@pulumi/okta 4.4.0 → 4.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/adminRoleCustom.d.ts +10 -129
- package/adminRoleCustom.js +1 -24
- package/adminRoleCustom.js.map +1 -1
- package/adminRoleCustomAssignments.d.ts +10 -25
- package/adminRoleCustomAssignments.js +1 -13
- package/adminRoleCustomAssignments.js.map +1 -1
- package/adminRoleTargets.d.ts +14 -44
- package/adminRoleTargets.js +0 -30
- package/adminRoleTargets.js.map +1 -1
- package/app/accessPolicyAssignment.d.ts +1 -20
- package/app/accessPolicyAssignment.js +1 -20
- package/app/accessPolicyAssignment.js.map +1 -1
- package/app/autoLogin.d.ts +72 -115
- package/app/autoLogin.js +0 -43
- package/app/autoLogin.js.map +1 -1
- package/app/basicAuth.d.ts +38 -62
- package/app/basicAuth.js +0 -24
- package/app/basicAuth.js.map +1 -1
- package/app/bookmark.d.ts +35 -67
- package/app/bookmark.js +0 -23
- package/app/bookmark.js.map +1 -1
- package/app/getApp.d.ts +58 -25
- package/app/getApp.js +2 -2
- package/app/getApp.js.map +1 -1
- package/app/getMetadataSaml.d.ts +11 -5
- package/app/getMetadataSaml.js +2 -2
- package/app/getMetadataSaml.js.map +1 -1
- package/app/getOauth.d.ts +62 -34
- package/app/getOauth.js +2 -2
- package/app/getOauth.js.map +1 -1
- package/app/getSaml.d.ts +75 -55
- package/app/getSaml.js +2 -2
- package/app/getSaml.js.map +1 -1
- package/app/groupAssignment.d.ts +6 -15
- package/app/groupAssignment.js +0 -9
- package/app/groupAssignment.js.map +1 -1
- package/app/oauth.d.ts +125 -299
- package/app/oauth.js +0 -78
- package/app/oauth.js.map +1 -1
- package/app/oauthPostLogoutRedirectUri.d.ts +0 -31
- package/app/oauthPostLogoutRedirectUri.js +0 -31
- package/app/oauthPostLogoutRedirectUri.js.map +1 -1
- package/app/oauthRedirectUri.d.ts +0 -30
- package/app/oauthRedirectUri.js +0 -30
- package/app/oauthRedirectUri.js.map +1 -1
- package/app/saml.d.ts +133 -299
- package/app/saml.js +0 -157
- package/app/saml.js.map +1 -1
- package/app/securePasswordStore.d.ts +79 -105
- package/app/securePasswordStore.js +0 -26
- package/app/securePasswordStore.js.map +1 -1
- package/app/swa.d.ts +72 -98
- package/app/swa.js +0 -26
- package/app/swa.js.map +1 -1
- package/app/threeField.d.ts +72 -83
- package/app/threeField.js +0 -11
- package/app/threeField.js.map +1 -1
- package/app/user.d.ts +12 -37
- package/app/user.js +0 -22
- package/app/user.js.map +1 -1
- package/appGroupAssignments.d.ts +3 -51
- package/appGroupAssignments.js +0 -48
- package/appGroupAssignments.js.map +1 -1
- package/appOauthApiScope.d.ts +3 -36
- package/appOauthApiScope.js +0 -33
- package/appOauthApiScope.js.map +1 -1
- package/appSamlAppSettings.d.ts +6 -44
- package/appSamlAppSettings.js +0 -38
- package/appSamlAppSettings.js.map +1 -1
- package/appSharedCredentials.d.ts +72 -111
- package/appSharedCredentials.js +0 -39
- package/appSharedCredentials.js.map +1 -1
- package/appSignonPolicy.d.ts +6 -44
- package/appSignonPolicy.js +0 -38
- package/appSignonPolicy.js.map +1 -1
- package/appSignonPolicyRule.d.ts +63 -322
- package/appSignonPolicyRule.js +0 -244
- package/appSignonPolicyRule.js.map +1 -1
- package/appUserBaseSchemaProperty.d.ts +24 -52
- package/appUserBaseSchemaProperty.js +0 -28
- package/appUserBaseSchemaProperty.js.map +1 -1
- package/appUserSchemaProperty.d.ts +54 -80
- package/appUserSchemaProperty.js +0 -26
- package/appUserSchemaProperty.js.map +1 -1
- package/auth/getServer.d.ts +11 -11
- package/auth/getServer.js +2 -2
- package/auth/getServerPolicy.d.ts +15 -9
- package/auth/getServerPolicy.js +2 -2
- package/auth/getServerPolicy.js.map +1 -1
- package/auth/getServerScopes.d.ts +8 -5
- package/auth/getServerScopes.js +2 -2
- package/auth/getServerScopes.js.map +1 -1
- package/auth/server.d.ts +13 -49
- package/auth/server.js +0 -27
- package/auth/server.js.map +1 -1
- package/auth/serverClaim.d.ts +18 -54
- package/auth/serverClaim.js +0 -27
- package/auth/serverClaim.js.map +1 -1
- package/auth/serverPolicy.d.ts +6 -43
- package/auth/serverPolicy.js +0 -28
- package/auth/serverPolicy.js.map +1 -1
- package/auth/serverPolicyClaim.d.ts +35 -71
- package/auth/serverPolicyClaim.js +4 -28
- package/auth/serverPolicyClaim.js.map +1 -1
- package/auth/serverPolicyRule.d.ts +27 -70
- package/auth/serverPolicyRule.js +0 -25
- package/auth/serverPolicyRule.js.map +1 -1
- package/auth/serverScope.d.ts +15 -41
- package/auth/serverScope.js +0 -26
- package/auth/serverScope.js.map +1 -1
- package/authServerClaimDefault.d.ts +13 -50
- package/authServerClaimDefault.js +0 -31
- package/authServerClaimDefault.js.map +1 -1
- package/authServerDefault.d.ts +13 -47
- package/authServerDefault.js +0 -25
- package/authServerDefault.js.map +1 -1
- package/authenticator.d.ts +38 -94
- package/authenticator.js +0 -38
- package/authenticator.js.map +1 -1
- package/behaviour.d.ts +18 -78
- package/behaviour.js +0 -42
- package/behaviour.js.map +1 -1
- package/brand.d.ts +17 -26
- package/brand.js +1 -10
- package/brand.js.map +1 -1
- package/captcha.d.ts +12 -38
- package/captcha.js +0 -26
- package/captcha.js.map +1 -1
- package/captchaOrgWideSettings.d.ts +6 -51
- package/captchaOrgWideSettings.js +0 -45
- package/captchaOrgWideSettings.js.map +1 -1
- package/domain.d.ts +13 -39
- package/domain.js +0 -20
- package/domain.js.map +1 -1
- package/domainCertificate.d.ts +15 -51
- package/domainCertificate.js +0 -36
- package/domainCertificate.js.map +1 -1
- package/domainVerification.d.ts +3 -22
- package/domainVerification.js +0 -19
- package/domainVerification.js.map +1 -1
- package/emailCustomization.d.ts +3 -224
- package/emailCustomization.js +0 -41
- package/emailCustomization.js.map +1 -1
- package/emailSender.d.ts +13 -39
- package/emailSender.js +0 -26
- package/emailSender.js.map +1 -1
- package/emailSenderVerification.d.ts +3 -26
- package/emailSenderVerification.js +0 -23
- package/emailSenderVerification.js.map +1 -1
- package/eventHook.d.ts +0 -37
- package/eventHook.js +0 -37
- package/eventHook.js.map +1 -1
- package/eventHookVerification.d.ts +3 -37
- package/eventHookVerification.js +0 -34
- package/eventHookVerification.js.map +1 -1
- package/factor/factor.d.ts +6 -23
- package/factor/factor.js +0 -14
- package/factor/factor.js.map +1 -1
- package/factorTotp.d.ts +12 -44
- package/factorTotp.js +0 -23
- package/factorTotp.js.map +1 -1
- package/getAppGroupAssignments.d.ts +6 -6
- package/getAppGroupAssignments.js +2 -2
- package/getAppSignonPolicy.d.ts +16 -6
- package/getAppSignonPolicy.js +8 -4
- package/getAppSignonPolicy.js.map +1 -1
- package/getAppUserAssignments.d.ts +6 -6
- package/getAppUserAssignments.js +2 -2
- package/getAuthServerClaim.d.ts +15 -12
- package/getAuthServerClaim.js +2 -2
- package/getAuthServerClaim.js.map +1 -1
- package/getAuthServerClaims.d.ts +8 -5
- package/getAuthServerClaims.js +2 -2
- package/getAuthServerClaims.js.map +1 -1
- package/getAuthenticator.d.ts +24 -26
- package/getAuthenticator.js +14 -22
- package/getAuthenticator.js.map +1 -1
- package/getBehaviour.d.ts +6 -8
- package/getBehaviour.js +2 -2
- package/getBehaviour.js.map +1 -1
- package/getBehaviours.d.ts +7 -7
- package/getBehaviours.js +2 -2
- package/getBrand.d.ts +9 -6
- package/getBrand.js +2 -2
- package/getBrand.js.map +1 -1
- package/getBrands.d.ts +2 -2
- package/getBrands.js +2 -2
- package/getEmailCustomization.d.ts +14 -9
- package/getEmailCustomization.js +2 -6
- package/getEmailCustomization.js.map +1 -1
- package/getEmailCustomizations.d.ts +11 -9
- package/getEmailCustomizations.js +2 -6
- package/getEmailCustomizations.js.map +1 -1
- package/getGroups.d.ts +11 -25
- package/getGroups.js +2 -2
- package/getGroups.js.map +1 -1
- package/getNetworkZone.d.ts +12 -12
- package/getNetworkZone.js +2 -2
- package/getRoleSubscription.d.ts +13 -35
- package/getRoleSubscription.js +2 -2
- package/getRoleSubscription.js.map +1 -1
- package/getTemplate.d.ts +10 -8
- package/getTemplate.js +2 -6
- package/getTemplate.js.map +1 -1
- package/getTemplates.d.ts +6 -7
- package/getTemplates.js +2 -6
- package/getTemplates.js.map +1 -1
- package/getTheme.d.ts +14 -12
- package/getTheme.js +2 -6
- package/getTheme.js.map +1 -1
- package/getThemes.d.ts +6 -7
- package/getThemes.js +2 -6
- package/getThemes.js.map +1 -1
- package/getTrustedOrigins.d.ts +7 -4
- package/getTrustedOrigins.js +2 -2
- package/getTrustedOrigins.js.map +1 -1
- package/getUserSecurityQuestions.d.ts +4 -8
- package/getUserSecurityQuestions.js +0 -4
- package/getUserSecurityQuestions.js.map +1 -1
- package/group/getEveryoneGroup.d.ts +10 -5
- package/group/getEveryoneGroup.js +4 -2
- package/group/getEveryoneGroup.js.map +1 -1
- package/group/getGroup.d.ts +17 -22
- package/group/getGroup.js +2 -2
- package/group/getGroup.js.map +1 -1
- package/group/getRule.d.ts +6 -15
- package/group/getRule.js +2 -2
- package/group/getRule.js.map +1 -1
- package/group/group.d.ts +9 -46
- package/group/group.js +0 -37
- package/group/group.js.map +1 -1
- package/group/role.d.ts +15 -101
- package/group/role.js +0 -26
- package/group/role.js.map +1 -1
- package/group/rule.d.ts +6 -84
- package/group/rule.js +0 -27
- package/group/rule.js.map +1 -1
- package/groupMemberships.d.ts +7 -42
- package/groupMemberships.js +1 -36
- package/groupMemberships.js.map +1 -1
- package/groupSchemaProperty.d.ts +51 -94
- package/groupSchemaProperty.js +0 -25
- package/groupSchemaProperty.js.map +1 -1
- package/idp/getMetadataSaml.d.ts +9 -6
- package/idp/getMetadataSaml.js +2 -2
- package/idp/getMetadataSaml.js.map +1 -1
- package/idp/getOidc.d.ts +9 -9
- package/idp/getOidc.js +2 -2
- package/idp/getSaml.d.ts +16 -13
- package/idp/getSaml.js +2 -2
- package/idp/getSaml.js.map +1 -1
- package/idp/getSocial.d.ts +8 -2
- package/idp/getSocial.js +2 -2
- package/idp/getSocial.js.map +1 -1
- package/idp/oidc.d.ts +12 -297
- package/idp/oidc.js +0 -36
- package/idp/oidc.js.map +1 -1
- package/idp/saml.d.ts +18 -284
- package/idp/saml.js +0 -32
- package/idp/saml.js.map +1 -1
- package/idp/samlKey.d.ts +3 -48
- package/idp/samlKey.js +0 -9
- package/idp/samlKey.js.map +1 -1
- package/idp/social.d.ts +18 -251
- package/idp/social.js +0 -32
- package/idp/social.js.map +1 -1
- package/index/emailDomain.d.ts +16 -41
- package/index/emailDomain.js +0 -25
- package/index/emailDomain.js.map +1 -1
- package/index/emailDomainVerification.d.ts +3 -25
- package/index/emailDomainVerification.js +0 -22
- package/index/emailDomainVerification.js.map +1 -1
- package/index/getDomain.d.ts +11 -14
- package/index/getDomain.js +2 -8
- package/index/getDomain.js.map +1 -1
- package/inline/hook.d.ts +0 -89
- package/inline/hook.js +0 -35
- package/inline/hook.js.map +1 -1
- package/linkDefinition.d.ts +0 -30
- package/linkDefinition.js +0 -30
- package/linkDefinition.js.map +1 -1
- package/linkValue.d.ts +6 -59
- package/linkValue.js +0 -53
- package/linkValue.js.map +1 -1
- package/network/zone.d.ts +27 -74
- package/network/zone.js +0 -44
- package/network/zone.js.map +1 -1
- package/orgConfiguration.d.ts +0 -25
- package/orgConfiguration.js +0 -25
- package/orgConfiguration.js.map +1 -1
- package/orgSupport.d.ts +3 -20
- package/orgSupport.js +0 -17
- package/orgSupport.js.map +1 -1
- package/package.json +2 -2
- package/package.json.bak +1 -1
- package/policy/getDefaultPolicy.d.ts +9 -7
- package/policy/getDefaultPolicy.js +6 -2
- package/policy/getDefaultPolicy.js.map +1 -1
- package/policy/getPolicy.d.ts +11 -10
- package/policy/getPolicy.js +2 -2
- package/policy/getPolicy.js.map +1 -1
- package/policy/mfa.d.ts +18 -259
- package/policy/mfa.js +0 -49
- package/policy/mfa.js.map +1 -1
- package/policy/password.d.ts +90 -117
- package/policy/password.js +0 -27
- package/policy/password.js.map +1 -1
- package/policy/ruleIdpDiscovery.d.ts +27 -149
- package/policy/ruleIdpDiscovery.js +0 -65
- package/policy/ruleIdpDiscovery.js.map +1 -1
- package/policy/ruleMfa.d.ts +24 -35
- package/policy/ruleMfa.js +0 -11
- package/policy/ruleMfa.js.map +1 -1
- package/policy/rulePassword.d.ts +33 -46
- package/policy/rulePassword.js +0 -13
- package/policy/rulePassword.js.map +1 -1
- package/policy/ruleSignon.d.ts +57 -170
- package/policy/ruleSignon.js +0 -92
- package/policy/ruleSignon.js.map +1 -1
- package/policy/signon.d.ts +15 -41
- package/policy/signon.js +0 -26
- package/policy/signon.js.map +1 -1
- package/policyMfaDefault.d.ts +13 -250
- package/policyMfaDefault.js +0 -45
- package/policyMfaDefault.js.map +1 -1
- package/policyPasswordDefault.d.ts +54 -88
- package/policyPasswordDefault.js +0 -22
- package/policyPasswordDefault.js.map +1 -1
- package/policyProfileEnrollment.d.ts +6 -28
- package/policyProfileEnrollment.js +0 -22
- package/policyProfileEnrollment.js.map +1 -1
- package/policyProfileEnrollmentApps.d.ts +5 -42
- package/policyProfileEnrollmentApps.js +0 -37
- package/policyProfileEnrollmentApps.js.map +1 -1
- package/policyRuleProfileEnrollment.d.ts +23 -85
- package/policyRuleProfileEnrollment.js +0 -62
- package/policyRuleProfileEnrollment.js.map +1 -1
- package/profile/mapping.d.ts +9 -95
- package/profile/mapping.js +0 -41
- package/profile/mapping.js.map +1 -1
- package/rateLimiting.d.ts +9 -43
- package/rateLimiting.js +0 -28
- package/rateLimiting.js.map +1 -1
- package/resourceSet.d.ts +10 -32
- package/resourceSet.js +1 -20
- package/resourceSet.js.map +1 -1
- package/roleSubscription.d.ts +9 -110
- package/roleSubscription.js +0 -26
- package/roleSubscription.js.map +1 -1
- package/securityNotificationEmails.d.ts +15 -45
- package/securityNotificationEmails.js +0 -30
- package/securityNotificationEmails.js.map +1 -1
- package/templateSms.d.ts +3 -47
- package/templateSms.js +0 -35
- package/templateSms.js.map +1 -1
- package/theme.d.ts +44 -53
- package/theme.js +0 -9
- package/theme.js.map +1 -1
- package/threatInsightSettings.d.ts +6 -58
- package/threatInsightSettings.js +0 -34
- package/threatInsightSettings.js.map +1 -1
- package/trustedorigin/origin.d.ts +12 -37
- package/trustedorigin/origin.js +0 -25
- package/trustedorigin/origin.js.map +1 -1
- package/types/input.d.ts +60 -227
- package/types/output.d.ts +56 -446
- package/user/getUser.d.ts +32 -104
- package/user/getUser.js +2 -2
- package/user/getUser.js.map +1 -1
- package/user/getUserProfileMappingSource.d.ts +9 -7
- package/user/getUserProfileMappingSource.js +6 -4
- package/user/getUserProfileMappingSource.js.map +1 -1
- package/user/getUserType.d.ts +7 -7
- package/user/getUserType.js +2 -2
- package/user/getUsers.d.ts +61 -57
- package/user/getUsers.js +30 -44
- package/user/getUsers.js.map +1 -1
- package/user/user.d.ts +117 -215
- package/user/user.js +0 -71
- package/user/user.js.map +1 -1
- package/user/userType.d.ts +9 -34
- package/user/userType.js +0 -25
- package/user/userType.js.map +1 -1
- package/userAdminRoles.d.ts +10 -41
- package/userAdminRoles.js +1 -29
- package/userAdminRoles.js.map +1 -1
- package/userBaseSchemaProperty.d.ts +24 -67
- package/userBaseSchemaProperty.js +0 -43
- package/userBaseSchemaProperty.js.map +1 -1
- package/userFactorQuestion.d.ts +14 -52
- package/userFactorQuestion.js +1 -39
- package/userFactorQuestion.js.map +1 -1
- package/userGroupMemberships.d.ts +4 -23
- package/userGroupMemberships.js +1 -20
- package/userGroupMemberships.js.map +1 -1
- package/userSchemaProperty.d.ts +57 -107
- package/userSchemaProperty.js +0 -32
- package/userSchemaProperty.js.map +1 -1
- package/scripts/install-pulumi-plugin.js +0 -21
package/idp/saml.d.ts
CHANGED
|
@@ -1,36 +1,4 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
-
/**
|
|
3
|
-
* Creates a SAML Identity Provider.
|
|
4
|
-
*
|
|
5
|
-
* This resource allows you to create and configure a SAML Identity Provider.
|
|
6
|
-
*
|
|
7
|
-
* ## Example Usage
|
|
8
|
-
*
|
|
9
|
-
* ```typescript
|
|
10
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
11
|
-
* import * as okta from "@pulumi/okta";
|
|
12
|
-
*
|
|
13
|
-
* const example = new okta.idp.Saml("example", {
|
|
14
|
-
* acsType: "INSTANCE",
|
|
15
|
-
* issuer: "https://idp.example.com",
|
|
16
|
-
* kid: okta_idp_saml_key.test.id,
|
|
17
|
-
* requestSignatureScope: "REQUEST",
|
|
18
|
-
* responseSignatureScope: "ANY",
|
|
19
|
-
* ssoBinding: "HTTP-POST",
|
|
20
|
-
* ssoDestination: "https://idp.example.com",
|
|
21
|
-
* ssoUrl: "https://idp.example.com",
|
|
22
|
-
* usernameTemplate: "idpuser.email",
|
|
23
|
-
* });
|
|
24
|
-
* ```
|
|
25
|
-
*
|
|
26
|
-
* ## Import
|
|
27
|
-
*
|
|
28
|
-
* An SAML IdP can be imported via the Okta ID.
|
|
29
|
-
*
|
|
30
|
-
* ```sh
|
|
31
|
-
* $ pulumi import okta:idp/saml:Saml example <idp id>
|
|
32
|
-
* ```
|
|
33
|
-
*/
|
|
34
2
|
export declare class Saml extends pulumi.CustomResource {
|
|
35
3
|
/**
|
|
36
4
|
* Get an existing Saml resource's state with the given name, ID, and optional extra
|
|
@@ -47,138 +15,57 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
47
15
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
48
16
|
*/
|
|
49
17
|
static isInstance(obj: any): obj is Saml;
|
|
50
|
-
/**
|
|
51
|
-
* Specifies the account linking action for an IdP user.
|
|
52
|
-
*/
|
|
53
18
|
readonly accountLinkAction: pulumi.Output<string | undefined>;
|
|
54
|
-
/**
|
|
55
|
-
* Group memberships to determine link candidates.
|
|
56
|
-
*/
|
|
57
19
|
readonly accountLinkGroupIncludes: pulumi.Output<string[] | undefined>;
|
|
58
20
|
readonly acsBinding: pulumi.Output<string>;
|
|
59
|
-
/**
|
|
60
|
-
* The type of ACS. It can be `"INSTANCE"` or `"ORG"`.
|
|
61
|
-
*/
|
|
62
21
|
readonly acsType: pulumi.Output<string | undefined>;
|
|
63
|
-
/**
|
|
64
|
-
* The audience restriction for the IdP.
|
|
65
|
-
*/
|
|
66
22
|
readonly audience: pulumi.Output<string>;
|
|
67
|
-
/**
|
|
68
|
-
* Action for a previously deprovisioned IdP user during authentication. Can be `"NONE"` or `"REACTIVATE"`.
|
|
69
|
-
*/
|
|
70
23
|
readonly deprovisionedAction: pulumi.Output<string | undefined>;
|
|
71
|
-
/**
|
|
72
|
-
* Provisioning action for IdP user's group memberships. It can be `"NONE"`, `"SYNC"`, `"APPEND"`, or `"ASSIGN"`.
|
|
73
|
-
*/
|
|
74
24
|
readonly groupsAction: pulumi.Output<string | undefined>;
|
|
75
|
-
/**
|
|
76
|
-
* List of Okta Group IDs to add an IdP user as a member with the `"ASSIGN"` `groupsAction`.
|
|
77
|
-
*/
|
|
78
25
|
readonly groupsAssignments: pulumi.Output<string[] | undefined>;
|
|
79
|
-
/**
|
|
80
|
-
* IdP user profile attribute name (case-insensitive) for an array value that contains group memberships.
|
|
81
|
-
*/
|
|
82
26
|
readonly groupsAttribute: pulumi.Output<string | undefined>;
|
|
83
|
-
/**
|
|
84
|
-
* Whitelist of Okta Group identifiers that are allowed for the `"APPEND"` or `"SYNC"` `groupsAction`.
|
|
85
|
-
*/
|
|
86
27
|
readonly groupsFilters: pulumi.Output<string[] | undefined>;
|
|
87
|
-
/**
|
|
88
|
-
* URI that identifies the issuer.
|
|
89
|
-
*/
|
|
90
28
|
readonly issuer: pulumi.Output<string>;
|
|
91
29
|
/**
|
|
92
|
-
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
30
|
+
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
93
31
|
*/
|
|
94
32
|
readonly issuerMode: pulumi.Output<string | undefined>;
|
|
95
|
-
/**
|
|
96
|
-
* The ID of the signing key.
|
|
97
|
-
*/
|
|
98
33
|
readonly kid: pulumi.Output<string>;
|
|
99
|
-
/**
|
|
100
|
-
* Maximum allowable clock-skew when processing messages from the IdP.
|
|
101
|
-
*/
|
|
102
34
|
readonly maxClockSkew: pulumi.Output<number | undefined>;
|
|
103
35
|
/**
|
|
104
|
-
*
|
|
36
|
+
* Name of the IdP
|
|
105
37
|
*/
|
|
106
38
|
readonly name: pulumi.Output<string>;
|
|
107
|
-
/**
|
|
108
|
-
* The name identifier format to use. By default `"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"`.
|
|
109
|
-
*/
|
|
110
39
|
readonly nameFormat: pulumi.Output<string | undefined>;
|
|
111
|
-
/**
|
|
112
|
-
* Determines if the IdP should act as a source of truth for user profile attributes.
|
|
113
|
-
*/
|
|
114
40
|
readonly profileMaster: pulumi.Output<boolean | undefined>;
|
|
115
|
-
/**
|
|
116
|
-
* Provisioning action for an IdP user during authentication.
|
|
117
|
-
*/
|
|
118
41
|
readonly provisioningAction: pulumi.Output<string | undefined>;
|
|
119
42
|
/**
|
|
120
|
-
* The XML digital
|
|
43
|
+
* The XML digital Signature Algorithm used when signing an \n\n message
|
|
121
44
|
*/
|
|
122
45
|
readonly requestSignatureAlgorithm: pulumi.Output<string | undefined>;
|
|
123
46
|
/**
|
|
124
|
-
* Specifies whether to digitally sign
|
|
47
|
+
* Specifies whether to digitally sign \n\n messages to the IdP
|
|
125
48
|
*/
|
|
126
49
|
readonly requestSignatureScope: pulumi.Output<string | undefined>;
|
|
127
50
|
/**
|
|
128
|
-
* The minimum XML digital
|
|
51
|
+
* The minimum XML digital Signature Algorithm allowed when verifying a \n\n message or \n\n element
|
|
129
52
|
*/
|
|
130
53
|
readonly responseSignatureAlgorithm: pulumi.Output<string | undefined>;
|
|
131
54
|
/**
|
|
132
|
-
* Specifies whether to verify a
|
|
55
|
+
* Specifies whether to verify a \n\n message or \n\n element XML digital signature
|
|
133
56
|
*/
|
|
134
57
|
readonly responseSignatureScope: pulumi.Output<string | undefined>;
|
|
135
|
-
/**
|
|
136
|
-
* The method of making an SSO request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
|
|
137
|
-
*/
|
|
138
58
|
readonly ssoBinding: pulumi.Output<string | undefined>;
|
|
139
|
-
/**
|
|
140
|
-
* URI reference indicating the address to which the AuthnRequest message is sent.
|
|
141
|
-
*/
|
|
142
59
|
readonly ssoDestination: pulumi.Output<string | undefined>;
|
|
143
|
-
/**
|
|
144
|
-
* URL of binding-specific endpoint to send an AuthnRequest message to IdP.
|
|
145
|
-
*/
|
|
146
60
|
readonly ssoUrl: pulumi.Output<string>;
|
|
147
|
-
/**
|
|
148
|
-
* Status of the IdP.
|
|
149
|
-
*/
|
|
150
61
|
readonly status: pulumi.Output<string | undefined>;
|
|
151
|
-
/**
|
|
152
|
-
* Optional regular expression pattern used to filter untrusted IdP usernames.
|
|
153
|
-
*/
|
|
154
62
|
readonly subjectFilter: pulumi.Output<string | undefined>;
|
|
155
|
-
/**
|
|
156
|
-
* The name format. By default `"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"`.
|
|
157
|
-
*/
|
|
158
63
|
readonly subjectFormats: pulumi.Output<string[] | undefined>;
|
|
159
|
-
/**
|
|
160
|
-
* Okta user profile attribute for matching transformed IdP username. Only for matchType `"CUSTOM_ATTRIBUTE"`.
|
|
161
|
-
*/
|
|
162
64
|
readonly subjectMatchAttribute: pulumi.Output<string | undefined>;
|
|
163
|
-
/**
|
|
164
|
-
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `"USERNAME"`. It can be set to `"USERNAME"`, `"EMAIL"`, `"USERNAME_OR_EMAIL"` or `"CUSTOM_ATTRIBUTE"`.
|
|
165
|
-
*/
|
|
166
65
|
readonly subjectMatchType: pulumi.Output<string | undefined>;
|
|
167
|
-
/**
|
|
168
|
-
* Action for a previously suspended IdP user during authentication. Can be set to `"NONE"` or `"UNSUSPEND"`
|
|
169
|
-
*/
|
|
170
66
|
readonly suspendedAction: pulumi.Output<string | undefined>;
|
|
171
|
-
/**
|
|
172
|
-
* Type of the IdP.
|
|
173
|
-
*/
|
|
174
67
|
readonly type: pulumi.Output<string>;
|
|
175
|
-
/**
|
|
176
|
-
* User type ID. Can be used as `targetId` in the `okta.profile.Mapping` resource.
|
|
177
|
-
*/
|
|
178
68
|
readonly userTypeId: pulumi.Output<string>;
|
|
179
|
-
/**
|
|
180
|
-
* Okta EL Expression to generate or transform a unique username for the IdP user.
|
|
181
|
-
*/
|
|
182
69
|
readonly usernameTemplate: pulumi.Output<string | undefined>;
|
|
183
70
|
/**
|
|
184
71
|
* Create a Saml resource with the given unique name, arguments, and options.
|
|
@@ -193,262 +80,109 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
193
80
|
* Input properties used for looking up and filtering Saml resources.
|
|
194
81
|
*/
|
|
195
82
|
export interface SamlState {
|
|
196
|
-
/**
|
|
197
|
-
* Specifies the account linking action for an IdP user.
|
|
198
|
-
*/
|
|
199
83
|
accountLinkAction?: pulumi.Input<string>;
|
|
200
|
-
/**
|
|
201
|
-
* Group memberships to determine link candidates.
|
|
202
|
-
*/
|
|
203
84
|
accountLinkGroupIncludes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
204
85
|
acsBinding?: pulumi.Input<string>;
|
|
205
|
-
/**
|
|
206
|
-
* The type of ACS. It can be `"INSTANCE"` or `"ORG"`.
|
|
207
|
-
*/
|
|
208
86
|
acsType?: pulumi.Input<string>;
|
|
209
|
-
/**
|
|
210
|
-
* The audience restriction for the IdP.
|
|
211
|
-
*/
|
|
212
87
|
audience?: pulumi.Input<string>;
|
|
213
|
-
/**
|
|
214
|
-
* Action for a previously deprovisioned IdP user during authentication. Can be `"NONE"` or `"REACTIVATE"`.
|
|
215
|
-
*/
|
|
216
88
|
deprovisionedAction?: pulumi.Input<string>;
|
|
217
|
-
/**
|
|
218
|
-
* Provisioning action for IdP user's group memberships. It can be `"NONE"`, `"SYNC"`, `"APPEND"`, or `"ASSIGN"`.
|
|
219
|
-
*/
|
|
220
89
|
groupsAction?: pulumi.Input<string>;
|
|
221
|
-
/**
|
|
222
|
-
* List of Okta Group IDs to add an IdP user as a member with the `"ASSIGN"` `groupsAction`.
|
|
223
|
-
*/
|
|
224
90
|
groupsAssignments?: pulumi.Input<pulumi.Input<string>[]>;
|
|
225
|
-
/**
|
|
226
|
-
* IdP user profile attribute name (case-insensitive) for an array value that contains group memberships.
|
|
227
|
-
*/
|
|
228
91
|
groupsAttribute?: pulumi.Input<string>;
|
|
229
|
-
/**
|
|
230
|
-
* Whitelist of Okta Group identifiers that are allowed for the `"APPEND"` or `"SYNC"` `groupsAction`.
|
|
231
|
-
*/
|
|
232
92
|
groupsFilters?: pulumi.Input<pulumi.Input<string>[]>;
|
|
233
|
-
/**
|
|
234
|
-
* URI that identifies the issuer.
|
|
235
|
-
*/
|
|
236
93
|
issuer?: pulumi.Input<string>;
|
|
237
94
|
/**
|
|
238
|
-
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
95
|
+
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
239
96
|
*/
|
|
240
97
|
issuerMode?: pulumi.Input<string>;
|
|
241
|
-
/**
|
|
242
|
-
* The ID of the signing key.
|
|
243
|
-
*/
|
|
244
98
|
kid?: pulumi.Input<string>;
|
|
245
|
-
/**
|
|
246
|
-
* Maximum allowable clock-skew when processing messages from the IdP.
|
|
247
|
-
*/
|
|
248
99
|
maxClockSkew?: pulumi.Input<number>;
|
|
249
100
|
/**
|
|
250
|
-
*
|
|
101
|
+
* Name of the IdP
|
|
251
102
|
*/
|
|
252
103
|
name?: pulumi.Input<string>;
|
|
253
|
-
/**
|
|
254
|
-
* The name identifier format to use. By default `"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"`.
|
|
255
|
-
*/
|
|
256
104
|
nameFormat?: pulumi.Input<string>;
|
|
257
|
-
/**
|
|
258
|
-
* Determines if the IdP should act as a source of truth for user profile attributes.
|
|
259
|
-
*/
|
|
260
105
|
profileMaster?: pulumi.Input<boolean>;
|
|
261
|
-
/**
|
|
262
|
-
* Provisioning action for an IdP user during authentication.
|
|
263
|
-
*/
|
|
264
106
|
provisioningAction?: pulumi.Input<string>;
|
|
265
107
|
/**
|
|
266
|
-
* The XML digital
|
|
108
|
+
* The XML digital Signature Algorithm used when signing an \n\n message
|
|
267
109
|
*/
|
|
268
110
|
requestSignatureAlgorithm?: pulumi.Input<string>;
|
|
269
111
|
/**
|
|
270
|
-
* Specifies whether to digitally sign
|
|
112
|
+
* Specifies whether to digitally sign \n\n messages to the IdP
|
|
271
113
|
*/
|
|
272
114
|
requestSignatureScope?: pulumi.Input<string>;
|
|
273
115
|
/**
|
|
274
|
-
* The minimum XML digital
|
|
116
|
+
* The minimum XML digital Signature Algorithm allowed when verifying a \n\n message or \n\n element
|
|
275
117
|
*/
|
|
276
118
|
responseSignatureAlgorithm?: pulumi.Input<string>;
|
|
277
119
|
/**
|
|
278
|
-
* Specifies whether to verify a
|
|
120
|
+
* Specifies whether to verify a \n\n message or \n\n element XML digital signature
|
|
279
121
|
*/
|
|
280
122
|
responseSignatureScope?: pulumi.Input<string>;
|
|
281
|
-
/**
|
|
282
|
-
* The method of making an SSO request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
|
|
283
|
-
*/
|
|
284
123
|
ssoBinding?: pulumi.Input<string>;
|
|
285
|
-
/**
|
|
286
|
-
* URI reference indicating the address to which the AuthnRequest message is sent.
|
|
287
|
-
*/
|
|
288
124
|
ssoDestination?: pulumi.Input<string>;
|
|
289
|
-
/**
|
|
290
|
-
* URL of binding-specific endpoint to send an AuthnRequest message to IdP.
|
|
291
|
-
*/
|
|
292
125
|
ssoUrl?: pulumi.Input<string>;
|
|
293
|
-
/**
|
|
294
|
-
* Status of the IdP.
|
|
295
|
-
*/
|
|
296
126
|
status?: pulumi.Input<string>;
|
|
297
|
-
/**
|
|
298
|
-
* Optional regular expression pattern used to filter untrusted IdP usernames.
|
|
299
|
-
*/
|
|
300
127
|
subjectFilter?: pulumi.Input<string>;
|
|
301
|
-
/**
|
|
302
|
-
* The name format. By default `"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"`.
|
|
303
|
-
*/
|
|
304
128
|
subjectFormats?: pulumi.Input<pulumi.Input<string>[]>;
|
|
305
|
-
/**
|
|
306
|
-
* Okta user profile attribute for matching transformed IdP username. Only for matchType `"CUSTOM_ATTRIBUTE"`.
|
|
307
|
-
*/
|
|
308
129
|
subjectMatchAttribute?: pulumi.Input<string>;
|
|
309
|
-
/**
|
|
310
|
-
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `"USERNAME"`. It can be set to `"USERNAME"`, `"EMAIL"`, `"USERNAME_OR_EMAIL"` or `"CUSTOM_ATTRIBUTE"`.
|
|
311
|
-
*/
|
|
312
130
|
subjectMatchType?: pulumi.Input<string>;
|
|
313
|
-
/**
|
|
314
|
-
* Action for a previously suspended IdP user during authentication. Can be set to `"NONE"` or `"UNSUSPEND"`
|
|
315
|
-
*/
|
|
316
131
|
suspendedAction?: pulumi.Input<string>;
|
|
317
|
-
/**
|
|
318
|
-
* Type of the IdP.
|
|
319
|
-
*/
|
|
320
132
|
type?: pulumi.Input<string>;
|
|
321
|
-
/**
|
|
322
|
-
* User type ID. Can be used as `targetId` in the `okta.profile.Mapping` resource.
|
|
323
|
-
*/
|
|
324
133
|
userTypeId?: pulumi.Input<string>;
|
|
325
|
-
/**
|
|
326
|
-
* Okta EL Expression to generate or transform a unique username for the IdP user.
|
|
327
|
-
*/
|
|
328
134
|
usernameTemplate?: pulumi.Input<string>;
|
|
329
135
|
}
|
|
330
136
|
/**
|
|
331
137
|
* The set of arguments for constructing a Saml resource.
|
|
332
138
|
*/
|
|
333
139
|
export interface SamlArgs {
|
|
334
|
-
/**
|
|
335
|
-
* Specifies the account linking action for an IdP user.
|
|
336
|
-
*/
|
|
337
140
|
accountLinkAction?: pulumi.Input<string>;
|
|
338
|
-
/**
|
|
339
|
-
* Group memberships to determine link candidates.
|
|
340
|
-
*/
|
|
341
141
|
accountLinkGroupIncludes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
342
|
-
/**
|
|
343
|
-
* The type of ACS. It can be `"INSTANCE"` or `"ORG"`.
|
|
344
|
-
*/
|
|
345
142
|
acsType?: pulumi.Input<string>;
|
|
346
|
-
/**
|
|
347
|
-
* Action for a previously deprovisioned IdP user during authentication. Can be `"NONE"` or `"REACTIVATE"`.
|
|
348
|
-
*/
|
|
349
143
|
deprovisionedAction?: pulumi.Input<string>;
|
|
350
|
-
/**
|
|
351
|
-
* Provisioning action for IdP user's group memberships. It can be `"NONE"`, `"SYNC"`, `"APPEND"`, or `"ASSIGN"`.
|
|
352
|
-
*/
|
|
353
144
|
groupsAction?: pulumi.Input<string>;
|
|
354
|
-
/**
|
|
355
|
-
* List of Okta Group IDs to add an IdP user as a member with the `"ASSIGN"` `groupsAction`.
|
|
356
|
-
*/
|
|
357
145
|
groupsAssignments?: pulumi.Input<pulumi.Input<string>[]>;
|
|
358
|
-
/**
|
|
359
|
-
* IdP user profile attribute name (case-insensitive) for an array value that contains group memberships.
|
|
360
|
-
*/
|
|
361
146
|
groupsAttribute?: pulumi.Input<string>;
|
|
362
|
-
/**
|
|
363
|
-
* Whitelist of Okta Group identifiers that are allowed for the `"APPEND"` or `"SYNC"` `groupsAction`.
|
|
364
|
-
*/
|
|
365
147
|
groupsFilters?: pulumi.Input<pulumi.Input<string>[]>;
|
|
366
|
-
/**
|
|
367
|
-
* URI that identifies the issuer.
|
|
368
|
-
*/
|
|
369
148
|
issuer: pulumi.Input<string>;
|
|
370
149
|
/**
|
|
371
|
-
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
150
|
+
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
372
151
|
*/
|
|
373
152
|
issuerMode?: pulumi.Input<string>;
|
|
374
|
-
/**
|
|
375
|
-
* The ID of the signing key.
|
|
376
|
-
*/
|
|
377
153
|
kid: pulumi.Input<string>;
|
|
378
|
-
/**
|
|
379
|
-
* Maximum allowable clock-skew when processing messages from the IdP.
|
|
380
|
-
*/
|
|
381
154
|
maxClockSkew?: pulumi.Input<number>;
|
|
382
155
|
/**
|
|
383
|
-
*
|
|
156
|
+
* Name of the IdP
|
|
384
157
|
*/
|
|
385
158
|
name?: pulumi.Input<string>;
|
|
386
|
-
/**
|
|
387
|
-
* The name identifier format to use. By default `"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"`.
|
|
388
|
-
*/
|
|
389
159
|
nameFormat?: pulumi.Input<string>;
|
|
390
|
-
/**
|
|
391
|
-
* Determines if the IdP should act as a source of truth for user profile attributes.
|
|
392
|
-
*/
|
|
393
160
|
profileMaster?: pulumi.Input<boolean>;
|
|
394
|
-
/**
|
|
395
|
-
* Provisioning action for an IdP user during authentication.
|
|
396
|
-
*/
|
|
397
161
|
provisioningAction?: pulumi.Input<string>;
|
|
398
162
|
/**
|
|
399
|
-
* The XML digital
|
|
163
|
+
* The XML digital Signature Algorithm used when signing an \n\n message
|
|
400
164
|
*/
|
|
401
165
|
requestSignatureAlgorithm?: pulumi.Input<string>;
|
|
402
166
|
/**
|
|
403
|
-
* Specifies whether to digitally sign
|
|
167
|
+
* Specifies whether to digitally sign \n\n messages to the IdP
|
|
404
168
|
*/
|
|
405
169
|
requestSignatureScope?: pulumi.Input<string>;
|
|
406
170
|
/**
|
|
407
|
-
* The minimum XML digital
|
|
171
|
+
* The minimum XML digital Signature Algorithm allowed when verifying a \n\n message or \n\n element
|
|
408
172
|
*/
|
|
409
173
|
responseSignatureAlgorithm?: pulumi.Input<string>;
|
|
410
174
|
/**
|
|
411
|
-
* Specifies whether to verify a
|
|
175
|
+
* Specifies whether to verify a \n\n message or \n\n element XML digital signature
|
|
412
176
|
*/
|
|
413
177
|
responseSignatureScope?: pulumi.Input<string>;
|
|
414
|
-
/**
|
|
415
|
-
* The method of making an SSO request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
|
|
416
|
-
*/
|
|
417
178
|
ssoBinding?: pulumi.Input<string>;
|
|
418
|
-
/**
|
|
419
|
-
* URI reference indicating the address to which the AuthnRequest message is sent.
|
|
420
|
-
*/
|
|
421
179
|
ssoDestination?: pulumi.Input<string>;
|
|
422
|
-
/**
|
|
423
|
-
* URL of binding-specific endpoint to send an AuthnRequest message to IdP.
|
|
424
|
-
*/
|
|
425
180
|
ssoUrl: pulumi.Input<string>;
|
|
426
|
-
/**
|
|
427
|
-
* Status of the IdP.
|
|
428
|
-
*/
|
|
429
181
|
status?: pulumi.Input<string>;
|
|
430
|
-
/**
|
|
431
|
-
* Optional regular expression pattern used to filter untrusted IdP usernames.
|
|
432
|
-
*/
|
|
433
182
|
subjectFilter?: pulumi.Input<string>;
|
|
434
|
-
/**
|
|
435
|
-
* The name format. By default `"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"`.
|
|
436
|
-
*/
|
|
437
183
|
subjectFormats?: pulumi.Input<pulumi.Input<string>[]>;
|
|
438
|
-
/**
|
|
439
|
-
* Okta user profile attribute for matching transformed IdP username. Only for matchType `"CUSTOM_ATTRIBUTE"`.
|
|
440
|
-
*/
|
|
441
184
|
subjectMatchAttribute?: pulumi.Input<string>;
|
|
442
|
-
/**
|
|
443
|
-
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `"USERNAME"`. It can be set to `"USERNAME"`, `"EMAIL"`, `"USERNAME_OR_EMAIL"` or `"CUSTOM_ATTRIBUTE"`.
|
|
444
|
-
*/
|
|
445
185
|
subjectMatchType?: pulumi.Input<string>;
|
|
446
|
-
/**
|
|
447
|
-
* Action for a previously suspended IdP user during authentication. Can be set to `"NONE"` or `"UNSUSPEND"`
|
|
448
|
-
*/
|
|
449
186
|
suspendedAction?: pulumi.Input<string>;
|
|
450
|
-
/**
|
|
451
|
-
* Okta EL Expression to generate or transform a unique username for the IdP user.
|
|
452
|
-
*/
|
|
453
187
|
usernameTemplate?: pulumi.Input<string>;
|
|
454
188
|
}
|
package/idp/saml.js
CHANGED
|
@@ -5,38 +5,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
5
5
|
exports.Saml = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
|
-
/**
|
|
9
|
-
* Creates a SAML Identity Provider.
|
|
10
|
-
*
|
|
11
|
-
* This resource allows you to create and configure a SAML Identity Provider.
|
|
12
|
-
*
|
|
13
|
-
* ## Example Usage
|
|
14
|
-
*
|
|
15
|
-
* ```typescript
|
|
16
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
17
|
-
* import * as okta from "@pulumi/okta";
|
|
18
|
-
*
|
|
19
|
-
* const example = new okta.idp.Saml("example", {
|
|
20
|
-
* acsType: "INSTANCE",
|
|
21
|
-
* issuer: "https://idp.example.com",
|
|
22
|
-
* kid: okta_idp_saml_key.test.id,
|
|
23
|
-
* requestSignatureScope: "REQUEST",
|
|
24
|
-
* responseSignatureScope: "ANY",
|
|
25
|
-
* ssoBinding: "HTTP-POST",
|
|
26
|
-
* ssoDestination: "https://idp.example.com",
|
|
27
|
-
* ssoUrl: "https://idp.example.com",
|
|
28
|
-
* usernameTemplate: "idpuser.email",
|
|
29
|
-
* });
|
|
30
|
-
* ```
|
|
31
|
-
*
|
|
32
|
-
* ## Import
|
|
33
|
-
*
|
|
34
|
-
* An SAML IdP can be imported via the Okta ID.
|
|
35
|
-
*
|
|
36
|
-
* ```sh
|
|
37
|
-
* $ pulumi import okta:idp/saml:Saml example <idp id>
|
|
38
|
-
* ```
|
|
39
|
-
*/
|
|
40
8
|
class Saml extends pulumi.CustomResource {
|
|
41
9
|
/**
|
|
42
10
|
* Get an existing Saml resource's state with the given name, ID, and optional extra
|
package/idp/saml.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"saml.js","sourceRoot":"","sources":["../../idp/saml.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"saml.js","sourceRoot":"","sources":["../../idp/saml.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IA+DD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;aACtD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAhLL,oBAiLC;AAnKG,gBAAgB;AACO,iBAAY,GAAG,oBAAoB,CAAC"}
|
package/idp/samlKey.d.ts
CHANGED
|
@@ -1,13 +1,4 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
-
/**
|
|
3
|
-
* ## Import
|
|
4
|
-
*
|
|
5
|
-
* A SAML IdP Signing Key can be imported via the key id.
|
|
6
|
-
*
|
|
7
|
-
* ```sh
|
|
8
|
-
* $ pulumi import okta:idp/samlKey:SamlKey example <key id>
|
|
9
|
-
* ```
|
|
10
|
-
*/
|
|
11
2
|
export declare class SamlKey extends pulumi.CustomResource {
|
|
12
3
|
/**
|
|
13
4
|
* Get an existing SamlKey resource's state with the given name, ID, and optional extra
|
|
@@ -24,33 +15,15 @@ export declare class SamlKey extends pulumi.CustomResource {
|
|
|
24
15
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
25
16
|
*/
|
|
26
17
|
static isInstance(obj: any): obj is SamlKey;
|
|
27
|
-
/**
|
|
28
|
-
* Date created.
|
|
29
|
-
*/
|
|
30
18
|
readonly created: pulumi.Output<string>;
|
|
31
|
-
/**
|
|
32
|
-
* Date the cert expires.
|
|
33
|
-
*/
|
|
34
19
|
readonly expiresAt: pulumi.Output<string>;
|
|
35
|
-
/**
|
|
36
|
-
* Key ID.
|
|
37
|
-
*/
|
|
38
20
|
readonly kid: pulumi.Output<string>;
|
|
39
|
-
/**
|
|
40
|
-
* Identifies the cryptographic algorithm family used with the key.
|
|
41
|
-
*/
|
|
42
21
|
readonly kty: pulumi.Output<string>;
|
|
43
|
-
/**
|
|
44
|
-
* Intended use of the public key.
|
|
45
|
-
*/
|
|
46
22
|
readonly use: pulumi.Output<string>;
|
|
47
23
|
/**
|
|
48
|
-
* base64-encoded X.509 certificate chain with DER encoding
|
|
24
|
+
* base64-encoded X.509 certificate chain with DER encoding
|
|
49
25
|
*/
|
|
50
26
|
readonly x5cs: pulumi.Output<string[]>;
|
|
51
|
-
/**
|
|
52
|
-
* base64url-encoded SHA-256 thumbprint of the DER encoding of an X.509 certificate.
|
|
53
|
-
*/
|
|
54
27
|
readonly x5tS256: pulumi.Output<string>;
|
|
55
28
|
/**
|
|
56
29
|
* Create a SamlKey resource with the given unique name, arguments, and options.
|
|
@@ -65,33 +38,15 @@ export declare class SamlKey extends pulumi.CustomResource {
|
|
|
65
38
|
* Input properties used for looking up and filtering SamlKey resources.
|
|
66
39
|
*/
|
|
67
40
|
export interface SamlKeyState {
|
|
68
|
-
/**
|
|
69
|
-
* Date created.
|
|
70
|
-
*/
|
|
71
41
|
created?: pulumi.Input<string>;
|
|
72
|
-
/**
|
|
73
|
-
* Date the cert expires.
|
|
74
|
-
*/
|
|
75
42
|
expiresAt?: pulumi.Input<string>;
|
|
76
|
-
/**
|
|
77
|
-
* Key ID.
|
|
78
|
-
*/
|
|
79
43
|
kid?: pulumi.Input<string>;
|
|
80
|
-
/**
|
|
81
|
-
* Identifies the cryptographic algorithm family used with the key.
|
|
82
|
-
*/
|
|
83
44
|
kty?: pulumi.Input<string>;
|
|
84
|
-
/**
|
|
85
|
-
* Intended use of the public key.
|
|
86
|
-
*/
|
|
87
45
|
use?: pulumi.Input<string>;
|
|
88
46
|
/**
|
|
89
|
-
* base64-encoded X.509 certificate chain with DER encoding
|
|
47
|
+
* base64-encoded X.509 certificate chain with DER encoding
|
|
90
48
|
*/
|
|
91
49
|
x5cs?: pulumi.Input<pulumi.Input<string>[]>;
|
|
92
|
-
/**
|
|
93
|
-
* base64url-encoded SHA-256 thumbprint of the DER encoding of an X.509 certificate.
|
|
94
|
-
*/
|
|
95
50
|
x5tS256?: pulumi.Input<string>;
|
|
96
51
|
}
|
|
97
52
|
/**
|
|
@@ -99,7 +54,7 @@ export interface SamlKeyState {
|
|
|
99
54
|
*/
|
|
100
55
|
export interface SamlKeyArgs {
|
|
101
56
|
/**
|
|
102
|
-
* base64-encoded X.509 certificate chain with DER encoding
|
|
57
|
+
* base64-encoded X.509 certificate chain with DER encoding
|
|
103
58
|
*/
|
|
104
59
|
x5cs: pulumi.Input<pulumi.Input<string>[]>;
|
|
105
60
|
}
|
package/idp/samlKey.js
CHANGED
|
@@ -5,15 +5,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
5
5
|
exports.SamlKey = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
|
-
/**
|
|
9
|
-
* ## Import
|
|
10
|
-
*
|
|
11
|
-
* A SAML IdP Signing Key can be imported via the key id.
|
|
12
|
-
*
|
|
13
|
-
* ```sh
|
|
14
|
-
* $ pulumi import okta:idp/samlKey:SamlKey example <key id>
|
|
15
|
-
* ```
|
|
16
|
-
*/
|
|
17
8
|
class SamlKey extends pulumi.CustomResource {
|
|
18
9
|
/**
|
|
19
10
|
* Get an existing SamlKey resource's state with the given name, ID, and optional extra
|
package/idp/samlKey.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"samlKey.js","sourceRoot":"","sources":["../../idp/samlKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"samlKey.js","sourceRoot":"","sources":["../../idp/samlKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAC9C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;IAqBD,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;;AA1EL,0BA2EC;AA7DG,gBAAgB;AACO,oBAAY,GAAG,0BAA0B,CAAC"}
|