@pulumi/okta 4.6.2 → 4.6.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (397) hide show
  1. package/adminRoleCustom.d.ts +129 -10
  2. package/adminRoleCustom.js +24 -1
  3. package/adminRoleCustom.js.map +1 -1
  4. package/adminRoleCustomAssignments.d.ts +25 -10
  5. package/adminRoleCustomAssignments.js +13 -1
  6. package/adminRoleCustomAssignments.js.map +1 -1
  7. package/adminRoleTargets.d.ts +44 -14
  8. package/adminRoleTargets.js +30 -0
  9. package/adminRoleTargets.js.map +1 -1
  10. package/app/accessPolicyAssignment.d.ts +20 -1
  11. package/app/accessPolicyAssignment.js +20 -1
  12. package/app/accessPolicyAssignment.js.map +1 -1
  13. package/app/autoLogin.d.ts +119 -72
  14. package/app/autoLogin.js +47 -0
  15. package/app/autoLogin.js.map +1 -1
  16. package/app/basicAuth.d.ts +66 -38
  17. package/app/basicAuth.js +28 -0
  18. package/app/basicAuth.js.map +1 -1
  19. package/app/bookmark.d.ts +71 -35
  20. package/app/bookmark.js +27 -0
  21. package/app/bookmark.js.map +1 -1
  22. package/app/getApp.d.ts +25 -58
  23. package/app/getApp.js +2 -2
  24. package/app/getApp.js.map +1 -1
  25. package/app/getMetadataSaml.d.ts +5 -11
  26. package/app/getMetadataSaml.js +2 -2
  27. package/app/getMetadataSaml.js.map +1 -1
  28. package/app/getOauth.d.ts +34 -62
  29. package/app/getOauth.js +2 -2
  30. package/app/getOauth.js.map +1 -1
  31. package/app/getSaml.d.ts +55 -75
  32. package/app/getSaml.js +2 -2
  33. package/app/getSaml.js.map +1 -1
  34. package/app/groupAssignment.d.ts +15 -6
  35. package/app/groupAssignment.js +9 -0
  36. package/app/groupAssignment.js.map +1 -1
  37. package/app/oauth.d.ts +301 -123
  38. package/app/oauth.js +82 -0
  39. package/app/oauth.js.map +1 -1
  40. package/app/oauthPostLogoutRedirectUri.d.ts +38 -3
  41. package/app/oauthPostLogoutRedirectUri.js +35 -0
  42. package/app/oauthPostLogoutRedirectUri.js.map +1 -1
  43. package/app/oauthRedirectUri.d.ts +37 -3
  44. package/app/oauthRedirectUri.js +34 -0
  45. package/app/oauthRedirectUri.js.map +1 -1
  46. package/app/saml.d.ts +303 -133
  47. package/app/saml.js +161 -0
  48. package/app/saml.js.map +1 -1
  49. package/app/securePasswordStore.d.ts +109 -79
  50. package/app/securePasswordStore.js +30 -0
  51. package/app/securePasswordStore.js.map +1 -1
  52. package/app/swa.d.ts +102 -72
  53. package/app/swa.js +30 -0
  54. package/app/swa.js.map +1 -1
  55. package/app/threeField.d.ts +87 -72
  56. package/app/threeField.js +15 -0
  57. package/app/threeField.js.map +1 -1
  58. package/app/user.d.ts +37 -12
  59. package/app/user.js +22 -0
  60. package/app/user.js.map +1 -1
  61. package/appGroupAssignments.d.ts +40 -3
  62. package/appGroupAssignments.js +37 -0
  63. package/appGroupAssignments.js.map +1 -1
  64. package/appOauthApiScope.d.ts +36 -3
  65. package/appOauthApiScope.js +33 -0
  66. package/appOauthApiScope.js.map +1 -1
  67. package/appSamlAppSettings.d.ts +44 -6
  68. package/appSamlAppSettings.js +38 -0
  69. package/appSamlAppSettings.js.map +1 -1
  70. package/appSharedCredentials.d.ts +115 -72
  71. package/appSharedCredentials.js +43 -0
  72. package/appSharedCredentials.js.map +1 -1
  73. package/appSignonPolicy.d.ts +44 -6
  74. package/appSignonPolicy.js +38 -0
  75. package/appSignonPolicy.js.map +1 -1
  76. package/appSignonPolicyRule.d.ts +327 -68
  77. package/appSignonPolicyRule.js +244 -0
  78. package/appSignonPolicyRule.js.map +1 -1
  79. package/appUserBaseSchemaProperty.d.ts +52 -24
  80. package/appUserBaseSchemaProperty.js +28 -0
  81. package/appUserBaseSchemaProperty.js.map +1 -1
  82. package/appUserSchemaProperty.d.ts +80 -54
  83. package/appUserSchemaProperty.js +26 -0
  84. package/appUserSchemaProperty.js.map +1 -1
  85. package/auth/getServer.d.ts +11 -11
  86. package/auth/getServer.js +2 -2
  87. package/auth/getServerPolicy.d.ts +9 -15
  88. package/auth/getServerPolicy.js +2 -2
  89. package/auth/getServerPolicy.js.map +1 -1
  90. package/auth/getServerScopes.d.ts +5 -8
  91. package/auth/getServerScopes.js +2 -2
  92. package/auth/getServerScopes.js.map +1 -1
  93. package/auth/server.d.ts +49 -13
  94. package/auth/server.js +27 -0
  95. package/auth/server.js.map +1 -1
  96. package/auth/serverClaim.d.ts +54 -18
  97. package/auth/serverClaim.js +27 -0
  98. package/auth/serverClaim.js.map +1 -1
  99. package/auth/serverPolicy.d.ts +43 -6
  100. package/auth/serverPolicy.js +28 -0
  101. package/auth/serverPolicy.js.map +1 -1
  102. package/auth/serverPolicyRule.d.ts +72 -29
  103. package/auth/serverPolicyRule.js +25 -0
  104. package/auth/serverPolicyRule.js.map +1 -1
  105. package/auth/serverScope.d.ts +41 -15
  106. package/auth/serverScope.js +26 -0
  107. package/auth/serverScope.js.map +1 -1
  108. package/authServerClaimDefault.d.ts +50 -13
  109. package/authServerClaimDefault.js +31 -0
  110. package/authServerClaimDefault.js.map +1 -1
  111. package/authServerDefault.d.ts +47 -13
  112. package/authServerDefault.js +25 -0
  113. package/authServerDefault.js.map +1 -1
  114. package/authenticator.d.ts +94 -38
  115. package/authenticator.js +38 -0
  116. package/authenticator.js.map +1 -1
  117. package/behaviour.d.ts +78 -18
  118. package/behaviour.js +42 -0
  119. package/behaviour.js.map +1 -1
  120. package/brand.d.ts +28 -19
  121. package/brand.js +10 -1
  122. package/brand.js.map +1 -1
  123. package/captcha.d.ts +38 -12
  124. package/captcha.js +26 -0
  125. package/captcha.js.map +1 -1
  126. package/captchaOrgWideSettings.d.ts +51 -6
  127. package/captchaOrgWideSettings.js +45 -0
  128. package/captchaOrgWideSettings.js.map +1 -1
  129. package/domain.d.ts +39 -13
  130. package/domain.js +20 -0
  131. package/domain.js.map +1 -1
  132. package/domainCertificate.d.ts +63 -15
  133. package/domainCertificate.js +48 -0
  134. package/domainCertificate.js.map +1 -1
  135. package/domainVerification.d.ts +22 -3
  136. package/domainVerification.js +19 -0
  137. package/domainVerification.js.map +1 -1
  138. package/emailCustomization.d.ts +224 -3
  139. package/emailCustomization.js +41 -0
  140. package/emailCustomization.js.map +1 -1
  141. package/emailSender.d.ts +39 -13
  142. package/emailSender.js +26 -0
  143. package/emailSender.js.map +1 -1
  144. package/emailSenderVerification.d.ts +26 -3
  145. package/emailSenderVerification.js +23 -0
  146. package/emailSenderVerification.js.map +1 -1
  147. package/eventHook.d.ts +37 -0
  148. package/eventHook.js +37 -0
  149. package/eventHook.js.map +1 -1
  150. package/eventHookVerification.d.ts +37 -3
  151. package/eventHookVerification.js +34 -0
  152. package/eventHookVerification.js.map +1 -1
  153. package/factor/factor.d.ts +23 -6
  154. package/factor/factor.js +14 -0
  155. package/factor/factor.js.map +1 -1
  156. package/factorTotp.d.ts +44 -12
  157. package/factorTotp.js +23 -0
  158. package/factorTotp.js.map +1 -1
  159. package/getAppGroupAssignments.d.ts +6 -6
  160. package/getAppGroupAssignments.js +2 -2
  161. package/getAppSignonPolicy.d.ts +6 -16
  162. package/getAppSignonPolicy.js +4 -8
  163. package/getAppSignonPolicy.js.map +1 -1
  164. package/getAppUserAssignments.d.ts +6 -6
  165. package/getAppUserAssignments.js +2 -2
  166. package/getAuthServerClaim.d.ts +12 -15
  167. package/getAuthServerClaim.js +2 -2
  168. package/getAuthServerClaim.js.map +1 -1
  169. package/getAuthServerClaims.d.ts +5 -8
  170. package/getAuthServerClaims.js +2 -2
  171. package/getAuthServerClaims.js.map +1 -1
  172. package/getAuthenticator.d.ts +26 -24
  173. package/getAuthenticator.js +22 -14
  174. package/getAuthenticator.js.map +1 -1
  175. package/getBehaviour.d.ts +8 -6
  176. package/getBehaviour.js +2 -2
  177. package/getBehaviour.js.map +1 -1
  178. package/getBehaviours.d.ts +7 -7
  179. package/getBehaviours.js +2 -2
  180. package/getBrand.d.ts +6 -9
  181. package/getBrand.js +2 -2
  182. package/getBrand.js.map +1 -1
  183. package/getBrands.d.ts +2 -2
  184. package/getBrands.js +2 -2
  185. package/getEmailCustomization.d.ts +9 -14
  186. package/getEmailCustomization.js +6 -2
  187. package/getEmailCustomization.js.map +1 -1
  188. package/getEmailCustomizations.d.ts +9 -11
  189. package/getEmailCustomizations.js +6 -2
  190. package/getEmailCustomizations.js.map +1 -1
  191. package/getGroups.d.ts +25 -11
  192. package/getGroups.js +2 -2
  193. package/getGroups.js.map +1 -1
  194. package/getNetworkZone.d.ts +12 -12
  195. package/getNetworkZone.js +2 -2
  196. package/getRoleSubscription.d.ts +35 -13
  197. package/getRoleSubscription.js +2 -2
  198. package/getRoleSubscription.js.map +1 -1
  199. package/getTemplate.d.ts +8 -10
  200. package/getTemplate.js +6 -2
  201. package/getTemplate.js.map +1 -1
  202. package/getTemplates.d.ts +7 -6
  203. package/getTemplates.js +6 -2
  204. package/getTemplates.js.map +1 -1
  205. package/getTheme.d.ts +12 -14
  206. package/getTheme.js +6 -2
  207. package/getTheme.js.map +1 -1
  208. package/getThemes.d.ts +7 -6
  209. package/getThemes.js +6 -2
  210. package/getThemes.js.map +1 -1
  211. package/getTrustedOrigins.d.ts +4 -7
  212. package/getTrustedOrigins.js +2 -2
  213. package/getTrustedOrigins.js.map +1 -1
  214. package/getUserSecurityQuestions.d.ts +8 -4
  215. package/getUserSecurityQuestions.js +4 -0
  216. package/getUserSecurityQuestions.js.map +1 -1
  217. package/group/getEveryoneGroup.d.ts +5 -10
  218. package/group/getEveryoneGroup.js +2 -4
  219. package/group/getEveryoneGroup.js.map +1 -1
  220. package/group/getGroup.d.ts +26 -17
  221. package/group/getGroup.js +2 -2
  222. package/group/getGroup.js.map +1 -1
  223. package/group/getRule.d.ts +15 -6
  224. package/group/getRule.js +2 -2
  225. package/group/getRule.js.map +1 -1
  226. package/group/group.d.ts +46 -9
  227. package/group/group.js +37 -0
  228. package/group/group.js.map +1 -1
  229. package/group/role.d.ts +101 -15
  230. package/group/role.js +26 -0
  231. package/group/role.js.map +1 -1
  232. package/group/rule.d.ts +80 -6
  233. package/group/rule.js +23 -0
  234. package/group/rule.js.map +1 -1
  235. package/groupMemberships.d.ts +48 -7
  236. package/groupMemberships.js +42 -1
  237. package/groupMemberships.js.map +1 -1
  238. package/groupSchemaProperty.d.ts +94 -51
  239. package/groupSchemaProperty.js +25 -0
  240. package/groupSchemaProperty.js.map +1 -1
  241. package/idp/getMetadataSaml.d.ts +6 -9
  242. package/idp/getMetadataSaml.js +2 -2
  243. package/idp/getMetadataSaml.js.map +1 -1
  244. package/idp/getOidc.d.ts +9 -9
  245. package/idp/getOidc.js +2 -2
  246. package/idp/getSaml.d.ts +13 -16
  247. package/idp/getSaml.js +2 -2
  248. package/idp/getSaml.js.map +1 -1
  249. package/idp/getSocial.d.ts +2 -8
  250. package/idp/getSocial.js +2 -2
  251. package/idp/getSocial.js.map +1 -1
  252. package/idp/oidc.d.ts +297 -12
  253. package/idp/oidc.js +36 -0
  254. package/idp/oidc.js.map +1 -1
  255. package/idp/saml.d.ts +284 -18
  256. package/idp/saml.js +32 -0
  257. package/idp/saml.js.map +1 -1
  258. package/idp/samlKey.d.ts +48 -3
  259. package/idp/samlKey.js +9 -0
  260. package/idp/samlKey.js.map +1 -1
  261. package/idp/social.d.ts +251 -18
  262. package/idp/social.js +32 -0
  263. package/idp/social.js.map +1 -1
  264. package/index/emailDomain.d.ts +41 -16
  265. package/index/emailDomain.js +25 -0
  266. package/index/emailDomain.js.map +1 -1
  267. package/index/emailDomainVerification.d.ts +25 -3
  268. package/index/emailDomainVerification.js +22 -0
  269. package/index/emailDomainVerification.js.map +1 -1
  270. package/index/getDomain.d.ts +14 -11
  271. package/index/getDomain.js +8 -2
  272. package/index/getDomain.js.map +1 -1
  273. package/inline/hook.d.ts +89 -0
  274. package/inline/hook.js +35 -0
  275. package/inline/hook.js.map +1 -1
  276. package/linkDefinition.d.ts +30 -0
  277. package/linkDefinition.js +30 -0
  278. package/linkDefinition.js.map +1 -1
  279. package/linkValue.d.ts +59 -6
  280. package/linkValue.js +53 -0
  281. package/linkValue.js.map +1 -1
  282. package/network/zone.d.ts +74 -27
  283. package/network/zone.js +44 -0
  284. package/network/zone.js.map +1 -1
  285. package/orgConfiguration.d.ts +25 -0
  286. package/orgConfiguration.js +25 -0
  287. package/orgConfiguration.js.map +1 -1
  288. package/orgSupport.d.ts +20 -3
  289. package/orgSupport.js +17 -0
  290. package/orgSupport.js.map +1 -1
  291. package/package.json +1 -1
  292. package/policy/getDefaultPolicy.d.ts +7 -9
  293. package/policy/getDefaultPolicy.js +2 -6
  294. package/policy/getDefaultPolicy.js.map +1 -1
  295. package/policy/getPolicy.d.ts +10 -11
  296. package/policy/getPolicy.js +2 -2
  297. package/policy/getPolicy.js.map +1 -1
  298. package/policy/mfa.d.ts +259 -18
  299. package/policy/mfa.js +49 -0
  300. package/policy/mfa.js.map +1 -1
  301. package/policy/password.d.ts +117 -90
  302. package/policy/password.js +27 -0
  303. package/policy/password.js.map +1 -1
  304. package/policy/ruleIdpDiscovery.d.ts +149 -27
  305. package/policy/ruleIdpDiscovery.js +65 -0
  306. package/policy/ruleIdpDiscovery.js.map +1 -1
  307. package/policy/ruleMfa.d.ts +35 -24
  308. package/policy/ruleMfa.js +11 -0
  309. package/policy/ruleMfa.js.map +1 -1
  310. package/policy/rulePassword.d.ts +46 -33
  311. package/policy/rulePassword.js +13 -0
  312. package/policy/rulePassword.js.map +1 -1
  313. package/policy/ruleSignon.d.ts +170 -57
  314. package/policy/ruleSignon.js +92 -0
  315. package/policy/ruleSignon.js.map +1 -1
  316. package/policy/signon.d.ts +41 -15
  317. package/policy/signon.js +26 -0
  318. package/policy/signon.js.map +1 -1
  319. package/policyMfaDefault.d.ts +250 -13
  320. package/policyMfaDefault.js +45 -0
  321. package/policyMfaDefault.js.map +1 -1
  322. package/policyPasswordDefault.d.ts +88 -54
  323. package/policyPasswordDefault.js +22 -0
  324. package/policyPasswordDefault.js.map +1 -1
  325. package/policyProfileEnrollment.d.ts +28 -6
  326. package/policyProfileEnrollment.js +22 -0
  327. package/policyProfileEnrollment.js.map +1 -1
  328. package/policyProfileEnrollmentApps.d.ts +42 -5
  329. package/policyProfileEnrollmentApps.js +37 -0
  330. package/policyProfileEnrollmentApps.js.map +1 -1
  331. package/policyRuleProfileEnrollment.d.ts +88 -26
  332. package/policyRuleProfileEnrollment.js +62 -0
  333. package/policyRuleProfileEnrollment.js.map +1 -1
  334. package/profile/mapping.d.ts +95 -9
  335. package/profile/mapping.js +41 -0
  336. package/profile/mapping.js.map +1 -1
  337. package/rateLimiting.d.ts +43 -9
  338. package/rateLimiting.js +28 -0
  339. package/rateLimiting.js.map +1 -1
  340. package/resourceSet.d.ts +32 -10
  341. package/resourceSet.js +20 -1
  342. package/resourceSet.js.map +1 -1
  343. package/roleSubscription.d.ts +110 -9
  344. package/roleSubscription.js +26 -0
  345. package/roleSubscription.js.map +1 -1
  346. package/securityNotificationEmails.d.ts +45 -15
  347. package/securityNotificationEmails.js +30 -0
  348. package/securityNotificationEmails.js.map +1 -1
  349. package/templateSms.d.ts +47 -3
  350. package/templateSms.js +35 -0
  351. package/templateSms.js.map +1 -1
  352. package/theme.d.ts +59 -44
  353. package/theme.js +15 -0
  354. package/theme.js.map +1 -1
  355. package/threatInsightSettings.d.ts +58 -6
  356. package/threatInsightSettings.js +34 -0
  357. package/threatInsightSettings.js.map +1 -1
  358. package/trustedorigin/origin.d.ts +37 -12
  359. package/trustedorigin/origin.js +25 -0
  360. package/trustedorigin/origin.js.map +1 -1
  361. package/types/input.d.ts +227 -60
  362. package/types/output.d.ts +446 -56
  363. package/user/getUser.d.ts +104 -32
  364. package/user/getUser.js +2 -2
  365. package/user/getUser.js.map +1 -1
  366. package/user/getUserProfileMappingSource.d.ts +7 -9
  367. package/user/getUserProfileMappingSource.js +4 -6
  368. package/user/getUserProfileMappingSource.js.map +1 -1
  369. package/user/getUserType.d.ts +7 -7
  370. package/user/getUserType.js +2 -2
  371. package/user/getUsers.d.ts +57 -61
  372. package/user/getUsers.js +44 -30
  373. package/user/getUsers.js.map +1 -1
  374. package/user/user.d.ts +215 -117
  375. package/user/user.js +71 -0
  376. package/user/user.js.map +1 -1
  377. package/user/userType.d.ts +34 -9
  378. package/user/userType.js +25 -0
  379. package/user/userType.js.map +1 -1
  380. package/userAdminRoles.d.ts +41 -10
  381. package/userAdminRoles.js +29 -1
  382. package/userAdminRoles.js.map +1 -1
  383. package/userBaseSchemaProperty.d.ts +67 -24
  384. package/userBaseSchemaProperty.js +43 -0
  385. package/userBaseSchemaProperty.js.map +1 -1
  386. package/userFactorQuestion.d.ts +52 -14
  387. package/userFactorQuestion.js +39 -1
  388. package/userFactorQuestion.js.map +1 -1
  389. package/userGroupMemberships.d.ts +23 -4
  390. package/userGroupMemberships.js +20 -1
  391. package/userGroupMemberships.js.map +1 -1
  392. package/userSchemaProperty.d.ts +107 -57
  393. package/userSchemaProperty.js +32 -0
  394. package/userSchemaProperty.js.map +1 -1
  395. package/utilities.d.ts +4 -0
  396. package/utilities.js +33 -1
  397. package/utilities.js.map +1 -1
package/policy/mfa.js CHANGED
@@ -5,6 +5,55 @@ Object.defineProperty(exports, "__esModule", { value: true });
5
5
  exports.Mfa = void 0;
6
6
  const pulumi = require("@pulumi/pulumi");
7
7
  const utilities = require("../utilities");
8
+ /**
9
+ * Creates an MFA Policy.
10
+ *
11
+ * This resource allows you to create and configure an MFA Policy.
12
+ *
13
+ * > Requires Org Feature Flag `OKTA_MFA_POLICY`. Contact support to have this feature flag ***enabled***.
14
+ *
15
+ * > Unless Org Feature Flag `ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT` is ***disabled*** `oktaPassword` or `oktaEmail` must be present and its `enroll` value set to `REQUIRED`. Contact support to have this feature flag ***disabled***.
16
+ *
17
+ * ## Example Usage
18
+ *
19
+ * ```typescript
20
+ * import * as pulumi from "@pulumi/pulumi";
21
+ * import * as okta from "@pulumi/okta";
22
+ *
23
+ * const classicExample = new okta.policy.Mfa("classicExample", {
24
+ * description: "Example MFA policy using Okta Classic engine with factors.",
25
+ * groupsIncludeds: [data.okta_group.everyone.id],
26
+ * isOie: false,
27
+ * oktaOtp: {
28
+ * enroll: "REQUIRED",
29
+ * },
30
+ * oktaPassword: {
31
+ * enroll: "REQUIRED",
32
+ * },
33
+ * status: "ACTIVE",
34
+ * });
35
+ * const oieExample = new okta.policy.Mfa("oieExample", {
36
+ * description: "Example MFA policy that uses Okta Identity Engine (OIE) with authenticators",
37
+ * groupsIncludeds: [data.okta_group.everyone.id],
38
+ * isOie: true,
39
+ * oktaPassword: {
40
+ * enroll: "REQUIRED",
41
+ * },
42
+ * oktaVerify: {
43
+ * enroll: "REQUIRED",
44
+ * },
45
+ * status: "ACTIVE",
46
+ * });
47
+ * ```
48
+ *
49
+ * ## Import
50
+ *
51
+ * An MFA Policy can be imported via the Okta ID.
52
+ *
53
+ * ```sh
54
+ * $ pulumi import okta:policy/mfa:Mfa example <policy id>
55
+ * ```
56
+ */
8
57
  class Mfa extends pulumi.CustomResource {
9
58
  /**
10
59
  * Get an existing Mfa resource's state with the given name, ID, and optional extra
package/policy/mfa.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"mfa.js","sourceRoot":"","sources":["../../policy/mfa.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,GAAI,SAAQ,MAAM,CAAC,cAAc;IAC1C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgB,EAAE,IAAmC;QAC9G,OAAO,IAAI,GAAG,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC;IACpD,CAAC;IAwDD,YAAY,IAAY,EAAE,WAAgC,EAAE,IAAmC;QAC3F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmC,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E;aAAM;YACH,MAAM,IAAI,GAAG,WAAkC,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;;AAlJL,kBAmJC;AArIG,gBAAgB;AACO,gBAAY,GAAG,qBAAqB,CAAC"}
1
+ {"version":3,"file":"mfa.js","sourceRoot":"","sources":["../../policy/mfa.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAa,GAAI,SAAQ,MAAM,CAAC,cAAc;IAC1C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgB,EAAE,IAAmC;QAC9G,OAAO,IAAI,GAAG,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC;IACpD,CAAC;IAwHD,YAAY,IAAY,EAAE,WAAgC,EAAE,IAAmC;QAC3F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmC,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E;aAAM;YACH,MAAM,IAAI,GAAG,WAAkC,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;;AAlNL,kBAmNC;AArMG,gBAAgB;AACO,gBAAY,GAAG,qBAAqB,CAAC"}
package/policy/password.d.ts CHANGED
@@ -1,4 +1,31 @@
1
1
  import * as pulumi from "@pulumi/pulumi";
2
+ /**
3
+ * Creates a Password Policy.
4
+ *
5
+ * This resource allows you to create and configure a Password Policy.
6
+ *
7
+ * ## Example Usage
8
+ *
9
+ * ```typescript
10
+ * import * as pulumi from "@pulumi/pulumi";
11
+ * import * as okta from "@pulumi/okta";
12
+ *
13
+ * const example = new okta.policy.Password("example", {
14
+ * description: "Example",
15
+ * groupsIncludeds: [data.okta_group.everyone.id],
16
+ * passwordHistoryCount: 4,
17
+ * status: "ACTIVE",
18
+ * });
19
+ * ```
20
+ *
21
+ * ## Import
22
+ *
23
+ * A Password Policy can be imported via the Okta ID.
24
+ *
25
+ * ```sh
26
+ * $ pulumi import okta:policy/password:Password example <policy id>
27
+ * ```
28
+ */
2
29
  export declare class Password extends pulumi.CustomResource {
3
30
  /**
4
31
  * Get an existing Password resource's state with the given name, ID, and optional extra
@@ -16,123 +43,123 @@ export declare class Password extends pulumi.CustomResource {
16
43
  */
17
44
  static isInstance(obj: any): obj is Password;
18
45
  /**
19
- * Authentication Provider: OKTA, ACTIVE_DIRECTORY or LDAP
46
+ * Authentication Provider: `"OKTA"`, `"ACTIVE_DIRECTORY"` or `"LDAP"`. Default is `"OKTA"`. Type `"string"`
20
47
  */
21
48
  readonly authProvider: pulumi.Output<string | undefined>;
22
49
  /**
23
- * Enable or disable voice call recovery: ACTIVE or INACTIVE.
50
+ * Enable or disable voice call password recovery: ACTIVE or INACTIVE. Type `"string"`
24
51
  */
25
52
  readonly callRecovery: pulumi.Output<string | undefined>;
26
53
  /**
27
- * Policy Description
54
+ * Policy Description. Type `"string"`
28
55
  */
29
56
  readonly description: pulumi.Output<string | undefined>;
30
57
  /**
31
- * Enable or disable email password recovery: ACTIVE or INACTIVE.
58
+ * Enable or disable email password recovery: ACTIVE or INACTIVE. Type `"string"`
32
59
  */
33
60
  readonly emailRecovery: pulumi.Output<string | undefined>;
34
61
  /**
35
- * List of Group IDs to Include
62
+ * List of Group IDs to Include. Type `"list(string)"`
36
63
  */
37
64
  readonly groupsIncludeds: pulumi.Output<string[] | undefined>;
38
65
  /**
39
- * Policy Name
66
+ * Policy Name. Type `"string"`
40
67
  */
41
68
  readonly name: pulumi.Output<string>;
42
69
  /**
43
- * Number of minutes before a locked account is unlocked: 0 = no limit.
70
+ * Number of minutes before a locked account is unlocked: 0 = no limit. Type `"number"`
44
71
  */
45
72
  readonly passwordAutoUnlockMinutes: pulumi.Output<number | undefined>;
46
73
  /**
47
- * Check Passwords Against Common Password Dictionary.
74
+ * Check Passwords Against Common Password Dictionary. Type `"bool"`
48
75
  */
49
76
  readonly passwordDictionaryLookup: pulumi.Output<boolean | undefined>;
50
77
  /**
51
- * User firstName attribute must be excluded from the password
78
+ * User firstName attribute must be excluded from the password. Type `"bool"`
52
79
  */
53
80
  readonly passwordExcludeFirstName: pulumi.Output<boolean | undefined>;
54
81
  /**
55
- * User lastName attribute must be excluded from the password
82
+ * User lastName attribute must be excluded from the password. Type `"bool"`
56
83
  */
57
84
  readonly passwordExcludeLastName: pulumi.Output<boolean | undefined>;
58
85
  /**
59
- * If the user name must be excluded from the password.
86
+ * If the username must be excluded from the password. Type `"bool"`
60
87
  */
61
88
  readonly passwordExcludeUsername: pulumi.Output<boolean | undefined>;
62
89
  /**
63
- * Length in days a user will be warned before password expiry: 0 = no warning.
90
+ * Length in days a user will be warned before password expiry: 0 = no warning. Type `"number"`
64
91
  */
65
92
  readonly passwordExpireWarnDays: pulumi.Output<number | undefined>;
66
93
  /**
67
- * Number of distinct passwords that must be created before they can be reused: 0 = none.
94
+ * Number of distinct passwords that must be created before they can be reused: 0 = none. Type `"number"`
68
95
  */
69
96
  readonly passwordHistoryCount: pulumi.Output<number | undefined>;
70
97
  /**
71
- * Notification channels to use to notify a user when their account has been locked.
98
+ * Notification channels to use to notify a user when their account has been locked. Type `"set(string)"`
72
99
  */
73
100
  readonly passwordLockoutNotificationChannels: pulumi.Output<string[] | undefined>;
74
101
  /**
75
- * Length in days a password is valid before expiry: 0 = no limit.
102
+ * Length in days a password is valid before expiry: 0 = no limit. Type `"number"`
76
103
  */
77
104
  readonly passwordMaxAgeDays: pulumi.Output<number | undefined>;
78
105
  /**
79
- * Number of unsuccessful login attempts allowed before lockout: 0 = no limit.
106
+ * Number of unsuccessful login attempts allowed before lockout: 0 = no limit. Type `"number"`
80
107
  */
81
108
  readonly passwordMaxLockoutAttempts: pulumi.Output<number | undefined>;
82
109
  /**
83
- * Minimum time interval in minutes between password changes: 0 = no limit.
110
+ * Minimum time interval in minutes between password changes: 0 = no limit. Type `"number"`
84
111
  */
85
112
  readonly passwordMinAgeMinutes: pulumi.Output<number | undefined>;
86
113
  /**
87
- * Minimum password length.
114
+ * Minimum password length. Default is 8. Type `"number"`
88
115
  */
89
116
  readonly passwordMinLength: pulumi.Output<number | undefined>;
90
117
  /**
91
- * If a password must contain at least one lower case letter: 0 = no, 1 = yes. Default = 1
118
+ * Minimum number of lower case characters in a password. Type `"number"`
92
119
  */
93
120
  readonly passwordMinLowercase: pulumi.Output<number | undefined>;
94
121
  /**
95
- * If a password must contain at least one number: 0 = no, 1 = yes. Default = 1
122
+ * Minimum number of numbers in a password. Type `"number"`
96
123
  */
97
124
  readonly passwordMinNumber: pulumi.Output<number | undefined>;
98
125
  /**
99
- * If a password must contain at least one symbol (!@#$%^&*): 0 = no, 1 = yes. Default = 1
126
+ * Minimum number of symbols in a password. Type `"number"`
100
127
  */
101
128
  readonly passwordMinSymbol: pulumi.Output<number | undefined>;
102
129
  /**
103
- * If a password must contain at least one upper case letter: 0 = no, 1 = yes. Default = 1
130
+ * Minimum number of upper case characters in a password. Type `"number"`
104
131
  */
105
132
  readonly passwordMinUppercase: pulumi.Output<number | undefined>;
106
133
  /**
107
- * If a user should be informed when their account is locked.
134
+ * If a user should be informed when their account is locked. Type `"bool"`
108
135
  */
109
136
  readonly passwordShowLockoutFailures: pulumi.Output<boolean | undefined>;
110
137
  /**
111
- * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
138
+ * Priority of the policy. Type `"number"`
112
139
  */
113
140
  readonly priority: pulumi.Output<number | undefined>;
114
141
  /**
115
- * Min length of the password recovery question answer.
142
+ * Min length of the password recovery question answer. Type `"number"`
116
143
  */
117
144
  readonly questionMinLength: pulumi.Output<number | undefined>;
118
145
  /**
119
- * Enable or disable security question password recovery: ACTIVE or INACTIVE.
146
+ * Enable or disable security question password recovery: ACTIVE or INACTIVE. Type `"string"`
120
147
  */
121
148
  readonly questionRecovery: pulumi.Output<string | undefined>;
122
149
  /**
123
- * Lifetime in minutes of the recovery email token.
150
+ * Lifetime in minutes of the recovery email token. Type `"number"`
124
151
  */
125
152
  readonly recoveryEmailToken: pulumi.Output<number | undefined>;
126
153
  /**
127
- * When an Active Directory user is locked out of Okta, the Okta unlock operation should also attempt to unlock the user's Windows account.
154
+ * When an Active Directory user is locked out of Okta, the Okta unlock operation should also attempt to unlock the user's Windows account. Type `"bool"`
128
155
  */
129
156
  readonly skipUnlock: pulumi.Output<boolean | undefined>;
130
157
  /**
131
- * Enable or disable SMS password recovery: ACTIVE or INACTIVE.
158
+ * Enable or disable SMS password recovery: ACTIVE or INACTIVE. Type `"string"`
132
159
  */
133
160
  readonly smsRecovery: pulumi.Output<string | undefined>;
134
161
  /**
135
- * Policy Status: ACTIVE or INACTIVE.
162
+ * Policy Status: `"ACTIVE"` or `"INACTIVE"`. Type `"string"`
136
163
  */
137
164
  readonly status: pulumi.Output<string | undefined>;
138
165
  /**
@@ -149,123 +176,123 @@ export declare class Password extends pulumi.CustomResource {
149
176
  */
150
177
  export interface PasswordState {
151
178
  /**
152
- * Authentication Provider: OKTA, ACTIVE_DIRECTORY or LDAP
179
+ * Authentication Provider: `"OKTA"`, `"ACTIVE_DIRECTORY"` or `"LDAP"`. Default is `"OKTA"`. Type `"string"`
153
180
  */
154
181
  authProvider?: pulumi.Input<string>;
155
182
  /**
156
- * Enable or disable voice call recovery: ACTIVE or INACTIVE.
183
+ * Enable or disable voice call password recovery: ACTIVE or INACTIVE. Type `"string"`
157
184
  */
158
185
  callRecovery?: pulumi.Input<string>;
159
186
  /**
160
- * Policy Description
187
+ * Policy Description. Type `"string"`
161
188
  */
162
189
  description?: pulumi.Input<string>;
163
190
  /**
164
- * Enable or disable email password recovery: ACTIVE or INACTIVE.
191
+ * Enable or disable email password recovery: ACTIVE or INACTIVE. Type `"string"`
165
192
  */
166
193
  emailRecovery?: pulumi.Input<string>;
167
194
  /**
168
- * List of Group IDs to Include
195
+ * List of Group IDs to Include. Type `"list(string)"`
169
196
  */
170
197
  groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
171
198
  /**
172
- * Policy Name
199
+ * Policy Name. Type `"string"`
173
200
  */
174
201
  name?: pulumi.Input<string>;
175
202
  /**
176
- * Number of minutes before a locked account is unlocked: 0 = no limit.
203
+ * Number of minutes before a locked account is unlocked: 0 = no limit. Type `"number"`
177
204
  */
178
205
  passwordAutoUnlockMinutes?: pulumi.Input<number>;
179
206
  /**
180
- * Check Passwords Against Common Password Dictionary.
207
+ * Check Passwords Against Common Password Dictionary. Type `"bool"`
181
208
  */
182
209
  passwordDictionaryLookup?: pulumi.Input<boolean>;
183
210
  /**
184
- * User firstName attribute must be excluded from the password
211
+ * User firstName attribute must be excluded from the password. Type `"bool"`
185
212
  */
186
213
  passwordExcludeFirstName?: pulumi.Input<boolean>;
187
214
  /**
188
- * User lastName attribute must be excluded from the password
215
+ * User lastName attribute must be excluded from the password. Type `"bool"`
189
216
  */
190
217
  passwordExcludeLastName?: pulumi.Input<boolean>;
191
218
  /**
192
- * If the user name must be excluded from the password.
219
+ * If the username must be excluded from the password. Type `"bool"`
193
220
  */
194
221
  passwordExcludeUsername?: pulumi.Input<boolean>;
195
222
  /**
196
- * Length in days a user will be warned before password expiry: 0 = no warning.
223
+ * Length in days a user will be warned before password expiry: 0 = no warning. Type `"number"`
197
224
  */
198
225
  passwordExpireWarnDays?: pulumi.Input<number>;
199
226
  /**
200
- * Number of distinct passwords that must be created before they can be reused: 0 = none.
227
+ * Number of distinct passwords that must be created before they can be reused: 0 = none. Type `"number"`
201
228
  */
202
229
  passwordHistoryCount?: pulumi.Input<number>;
203
230
  /**
204
- * Notification channels to use to notify a user when their account has been locked.
231
+ * Notification channels to use to notify a user when their account has been locked. Type `"set(string)"`
205
232
  */
206
233
  passwordLockoutNotificationChannels?: pulumi.Input<pulumi.Input<string>[]>;
207
234
  /**
208
- * Length in days a password is valid before expiry: 0 = no limit.
235
+ * Length in days a password is valid before expiry: 0 = no limit. Type `"number"`
209
236
  */
210
237
  passwordMaxAgeDays?: pulumi.Input<number>;
211
238
  /**
212
- * Number of unsuccessful login attempts allowed before lockout: 0 = no limit.
239
+ * Number of unsuccessful login attempts allowed before lockout: 0 = no limit. Type `"number"`
213
240
  */
214
241
  passwordMaxLockoutAttempts?: pulumi.Input<number>;
215
242
  /**
216
- * Minimum time interval in minutes between password changes: 0 = no limit.
243
+ * Minimum time interval in minutes between password changes: 0 = no limit. Type `"number"`
217
244
  */
218
245
  passwordMinAgeMinutes?: pulumi.Input<number>;
219
246
  /**
220
- * Minimum password length.
247
+ * Minimum password length. Default is 8. Type `"number"`
221
248
  */
222
249
  passwordMinLength?: pulumi.Input<number>;
223
250
  /**
224
- * If a password must contain at least one lower case letter: 0 = no, 1 = yes. Default = 1
251
+ * Minimum number of lower case characters in a password. Type `"number"`
225
252
  */
226
253
  passwordMinLowercase?: pulumi.Input<number>;
227
254
  /**
228
- * If a password must contain at least one number: 0 = no, 1 = yes. Default = 1
255
+ * Minimum number of numbers in a password. Type `"number"`
229
256
  */
230
257
  passwordMinNumber?: pulumi.Input<number>;
231
258
  /**
232
- * If a password must contain at least one symbol (!@#$%^&*): 0 = no, 1 = yes. Default = 1
259
+ * Minimum number of symbols in a password. Type `"number"`
233
260
  */
234
261
  passwordMinSymbol?: pulumi.Input<number>;
235
262
  /**
236
- * If a password must contain at least one upper case letter: 0 = no, 1 = yes. Default = 1
263
+ * Minimum number of upper case characters in a password. Type `"number"`
237
264
  */
238
265
  passwordMinUppercase?: pulumi.Input<number>;
239
266
  /**
240
- * If a user should be informed when their account is locked.
267
+ * If a user should be informed when their account is locked. Type `"bool"`
241
268
  */
242
269
  passwordShowLockoutFailures?: pulumi.Input<boolean>;
243
270
  /**
244
- * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
271
+ * Priority of the policy. Type `"number"`
245
272
  */
246
273
  priority?: pulumi.Input<number>;
247
274
  /**
248
- * Min length of the password recovery question answer.
275
+ * Min length of the password recovery question answer. Type `"number"`
249
276
  */
250
277
  questionMinLength?: pulumi.Input<number>;
251
278
  /**
252
- * Enable or disable security question password recovery: ACTIVE or INACTIVE.
279
+ * Enable or disable security question password recovery: ACTIVE or INACTIVE. Type `"string"`
253
280
  */
254
281
  questionRecovery?: pulumi.Input<string>;
255
282
  /**
256
- * Lifetime in minutes of the recovery email token.
283
+ * Lifetime in minutes of the recovery email token. Type `"number"`
257
284
  */
258
285
  recoveryEmailToken?: pulumi.Input<number>;
259
286
  /**
260
- * When an Active Directory user is locked out of Okta, the Okta unlock operation should also attempt to unlock the user's Windows account.
287
+ * When an Active Directory user is locked out of Okta, the Okta unlock operation should also attempt to unlock the user's Windows account. Type `"bool"`
261
288
  */
262
289
  skipUnlock?: pulumi.Input<boolean>;
263
290
  /**
264
- * Enable or disable SMS password recovery: ACTIVE or INACTIVE.
291
+ * Enable or disable SMS password recovery: ACTIVE or INACTIVE. Type `"string"`
265
292
  */
266
293
  smsRecovery?: pulumi.Input<string>;
267
294
  /**
268
- * Policy Status: ACTIVE or INACTIVE.
295
+ * Policy Status: `"ACTIVE"` or `"INACTIVE"`. Type `"string"`
269
296
  */
270
297
  status?: pulumi.Input<string>;
271
298
  }
@@ -274,123 +301,123 @@ export interface PasswordState {
274
301
  */
275
302
  export interface PasswordArgs {
276
303
  /**
277
- * Authentication Provider: OKTA, ACTIVE_DIRECTORY or LDAP
304
+ * Authentication Provider: `"OKTA"`, `"ACTIVE_DIRECTORY"` or `"LDAP"`. Default is `"OKTA"`. Type `"string"`
278
305
  */
279
306
  authProvider?: pulumi.Input<string>;
280
307
  /**
281
- * Enable or disable voice call recovery: ACTIVE or INACTIVE.
308
+ * Enable or disable voice call password recovery: ACTIVE or INACTIVE. Type `"string"`
282
309
  */
283
310
  callRecovery?: pulumi.Input<string>;
284
311
  /**
285
- * Policy Description
312
+ * Policy Description. Type `"string"`
286
313
  */
287
314
  description?: pulumi.Input<string>;
288
315
  /**
289
- * Enable or disable email password recovery: ACTIVE or INACTIVE.
316
+ * Enable or disable email password recovery: ACTIVE or INACTIVE. Type `"string"`
290
317
  */
291
318
  emailRecovery?: pulumi.Input<string>;
292
319
  /**
293
- * List of Group IDs to Include
320
+ * List of Group IDs to Include. Type `"list(string)"`
294
321
  */
295
322
  groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
296
323
  /**
297
- * Policy Name
324
+ * Policy Name. Type `"string"`
298
325
  */
299
326
  name?: pulumi.Input<string>;
300
327
  /**
301
- * Number of minutes before a locked account is unlocked: 0 = no limit.
328
+ * Number of minutes before a locked account is unlocked: 0 = no limit. Type `"number"`
302
329
  */
303
330
  passwordAutoUnlockMinutes?: pulumi.Input<number>;
304
331
  /**
305
- * Check Passwords Against Common Password Dictionary.
332
+ * Check Passwords Against Common Password Dictionary. Type `"bool"`
306
333
  */
307
334
  passwordDictionaryLookup?: pulumi.Input<boolean>;
308
335
  /**
309
- * User firstName attribute must be excluded from the password
336
+ * User firstName attribute must be excluded from the password. Type `"bool"`
310
337
  */
311
338
  passwordExcludeFirstName?: pulumi.Input<boolean>;
312
339
  /**
313
- * User lastName attribute must be excluded from the password
340
+ * User lastName attribute must be excluded from the password. Type `"bool"`
314
341
  */
315
342
  passwordExcludeLastName?: pulumi.Input<boolean>;
316
343
  /**
317
- * If the user name must be excluded from the password.
344
+ * If the username must be excluded from the password. Type `"bool"`
318
345
  */
319
346
  passwordExcludeUsername?: pulumi.Input<boolean>;
320
347
  /**
321
- * Length in days a user will be warned before password expiry: 0 = no warning.
348
+ * Length in days a user will be warned before password expiry: 0 = no warning. Type `"number"`
322
349
  */
323
350
  passwordExpireWarnDays?: pulumi.Input<number>;
324
351
  /**
325
- * Number of distinct passwords that must be created before they can be reused: 0 = none.
352
+ * Number of distinct passwords that must be created before they can be reused: 0 = none. Type `"number"`
326
353
  */
327
354
  passwordHistoryCount?: pulumi.Input<number>;
328
355
  /**
329
- * Notification channels to use to notify a user when their account has been locked.
356
+ * Notification channels to use to notify a user when their account has been locked. Type `"set(string)"`
330
357
  */
331
358
  passwordLockoutNotificationChannels?: pulumi.Input<pulumi.Input<string>[]>;
332
359
  /**
333
- * Length in days a password is valid before expiry: 0 = no limit.
360
+ * Length in days a password is valid before expiry: 0 = no limit. Type `"number"`
334
361
  */
335
362
  passwordMaxAgeDays?: pulumi.Input<number>;
336
363
  /**
337
- * Number of unsuccessful login attempts allowed before lockout: 0 = no limit.
364
+ * Number of unsuccessful login attempts allowed before lockout: 0 = no limit. Type `"number"`
338
365
  */
339
366
  passwordMaxLockoutAttempts?: pulumi.Input<number>;
340
367
  /**
341
- * Minimum time interval in minutes between password changes: 0 = no limit.
368
+ * Minimum time interval in minutes between password changes: 0 = no limit. Type `"number"`
342
369
  */
343
370
  passwordMinAgeMinutes?: pulumi.Input<number>;
344
371
  /**
345
- * Minimum password length.
372
+ * Minimum password length. Default is 8. Type `"number"`
346
373
  */
347
374
  passwordMinLength?: pulumi.Input<number>;
348
375
  /**
349
- * If a password must contain at least one lower case letter: 0 = no, 1 = yes. Default = 1
376
+ * Minimum number of lower case characters in a password. Type `"number"`
350
377
  */
351
378
  passwordMinLowercase?: pulumi.Input<number>;
352
379
  /**
353
- * If a password must contain at least one number: 0 = no, 1 = yes. Default = 1
380
+ * Minimum number of numbers in a password. Type `"number"`
354
381
  */
355
382
  passwordMinNumber?: pulumi.Input<number>;
356
383
  /**
357
- * If a password must contain at least one symbol (!@#$%^&*): 0 = no, 1 = yes. Default = 1
384
+ * Minimum number of symbols in a password. Type `"number"`
358
385
  */
359
386
  passwordMinSymbol?: pulumi.Input<number>;
360
387
  /**
361
- * If a password must contain at least one upper case letter: 0 = no, 1 = yes. Default = 1
388
+ * Minimum number of upper case characters in a password. Type `"number"`
362
389
  */
363
390
  passwordMinUppercase?: pulumi.Input<number>;
364
391
  /**
365
- * If a user should be informed when their account is locked.
392
+ * If a user should be informed when their account is locked. Type `"bool"`
366
393
  */
367
394
  passwordShowLockoutFailures?: pulumi.Input<boolean>;
368
395
  /**
369
- * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
396
+ * Priority of the policy. Type `"number"`
370
397
  */
371
398
  priority?: pulumi.Input<number>;
372
399
  /**
373
- * Min length of the password recovery question answer.
400
+ * Min length of the password recovery question answer. Type `"number"`
374
401
  */
375
402
  questionMinLength?: pulumi.Input<number>;
376
403
  /**
377
- * Enable or disable security question password recovery: ACTIVE or INACTIVE.
404
+ * Enable or disable security question password recovery: ACTIVE or INACTIVE. Type `"string"`
378
405
  */
379
406
  questionRecovery?: pulumi.Input<string>;
380
407
  /**
381
- * Lifetime in minutes of the recovery email token.
408
+ * Lifetime in minutes of the recovery email token. Type `"number"`
382
409
  */
383
410
  recoveryEmailToken?: pulumi.Input<number>;
384
411
  /**
385
- * When an Active Directory user is locked out of Okta, the Okta unlock operation should also attempt to unlock the user's Windows account.
412
+ * When an Active Directory user is locked out of Okta, the Okta unlock operation should also attempt to unlock the user's Windows account. Type `"bool"`
386
413
  */
387
414
  skipUnlock?: pulumi.Input<boolean>;
388
415
  /**
389
- * Enable or disable SMS password recovery: ACTIVE or INACTIVE.
416
+ * Enable or disable SMS password recovery: ACTIVE or INACTIVE. Type `"string"`
390
417
  */
391
418
  smsRecovery?: pulumi.Input<string>;
392
419
  /**
393
- * Policy Status: ACTIVE or INACTIVE.
420
+ * Policy Status: `"ACTIVE"` or `"INACTIVE"`. Type `"string"`
394
421
  */
395
422
  status?: pulumi.Input<string>;
396
423
  }
package/policy/password.js CHANGED
@@ -5,6 +5,33 @@ Object.defineProperty(exports, "__esModule", { value: true });
5
5
  exports.Password = void 0;
6
6
  const pulumi = require("@pulumi/pulumi");
7
7
  const utilities = require("../utilities");
8
+ /**
9
+ * Creates a Password Policy.
10
+ *
11
+ * This resource allows you to create and configure a Password Policy.
12
+ *
13
+ * ## Example Usage
14
+ *
15
+ * ```typescript
16
+ * import * as pulumi from "@pulumi/pulumi";
17
+ * import * as okta from "@pulumi/okta";
18
+ *
19
+ * const example = new okta.policy.Password("example", {
20
+ * description: "Example",
21
+ * groupsIncludeds: [data.okta_group.everyone.id],
22
+ * passwordHistoryCount: 4,
23
+ * status: "ACTIVE",
24
+ * });
25
+ * ```
26
+ *
27
+ * ## Import
28
+ *
29
+ * A Password Policy can be imported via the Okta ID.
30
+ *
31
+ * ```sh
32
+ * $ pulumi import okta:policy/password:Password example &#60;policy id&#62;
33
+ * ```
34
+ */
8
35
  class Password extends pulumi.CustomResource {
9
36
  /**
10
37
  * Get an existing Password resource's state with the given name, ID, and optional extra
package/policy/password.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"password.js","sourceRoot":"","sources":["../../policy/password.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqB,EAAE,IAAmC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;IAmID,YAAY,IAAY,EAAE,WAA0C,EAAE,IAAmC;QACrG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwC,CAAC;YACvD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,qCAAqC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtH,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAuC,CAAC;YACrD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,qCAAqC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpH,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;;AAnOL,4BAoOC;AAtNG,gBAAgB;AACO,qBAAY,GAAG,+BAA+B,CAAC"}
1
+ {"version":3,"file":"password.js","sourceRoot":"","sources":["../../policy/password.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqB,EAAE,IAAmC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;IAmID,YAAY,IAAY,EAAE,WAA0C,EAAE,IAAmC;QACrG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwC,CAAC;YACvD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,qCAAqC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtH,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAuC,CAAC;YACrD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,qCAAqC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpH,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;;AAnOL,4BAoOC;AAtNG,gBAAgB;AACO,qBAAY,GAAG,+BAA+B,CAAC"}