@pulumi/keycloak 5.3.1 → 5.3.3-alpha.1721330331
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/attributeImporterIdentityProviderMapper.d.ts +4 -5
- package/attributeImporterIdentityProviderMapper.js +4 -5
- package/attributeImporterIdentityProviderMapper.js.map +1 -1
- package/attributeToRoleIdentityMapper.d.ts +6 -6
- package/attributeToRoleIdentityMapper.js +6 -6
- package/authentication/bindings.d.ts +3 -5
- package/authentication/bindings.js +3 -5
- package/authentication/bindings.js.map +1 -1
- package/authentication/execution.d.ts +2 -4
- package/authentication/execution.js +2 -4
- package/authentication/execution.js.map +1 -1
- package/authentication/executionConfig.d.ts +0 -2
- package/authentication/executionConfig.js +0 -2
- package/authentication/executionConfig.js.map +1 -1
- package/authentication/flow.d.ts +0 -2
- package/authentication/flow.js +0 -2
- package/authentication/flow.js.map +1 -1
- package/authentication/subflow.d.ts +0 -2
- package/authentication/subflow.js +0 -2
- package/authentication/subflow.js.map +1 -1
- package/customIdentityProviderMapping.d.ts +7 -8
- package/customIdentityProviderMapping.js +4 -5
- package/customIdentityProviderMapping.js.map +1 -1
- package/customUserFederation.d.ts +8 -9
- package/customUserFederation.js +5 -6
- package/customUserFederation.js.map +1 -1
- package/defaultGroups.d.ts +6 -5
- package/defaultGroups.js +6 -5
- package/defaultGroups.js.map +1 -1
- package/defaultRoles.d.ts +1 -3
- package/defaultRoles.js +1 -3
- package/defaultRoles.js.map +1 -1
- package/genericClientProtocolMapper.d.ts +8 -9
- package/genericClientProtocolMapper.js +8 -9
- package/genericClientProtocolMapper.js.map +1 -1
- package/genericClientRoleMapper.d.ts +28 -21
- package/genericClientRoleMapper.js +28 -21
- package/genericClientRoleMapper.js.map +1 -1
- package/genericProtocolMapper.d.ts +3 -4
- package/genericProtocolMapper.js +3 -4
- package/genericProtocolMapper.js.map +1 -1
- package/genericRoleMapper.d.ts +28 -21
- package/genericRoleMapper.js +28 -21
- package/genericRoleMapper.js.map +1 -1
- package/getAuthenticationExecution.d.ts +0 -4
- package/getAuthenticationExecution.js +0 -4
- package/getAuthenticationExecution.js.map +1 -1
- package/getAuthenticationFlow.d.ts +0 -4
- package/getAuthenticationFlow.js +0 -4
- package/getAuthenticationFlow.js.map +1 -1
- package/getClientDescriptionConverter.d.ts +50 -54
- package/getClientDescriptionConverter.js +50 -54
- package/getClientDescriptionConverter.js.map +1 -1
- package/getRealm.d.ts +10 -6
- package/getRealm.js +10 -6
- package/getRealm.js.map +1 -1
- package/getUser.d.ts +2 -4
- package/getUser.js +2 -4
- package/getUser.js.map +1 -1
- package/getUserRealmRoles.d.ts +4 -4
- package/getUserRealmRoles.js +4 -4
- package/group.d.ts +12 -9
- package/group.js +12 -9
- package/group.js.map +1 -1
- package/groupMemberships.d.ts +7 -6
- package/groupMemberships.js +7 -6
- package/groupMemberships.js.map +1 -1
- package/groupRoles.d.ts +16 -12
- package/groupRoles.js +16 -12
- package/groupRoles.js.map +1 -1
- package/hardcodedAttributeIdentityProviderMapper.d.ts +4 -5
- package/hardcodedAttributeIdentityProviderMapper.js +4 -5
- package/hardcodedAttributeIdentityProviderMapper.js.map +1 -1
- package/hardcodedRoleIdentityMapper.d.ts +6 -6
- package/hardcodedRoleIdentityMapper.js +6 -6
- package/identityProviderTokenExchangeScopePermission.d.ts +5 -6
- package/identityProviderTokenExchangeScopePermission.js +5 -6
- package/identityProviderTokenExchangeScopePermission.js.map +1 -1
- package/ldap/customMapper.d.ts +6 -6
- package/ldap/customMapper.js +6 -6
- package/ldap/fullNameMapper.d.ts +13 -13
- package/ldap/fullNameMapper.js +13 -13
- package/ldap/groupMapper.d.ts +15 -15
- package/ldap/groupMapper.js +15 -15
- package/ldap/hardcodedAttributeMapper.d.ts +4 -4
- package/ldap/hardcodedAttributeMapper.js +4 -4
- package/ldap/hardcodedGroupMapper.d.ts +8 -5
- package/ldap/hardcodedGroupMapper.js +8 -5
- package/ldap/hardcodedGroupMapper.js.map +1 -1
- package/ldap/hardcodedRoleMapper.d.ts +4 -4
- package/ldap/hardcodedRoleMapper.js +4 -4
- package/ldap/msadLdsUserAccountControlMapper.d.ts +4 -4
- package/ldap/msadLdsUserAccountControlMapper.js +4 -4
- package/ldap/msadUserAccountControlMapper.d.ts +12 -12
- package/ldap/msadUserAccountControlMapper.js +12 -12
- package/ldap/roleMapper.d.ts +4 -4
- package/ldap/roleMapper.js +4 -4
- package/ldap/userAttributeMapper.d.ts +16 -16
- package/ldap/userAttributeMapper.js +13 -13
- package/ldap/userFederation.d.ts +11 -12
- package/ldap/userFederation.js +11 -12
- package/ldap/userFederation.js.map +1 -1
- package/oidc/googleIdentityProvider.d.ts +2 -4
- package/oidc/googleIdentityProvider.js +2 -4
- package/oidc/googleIdentityProvider.js.map +1 -1
- package/oidc/identityProvider.d.ts +1 -3
- package/oidc/identityProvider.js +1 -3
- package/oidc/identityProvider.js.map +1 -1
- package/openid/audienceProtocolMapper.d.ts +16 -14
- package/openid/audienceProtocolMapper.js +16 -14
- package/openid/audienceProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMapper.d.ts +9 -8
- package/openid/audienceResolveProtocolMapper.js +9 -8
- package/openid/audienceResolveProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMappter.d.ts +9 -8
- package/openid/audienceResolveProtocolMappter.js +9 -8
- package/openid/audienceResolveProtocolMappter.js.map +1 -1
- package/openid/client.d.ts +5 -6
- package/openid/client.js +5 -6
- package/openid/client.js.map +1 -1
- package/openid/clientDefaultScopes.d.ts +8 -7
- package/openid/clientDefaultScopes.js +8 -7
- package/openid/clientDefaultScopes.js.map +1 -1
- package/openid/clientOptionalScopes.d.ts +8 -7
- package/openid/clientOptionalScopes.js +8 -7
- package/openid/clientOptionalScopes.js.map +1 -1
- package/openid/clientPolicy.d.ts +5 -5
- package/openid/clientPolicy.js +5 -5
- package/openid/clientScope.d.ts +4 -5
- package/openid/clientScope.js +4 -5
- package/openid/clientScope.js.map +1 -1
- package/openid/clientServiceAccountRealmRole.d.ts +6 -4
- package/openid/clientServiceAccountRealmRole.js +6 -4
- package/openid/clientServiceAccountRealmRole.js.map +1 -1
- package/openid/clientServiceAccountRole.d.ts +8 -5
- package/openid/clientServiceAccountRole.js +8 -5
- package/openid/clientServiceAccountRole.js.map +1 -1
- package/openid/fullNameProtocolMapper.d.ts +16 -14
- package/openid/fullNameProtocolMapper.js +16 -14
- package/openid/fullNameProtocolMapper.js.map +1 -1
- package/openid/getClient.d.ts +2 -4
- package/openid/getClient.js +2 -4
- package/openid/getClient.js.map +1 -1
- package/openid/getClientAuthorizationPolicy.d.ts +8 -6
- package/openid/getClientAuthorizationPolicy.js +8 -6
- package/openid/getClientAuthorizationPolicy.js.map +1 -1
- package/openid/getClientScope.d.ts +4 -6
- package/openid/getClientScope.js +4 -6
- package/openid/getClientScope.js.map +1 -1
- package/openid/getClientServiceAccountUser.d.ts +4 -6
- package/openid/getClientServiceAccountUser.js +4 -6
- package/openid/getClientServiceAccountUser.js.map +1 -1
- package/openid/groupMembershipProtocolMapper.d.ts +18 -16
- package/openid/groupMembershipProtocolMapper.js +18 -16
- package/openid/groupMembershipProtocolMapper.js.map +1 -1
- package/openid/hardcodedClaimProtocolMapper.d.ts +18 -16
- package/openid/hardcodedClaimProtocolMapper.js +18 -16
- package/openid/hardcodedClaimProtocolMapper.js.map +1 -1
- package/openid/hardcodedRoleProtocolMapper.d.ts +24 -16
- package/openid/hardcodedRoleProtocolMapper.js +24 -16
- package/openid/hardcodedRoleProtocolMapper.js.map +1 -1
- package/openid/scriptProtocolMapper.d.ts +10 -8
- package/openid/scriptProtocolMapper.js +10 -8
- package/openid/scriptProtocolMapper.js.map +1 -1
- package/openid/userAttributeProtocolMapper.d.ts +18 -16
- package/openid/userAttributeProtocolMapper.js +18 -16
- package/openid/userAttributeProtocolMapper.js.map +1 -1
- package/openid/userClientRoleProtocolMapper.d.ts +10 -8
- package/openid/userClientRoleProtocolMapper.js +10 -8
- package/openid/userClientRoleProtocolMapper.js.map +1 -1
- package/openid/userPropertyProtocolMapper.d.ts +18 -16
- package/openid/userPropertyProtocolMapper.js +18 -16
- package/openid/userPropertyProtocolMapper.js.map +1 -1
- package/openid/userRealmRoleProtocolMapper.d.ts +18 -16
- package/openid/userRealmRoleProtocolMapper.js +18 -16
- package/openid/userRealmRoleProtocolMapper.js.map +1 -1
- package/openid/userSessionNoteProtocolMapper.d.ts +10 -8
- package/openid/userSessionNoteProtocolMapper.js +10 -8
- package/openid/userSessionNoteProtocolMapper.js.map +1 -1
- package/package.json +3 -2
- package/realmEvents.d.ts +5 -7
- package/realmEvents.js +5 -7
- package/realmEvents.js.map +1 -1
- package/realmKeystoreAesGenerated.d.ts +2 -3
- package/realmKeystoreAesGenerated.js +2 -3
- package/realmKeystoreAesGenerated.js.map +1 -1
- package/realmKeystoreEcdsaGenerated.d.ts +2 -3
- package/realmKeystoreEcdsaGenerated.js +2 -3
- package/realmKeystoreEcdsaGenerated.js.map +1 -1
- package/realmKeystoreHmacGenerated.d.ts +2 -3
- package/realmKeystoreHmacGenerated.js +2 -3
- package/realmKeystoreHmacGenerated.js.map +1 -1
- package/realmKeystoreJavaGenerated.d.ts +2 -3
- package/realmKeystoreJavaGenerated.js +2 -3
- package/realmKeystoreJavaGenerated.js.map +1 -1
- package/realmKeystoreRsaGenerated.d.ts +2 -3
- package/realmKeystoreRsaGenerated.js +2 -3
- package/realmKeystoreRsaGenerated.js.map +1 -1
- package/realmUserProfile.d.ts +1 -3
- package/realmUserProfile.js +1 -3
- package/realmUserProfile.js.map +1 -1
- package/requiredAction.d.ts +2 -3
- package/requiredAction.js +2 -3
- package/requiredAction.js.map +1 -1
- package/role.d.ts +41 -27
- package/role.js +41 -27
- package/role.js.map +1 -1
- package/saml/client.d.ts +0 -54
- package/saml/client.js +0 -54
- package/saml/client.js.map +1 -1
- package/saml/clientDefaultScope.d.ts +0 -37
- package/saml/clientDefaultScope.js +0 -37
- package/saml/clientDefaultScope.js.map +1 -1
- package/saml/clientScope.d.ts +2 -3
- package/saml/clientScope.js +2 -3
- package/saml/clientScope.js.map +1 -1
- package/saml/getClient.d.ts +2 -4
- package/saml/getClient.js +2 -4
- package/saml/getClient.js.map +1 -1
- package/saml/getClientInstallationProvider.d.ts +0 -66
- package/saml/getClientInstallationProvider.js +0 -66
- package/saml/getClientInstallationProvider.js.map +1 -1
- package/saml/identityProvider.d.ts +7 -9
- package/saml/identityProvider.js +7 -9
- package/saml/identityProvider.js.map +1 -1
- package/saml/scriptProtocolMapper.d.ts +4 -4
- package/saml/scriptProtocolMapper.js +4 -4
- package/saml/userAttributeProtocolMapper.d.ts +8 -8
- package/saml/userAttributeProtocolMapper.js +8 -8
- package/saml/userPropertyProtocolMapper.d.ts +8 -8
- package/saml/userPropertyProtocolMapper.js +8 -8
- package/types/input.d.ts +0 -15
- package/types/output.d.ts +0 -15
- package/user.d.ts +10 -12
- package/user.js +10 -12
- package/user.js.map +1 -1
- package/userGroups.d.ts +4 -40
- package/userGroups.js +4 -40
- package/userGroups.js.map +1 -1
- package/userRoles.d.ts +7 -6
- package/userRoles.js +7 -6
- package/userRoles.js.map +1 -1
- package/userTemplateImporterIdentityProviderMapper.d.ts +2 -3
- package/userTemplateImporterIdentityProviderMapper.js +2 -3
- package/userTemplateImporterIdentityProviderMapper.js.map +1 -1
- package/package.json.bak +0 -27
package/groupRoles.d.ts
CHANGED
|
@@ -16,41 +16,45 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
16
16
|
*
|
|
17
17
|
* ### Example Usage
|
|
18
18
|
*
|
|
19
|
-
* <!--Start PulumiCodeChooser -->
|
|
20
19
|
* ```typescript
|
|
21
20
|
* import * as pulumi from "@pulumi/pulumi";
|
|
22
21
|
* import * as keycloak from "@pulumi/keycloak";
|
|
23
22
|
*
|
|
24
23
|
* const realm = new keycloak.Realm("realm", {
|
|
25
|
-
* enabled: true,
|
|
26
24
|
* realm: "my-realm",
|
|
25
|
+
* enabled: true,
|
|
27
26
|
* });
|
|
28
|
-
* const realmRole = new keycloak.Role("
|
|
29
|
-
* description: "My Realm Role",
|
|
27
|
+
* const realmRole = new keycloak.Role("realm_role", {
|
|
30
28
|
* realmId: realm.id,
|
|
29
|
+
* name: "my-realm-role",
|
|
30
|
+
* description: "My Realm Role",
|
|
31
31
|
* });
|
|
32
32
|
* const client = new keycloak.openid.Client("client", {
|
|
33
|
-
*
|
|
33
|
+
* realmId: realm.id,
|
|
34
34
|
* clientId: "client",
|
|
35
|
+
* name: "client",
|
|
35
36
|
* enabled: true,
|
|
36
|
-
*
|
|
37
|
+
* accessType: "BEARER-ONLY",
|
|
37
38
|
* });
|
|
38
|
-
* const clientRole = new keycloak.Role("
|
|
39
|
-
*
|
|
39
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
40
|
+
* realmId: realm.id,
|
|
41
|
+
* clientId: clientKeycloakClient.id,
|
|
42
|
+
* name: "my-client-role",
|
|
40
43
|
* description: "My Client Role",
|
|
44
|
+
* });
|
|
45
|
+
* const group = new keycloak.Group("group", {
|
|
41
46
|
* realmId: realm.id,
|
|
47
|
+
* name: "my-group",
|
|
42
48
|
* });
|
|
43
|
-
* const
|
|
44
|
-
* const groupRoles = new keycloak.GroupRoles("groupRoles", {
|
|
45
|
-
* groupId: group.id,
|
|
49
|
+
* const groupRoles = new keycloak.GroupRoles("group_roles", {
|
|
46
50
|
* realmId: realm.id,
|
|
51
|
+
* groupId: group.id,
|
|
47
52
|
* roleIds: [
|
|
48
53
|
* realmRole.id,
|
|
49
54
|
* clientRole.id,
|
|
50
55
|
* ],
|
|
51
56
|
* });
|
|
52
57
|
* ```
|
|
53
|
-
* <!--End PulumiCodeChooser -->
|
|
54
58
|
*
|
|
55
59
|
* ### Argument Reference
|
|
56
60
|
*
|
package/groupRoles.js
CHANGED
|
@@ -22,41 +22,45 @@ const utilities = require("./utilities");
|
|
|
22
22
|
*
|
|
23
23
|
* ### Example Usage
|
|
24
24
|
*
|
|
25
|
-
* <!--Start PulumiCodeChooser -->
|
|
26
25
|
* ```typescript
|
|
27
26
|
* import * as pulumi from "@pulumi/pulumi";
|
|
28
27
|
* import * as keycloak from "@pulumi/keycloak";
|
|
29
28
|
*
|
|
30
29
|
* const realm = new keycloak.Realm("realm", {
|
|
31
|
-
* enabled: true,
|
|
32
30
|
* realm: "my-realm",
|
|
31
|
+
* enabled: true,
|
|
33
32
|
* });
|
|
34
|
-
* const realmRole = new keycloak.Role("
|
|
35
|
-
* description: "My Realm Role",
|
|
33
|
+
* const realmRole = new keycloak.Role("realm_role", {
|
|
36
34
|
* realmId: realm.id,
|
|
35
|
+
* name: "my-realm-role",
|
|
36
|
+
* description: "My Realm Role",
|
|
37
37
|
* });
|
|
38
38
|
* const client = new keycloak.openid.Client("client", {
|
|
39
|
-
*
|
|
39
|
+
* realmId: realm.id,
|
|
40
40
|
* clientId: "client",
|
|
41
|
+
* name: "client",
|
|
41
42
|
* enabled: true,
|
|
42
|
-
*
|
|
43
|
+
* accessType: "BEARER-ONLY",
|
|
43
44
|
* });
|
|
44
|
-
* const clientRole = new keycloak.Role("
|
|
45
|
-
*
|
|
45
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
46
|
+
* realmId: realm.id,
|
|
47
|
+
* clientId: clientKeycloakClient.id,
|
|
48
|
+
* name: "my-client-role",
|
|
46
49
|
* description: "My Client Role",
|
|
50
|
+
* });
|
|
51
|
+
* const group = new keycloak.Group("group", {
|
|
47
52
|
* realmId: realm.id,
|
|
53
|
+
* name: "my-group",
|
|
48
54
|
* });
|
|
49
|
-
* const
|
|
50
|
-
* const groupRoles = new keycloak.GroupRoles("groupRoles", {
|
|
51
|
-
* groupId: group.id,
|
|
55
|
+
* const groupRoles = new keycloak.GroupRoles("group_roles", {
|
|
52
56
|
* realmId: realm.id,
|
|
57
|
+
* groupId: group.id,
|
|
53
58
|
* roleIds: [
|
|
54
59
|
* realmRole.id,
|
|
55
60
|
* clientRole.id,
|
|
56
61
|
* ],
|
|
57
62
|
* });
|
|
58
63
|
* ```
|
|
59
|
-
* <!--End PulumiCodeChooser -->
|
|
60
64
|
*
|
|
61
65
|
* ### Argument Reference
|
|
62
66
|
*
|
package/groupRoles.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"groupRoles.js","sourceRoot":"","sources":["../groupRoles.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"groupRoles.js","sourceRoot":"","sources":["../groupRoles.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IAeD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AApEL,gCAqEC;AAvDG,gBAAgB;AACO,uBAAY,GAAG,sCAAsC,CAAC"}
|
|
@@ -6,7 +6,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
8
|
*
|
|
9
|
-
* <!--Start PulumiCodeChooser -->
|
|
10
9
|
* ```typescript
|
|
11
10
|
* import * as pulumi from "@pulumi/pulumi";
|
|
12
11
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -15,7 +14,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
15
14
|
* realm: "my-realm",
|
|
16
15
|
* enabled: true,
|
|
17
16
|
* });
|
|
18
|
-
* const
|
|
17
|
+
* const oidc = new keycloak.oidc.IdentityProvider("oidc", {
|
|
19
18
|
* realm: realm.id,
|
|
20
19
|
* alias: "my-idp",
|
|
21
20
|
* authorizationUrl: "https://authorizationurl.com",
|
|
@@ -23,9 +22,10 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
23
22
|
* clientSecret: "clientSecret",
|
|
24
23
|
* tokenUrl: "https://tokenurl.com",
|
|
25
24
|
* });
|
|
26
|
-
* const oidcHardcodedAttributeIdentityProviderMapper = new keycloak.HardcodedAttributeIdentityProviderMapper("
|
|
25
|
+
* const oidcHardcodedAttributeIdentityProviderMapper = new keycloak.HardcodedAttributeIdentityProviderMapper("oidc", {
|
|
27
26
|
* realm: realm.id,
|
|
28
|
-
*
|
|
27
|
+
* name: "hardcodedUserSessionAttribute",
|
|
28
|
+
* identityProviderAlias: oidc.alias,
|
|
29
29
|
* attributeName: "attribute",
|
|
30
30
|
* attributeValue: "value",
|
|
31
31
|
* userSession: true,
|
|
@@ -34,7 +34,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
34
34
|
* },
|
|
35
35
|
* });
|
|
36
36
|
* ```
|
|
37
|
-
* <!--End PulumiCodeChooser -->
|
|
38
37
|
*/
|
|
39
38
|
export declare class HardcodedAttributeIdentityProviderMapper extends pulumi.CustomResource {
|
|
40
39
|
/**
|
|
@@ -12,7 +12,6 @@ const utilities = require("./utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ## Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -21,7 +20,7 @@ const utilities = require("./utilities");
|
|
|
21
20
|
* realm: "my-realm",
|
|
22
21
|
* enabled: true,
|
|
23
22
|
* });
|
|
24
|
-
* const
|
|
23
|
+
* const oidc = new keycloak.oidc.IdentityProvider("oidc", {
|
|
25
24
|
* realm: realm.id,
|
|
26
25
|
* alias: "my-idp",
|
|
27
26
|
* authorizationUrl: "https://authorizationurl.com",
|
|
@@ -29,9 +28,10 @@ const utilities = require("./utilities");
|
|
|
29
28
|
* clientSecret: "clientSecret",
|
|
30
29
|
* tokenUrl: "https://tokenurl.com",
|
|
31
30
|
* });
|
|
32
|
-
* const oidcHardcodedAttributeIdentityProviderMapper = new keycloak.HardcodedAttributeIdentityProviderMapper("
|
|
31
|
+
* const oidcHardcodedAttributeIdentityProviderMapper = new keycloak.HardcodedAttributeIdentityProviderMapper("oidc", {
|
|
33
32
|
* realm: realm.id,
|
|
34
|
-
*
|
|
33
|
+
* name: "hardcodedUserSessionAttribute",
|
|
34
|
+
* identityProviderAlias: oidc.alias,
|
|
35
35
|
* attributeName: "attribute",
|
|
36
36
|
* attributeValue: "value",
|
|
37
37
|
* userSession: true,
|
|
@@ -40,7 +40,6 @@ const utilities = require("./utilities");
|
|
|
40
40
|
* },
|
|
41
41
|
* });
|
|
42
42
|
* ```
|
|
43
|
-
* <!--End PulumiCodeChooser -->
|
|
44
43
|
*/
|
|
45
44
|
class HardcodedAttributeIdentityProviderMapper extends pulumi.CustomResource {
|
|
46
45
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hardcodedAttributeIdentityProviderMapper.js","sourceRoot":"","sources":["../hardcodedAttributeIdentityProviderMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"hardcodedAttributeIdentityProviderMapper.js","sourceRoot":"","sources":["../hardcodedAttributeIdentityProviderMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,wCAAyC,SAAQ,MAAM,CAAC,cAAc;IAC/E;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqD,EAAE,IAAmC;QACnJ,OAAO,IAAI,wCAAwC,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/F,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,wCAAwC,CAAC,YAAY,CAAC;IACzF,CAAC;IAoCD,YAAY,IAAY,EAAE,WAA0G,EAAE,IAAmC;QACrK,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwE,CAAC;YACvF,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;aAAM;YACH,MAAM,IAAI,GAAG,WAAuE,CAAC;YACrF,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;aACxE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,wCAAwC,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;;AA/FL,4FAgGC;AAlFG,gBAAgB;AACO,qDAAY,GAAG,kGAAkG,CAAC"}
|
|
@@ -6,7 +6,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
8
|
*
|
|
9
|
-
* <!--Start PulumiCodeChooser -->
|
|
10
9
|
* ```typescript
|
|
11
10
|
* import * as pulumi from "@pulumi/pulumi";
|
|
12
11
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -15,7 +14,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
15
14
|
* realm: "my-realm",
|
|
16
15
|
* enabled: true,
|
|
17
16
|
* });
|
|
18
|
-
* const
|
|
17
|
+
* const oidc = new keycloak.oidc.IdentityProvider("oidc", {
|
|
19
18
|
* realm: realm.id,
|
|
20
19
|
* alias: "my-idp",
|
|
21
20
|
* authorizationUrl: "https://authorizationurl.com",
|
|
@@ -23,20 +22,21 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
23
22
|
* clientSecret: "clientSecret",
|
|
24
23
|
* tokenUrl: "https://tokenurl.com",
|
|
25
24
|
* });
|
|
26
|
-
* const realmRole = new keycloak.Role("
|
|
25
|
+
* const realmRole = new keycloak.Role("realm_role", {
|
|
27
26
|
* realmId: realm.id,
|
|
27
|
+
* name: "my-realm-role",
|
|
28
28
|
* description: "My Realm Role",
|
|
29
29
|
* });
|
|
30
|
-
* const oidcHardcodedRoleIdentityMapper = new keycloak.HardcodedRoleIdentityMapper("
|
|
30
|
+
* const oidcHardcodedRoleIdentityMapper = new keycloak.HardcodedRoleIdentityMapper("oidc", {
|
|
31
31
|
* realm: realm.id,
|
|
32
|
-
*
|
|
32
|
+
* name: "hardcodedRole",
|
|
33
|
+
* identityProviderAlias: oidc.alias,
|
|
33
34
|
* role: "my-realm-role",
|
|
34
35
|
* extraConfig: {
|
|
35
36
|
* syncMode: "INHERIT",
|
|
36
37
|
* },
|
|
37
38
|
* });
|
|
38
39
|
* ```
|
|
39
|
-
* <!--End PulumiCodeChooser -->
|
|
40
40
|
*/
|
|
41
41
|
export declare class HardcodedRoleIdentityMapper extends pulumi.CustomResource {
|
|
42
42
|
/**
|
|
@@ -12,7 +12,6 @@ const utilities = require("./utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ## Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -21,7 +20,7 @@ const utilities = require("./utilities");
|
|
|
21
20
|
* realm: "my-realm",
|
|
22
21
|
* enabled: true,
|
|
23
22
|
* });
|
|
24
|
-
* const
|
|
23
|
+
* const oidc = new keycloak.oidc.IdentityProvider("oidc", {
|
|
25
24
|
* realm: realm.id,
|
|
26
25
|
* alias: "my-idp",
|
|
27
26
|
* authorizationUrl: "https://authorizationurl.com",
|
|
@@ -29,20 +28,21 @@ const utilities = require("./utilities");
|
|
|
29
28
|
* clientSecret: "clientSecret",
|
|
30
29
|
* tokenUrl: "https://tokenurl.com",
|
|
31
30
|
* });
|
|
32
|
-
* const realmRole = new keycloak.Role("
|
|
31
|
+
* const realmRole = new keycloak.Role("realm_role", {
|
|
33
32
|
* realmId: realm.id,
|
|
33
|
+
* name: "my-realm-role",
|
|
34
34
|
* description: "My Realm Role",
|
|
35
35
|
* });
|
|
36
|
-
* const oidcHardcodedRoleIdentityMapper = new keycloak.HardcodedRoleIdentityMapper("
|
|
36
|
+
* const oidcHardcodedRoleIdentityMapper = new keycloak.HardcodedRoleIdentityMapper("oidc", {
|
|
37
37
|
* realm: realm.id,
|
|
38
|
-
*
|
|
38
|
+
* name: "hardcodedRole",
|
|
39
|
+
* identityProviderAlias: oidc.alias,
|
|
39
40
|
* role: "my-realm-role",
|
|
40
41
|
* extraConfig: {
|
|
41
42
|
* syncMode: "INHERIT",
|
|
42
43
|
* },
|
|
43
44
|
* });
|
|
44
45
|
* ```
|
|
45
|
-
* <!--End PulumiCodeChooser -->
|
|
46
46
|
*/
|
|
47
47
|
class HardcodedRoleIdentityMapper extends pulumi.CustomResource {
|
|
48
48
|
/**
|
|
@@ -2,16 +2,15 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
/**
|
|
3
3
|
* ## Example Usage
|
|
4
4
|
*
|
|
5
|
-
* <!--Start PulumiCodeChooser -->
|
|
6
5
|
* ```typescript
|
|
7
6
|
* import * as pulumi from "@pulumi/pulumi";
|
|
8
7
|
* import * as keycloak from "@pulumi/keycloak";
|
|
9
8
|
*
|
|
10
|
-
* const tokenExchangeRealm = new keycloak.Realm("
|
|
9
|
+
* const tokenExchangeRealm = new keycloak.Realm("token_exchange_realm", {
|
|
11
10
|
* realm: "token-exchange_destination_realm",
|
|
12
11
|
* enabled: true,
|
|
13
12
|
* });
|
|
14
|
-
* const tokenExchangeMyOidcIdp = new keycloak.oidc.IdentityProvider("
|
|
13
|
+
* const tokenExchangeMyOidcIdp = new keycloak.oidc.IdentityProvider("token_exchange_my_oidc_idp", {
|
|
15
14
|
* realm: tokenExchangeRealm.id,
|
|
16
15
|
* alias: "myIdp",
|
|
17
16
|
* authorizationUrl: "http://localhost:8080/auth/realms/someRealm/protocol/openid-connect/auth",
|
|
@@ -20,8 +19,9 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
20
19
|
* clientSecret: "secret",
|
|
21
20
|
* defaultScopes: "openid",
|
|
22
21
|
* });
|
|
23
|
-
* const token_exchangeWebappClient = new keycloak.openid.Client("token-
|
|
22
|
+
* const token_exchangeWebappClient = new keycloak.openid.Client("token-exchange_webapp_client", {
|
|
24
23
|
* realmId: tokenExchangeRealm.id,
|
|
24
|
+
* name: "webapp_client",
|
|
25
25
|
* clientId: "webapp_client",
|
|
26
26
|
* clientSecret: "secret",
|
|
27
27
|
* description: "a webapp client on the destination realm",
|
|
@@ -30,14 +30,13 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
30
30
|
* validRedirectUris: ["http://localhost:8080/*"],
|
|
31
31
|
* });
|
|
32
32
|
* //relevant part
|
|
33
|
-
* const oidcIdpPermission = new keycloak.IdentityProviderTokenExchangeScopePermission("
|
|
33
|
+
* const oidcIdpPermission = new keycloak.IdentityProviderTokenExchangeScopePermission("oidc_idp_permission", {
|
|
34
34
|
* realmId: tokenExchangeRealm.id,
|
|
35
35
|
* providerAlias: tokenExchangeMyOidcIdp.alias,
|
|
36
36
|
* policyType: "client",
|
|
37
37
|
* clients: [token_exchangeWebappClient.id],
|
|
38
38
|
* });
|
|
39
39
|
* ```
|
|
40
|
-
* <!--End PulumiCodeChooser -->
|
|
41
40
|
*
|
|
42
41
|
* ## Import
|
|
43
42
|
*
|
|
@@ -8,16 +8,15 @@ const utilities = require("./utilities");
|
|
|
8
8
|
/**
|
|
9
9
|
* ## Example Usage
|
|
10
10
|
*
|
|
11
|
-
* <!--Start PulumiCodeChooser -->
|
|
12
11
|
* ```typescript
|
|
13
12
|
* import * as pulumi from "@pulumi/pulumi";
|
|
14
13
|
* import * as keycloak from "@pulumi/keycloak";
|
|
15
14
|
*
|
|
16
|
-
* const tokenExchangeRealm = new keycloak.Realm("
|
|
15
|
+
* const tokenExchangeRealm = new keycloak.Realm("token_exchange_realm", {
|
|
17
16
|
* realm: "token-exchange_destination_realm",
|
|
18
17
|
* enabled: true,
|
|
19
18
|
* });
|
|
20
|
-
* const tokenExchangeMyOidcIdp = new keycloak.oidc.IdentityProvider("
|
|
19
|
+
* const tokenExchangeMyOidcIdp = new keycloak.oidc.IdentityProvider("token_exchange_my_oidc_idp", {
|
|
21
20
|
* realm: tokenExchangeRealm.id,
|
|
22
21
|
* alias: "myIdp",
|
|
23
22
|
* authorizationUrl: "http://localhost:8080/auth/realms/someRealm/protocol/openid-connect/auth",
|
|
@@ -26,8 +25,9 @@ const utilities = require("./utilities");
|
|
|
26
25
|
* clientSecret: "secret",
|
|
27
26
|
* defaultScopes: "openid",
|
|
28
27
|
* });
|
|
29
|
-
* const token_exchangeWebappClient = new keycloak.openid.Client("token-
|
|
28
|
+
* const token_exchangeWebappClient = new keycloak.openid.Client("token-exchange_webapp_client", {
|
|
30
29
|
* realmId: tokenExchangeRealm.id,
|
|
30
|
+
* name: "webapp_client",
|
|
31
31
|
* clientId: "webapp_client",
|
|
32
32
|
* clientSecret: "secret",
|
|
33
33
|
* description: "a webapp client on the destination realm",
|
|
@@ -36,14 +36,13 @@ const utilities = require("./utilities");
|
|
|
36
36
|
* validRedirectUris: ["http://localhost:8080/*"],
|
|
37
37
|
* });
|
|
38
38
|
* //relevant part
|
|
39
|
-
* const oidcIdpPermission = new keycloak.IdentityProviderTokenExchangeScopePermission("
|
|
39
|
+
* const oidcIdpPermission = new keycloak.IdentityProviderTokenExchangeScopePermission("oidc_idp_permission", {
|
|
40
40
|
* realmId: tokenExchangeRealm.id,
|
|
41
41
|
* providerAlias: tokenExchangeMyOidcIdp.alias,
|
|
42
42
|
* policyType: "client",
|
|
43
43
|
* clients: [token_exchangeWebappClient.id],
|
|
44
44
|
* });
|
|
45
45
|
* ```
|
|
46
|
-
* <!--End PulumiCodeChooser -->
|
|
47
46
|
*
|
|
48
47
|
* ## Import
|
|
49
48
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identityProviderTokenExchangeScopePermission.js","sourceRoot":"","sources":["../identityProviderTokenExchangeScopePermission.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"identityProviderTokenExchangeScopePermission.js","sourceRoot":"","sources":["../identityProviderTokenExchangeScopePermission.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAa,4CAA6C,SAAQ,MAAM,CAAC,cAAc;IACnF;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyD,EAAE,IAAmC;QACvJ,OAAO,IAAI,4CAA4C,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnG,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,4CAA4C,CAAC,YAAY,CAAC;IAC7F,CAAC;IA2CD,YAAY,IAAY,EAAE,WAAkH,EAAE,IAAmC;QAC7K,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4E,CAAC;YAC3F,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,+BAA+B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1G,cAAc,CAAC,6CAA6C,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC,SAAS,CAAC;YACtI,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2E,CAAC;YACzF,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,4BAA4B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjE,cAAc,CAAC,+BAA+B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpE,cAAc,CAAC,6CAA6C,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClF,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,4CAA4C,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjG,CAAC;;AAxGL,oGAyGC;AA3FG,gBAAgB;AACO,yDAAY,GAAG,0GAA0G,CAAC"}
|
package/ldap/customMapper.d.ts
CHANGED
|
@@ -10,7 +10,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
10
10
|
*
|
|
11
11
|
* ## Example Usage
|
|
12
12
|
*
|
|
13
|
-
* <!--Start PulumiCodeChooser -->
|
|
14
13
|
* ```typescript
|
|
15
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
16
15
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -19,7 +18,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
19
18
|
* realm: "my-realm",
|
|
20
19
|
* enabled: true,
|
|
21
20
|
* });
|
|
22
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
21
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
22
|
+
* name: "openldap",
|
|
23
23
|
* realmId: realm.id,
|
|
24
24
|
* usernameLdapAttribute: "cn",
|
|
25
25
|
* rdnLdapAttribute: "cn",
|
|
@@ -33,9 +33,10 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
33
33
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
34
34
|
* bindCredential: "admin",
|
|
35
35
|
* });
|
|
36
|
-
* const customMapper = new keycloak.ldap.CustomMapper("
|
|
37
|
-
*
|
|
38
|
-
*
|
|
36
|
+
* const customMapper = new keycloak.ldap.CustomMapper("custom_mapper", {
|
|
37
|
+
* name: "custom-mapper",
|
|
38
|
+
* realmId: openldap.realmId,
|
|
39
|
+
* ldapUserFederationId: openldap.id,
|
|
39
40
|
* providerId: "custom-provider-registered-in-keycloak",
|
|
40
41
|
* providerType: "com.example.custom.ldap.mappers.CustomMapper",
|
|
41
42
|
* config: {
|
|
@@ -44,7 +45,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
44
45
|
* },
|
|
45
46
|
* });
|
|
46
47
|
* ```
|
|
47
|
-
* <!--End PulumiCodeChooser -->
|
|
48
48
|
*
|
|
49
49
|
* ## Import
|
|
50
50
|
*
|
package/ldap/customMapper.js
CHANGED
|
@@ -16,7 +16,6 @@ const utilities = require("../utilities");
|
|
|
16
16
|
*
|
|
17
17
|
* ## Example Usage
|
|
18
18
|
*
|
|
19
|
-
* <!--Start PulumiCodeChooser -->
|
|
20
19
|
* ```typescript
|
|
21
20
|
* import * as pulumi from "@pulumi/pulumi";
|
|
22
21
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -25,7 +24,8 @@ const utilities = require("../utilities");
|
|
|
25
24
|
* realm: "my-realm",
|
|
26
25
|
* enabled: true,
|
|
27
26
|
* });
|
|
28
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
27
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
28
|
+
* name: "openldap",
|
|
29
29
|
* realmId: realm.id,
|
|
30
30
|
* usernameLdapAttribute: "cn",
|
|
31
31
|
* rdnLdapAttribute: "cn",
|
|
@@ -39,9 +39,10 @@ const utilities = require("../utilities");
|
|
|
39
39
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
40
40
|
* bindCredential: "admin",
|
|
41
41
|
* });
|
|
42
|
-
* const customMapper = new keycloak.ldap.CustomMapper("
|
|
43
|
-
*
|
|
44
|
-
*
|
|
42
|
+
* const customMapper = new keycloak.ldap.CustomMapper("custom_mapper", {
|
|
43
|
+
* name: "custom-mapper",
|
|
44
|
+
* realmId: openldap.realmId,
|
|
45
|
+
* ldapUserFederationId: openldap.id,
|
|
45
46
|
* providerId: "custom-provider-registered-in-keycloak",
|
|
46
47
|
* providerType: "com.example.custom.ldap.mappers.CustomMapper",
|
|
47
48
|
* config: {
|
|
@@ -50,7 +51,6 @@ const utilities = require("../utilities");
|
|
|
50
51
|
* },
|
|
51
52
|
* });
|
|
52
53
|
* ```
|
|
53
|
-
* <!--End PulumiCodeChooser -->
|
|
54
54
|
*
|
|
55
55
|
* ## Import
|
|
56
56
|
*
|
package/ldap/fullNameMapper.d.ts
CHANGED
|
@@ -10,36 +10,36 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
10
10
|
*
|
|
11
11
|
* ### Example Usage
|
|
12
12
|
*
|
|
13
|
-
* <!--Start PulumiCodeChooser -->
|
|
14
13
|
* ```typescript
|
|
15
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
16
15
|
* import * as keycloak from "@pulumi/keycloak";
|
|
17
16
|
*
|
|
18
17
|
* const realm = new keycloak.Realm("realm", {
|
|
19
|
-
* enabled: true,
|
|
20
18
|
* realm: "test",
|
|
19
|
+
* enabled: true,
|
|
21
20
|
* });
|
|
22
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
23
|
-
*
|
|
24
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
25
|
-
* connectionUrl: "ldap://openldap",
|
|
26
|
-
* rdnLdapAttribute: "cn",
|
|
21
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
22
|
+
* name: "openldap",
|
|
27
23
|
* realmId: realm.id,
|
|
24
|
+
* usernameLdapAttribute: "cn",
|
|
25
|
+
* rdnLdapAttribute: "cn",
|
|
26
|
+
* uuidLdapAttribute: "entryDN",
|
|
28
27
|
* userObjectClasses: [
|
|
29
28
|
* "simpleSecurityObject",
|
|
30
29
|
* "organizationalRole",
|
|
31
30
|
* ],
|
|
32
|
-
*
|
|
31
|
+
* connectionUrl: "ldap://openldap",
|
|
33
32
|
* usersDn: "dc=example,dc=org",
|
|
34
|
-
*
|
|
33
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
34
|
+
* bindCredential: "admin",
|
|
35
35
|
* });
|
|
36
|
-
* const ldapFullNameMapper = new keycloak.ldap.FullNameMapper("
|
|
37
|
-
* ldapFullNameAttribute: "cn",
|
|
38
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
36
|
+
* const ldapFullNameMapper = new keycloak.ldap.FullNameMapper("ldap_full_name_mapper", {
|
|
39
37
|
* realmId: realm.id,
|
|
38
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
39
|
+
* name: "full-name-mapper",
|
|
40
|
+
* ldapFullNameAttribute: "cn",
|
|
40
41
|
* });
|
|
41
42
|
* ```
|
|
42
|
-
* <!--End PulumiCodeChooser -->
|
|
43
43
|
*
|
|
44
44
|
* ### Argument Reference
|
|
45
45
|
*
|
package/ldap/fullNameMapper.js
CHANGED
|
@@ -16,36 +16,36 @@ const utilities = require("../utilities");
|
|
|
16
16
|
*
|
|
17
17
|
* ### Example Usage
|
|
18
18
|
*
|
|
19
|
-
* <!--Start PulumiCodeChooser -->
|
|
20
19
|
* ```typescript
|
|
21
20
|
* import * as pulumi from "@pulumi/pulumi";
|
|
22
21
|
* import * as keycloak from "@pulumi/keycloak";
|
|
23
22
|
*
|
|
24
23
|
* const realm = new keycloak.Realm("realm", {
|
|
25
|
-
* enabled: true,
|
|
26
24
|
* realm: "test",
|
|
25
|
+
* enabled: true,
|
|
27
26
|
* });
|
|
28
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
29
|
-
*
|
|
30
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
31
|
-
* connectionUrl: "ldap://openldap",
|
|
32
|
-
* rdnLdapAttribute: "cn",
|
|
27
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
28
|
+
* name: "openldap",
|
|
33
29
|
* realmId: realm.id,
|
|
30
|
+
* usernameLdapAttribute: "cn",
|
|
31
|
+
* rdnLdapAttribute: "cn",
|
|
32
|
+
* uuidLdapAttribute: "entryDN",
|
|
34
33
|
* userObjectClasses: [
|
|
35
34
|
* "simpleSecurityObject",
|
|
36
35
|
* "organizationalRole",
|
|
37
36
|
* ],
|
|
38
|
-
*
|
|
37
|
+
* connectionUrl: "ldap://openldap",
|
|
39
38
|
* usersDn: "dc=example,dc=org",
|
|
40
|
-
*
|
|
39
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
40
|
+
* bindCredential: "admin",
|
|
41
41
|
* });
|
|
42
|
-
* const ldapFullNameMapper = new keycloak.ldap.FullNameMapper("
|
|
43
|
-
* ldapFullNameAttribute: "cn",
|
|
44
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
42
|
+
* const ldapFullNameMapper = new keycloak.ldap.FullNameMapper("ldap_full_name_mapper", {
|
|
45
43
|
* realmId: realm.id,
|
|
44
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
45
|
+
* name: "full-name-mapper",
|
|
46
|
+
* ldapFullNameAttribute: "cn",
|
|
46
47
|
* });
|
|
47
48
|
* ```
|
|
48
|
-
* <!--End PulumiCodeChooser -->
|
|
49
49
|
*
|
|
50
50
|
* ### Argument Reference
|
|
51
51
|
*
|
package/ldap/groupMapper.d.ts
CHANGED
|
@@ -11,42 +11,42 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
11
11
|
*
|
|
12
12
|
* ### Example Usage
|
|
13
13
|
*
|
|
14
|
-
* <!--Start PulumiCodeChooser -->
|
|
15
14
|
* ```typescript
|
|
16
15
|
* import * as pulumi from "@pulumi/pulumi";
|
|
17
16
|
* import * as keycloak from "@pulumi/keycloak";
|
|
18
17
|
*
|
|
19
18
|
* const realm = new keycloak.Realm("realm", {
|
|
20
|
-
* enabled: true,
|
|
21
19
|
* realm: "test",
|
|
20
|
+
* enabled: true,
|
|
22
21
|
* });
|
|
23
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
24
|
-
*
|
|
25
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
26
|
-
* connectionUrl: "ldap://openldap",
|
|
27
|
-
* rdnLdapAttribute: "cn",
|
|
22
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
23
|
+
* name: "openldap",
|
|
28
24
|
* realmId: realm.id,
|
|
25
|
+
* usernameLdapAttribute: "cn",
|
|
26
|
+
* rdnLdapAttribute: "cn",
|
|
27
|
+
* uuidLdapAttribute: "entryDN",
|
|
29
28
|
* userObjectClasses: [
|
|
30
29
|
* "simpleSecurityObject",
|
|
31
30
|
* "organizationalRole",
|
|
32
31
|
* ],
|
|
33
|
-
*
|
|
32
|
+
* connectionUrl: "ldap://openldap",
|
|
34
33
|
* usersDn: "dc=example,dc=org",
|
|
35
|
-
*
|
|
34
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
35
|
+
* bindCredential: "admin",
|
|
36
36
|
* });
|
|
37
|
-
* const ldapGroupMapper = new keycloak.ldap.GroupMapper("
|
|
37
|
+
* const ldapGroupMapper = new keycloak.ldap.GroupMapper("ldap_group_mapper", {
|
|
38
|
+
* realmId: realm.id,
|
|
39
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
40
|
+
* name: "group-mapper",
|
|
41
|
+
* ldapGroupsDn: "dc=example,dc=org",
|
|
38
42
|
* groupNameLdapAttribute: "cn",
|
|
39
43
|
* groupObjectClasses: ["groupOfNames"],
|
|
40
|
-
* ldapGroupsDn: "dc=example,dc=org",
|
|
41
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
42
|
-
* memberofLdapAttribute: "memberOf",
|
|
43
44
|
* membershipAttributeType: "DN",
|
|
44
45
|
* membershipLdapAttribute: "member",
|
|
45
46
|
* membershipUserLdapAttribute: "cn",
|
|
46
|
-
*
|
|
47
|
+
* memberofLdapAttribute: "memberOf",
|
|
47
48
|
* });
|
|
48
49
|
* ```
|
|
49
|
-
* <!--End PulumiCodeChooser -->
|
|
50
50
|
*
|
|
51
51
|
* ### Argument Reference
|
|
52
52
|
*
|