-register",
|
|
21
20
|
* enabled: true,
|
|
21
|
+
* name: "Webauthn Register",
|
|
22
22
|
* });
|
|
23
23
|
* ```
|
|
24
|
-
* <!--End PulumiCodeChooser -->
|
|
25
24
|
*
|
|
26
25
|
* ## Import
|
|
27
26
|
*
|
package/requiredAction.js
CHANGED
|
@@ -12,7 +12,6 @@ const utilities = require("./utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ## Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -21,13 +20,13 @@ const utilities = require("./utilities");
|
|
|
21
20
|
* realm: "my-realm",
|
|
22
21
|
* enabled: true,
|
|
23
22
|
* });
|
|
24
|
-
* const requiredAction = new keycloak.RequiredAction("
|
|
23
|
+
* const requiredAction = new keycloak.RequiredAction("required_action", {
|
|
25
24
|
* realmId: realm.realm,
|
|
26
25
|
* alias: "webauthn-register",
|
|
27
26
|
* enabled: true,
|
|
27
|
+
* name: "Webauthn Register",
|
|
28
28
|
* });
|
|
29
29
|
* ```
|
|
30
|
-
* <!--End PulumiCodeChooser -->
|
|
31
30
|
*
|
|
32
31
|
* ## Import
|
|
33
32
|
*
|
package/requiredAction.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"requiredAction.js","sourceRoot":"","sources":["../requiredAction.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"requiredAction.js","sourceRoot":"","sources":["../requiredAction.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IACrD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2B,EAAE,IAAmC;QACzH,OAAO,IAAI,cAAc,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACrE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,cAAc,CAAC,YAAY,CAAC;IAC/D,CAAC;IAmCD,YAAY,IAAY,EAAE,WAAsD,EAAE,IAAmC;QACjH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8C,CAAC;YAC7D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA6C,CAAC;YAC3D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;;AAzFL,wCA0FC;AA5EG,gBAAgB;AACO,2BAAY,GAAG,8CAA8C,CAAC"}
|
package/role.d.ts
CHANGED
|
@@ -9,74 +9,90 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
9
9
|
*
|
|
10
10
|
* ### Example Usage (Realm role)
|
|
11
11
|
*
|
|
12
|
-
* <!--Start PulumiCodeChooser -->
|
|
13
12
|
* ```typescript
|
|
14
13
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
14
|
* import * as keycloak from "@pulumi/keycloak";
|
|
16
15
|
*
|
|
17
16
|
* const realm = new keycloak.Realm("realm", {
|
|
18
|
-
* enabled: true,
|
|
19
17
|
* realm: "my-realm",
|
|
18
|
+
* enabled: true,
|
|
20
19
|
* });
|
|
21
|
-
* const realmRole = new keycloak.Role("
|
|
22
|
-
* description: "My Realm Role",
|
|
20
|
+
* const realmRole = new keycloak.Role("realm_role", {
|
|
23
21
|
* realmId: realm.id,
|
|
22
|
+
* name: "my-realm-role",
|
|
23
|
+
* description: "My Realm Role",
|
|
24
24
|
* });
|
|
25
25
|
* ```
|
|
26
|
-
* <!--End PulumiCodeChooser -->
|
|
27
26
|
*
|
|
28
27
|
* ### Example Usage (Client role)
|
|
29
28
|
*
|
|
30
|
-
* <!--Start PulumiCodeChooser -->
|
|
31
29
|
* ```typescript
|
|
32
30
|
* import * as pulumi from "@pulumi/pulumi";
|
|
33
31
|
* import * as keycloak from "@pulumi/keycloak";
|
|
34
32
|
*
|
|
35
33
|
* const realm = new keycloak.Realm("realm", {
|
|
36
|
-
* enabled: true,
|
|
37
34
|
* realm: "my-realm",
|
|
35
|
+
* enabled: true,
|
|
38
36
|
* });
|
|
39
37
|
* const client = new keycloak.openid.Client("client", {
|
|
40
|
-
*
|
|
38
|
+
* realmId: realm.id,
|
|
41
39
|
* clientId: "client",
|
|
40
|
+
* name: "client",
|
|
42
41
|
* enabled: true,
|
|
43
|
-
*
|
|
42
|
+
* accessType: "BEARER-ONLY",
|
|
44
43
|
* });
|
|
45
|
-
* const clientRole = new keycloak.Role("
|
|
46
|
-
* clientId: keycloak_client.client.id,
|
|
47
|
-
* description: "My Client Role",
|
|
44
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
48
45
|
* realmId: realm.id,
|
|
46
|
+
* clientId: clientKeycloakClient.id,
|
|
47
|
+
* name: "my-client-role",
|
|
48
|
+
* description: "My Client Role",
|
|
49
49
|
* });
|
|
50
50
|
* ```
|
|
51
|
-
* <!--End PulumiCodeChooser -->
|
|
52
51
|
*
|
|
53
52
|
* ### Example Usage (Composite role)
|
|
54
53
|
*
|
|
55
|
-
* <!--Start PulumiCodeChooser -->
|
|
56
54
|
* ```typescript
|
|
57
55
|
* import * as pulumi from "@pulumi/pulumi";
|
|
58
56
|
* import * as keycloak from "@pulumi/keycloak";
|
|
59
57
|
*
|
|
60
58
|
* const realm = new keycloak.Realm("realm", {
|
|
61
|
-
* enabled: true,
|
|
62
59
|
* realm: "my-realm",
|
|
60
|
+
* enabled: true,
|
|
61
|
+
* });
|
|
62
|
+
* // realm roles
|
|
63
|
+
* const createRole = new keycloak.Role("create_role", {
|
|
64
|
+
* realmId: realm.id,
|
|
65
|
+
* name: "create",
|
|
66
|
+
* });
|
|
67
|
+
* const readRole = new keycloak.Role("read_role", {
|
|
68
|
+
* realmId: realm.id,
|
|
69
|
+
* name: "read",
|
|
70
|
+
* });
|
|
71
|
+
* const updateRole = new keycloak.Role("update_role", {
|
|
72
|
+
* realmId: realm.id,
|
|
73
|
+
* name: "update",
|
|
74
|
+
* });
|
|
75
|
+
* const deleteRole = new keycloak.Role("delete_role", {
|
|
76
|
+
* realmId: realm.id,
|
|
77
|
+
* name: "delete",
|
|
63
78
|
* });
|
|
64
|
-
*
|
|
65
|
-
* const readRole = new keycloak.Role("readRole", {realmId: realm.id});
|
|
66
|
-
* const updateRole = new keycloak.Role("updateRole", {realmId: realm.id});
|
|
67
|
-
* const deleteRole = new keycloak.Role("deleteRole", {realmId: realm.id});
|
|
79
|
+
* // client role
|
|
68
80
|
* const client = new keycloak.openid.Client("client", {
|
|
69
|
-
*
|
|
81
|
+
* realmId: realm.id,
|
|
70
82
|
* clientId: "client",
|
|
83
|
+
* name: "client",
|
|
71
84
|
* enabled: true,
|
|
72
|
-
*
|
|
85
|
+
* accessType: "BEARER-ONLY",
|
|
73
86
|
* });
|
|
74
|
-
* const clientRole = new keycloak.Role("
|
|
75
|
-
* clientId: keycloak_client.client.id,
|
|
76
|
-
* description: "My Client Role",
|
|
87
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
77
88
|
* realmId: realm.id,
|
|
89
|
+
* clientId: clientKeycloakClient.id,
|
|
90
|
+
* name: "my-client-role",
|
|
91
|
+
* description: "My Client Role",
|
|
78
92
|
* });
|
|
79
|
-
* const adminRole = new keycloak.Role("
|
|
93
|
+
* const adminRole = new keycloak.Role("admin_role", {
|
|
94
|
+
* realmId: realm.id,
|
|
95
|
+
* name: "admin",
|
|
80
96
|
* compositeRoles: [
|
|
81
97
|
* "{keycloak_role.create_role.id}",
|
|
82
98
|
* "{keycloak_role.read_role.id}",
|
|
@@ -84,10 +100,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
84
100
|
* "{keycloak_role.delete_role.id}",
|
|
85
101
|
* "{keycloak_role.client_role.id}",
|
|
86
102
|
* ],
|
|
87
|
-
* realmId: realm.id,
|
|
88
103
|
* });
|
|
89
104
|
* ```
|
|
90
|
-
* <!--End PulumiCodeChooser -->
|
|
91
105
|
*
|
|
92
106
|
* ### Argument Reference
|
|
93
107
|
*
|
package/role.js
CHANGED
|
@@ -15,74 +15,90 @@ const utilities = require("./utilities");
|
|
|
15
15
|
*
|
|
16
16
|
* ### Example Usage (Realm role)
|
|
17
17
|
*
|
|
18
|
-
* <!--Start PulumiCodeChooser -->
|
|
19
18
|
* ```typescript
|
|
20
19
|
* import * as pulumi from "@pulumi/pulumi";
|
|
21
20
|
* import * as keycloak from "@pulumi/keycloak";
|
|
22
21
|
*
|
|
23
22
|
* const realm = new keycloak.Realm("realm", {
|
|
24
|
-
* enabled: true,
|
|
25
23
|
* realm: "my-realm",
|
|
24
|
+
* enabled: true,
|
|
26
25
|
* });
|
|
27
|
-
* const realmRole = new keycloak.Role("
|
|
28
|
-
* description: "My Realm Role",
|
|
26
|
+
* const realmRole = new keycloak.Role("realm_role", {
|
|
29
27
|
* realmId: realm.id,
|
|
28
|
+
* name: "my-realm-role",
|
|
29
|
+
* description: "My Realm Role",
|
|
30
30
|
* });
|
|
31
31
|
* ```
|
|
32
|
-
* <!--End PulumiCodeChooser -->
|
|
33
32
|
*
|
|
34
33
|
* ### Example Usage (Client role)
|
|
35
34
|
*
|
|
36
|
-
* <!--Start PulumiCodeChooser -->
|
|
37
35
|
* ```typescript
|
|
38
36
|
* import * as pulumi from "@pulumi/pulumi";
|
|
39
37
|
* import * as keycloak from "@pulumi/keycloak";
|
|
40
38
|
*
|
|
41
39
|
* const realm = new keycloak.Realm("realm", {
|
|
42
|
-
* enabled: true,
|
|
43
40
|
* realm: "my-realm",
|
|
41
|
+
* enabled: true,
|
|
44
42
|
* });
|
|
45
43
|
* const client = new keycloak.openid.Client("client", {
|
|
46
|
-
*
|
|
44
|
+
* realmId: realm.id,
|
|
47
45
|
* clientId: "client",
|
|
46
|
+
* name: "client",
|
|
48
47
|
* enabled: true,
|
|
49
|
-
*
|
|
48
|
+
* accessType: "BEARER-ONLY",
|
|
50
49
|
* });
|
|
51
|
-
* const clientRole = new keycloak.Role("
|
|
52
|
-
* clientId: keycloak_client.client.id,
|
|
53
|
-
* description: "My Client Role",
|
|
50
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
54
51
|
* realmId: realm.id,
|
|
52
|
+
* clientId: clientKeycloakClient.id,
|
|
53
|
+
* name: "my-client-role",
|
|
54
|
+
* description: "My Client Role",
|
|
55
55
|
* });
|
|
56
56
|
* ```
|
|
57
|
-
* <!--End PulumiCodeChooser -->
|
|
58
57
|
*
|
|
59
58
|
* ### Example Usage (Composite role)
|
|
60
59
|
*
|
|
61
|
-
* <!--Start PulumiCodeChooser -->
|
|
62
60
|
* ```typescript
|
|
63
61
|
* import * as pulumi from "@pulumi/pulumi";
|
|
64
62
|
* import * as keycloak from "@pulumi/keycloak";
|
|
65
63
|
*
|
|
66
64
|
* const realm = new keycloak.Realm("realm", {
|
|
67
|
-
* enabled: true,
|
|
68
65
|
* realm: "my-realm",
|
|
66
|
+
* enabled: true,
|
|
67
|
+
* });
|
|
68
|
+
* // realm roles
|
|
69
|
+
* const createRole = new keycloak.Role("create_role", {
|
|
70
|
+
* realmId: realm.id,
|
|
71
|
+
* name: "create",
|
|
72
|
+
* });
|
|
73
|
+
* const readRole = new keycloak.Role("read_role", {
|
|
74
|
+
* realmId: realm.id,
|
|
75
|
+
* name: "read",
|
|
76
|
+
* });
|
|
77
|
+
* const updateRole = new keycloak.Role("update_role", {
|
|
78
|
+
* realmId: realm.id,
|
|
79
|
+
* name: "update",
|
|
80
|
+
* });
|
|
81
|
+
* const deleteRole = new keycloak.Role("delete_role", {
|
|
82
|
+
* realmId: realm.id,
|
|
83
|
+
* name: "delete",
|
|
69
84
|
* });
|
|
70
|
-
*
|
|
71
|
-
* const readRole = new keycloak.Role("readRole", {realmId: realm.id});
|
|
72
|
-
* const updateRole = new keycloak.Role("updateRole", {realmId: realm.id});
|
|
73
|
-
* const deleteRole = new keycloak.Role("deleteRole", {realmId: realm.id});
|
|
85
|
+
* // client role
|
|
74
86
|
* const client = new keycloak.openid.Client("client", {
|
|
75
|
-
*
|
|
87
|
+
* realmId: realm.id,
|
|
76
88
|
* clientId: "client",
|
|
89
|
+
* name: "client",
|
|
77
90
|
* enabled: true,
|
|
78
|
-
*
|
|
91
|
+
* accessType: "BEARER-ONLY",
|
|
79
92
|
* });
|
|
80
|
-
* const clientRole = new keycloak.Role("
|
|
81
|
-
* clientId: keycloak_client.client.id,
|
|
82
|
-
* description: "My Client Role",
|
|
93
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
83
94
|
* realmId: realm.id,
|
|
95
|
+
* clientId: clientKeycloakClient.id,
|
|
96
|
+
* name: "my-client-role",
|
|
97
|
+
* description: "My Client Role",
|
|
84
98
|
* });
|
|
85
|
-
* const adminRole = new keycloak.Role("
|
|
99
|
+
* const adminRole = new keycloak.Role("admin_role", {
|
|
100
|
+
* realmId: realm.id,
|
|
101
|
+
* name: "admin",
|
|
86
102
|
* compositeRoles: [
|
|
87
103
|
* "{keycloak_role.create_role.id}",
|
|
88
104
|
* "{keycloak_role.read_role.id}",
|
|
@@ -90,10 +106,8 @@ const utilities = require("./utilities");
|
|
|
90
106
|
* "{keycloak_role.delete_role.id}",
|
|
91
107
|
* "{keycloak_role.client_role.id}",
|
|
92
108
|
* ],
|
|
93
|
-
* realmId: realm.id,
|
|
94
109
|
* });
|
|
95
110
|
* ```
|
|
96
|
-
* <!--End PulumiCodeChooser -->
|
|
97
111
|
*
|
|
98
112
|
* ### Argument Reference
|
|
99
113
|
*
|
package/role.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"role.js","sourceRoot":"","sources":["../role.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"role.js","sourceRoot":"","sources":["../role.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6HG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAiBD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AApEL,oBAqEC;AAvDG,gBAAgB;AACO,iBAAY,GAAG,0BAA0B,CAAC"}
|
package/saml/client.d.ts
CHANGED
|
@@ -10,60 +10,6 @@ import * as outputs from "../types/output";
|
|
|
10
10
|
* clients are applications that redirect users to Keycloak for authentication
|
|
11
11
|
* in order to take advantage of Keycloak's user sessions for SSO.
|
|
12
12
|
*
|
|
13
|
-
* ### Example Usage
|
|
14
|
-
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
|
-
* ```typescript
|
|
17
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
18
|
-
* import * as fs from "fs";
|
|
19
|
-
* import * as keycloak from "@pulumi/keycloak";
|
|
20
|
-
*
|
|
21
|
-
* const realm = new keycloak.Realm("realm", {
|
|
22
|
-
* enabled: true,
|
|
23
|
-
* realm: "my-realm",
|
|
24
|
-
* });
|
|
25
|
-
* const samlClient = new keycloak.saml.Client("samlClient", {
|
|
26
|
-
* clientId: "test-saml-client",
|
|
27
|
-
* includeAuthnStatement: true,
|
|
28
|
-
* realmId: realm.id,
|
|
29
|
-
* signAssertions: true,
|
|
30
|
-
* signDocuments: false,
|
|
31
|
-
* signingCertificate: fs.readFileSync("saml-cert.pem", "utf8"),
|
|
32
|
-
* signingPrivateKey: fs.readFileSync("saml-key.pem", "utf8"),
|
|
33
|
-
* });
|
|
34
|
-
* ```
|
|
35
|
-
* <!--End PulumiCodeChooser -->
|
|
36
|
-
*
|
|
37
|
-
* ### Argument Reference
|
|
38
|
-
*
|
|
39
|
-
* The following arguments are supported:
|
|
40
|
-
*
|
|
41
|
-
* - `realmId` - (Required) The realm this client is attached to.
|
|
42
|
-
* - `clientId` - (Required) The unique ID of this client, referenced in the URI during authentication and in issued tokens.
|
|
43
|
-
* - `name` - (Optional) The display name of this client in the GUI.
|
|
44
|
-
* - `enabled` - (Optional) When false, this client will not be able to initiate a login or obtain access tokens. Defaults to `true`.
|
|
45
|
-
* - `description` - (Optional) The description of this client in the GUI.
|
|
46
|
-
* - `includeAuthnStatement` - (Optional) When `true`, an `AuthnStatement` will be included in the SAML response.
|
|
47
|
-
* - `signDocuments` - (Optional) When `true`, the SAML document will be signed by Keycloak using the realm's private key.
|
|
48
|
-
* - `signAssertions` - (Optional) When `true`, the SAML assertions will be signed by Keycloak using the realm's private key, and embedded within the SAML XML Auth response.
|
|
49
|
-
* - `clientSignatureRequired` - (Optional) When `true`, Keycloak will expect that documents originating from a client will be signed using the certificate and/or key configured via `signingCertificate` and `signingPrivateKey`.
|
|
50
|
-
* - `forcePostBinding` - (Optional) When `true`, Keycloak will always respond to an authentication request via the SAML POST Binding.
|
|
51
|
-
* - `frontChannelLogout` - (Optional) When `true`, this client will require a browser redirect in order to perform a logout.
|
|
52
|
-
* - `nameIdFormat` - (Optional) Sets the Name ID format for the subject.
|
|
53
|
-
* - `rootUrl` - (Optional) When specified, this value is prepended to all relative URLs.
|
|
54
|
-
* - `validRedirectUris` - (Optional) When specified, Keycloak will use this list to validate given Assertion Consumer URLs specified in the authentication request.
|
|
55
|
-
* - `baseUrl` - (Optional) When specified, this URL will be used whenever Keycloak needs to link to this client.
|
|
56
|
-
* - `masterSamlProcessingUrl` - (Optional) When specified, this URL will be used for all SAML requests.
|
|
57
|
-
* - `signingCertificate` - (Optional) If documents or assertions from the client are signed, this certificate will be used to verify the signature.
|
|
58
|
-
* - `signingPrivateKey` - (Optional) If documents or assertions from the client are signed, this private key will be used to verify the signature.
|
|
59
|
-
* - `idpInitiatedSsoUrlName` - (Optional) URL fragment name to reference client when you want to do IDP Initiated SSO.
|
|
60
|
-
* - `idpInitiatedSsoRelayState` - (Optional) Relay state you want to send with SAML request when you want to do IDP Initiated SSO.
|
|
61
|
-
* - `assertionConsumerPostUrl` - (Optional) SAML POST Binding URL for the client's assertion consumer service (login responses).
|
|
62
|
-
* - `assertionConsumerRedirectUrl` - (Optional) SAML Redirect Binding URL for the client's assertion consumer service (login responses).
|
|
63
|
-
* - `logoutServicePostBindingUrl` - (Optional) SAML POST Binding URL for the client's single logout service.
|
|
64
|
-
* - `logoutServiceRedirectBindingUrl` - (Optional) SAML Redirect Binding URL for the client's single logout service.
|
|
65
|
-
* - `fullScopeAllowed` - (Optional) - Allow to include all roles mappings in the access token
|
|
66
|
-
*
|
|
67
13
|
* ### Import
|
|
68
14
|
*
|
|
69
15
|
* Clients can be imported using the format `{{realm_id}}/{{client_keycloak_id}}`, where `clientKeycloakId` is the unique ID that Keycloak
|
package/saml/client.js
CHANGED
|
@@ -14,60 +14,6 @@ const utilities = require("../utilities");
|
|
|
14
14
|
* clients are applications that redirect users to Keycloak for authentication
|
|
15
15
|
* in order to take advantage of Keycloak's user sessions for SSO.
|
|
16
16
|
*
|
|
17
|
-
* ### Example Usage
|
|
18
|
-
*
|
|
19
|
-
* <!--Start PulumiCodeChooser -->
|
|
20
|
-
* ```typescript
|
|
21
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
22
|
-
* import * as fs from "fs";
|
|
23
|
-
* import * as keycloak from "@pulumi/keycloak";
|
|
24
|
-
*
|
|
25
|
-
* const realm = new keycloak.Realm("realm", {
|
|
26
|
-
* enabled: true,
|
|
27
|
-
* realm: "my-realm",
|
|
28
|
-
* });
|
|
29
|
-
* const samlClient = new keycloak.saml.Client("samlClient", {
|
|
30
|
-
* clientId: "test-saml-client",
|
|
31
|
-
* includeAuthnStatement: true,
|
|
32
|
-
* realmId: realm.id,
|
|
33
|
-
* signAssertions: true,
|
|
34
|
-
* signDocuments: false,
|
|
35
|
-
* signingCertificate: fs.readFileSync("saml-cert.pem", "utf8"),
|
|
36
|
-
* signingPrivateKey: fs.readFileSync("saml-key.pem", "utf8"),
|
|
37
|
-
* });
|
|
38
|
-
* ```
|
|
39
|
-
* <!--End PulumiCodeChooser -->
|
|
40
|
-
*
|
|
41
|
-
* ### Argument Reference
|
|
42
|
-
*
|
|
43
|
-
* The following arguments are supported:
|
|
44
|
-
*
|
|
45
|
-
* - `realmId` - (Required) The realm this client is attached to.
|
|
46
|
-
* - `clientId` - (Required) The unique ID of this client, referenced in the URI during authentication and in issued tokens.
|
|
47
|
-
* - `name` - (Optional) The display name of this client in the GUI.
|
|
48
|
-
* - `enabled` - (Optional) When false, this client will not be able to initiate a login or obtain access tokens. Defaults to `true`.
|
|
49
|
-
* - `description` - (Optional) The description of this client in the GUI.
|
|
50
|
-
* - `includeAuthnStatement` - (Optional) When `true`, an `AuthnStatement` will be included in the SAML response.
|
|
51
|
-
* - `signDocuments` - (Optional) When `true`, the SAML document will be signed by Keycloak using the realm's private key.
|
|
52
|
-
* - `signAssertions` - (Optional) When `true`, the SAML assertions will be signed by Keycloak using the realm's private key, and embedded within the SAML XML Auth response.
|
|
53
|
-
* - `clientSignatureRequired` - (Optional) When `true`, Keycloak will expect that documents originating from a client will be signed using the certificate and/or key configured via `signingCertificate` and `signingPrivateKey`.
|
|
54
|
-
* - `forcePostBinding` - (Optional) When `true`, Keycloak will always respond to an authentication request via the SAML POST Binding.
|
|
55
|
-
* - `frontChannelLogout` - (Optional) When `true`, this client will require a browser redirect in order to perform a logout.
|
|
56
|
-
* - `nameIdFormat` - (Optional) Sets the Name ID format for the subject.
|
|
57
|
-
* - `rootUrl` - (Optional) When specified, this value is prepended to all relative URLs.
|
|
58
|
-
* - `validRedirectUris` - (Optional) When specified, Keycloak will use this list to validate given Assertion Consumer URLs specified in the authentication request.
|
|
59
|
-
* - `baseUrl` - (Optional) When specified, this URL will be used whenever Keycloak needs to link to this client.
|
|
60
|
-
* - `masterSamlProcessingUrl` - (Optional) When specified, this URL will be used for all SAML requests.
|
|
61
|
-
* - `signingCertificate` - (Optional) If documents or assertions from the client are signed, this certificate will be used to verify the signature.
|
|
62
|
-
* - `signingPrivateKey` - (Optional) If documents or assertions from the client are signed, this private key will be used to verify the signature.
|
|
63
|
-
* - `idpInitiatedSsoUrlName` - (Optional) URL fragment name to reference client when you want to do IDP Initiated SSO.
|
|
64
|
-
* - `idpInitiatedSsoRelayState` - (Optional) Relay state you want to send with SAML request when you want to do IDP Initiated SSO.
|
|
65
|
-
* - `assertionConsumerPostUrl` - (Optional) SAML POST Binding URL for the client's assertion consumer service (login responses).
|
|
66
|
-
* - `assertionConsumerRedirectUrl` - (Optional) SAML Redirect Binding URL for the client's assertion consumer service (login responses).
|
|
67
|
-
* - `logoutServicePostBindingUrl` - (Optional) SAML POST Binding URL for the client's single logout service.
|
|
68
|
-
* - `logoutServiceRedirectBindingUrl` - (Optional) SAML Redirect Binding URL for the client's single logout service.
|
|
69
|
-
* - `fullScopeAllowed` - (Optional) - Allow to include all roles mappings in the access token
|
|
70
|
-
*
|
|
71
17
|
* ### Import
|
|
72
18
|
*
|
|
73
19
|
* Clients can be imported using the format `{{realm_id}}/{{client_keycloak_id}}`, where `clientKeycloakId` is the unique ID that Keycloak
|
package/saml/client.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.js","sourceRoot":"","sources":["../../saml/client.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"client.js","sourceRoot":"","sources":["../../saml/client.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;GAeG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAgDD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,oCAAoC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpH,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,iCAAiC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9G,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrF;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,oCAAoC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,iCAAiC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChE,cAAc,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7D,cAAc,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AApKL,wBAqKC;AAvJG,gBAAgB;AACO,mBAAY,GAAG,6BAA6B,CAAC"}
|