@pulumi/okta 4.9.0-alpha.1718431198 → 4.9.0-alpha.1718755579

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (405) hide show
  1. package/adminRoleCustom.d.ts +105 -107
  2. package/adminRoleCustom.js +3 -5
  3. package/adminRoleCustom.js.map +1 -1
  4. package/adminRoleCustomAssignments.d.ts +12 -18
  5. package/adminRoleCustomAssignments.js +3 -6
  6. package/adminRoleCustomAssignments.js.map +1 -1
  7. package/adminRoleTargets.d.ts +14 -16
  8. package/adminRoleTargets.js +0 -2
  9. package/adminRoleTargets.js.map +1 -1
  10. package/app/accessPolicyAssignment.d.ts +23 -2
  11. package/app/accessPolicyAssignment.js +23 -2
  12. package/app/accessPolicyAssignment.js.map +1 -1
  13. package/app/autoLogin.d.ts +63 -97
  14. package/app/autoLogin.js +3 -37
  15. package/app/autoLogin.js.map +1 -1
  16. package/app/basicAuth.d.ts +30 -33
  17. package/app/basicAuth.js +4 -7
  18. package/app/basicAuth.js.map +1 -1
  19. package/app/bookmark.d.ts +30 -33
  20. package/app/bookmark.js +3 -6
  21. package/app/bookmark.js.map +1 -1
  22. package/app/getApp.d.ts +58 -25
  23. package/app/getApp.js +2 -2
  24. package/app/getApp.js.map +1 -1
  25. package/app/getMetadataSaml.d.ts +11 -5
  26. package/app/getMetadataSaml.js +2 -2
  27. package/app/getMetadataSaml.js.map +1 -1
  28. package/app/getOauth.d.ts +62 -34
  29. package/app/getOauth.js +2 -2
  30. package/app/getOauth.js.map +1 -1
  31. package/app/getSaml.d.ts +75 -56
  32. package/app/getSaml.js +2 -2
  33. package/app/getSaml.js.map +1 -1
  34. package/app/groupAssignment.d.ts +23 -9
  35. package/app/groupAssignment.js +17 -3
  36. package/app/groupAssignment.js.map +1 -1
  37. package/app/oauth.d.ts +135 -273
  38. package/app/oauth.js +6 -60
  39. package/app/oauth.js.map +1 -1
  40. package/app/oauthPostLogoutRedirectUri.d.ts +4 -6
  41. package/app/oauthPostLogoutRedirectUri.js +1 -3
  42. package/app/oauthPostLogoutRedirectUri.js.map +1 -1
  43. package/app/oauthRedirectUri.d.ts +4 -6
  44. package/app/oauthRedirectUri.js +1 -3
  45. package/app/oauthRedirectUri.js.map +1 -1
  46. package/app/oauthRoleAssignment.d.ts +4 -29
  47. package/app/oauthRoleAssignment.js +4 -29
  48. package/app/oauthRoleAssignment.js.map +1 -1
  49. package/app/saml.d.ts +161 -289
  50. package/app/saml.js +6 -152
  51. package/app/saml.js.map +1 -1
  52. package/app/securePasswordStore.d.ts +79 -80
  53. package/app/securePasswordStore.js +6 -7
  54. package/app/securePasswordStore.js.map +1 -1
  55. package/app/swa.d.ts +70 -71
  56. package/app/swa.js +4 -5
  57. package/app/swa.js.map +1 -1
  58. package/app/threeField.d.ts +74 -76
  59. package/app/threeField.js +5 -7
  60. package/app/threeField.js.map +1 -1
  61. package/app/user.d.ts +12 -17
  62. package/app/user.js +0 -2
  63. package/app/user.js.map +1 -1
  64. package/appGroupAssignments.d.ts +6 -8
  65. package/appGroupAssignments.js +3 -5
  66. package/appGroupAssignments.js.map +1 -1
  67. package/appOauthApiScope.d.ts +5 -7
  68. package/appOauthApiScope.js +2 -4
  69. package/appOauthApiScope.js.map +1 -1
  70. package/appSamlAppSettings.d.ts +6 -7
  71. package/appSamlAppSettings.js +3 -4
  72. package/appSamlAppSettings.js.map +1 -1
  73. package/appSharedCredentials.d.ts +61 -63
  74. package/appSharedCredentials.js +4 -6
  75. package/appSharedCredentials.js.map +1 -1
  76. package/appSignonPolicy.d.ts +3 -39
  77. package/appSignonPolicy.js +3 -39
  78. package/appSignonPolicy.js.map +1 -1
  79. package/appSignonPolicyRule.d.ts +69 -361
  80. package/appSignonPolicyRule.js +1 -278
  81. package/appSignonPolicyRule.js.map +1 -1
  82. package/appUserBaseSchemaProperty.d.ts +25 -29
  83. package/appUserBaseSchemaProperty.js +1 -5
  84. package/appUserBaseSchemaProperty.js.map +1 -1
  85. package/appUserSchemaProperty.d.ts +51 -41
  86. package/appUserSchemaProperty.js +0 -2
  87. package/appUserSchemaProperty.js.map +1 -1
  88. package/auth/getServer.d.ts +11 -11
  89. package/auth/getServer.js +2 -2
  90. package/auth/getServerPolicy.d.ts +15 -9
  91. package/auth/getServerPolicy.js +2 -2
  92. package/auth/getServerPolicy.js.map +1 -1
  93. package/auth/getServerScopes.d.ts +8 -5
  94. package/auth/getServerScopes.js +2 -2
  95. package/auth/getServerScopes.js.map +1 -1
  96. package/auth/server.d.ts +15 -19
  97. package/auth/server.js +1 -5
  98. package/auth/server.js.map +1 -1
  99. package/auth/serverClaim.d.ts +13 -17
  100. package/auth/serverClaim.js +1 -5
  101. package/auth/serverClaim.js.map +1 -1
  102. package/auth/serverPolicy.d.ts +10 -14
  103. package/auth/serverPolicy.js +1 -5
  104. package/auth/serverPolicy.js.map +1 -1
  105. package/auth/serverPolicyClaim.d.ts +50 -66
  106. package/auth/serverPolicyClaim.js +0 -25
  107. package/auth/serverPolicyClaim.js.map +1 -1
  108. package/auth/serverPolicyRule.d.ts +32 -43
  109. package/auth/serverPolicyRule.js +0 -2
  110. package/auth/serverPolicyRule.js.map +1 -1
  111. package/auth/serverScope.d.ts +16 -20
  112. package/auth/serverScope.js +1 -5
  113. package/auth/serverScope.js.map +1 -1
  114. package/authServerClaimDefault.d.ts +10 -25
  115. package/authServerClaimDefault.js +0 -9
  116. package/authServerClaimDefault.js.map +1 -1
  117. package/authServerDefault.d.ts +15 -19
  118. package/authServerDefault.js +1 -5
  119. package/authServerDefault.js.map +1 -1
  120. package/authenticator.d.ts +53 -61
  121. package/authenticator.js +11 -11
  122. package/authenticator.js.map +1 -1
  123. package/behaviour.d.ts +21 -41
  124. package/behaviour.js +0 -2
  125. package/behaviour.js.map +1 -1
  126. package/brand.d.ts +23 -22
  127. package/brand.js +8 -4
  128. package/brand.js.map +1 -1
  129. package/captcha.d.ts +15 -17
  130. package/captcha.js +3 -5
  131. package/captcha.js.map +1 -1
  132. package/captchaOrgWideSettings.d.ts +8 -43
  133. package/captchaOrgWideSettings.js +2 -37
  134. package/captchaOrgWideSettings.js.map +1 -1
  135. package/domain.d.ts +13 -21
  136. package/domain.js +0 -2
  137. package/domain.js.map +1 -1
  138. package/domainCertificate.d.ts +17 -24
  139. package/domainCertificate.js +2 -9
  140. package/domainCertificate.js.map +1 -1
  141. package/domainVerification.d.ts +4 -10
  142. package/domainVerification.js +1 -7
  143. package/domainVerification.js.map +1 -1
  144. package/emailCustomization.d.ts +38 -222
  145. package/emailCustomization.js +29 -33
  146. package/emailCustomization.js.map +1 -1
  147. package/emailDomain.d.ts +4 -8
  148. package/emailDomain.js +0 -4
  149. package/emailDomain.js.map +1 -1
  150. package/emailDomainVerification.d.ts +3 -7
  151. package/emailDomainVerification.js +0 -4
  152. package/emailDomainVerification.js.map +1 -1
  153. package/emailSender.d.ts +15 -17
  154. package/emailSender.js +2 -4
  155. package/emailSender.js.map +1 -1
  156. package/emailSenderVerification.d.ts +5 -9
  157. package/emailSenderVerification.js +2 -6
  158. package/emailSenderVerification.js.map +1 -1
  159. package/eventHook.d.ts +16 -11
  160. package/eventHook.js +1 -5
  161. package/eventHook.js.map +1 -1
  162. package/eventHookVerification.d.ts +4 -10
  163. package/eventHookVerification.js +1 -7
  164. package/eventHookVerification.js.map +1 -1
  165. package/factor/factor.d.ts +4 -9
  166. package/factor/factor.js +1 -3
  167. package/factor/factor.js.map +1 -1
  168. package/factorTotp.d.ts +12 -21
  169. package/factorTotp.js +3 -3
  170. package/factorTotp.js.map +1 -1
  171. package/getAppGroupAssignments.d.ts +6 -6
  172. package/getAppGroupAssignments.js +2 -2
  173. package/getAppSignonPolicy.d.ts +16 -6
  174. package/getAppSignonPolicy.js +8 -4
  175. package/getAppSignonPolicy.js.map +1 -1
  176. package/getAppUserAssignments.d.ts +6 -6
  177. package/getAppUserAssignments.js +2 -2
  178. package/getAuthServerClaim.d.ts +15 -12
  179. package/getAuthServerClaim.js +2 -2
  180. package/getAuthServerClaim.js.map +1 -1
  181. package/getAuthServerClaims.d.ts +8 -5
  182. package/getAuthServerClaims.js +2 -2
  183. package/getAuthServerClaims.js.map +1 -1
  184. package/getAuthenticator.d.ts +24 -26
  185. package/getAuthenticator.js +14 -22
  186. package/getAuthenticator.js.map +1 -1
  187. package/getBehaviour.d.ts +6 -8
  188. package/getBehaviour.js +2 -2
  189. package/getBehaviour.js.map +1 -1
  190. package/getBehaviours.d.ts +7 -7
  191. package/getBehaviours.js +2 -2
  192. package/getBrand.d.ts +9 -6
  193. package/getBrand.js +2 -2
  194. package/getBrand.js.map +1 -1
  195. package/getBrands.d.ts +2 -2
  196. package/getBrands.js +2 -2
  197. package/getDomain.d.ts +11 -14
  198. package/getDomain.js +2 -8
  199. package/getDomain.js.map +1 -1
  200. package/getEmailCustomization.d.ts +14 -9
  201. package/getEmailCustomization.js +2 -6
  202. package/getEmailCustomization.js.map +1 -1
  203. package/getEmailCustomizations.d.ts +11 -9
  204. package/getEmailCustomizations.js +2 -6
  205. package/getEmailCustomizations.js.map +1 -1
  206. package/getGroups.d.ts +11 -25
  207. package/getGroups.js +2 -2
  208. package/getGroups.js.map +1 -1
  209. package/getLogStream.d.ts +8 -39
  210. package/getLogStream.js +2 -24
  211. package/getLogStream.js.map +1 -1
  212. package/getNetworkZone.d.ts +12 -12
  213. package/getNetworkZone.js +2 -2
  214. package/getOrgMetadata.d.ts +0 -22
  215. package/getOrgMetadata.js +0 -22
  216. package/getOrgMetadata.js.map +1 -1
  217. package/getRoleSubscription.d.ts +13 -35
  218. package/getRoleSubscription.js +2 -2
  219. package/getRoleSubscription.js.map +1 -1
  220. package/getTemplate.d.ts +10 -8
  221. package/getTemplate.js +2 -6
  222. package/getTemplate.js.map +1 -1
  223. package/getTemplates.d.ts +6 -7
  224. package/getTemplates.js +2 -6
  225. package/getTemplates.js.map +1 -1
  226. package/getTheme.d.ts +14 -12
  227. package/getTheme.js +2 -6
  228. package/getTheme.js.map +1 -1
  229. package/getThemes.d.ts +6 -7
  230. package/getThemes.js +2 -6
  231. package/getThemes.js.map +1 -1
  232. package/getTrustedOrigins.d.ts +7 -4
  233. package/getTrustedOrigins.js +2 -2
  234. package/getTrustedOrigins.js.map +1 -1
  235. package/getUserSecurityQuestions.d.ts +4 -8
  236. package/getUserSecurityQuestions.js +0 -4
  237. package/getUserSecurityQuestions.js.map +1 -1
  238. package/group/getEveryoneGroup.d.ts +10 -5
  239. package/group/getEveryoneGroup.js +4 -2
  240. package/group/getEveryoneGroup.js.map +1 -1
  241. package/group/getGroup.d.ts +17 -26
  242. package/group/getGroup.js +2 -2
  243. package/group/getGroup.js.map +1 -1
  244. package/group/getRule.d.ts +9 -9
  245. package/group/getRule.js +2 -2
  246. package/group/group.d.ts +4 -36
  247. package/group/group.js +1 -33
  248. package/group/group.js.map +1 -1
  249. package/group/role.d.ts +37 -81
  250. package/group/role.js +1 -6
  251. package/group/role.js.map +1 -1
  252. package/group/rule.d.ts +12 -20
  253. package/group/rule.js +0 -2
  254. package/group/rule.js.map +1 -1
  255. package/groupMemberships.d.ts +8 -10
  256. package/groupMemberships.js +2 -4
  257. package/groupMemberships.js.map +1 -1
  258. package/groupSchemaProperty.d.ts +57 -59
  259. package/groupSchemaProperty.js +0 -2
  260. package/groupSchemaProperty.js.map +1 -1
  261. package/idp/getMetadataSaml.d.ts +9 -6
  262. package/idp/getMetadataSaml.js +2 -2
  263. package/idp/getMetadataSaml.js.map +1 -1
  264. package/idp/getOidc.d.ts +9 -9
  265. package/idp/getOidc.js +2 -2
  266. package/idp/getSaml.d.ts +16 -13
  267. package/idp/getSaml.js +2 -2
  268. package/idp/getSaml.js.map +1 -1
  269. package/idp/getSocial.d.ts +8 -2
  270. package/idp/getSocial.js +2 -2
  271. package/idp/getSocial.js.map +1 -1
  272. package/idp/oidc.d.ts +70 -62
  273. package/idp/oidc.js +3 -5
  274. package/idp/oidc.js.map +1 -1
  275. package/idp/saml.d.ts +64 -86
  276. package/idp/saml.js +1 -5
  277. package/idp/saml.js.map +1 -1
  278. package/idp/samlKey.d.ts +3 -5
  279. package/idp/samlKey.js +0 -2
  280. package/idp/samlKey.js.map +1 -1
  281. package/idp/social.d.ts +99 -69
  282. package/idp/social.js +11 -5
  283. package/idp/social.js.map +1 -1
  284. package/inline/hook.d.ts +4 -26
  285. package/inline/hook.js +1 -5
  286. package/inline/hook.js.map +1 -1
  287. package/linkDefinition.d.ts +2 -3
  288. package/linkDefinition.js +2 -3
  289. package/linkDefinition.js.map +1 -1
  290. package/linkValue.d.ts +7 -9
  291. package/linkValue.js +1 -3
  292. package/linkValue.js.map +1 -1
  293. package/logStream.d.ts +32 -27
  294. package/logStream.js +23 -9
  295. package/logStream.js.map +1 -1
  296. package/network/zone.d.ts +25 -66
  297. package/network/zone.js +1 -39
  298. package/network/zone.js.map +1 -1
  299. package/orgConfiguration.d.ts +4 -9
  300. package/orgConfiguration.js +1 -3
  301. package/orgConfiguration.js.map +1 -1
  302. package/orgSupport.d.ts +4 -7
  303. package/orgSupport.js +1 -4
  304. package/orgSupport.js.map +1 -1
  305. package/package.json +3 -3
  306. package/policy/getDefaultPolicy.d.ts +9 -7
  307. package/policy/getDefaultPolicy.js +6 -2
  308. package/policy/getDefaultPolicy.js.map +1 -1
  309. package/policy/getPolicy.d.ts +11 -26
  310. package/policy/getPolicy.js +2 -2
  311. package/policy/getPolicy.js.map +1 -1
  312. package/policy/mfa.d.ts +18 -220
  313. package/policy/mfa.js +0 -10
  314. package/policy/mfa.js.map +1 -1
  315. package/policy/password.d.ts +91 -95
  316. package/policy/password.js +1 -5
  317. package/policy/password.js.map +1 -1
  318. package/policy/ruleIdpDiscovery.d.ts +111 -93
  319. package/policy/ruleIdpDiscovery.js +48 -57
  320. package/policy/ruleIdpDiscovery.js.map +1 -1
  321. package/policy/ruleMfa.d.ts +40 -30
  322. package/policy/ruleMfa.js +1 -3
  323. package/policy/ruleMfa.js.map +1 -1
  324. package/policy/rulePassword.d.ts +34 -38
  325. package/policy/rulePassword.js +1 -5
  326. package/policy/rulePassword.js.map +1 -1
  327. package/policy/ruleSignon.d.ts +94 -85
  328. package/policy/ruleSignon.js +1 -4
  329. package/policy/ruleSignon.js.map +1 -1
  330. package/policy/signon.d.ts +16 -20
  331. package/policy/signon.js +1 -5
  332. package/policy/signon.js.map +1 -1
  333. package/policyMfaDefault.d.ts +15 -214
  334. package/policyMfaDefault.js +2 -9
  335. package/policyMfaDefault.js.map +1 -1
  336. package/policyPasswordDefault.d.ts +85 -101
  337. package/policyPasswordDefault.js +1 -5
  338. package/policyPasswordDefault.js.map +1 -1
  339. package/policyProfileEnrollment.d.ts +8 -9
  340. package/policyProfileEnrollment.js +2 -3
  341. package/policyProfileEnrollment.js.map +1 -1
  342. package/policyProfileEnrollmentApps.d.ts +8 -11
  343. package/policyProfileEnrollmentApps.js +3 -6
  344. package/policyProfileEnrollmentApps.js.map +1 -1
  345. package/policyRuleProfileEnrollment.d.ts +42 -31
  346. package/policyRuleProfileEnrollment.js +2 -3
  347. package/policyRuleProfileEnrollment.js.map +1 -1
  348. package/profile/mapping.d.ts +19 -34
  349. package/profile/mapping.js +4 -4
  350. package/profile/mapping.js.map +1 -1
  351. package/rateLimiting.d.ts +8 -17
  352. package/rateLimiting.js +2 -5
  353. package/rateLimiting.js.map +1 -1
  354. package/resourceSet.d.ts +18 -26
  355. package/resourceSet.js +9 -14
  356. package/resourceSet.js.map +1 -1
  357. package/roleSubscription.d.ts +35 -86
  358. package/roleSubscription.js +2 -2
  359. package/roleSubscription.js.map +1 -1
  360. package/securityNotificationEmails.d.ts +4 -7
  361. package/securityNotificationEmails.js +4 -7
  362. package/securityNotificationEmails.js.map +1 -1
  363. package/templateSms.d.ts +4 -8
  364. package/templateSms.js +1 -5
  365. package/templateSms.js.map +1 -1
  366. package/theme.d.ts +46 -46
  367. package/theme.js +2 -2
  368. package/threatInsightSettings.d.ts +7 -27
  369. package/threatInsightSettings.js +1 -3
  370. package/threatInsightSettings.js.map +1 -1
  371. package/trustedorigin/origin.d.ts +13 -17
  372. package/trustedorigin/origin.js +1 -5
  373. package/trustedorigin/origin.js.map +1 -1
  374. package/types/input.d.ts +65 -162
  375. package/types/output.d.ts +75 -275
  376. package/user/getUser.d.ts +32 -104
  377. package/user/getUser.js +2 -2
  378. package/user/getUser.js.map +1 -1
  379. package/user/getUserProfileMappingSource.d.ts +9 -7
  380. package/user/getUserProfileMappingSource.js +6 -4
  381. package/user/getUserProfileMappingSource.js.map +1 -1
  382. package/user/getUserType.d.ts +7 -7
  383. package/user/getUserType.js +2 -2
  384. package/user/getUsers.d.ts +95 -37
  385. package/user/getUsers.js +64 -24
  386. package/user/getUsers.js.map +1 -1
  387. package/user/user.d.ts +160 -209
  388. package/user/user.js +43 -65
  389. package/user/user.js.map +1 -1
  390. package/user/userType.d.ts +1 -5
  391. package/user/userType.js +1 -5
  392. package/user/userType.js.map +1 -1
  393. package/userAdminRoles.d.ts +10 -17
  394. package/userAdminRoles.js +1 -5
  395. package/userAdminRoles.js.map +1 -1
  396. package/userBaseSchemaProperty.d.ts +26 -34
  397. package/userBaseSchemaProperty.js +2 -10
  398. package/userBaseSchemaProperty.js.map +1 -1
  399. package/userFactorQuestion.d.ts +1 -5
  400. package/userFactorQuestion.js +1 -5
  401. package/userFactorQuestion.js.map +1 -1
  402. package/userGroupMemberships.d.ts +3 -3
  403. package/userSchemaProperty.d.ts +57 -56
  404. package/userSchemaProperty.js +0 -8
  405. package/userSchemaProperty.js.map +1 -1
package/idp/getSocial.js CHANGED
@@ -6,7 +6,7 @@ exports.getSocialOutput = exports.getSocial = void 0;
6
6
  const pulumi = require("@pulumi/pulumi");
7
7
  const utilities = require("../utilities");
8
8
  /**
9
- * Use this data source to retrieve a social IdP from Okta, namely `APPLE`, `FACEBOOK`, `LINKEDIN`, `MICROSOFT`, or `GOOGLE`.
9
+ * Get a social IdP from Okta.
10
10
  *
11
11
  * ## Example Usage
12
12
  *
@@ -29,7 +29,7 @@ function getSocial(args, opts) {
29
29
  }
30
30
  exports.getSocial = getSocial;
31
31
  /**
32
- * Use this data source to retrieve a social IdP from Okta, namely `APPLE`, `FACEBOOK`, `LINKEDIN`, `MICROSOFT`, or `GOOGLE`.
32
+ * Get a social IdP from Okta.
33
33
  *
34
34
  * ## Example Usage
35
35
  *
package/idp/getSocial.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"getSocial.js","sourceRoot":"","sources":["../../idp/getSocial.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;GAaG;AACH,SAAgB,SAAS,CAAC,IAAoB,EAAE,IAA2B;IACvE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAElB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,8BAA8B,EAAE;QACzD,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AARD,8BAQC;AA2HD;;;;;;;;;;;;;GAaG;AACH,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,CAAC;AAFD,0CAEC"}
1
+ {"version":3,"file":"getSocial.js","sourceRoot":"","sources":["../../idp/getSocial.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;GAaG;AACH,SAAgB,SAAS,CAAC,IAAoB,EAAE,IAA2B;IACvE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAElB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,8BAA8B,EAAE;QACzD,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AARD,8BAQC;AAiID;;;;;;;;;;;;;GAaG;AACH,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,CAAC;AAFD,0CAEC"}
package/idp/oidc.d.ts CHANGED
@@ -1,8 +1,6 @@
1
1
  import * as pulumi from "@pulumi/pulumi";
2
2
  /**
3
- * Creates an OIDC Identity Provider.
4
- *
5
- * This resource allows you to create and configure an OIDC Identity Provider.
3
+ * Creates an OIDC Identity Provider. This resource allows you to create and configure an OIDC Identity Provider.
6
4
  *
7
5
  * ## Example Usage
8
6
  *
@@ -30,8 +28,6 @@ import * as pulumi from "@pulumi/pulumi";
30
28
  *
31
29
  * ## Import
32
30
  *
33
- * An OIDC IdP can be imported via the Okta ID.
34
- *
35
31
  * ```sh
36
32
  * $ pulumi import okta:idp/oidc:Oidc example <idp id>
37
33
  * ```
@@ -53,7 +49,7 @@ export declare class Oidc extends pulumi.CustomResource {
53
49
  */
54
50
  static isInstance(obj: any): obj is Oidc;
55
51
  /**
56
- * Specifies the account linking action for an IdP user.
52
+ * Specifies the account linking action for an IdP user. Default: `AUTO`
57
53
  */
58
54
  readonly accountLinkAction: pulumi.Output<string | undefined>;
59
55
  /**
@@ -61,7 +57,7 @@ export declare class Oidc extends pulumi.CustomResource {
61
57
  */
62
58
  readonly accountLinkGroupIncludes: pulumi.Output<string[] | undefined>;
63
59
  /**
64
- * The method of making an authorization request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
60
+ * The method of making an authorization request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`.
65
61
  */
66
62
  readonly authorizationBinding: pulumi.Output<string>;
67
63
  /**
@@ -77,15 +73,15 @@ export declare class Oidc extends pulumi.CustomResource {
77
73
  */
78
74
  readonly clientSecret: pulumi.Output<string>;
79
75
  /**
80
- * Action for a previously deprovisioned IdP user during authentication. Can be `"NONE"` or `"REACTIVATE"`.
76
+ * Action for a previously deprovisioned IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
81
77
  */
82
78
  readonly deprovisionedAction: pulumi.Output<string | undefined>;
83
79
  /**
84
- * Provisioning action for IdP user's group memberships. It can be `"NONE"`, `"SYNC"`, `"APPEND"`, or `"ASSIGN"`.
80
+ * Provisioning action for IdP user's group memberships. It can be `NONE`, `SYNC`, `APPEND`, or `ASSIGN`. Default: `NONE`
85
81
  */
86
82
  readonly groupsAction: pulumi.Output<string | undefined>;
87
83
  /**
88
- * List of Okta Group IDs to add an IdP user as a member with the `"ASSIGN"` `groupsAction`.
84
+ * List of Okta Group IDs to add an IdP user as a member with the `ASSIGN` `groupsAction`.
89
85
  */
90
86
  readonly groupsAssignments: pulumi.Output<string[] | undefined>;
91
87
  /**
@@ -93,11 +89,11 @@ export declare class Oidc extends pulumi.CustomResource {
93
89
  */
94
90
  readonly groupsAttribute: pulumi.Output<string | undefined>;
95
91
  /**
96
- * Whitelist of Okta Group identifiers that are allowed for the `"APPEND"` or `"SYNC"` `groupsAction`.
92
+ * Whitelist of Okta Group identifiers that are allowed for the `APPEND` or `SYNC` `groupsAction`.
97
93
  */
98
94
  readonly groupsFilters: pulumi.Output<string[] | undefined>;
99
95
  /**
100
- * Indicates whether Okta uses the original Okta org domain URL, a custom domain URL, or dynamic. It can be `"ORG_URL"`, `"CUSTOM_URL"`, or `"DYNAMIC"`.
96
+ * Indicates whether Okta uses the original Okta org domain URL, a custom domain URL, or dynamic. It can be `ORG_URL`, `CUSTOM_URL`, or `DYNAMIC`. Default: `ORG_URL`
101
97
  */
102
98
  readonly issuerMode: pulumi.Output<string | undefined>;
103
99
  /**
@@ -105,7 +101,7 @@ export declare class Oidc extends pulumi.CustomResource {
105
101
  */
106
102
  readonly issuerUrl: pulumi.Output<string>;
107
103
  /**
108
- * The method of making a request for the OIDC JWKS. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
104
+ * The method of making a request for the OIDC JWKS. It can be set to `HTTP-POST` or `HTTP-REDIRECT`
109
105
  */
110
106
  readonly jwksBinding: pulumi.Output<string>;
111
107
  /**
@@ -117,27 +113,31 @@ export declare class Oidc extends pulumi.CustomResource {
117
113
  */
118
114
  readonly maxClockSkew: pulumi.Output<number | undefined>;
119
115
  /**
120
- * The Application's display name.
116
+ * Name of the IdP
121
117
  */
122
118
  readonly name: pulumi.Output<string>;
119
+ /**
120
+ * Require Proof Key for Code Exchange (PKCE) for additional verification key rotation mode. See: https://developer.okta.com/docs/reference/api/idps/#oauth-2-0-and-openid-connect-client-object
121
+ */
122
+ readonly pkceRequired: pulumi.Output<boolean | undefined>;
123
123
  /**
124
124
  * Determines if the IdP should act as a source of truth for user profile attributes.
125
125
  */
126
126
  readonly profileMaster: pulumi.Output<boolean | undefined>;
127
127
  /**
128
- * The type of protocol to use. It can be `"OIDC"` or `"OAUTH2"`.
128
+ * The type of protocol to use. It can be `OIDC` or `OAUTH2`. Default: `OIDC`
129
129
  */
130
130
  readonly protocolType: pulumi.Output<string | undefined>;
131
131
  /**
132
- * Provisioning action for an IdP user during authentication.
132
+ * Provisioning action for an IdP user during authentication. Default: `AUTO`
133
133
  */
134
134
  readonly provisioningAction: pulumi.Output<string | undefined>;
135
135
  /**
136
- * The HMAC Signature Algorithm used when signing an authorization request. Defaults to `"HS256"`. It can be `"HS256"`, `"HS384"`, `"HS512"`, `"SHA-256"`. `"RS256"`, `"RS384"`, or `"RS512"`. NOTE: `"SHA-256"` an undocumented legacy value and not continue to be valid. See API docs https://developer.okta.com/docs/reference/api/idps/#oidc-request-signature-algorithm-object
136
+ * The HMAC Signature Algorithm used when signing an authorization request. Defaults to `HS256`. It can be `HS256`, `HS384`, `HS512`, `SHA-256`. `RS256`, `RS384`, or `RS512`. NOTE: `SHA-256` an undocumented legacy value and not continue to be valid. See API docs https://developer.okta.com/docs/reference/api/idps/#oidc-request-signature-algorithm-object
137
137
  */
138
138
  readonly requestSignatureAlgorithm: pulumi.Output<string | undefined>;
139
139
  /**
140
- * Specifies whether to digitally sign an AuthnRequest messages to the IdP. Defaults to `"REQUEST"`. It can be `"REQUEST"` or `"NONE"`.
140
+ * Specifies whether to digitally sign an AuthnRequest messages to the IdP. Defaults to `REQUEST`. It can be `REQUEST` or `NONE`.
141
141
  */
142
142
  readonly requestSignatureScope: pulumi.Output<string | undefined>;
143
143
  /**
@@ -145,23 +145,23 @@ export declare class Oidc extends pulumi.CustomResource {
145
145
  */
146
146
  readonly scopes: pulumi.Output<string[]>;
147
147
  /**
148
- * Status of the IdP.
148
+ * Default to `ACTIVE`
149
149
  */
150
150
  readonly status: pulumi.Output<string | undefined>;
151
151
  /**
152
- * Okta user profile attribute for matching transformed IdP username. Only for matchType `"CUSTOM_ATTRIBUTE"`.
152
+ * Okta user profile attribute for matching transformed IdP username. Only for matchType `CUSTOM_ATTRIBUTE`.
153
153
  */
154
154
  readonly subjectMatchAttribute: pulumi.Output<string | undefined>;
155
155
  /**
156
- * Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `"USERNAME"`. It can be set to `"USERNAME"`, `"EMAIL"`, `"USERNAME_OR_EMAIL"` or `"CUSTOM_ATTRIBUTE"`.
156
+ * Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `USERNAME`. It can be set to `USERNAME`, `EMAIL`, `USERNAME_OR_EMAIL` or `CUSTOM_ATTRIBUTE`.
157
157
  */
158
158
  readonly subjectMatchType: pulumi.Output<string | undefined>;
159
159
  /**
160
- * Action for a previously suspended IdP user during authentication. Can be set to `"NONE"` or `"UNSUSPEND"`
160
+ * Action for a previously suspended IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
161
161
  */
162
162
  readonly suspendedAction: pulumi.Output<string | undefined>;
163
163
  /**
164
- * The method of making a token request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
164
+ * The method of making a token request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`.
165
165
  */
166
166
  readonly tokenBinding: pulumi.Output<string>;
167
167
  /**
@@ -182,7 +182,7 @@ export declare class Oidc extends pulumi.CustomResource {
182
182
  */
183
183
  readonly userTypeId: pulumi.Output<string>;
184
184
  /**
185
- * Okta EL Expression to generate or transform a unique username for the IdP user.
185
+ * Okta EL Expression to generate or transform a unique username for the IdP user. Default: `idpuser.email`
186
186
  */
187
187
  readonly usernameTemplate: pulumi.Output<string | undefined>;
188
188
  /**
@@ -199,7 +199,7 @@ export declare class Oidc extends pulumi.CustomResource {
199
199
  */
200
200
  export interface OidcState {
201
201
  /**
202
- * Specifies the account linking action for an IdP user.
202
+ * Specifies the account linking action for an IdP user. Default: `AUTO`
203
203
  */
204
204
  accountLinkAction?: pulumi.Input<string>;
205
205
  /**
@@ -207,7 +207,7 @@ export interface OidcState {
207
207
  */
208
208
  accountLinkGroupIncludes?: pulumi.Input<pulumi.Input<string>[]>;
209
209
  /**
210
- * The method of making an authorization request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
210
+ * The method of making an authorization request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`.
211
211
  */
212
212
  authorizationBinding?: pulumi.Input<string>;
213
213
  /**
@@ -223,15 +223,15 @@ export interface OidcState {
223
223
  */
224
224
  clientSecret?: pulumi.Input<string>;
225
225
  /**
226
- * Action for a previously deprovisioned IdP user during authentication. Can be `"NONE"` or `"REACTIVATE"`.
226
+ * Action for a previously deprovisioned IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
227
227
  */
228
228
  deprovisionedAction?: pulumi.Input<string>;
229
229
  /**
230
- * Provisioning action for IdP user's group memberships. It can be `"NONE"`, `"SYNC"`, `"APPEND"`, or `"ASSIGN"`.
230
+ * Provisioning action for IdP user's group memberships. It can be `NONE`, `SYNC`, `APPEND`, or `ASSIGN`. Default: `NONE`
231
231
  */
232
232
  groupsAction?: pulumi.Input<string>;
233
233
  /**
234
- * List of Okta Group IDs to add an IdP user as a member with the `"ASSIGN"` `groupsAction`.
234
+ * List of Okta Group IDs to add an IdP user as a member with the `ASSIGN` `groupsAction`.
235
235
  */
236
236
  groupsAssignments?: pulumi.Input<pulumi.Input<string>[]>;
237
237
  /**
@@ -239,11 +239,11 @@ export interface OidcState {
239
239
  */
240
240
  groupsAttribute?: pulumi.Input<string>;
241
241
  /**
242
- * Whitelist of Okta Group identifiers that are allowed for the `"APPEND"` or `"SYNC"` `groupsAction`.
242
+ * Whitelist of Okta Group identifiers that are allowed for the `APPEND` or `SYNC` `groupsAction`.
243
243
  */
244
244
  groupsFilters?: pulumi.Input<pulumi.Input<string>[]>;
245
245
  /**
246
- * Indicates whether Okta uses the original Okta org domain URL, a custom domain URL, or dynamic. It can be `"ORG_URL"`, `"CUSTOM_URL"`, or `"DYNAMIC"`.
246
+ * Indicates whether Okta uses the original Okta org domain URL, a custom domain URL, or dynamic. It can be `ORG_URL`, `CUSTOM_URL`, or `DYNAMIC`. Default: `ORG_URL`
247
247
  */
248
248
  issuerMode?: pulumi.Input<string>;
249
249
  /**
@@ -251,7 +251,7 @@ export interface OidcState {
251
251
  */
252
252
  issuerUrl?: pulumi.Input<string>;
253
253
  /**
254
- * The method of making a request for the OIDC JWKS. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
254
+ * The method of making a request for the OIDC JWKS. It can be set to `HTTP-POST` or `HTTP-REDIRECT`
255
255
  */
256
256
  jwksBinding?: pulumi.Input<string>;
257
257
  /**
@@ -263,27 +263,31 @@ export interface OidcState {
263
263
  */
264
264
  maxClockSkew?: pulumi.Input<number>;
265
265
  /**
266
- * The Application's display name.
266
+ * Name of the IdP
267
267
  */
268
268
  name?: pulumi.Input<string>;
269
+ /**
270
+ * Require Proof Key for Code Exchange (PKCE) for additional verification key rotation mode. See: https://developer.okta.com/docs/reference/api/idps/#oauth-2-0-and-openid-connect-client-object
271
+ */
272
+ pkceRequired?: pulumi.Input<boolean>;
269
273
  /**
270
274
  * Determines if the IdP should act as a source of truth for user profile attributes.
271
275
  */
272
276
  profileMaster?: pulumi.Input<boolean>;
273
277
  /**
274
- * The type of protocol to use. It can be `"OIDC"` or `"OAUTH2"`.
278
+ * The type of protocol to use. It can be `OIDC` or `OAUTH2`. Default: `OIDC`
275
279
  */
276
280
  protocolType?: pulumi.Input<string>;
277
281
  /**
278
- * Provisioning action for an IdP user during authentication.
282
+ * Provisioning action for an IdP user during authentication. Default: `AUTO`
279
283
  */
280
284
  provisioningAction?: pulumi.Input<string>;
281
285
  /**
282
- * The HMAC Signature Algorithm used when signing an authorization request. Defaults to `"HS256"`. It can be `"HS256"`, `"HS384"`, `"HS512"`, `"SHA-256"`. `"RS256"`, `"RS384"`, or `"RS512"`. NOTE: `"SHA-256"` an undocumented legacy value and not continue to be valid. See API docs https://developer.okta.com/docs/reference/api/idps/#oidc-request-signature-algorithm-object
286
+ * The HMAC Signature Algorithm used when signing an authorization request. Defaults to `HS256`. It can be `HS256`, `HS384`, `HS512`, `SHA-256`. `RS256`, `RS384`, or `RS512`. NOTE: `SHA-256` an undocumented legacy value and not continue to be valid. See API docs https://developer.okta.com/docs/reference/api/idps/#oidc-request-signature-algorithm-object
283
287
  */
284
288
  requestSignatureAlgorithm?: pulumi.Input<string>;
285
289
  /**
286
- * Specifies whether to digitally sign an AuthnRequest messages to the IdP. Defaults to `"REQUEST"`. It can be `"REQUEST"` or `"NONE"`.
290
+ * Specifies whether to digitally sign an AuthnRequest messages to the IdP. Defaults to `REQUEST`. It can be `REQUEST` or `NONE`.
287
291
  */
288
292
  requestSignatureScope?: pulumi.Input<string>;
289
293
  /**
@@ -291,23 +295,23 @@ export interface OidcState {
291
295
  */
292
296
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
293
297
  /**
294
- * Status of the IdP.
298
+ * Default to `ACTIVE`
295
299
  */
296
300
  status?: pulumi.Input<string>;
297
301
  /**
298
- * Okta user profile attribute for matching transformed IdP username. Only for matchType `"CUSTOM_ATTRIBUTE"`.
302
+ * Okta user profile attribute for matching transformed IdP username. Only for matchType `CUSTOM_ATTRIBUTE`.
299
303
  */
300
304
  subjectMatchAttribute?: pulumi.Input<string>;
301
305
  /**
302
- * Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `"USERNAME"`. It can be set to `"USERNAME"`, `"EMAIL"`, `"USERNAME_OR_EMAIL"` or `"CUSTOM_ATTRIBUTE"`.
306
+ * Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `USERNAME`. It can be set to `USERNAME`, `EMAIL`, `USERNAME_OR_EMAIL` or `CUSTOM_ATTRIBUTE`.
303
307
  */
304
308
  subjectMatchType?: pulumi.Input<string>;
305
309
  /**
306
- * Action for a previously suspended IdP user during authentication. Can be set to `"NONE"` or `"UNSUSPEND"`
310
+ * Action for a previously suspended IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
307
311
  */
308
312
  suspendedAction?: pulumi.Input<string>;
309
313
  /**
310
- * The method of making a token request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
314
+ * The method of making a token request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`.
311
315
  */
312
316
  tokenBinding?: pulumi.Input<string>;
313
317
  /**
@@ -328,7 +332,7 @@ export interface OidcState {
328
332
  */
329
333
  userTypeId?: pulumi.Input<string>;
330
334
  /**
331
- * Okta EL Expression to generate or transform a unique username for the IdP user.
335
+ * Okta EL Expression to generate or transform a unique username for the IdP user. Default: `idpuser.email`
332
336
  */
333
337
  usernameTemplate?: pulumi.Input<string>;
334
338
  }
@@ -337,7 +341,7 @@ export interface OidcState {
337
341
  */
338
342
  export interface OidcArgs {
339
343
  /**
340
- * Specifies the account linking action for an IdP user.
344
+ * Specifies the account linking action for an IdP user. Default: `AUTO`
341
345
  */
342
346
  accountLinkAction?: pulumi.Input<string>;
343
347
  /**
@@ -345,7 +349,7 @@ export interface OidcArgs {
345
349
  */
346
350
  accountLinkGroupIncludes?: pulumi.Input<pulumi.Input<string>[]>;
347
351
  /**
348
- * The method of making an authorization request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
352
+ * The method of making an authorization request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`.
349
353
  */
350
354
  authorizationBinding: pulumi.Input<string>;
351
355
  /**
@@ -361,15 +365,15 @@ export interface OidcArgs {
361
365
  */
362
366
  clientSecret: pulumi.Input<string>;
363
367
  /**
364
- * Action for a previously deprovisioned IdP user during authentication. Can be `"NONE"` or `"REACTIVATE"`.
368
+ * Action for a previously deprovisioned IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
365
369
  */
366
370
  deprovisionedAction?: pulumi.Input<string>;
367
371
  /**
368
- * Provisioning action for IdP user's group memberships. It can be `"NONE"`, `"SYNC"`, `"APPEND"`, or `"ASSIGN"`.
372
+ * Provisioning action for IdP user's group memberships. It can be `NONE`, `SYNC`, `APPEND`, or `ASSIGN`. Default: `NONE`
369
373
  */
370
374
  groupsAction?: pulumi.Input<string>;
371
375
  /**
372
- * List of Okta Group IDs to add an IdP user as a member with the `"ASSIGN"` `groupsAction`.
376
+ * List of Okta Group IDs to add an IdP user as a member with the `ASSIGN` `groupsAction`.
373
377
  */
374
378
  groupsAssignments?: pulumi.Input<pulumi.Input<string>[]>;
375
379
  /**
@@ -377,11 +381,11 @@ export interface OidcArgs {
377
381
  */
378
382
  groupsAttribute?: pulumi.Input<string>;
379
383
  /**
380
- * Whitelist of Okta Group identifiers that are allowed for the `"APPEND"` or `"SYNC"` `groupsAction`.
384
+ * Whitelist of Okta Group identifiers that are allowed for the `APPEND` or `SYNC` `groupsAction`.
381
385
  */
382
386
  groupsFilters?: pulumi.Input<pulumi.Input<string>[]>;
383
387
  /**
384
- * Indicates whether Okta uses the original Okta org domain URL, a custom domain URL, or dynamic. It can be `"ORG_URL"`, `"CUSTOM_URL"`, or `"DYNAMIC"`.
388
+ * Indicates whether Okta uses the original Okta org domain URL, a custom domain URL, or dynamic. It can be `ORG_URL`, `CUSTOM_URL`, or `DYNAMIC`. Default: `ORG_URL`
385
389
  */
386
390
  issuerMode?: pulumi.Input<string>;
387
391
  /**
@@ -389,7 +393,7 @@ export interface OidcArgs {
389
393
  */
390
394
  issuerUrl: pulumi.Input<string>;
391
395
  /**
392
- * The method of making a request for the OIDC JWKS. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
396
+ * The method of making a request for the OIDC JWKS. It can be set to `HTTP-POST` or `HTTP-REDIRECT`
393
397
  */
394
398
  jwksBinding: pulumi.Input<string>;
395
399
  /**
@@ -401,27 +405,31 @@ export interface OidcArgs {
401
405
  */
402
406
  maxClockSkew?: pulumi.Input<number>;
403
407
  /**
404
- * The Application's display name.
408
+ * Name of the IdP
405
409
  */
406
410
  name?: pulumi.Input<string>;
411
+ /**
412
+ * Require Proof Key for Code Exchange (PKCE) for additional verification key rotation mode. See: https://developer.okta.com/docs/reference/api/idps/#oauth-2-0-and-openid-connect-client-object
413
+ */
414
+ pkceRequired?: pulumi.Input<boolean>;
407
415
  /**
408
416
  * Determines if the IdP should act as a source of truth for user profile attributes.
409
417
  */
410
418
  profileMaster?: pulumi.Input<boolean>;
411
419
  /**
412
- * The type of protocol to use. It can be `"OIDC"` or `"OAUTH2"`.
420
+ * The type of protocol to use. It can be `OIDC` or `OAUTH2`. Default: `OIDC`
413
421
  */
414
422
  protocolType?: pulumi.Input<string>;
415
423
  /**
416
- * Provisioning action for an IdP user during authentication.
424
+ * Provisioning action for an IdP user during authentication. Default: `AUTO`
417
425
  */
418
426
  provisioningAction?: pulumi.Input<string>;
419
427
  /**
420
- * The HMAC Signature Algorithm used when signing an authorization request. Defaults to `"HS256"`. It can be `"HS256"`, `"HS384"`, `"HS512"`, `"SHA-256"`. `"RS256"`, `"RS384"`, or `"RS512"`. NOTE: `"SHA-256"` an undocumented legacy value and not continue to be valid. See API docs https://developer.okta.com/docs/reference/api/idps/#oidc-request-signature-algorithm-object
428
+ * The HMAC Signature Algorithm used when signing an authorization request. Defaults to `HS256`. It can be `HS256`, `HS384`, `HS512`, `SHA-256`. `RS256`, `RS384`, or `RS512`. NOTE: `SHA-256` an undocumented legacy value and not continue to be valid. See API docs https://developer.okta.com/docs/reference/api/idps/#oidc-request-signature-algorithm-object
421
429
  */
422
430
  requestSignatureAlgorithm?: pulumi.Input<string>;
423
431
  /**
424
- * Specifies whether to digitally sign an AuthnRequest messages to the IdP. Defaults to `"REQUEST"`. It can be `"REQUEST"` or `"NONE"`.
432
+ * Specifies whether to digitally sign an AuthnRequest messages to the IdP. Defaults to `REQUEST`. It can be `REQUEST` or `NONE`.
425
433
  */
426
434
  requestSignatureScope?: pulumi.Input<string>;
427
435
  /**
@@ -429,23 +437,23 @@ export interface OidcArgs {
429
437
  */
430
438
  scopes: pulumi.Input<pulumi.Input<string>[]>;
431
439
  /**
432
- * Status of the IdP.
440
+ * Default to `ACTIVE`
433
441
  */
434
442
  status?: pulumi.Input<string>;
435
443
  /**
436
- * Okta user profile attribute for matching transformed IdP username. Only for matchType `"CUSTOM_ATTRIBUTE"`.
444
+ * Okta user profile attribute for matching transformed IdP username. Only for matchType `CUSTOM_ATTRIBUTE`.
437
445
  */
438
446
  subjectMatchAttribute?: pulumi.Input<string>;
439
447
  /**
440
- * Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `"USERNAME"`. It can be set to `"USERNAME"`, `"EMAIL"`, `"USERNAME_OR_EMAIL"` or `"CUSTOM_ATTRIBUTE"`.
448
+ * Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `USERNAME`. It can be set to `USERNAME`, `EMAIL`, `USERNAME_OR_EMAIL` or `CUSTOM_ATTRIBUTE`.
441
449
  */
442
450
  subjectMatchType?: pulumi.Input<string>;
443
451
  /**
444
- * Action for a previously suspended IdP user during authentication. Can be set to `"NONE"` or `"UNSUSPEND"`
452
+ * Action for a previously suspended IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
445
453
  */
446
454
  suspendedAction?: pulumi.Input<string>;
447
455
  /**
448
- * The method of making a token request. It can be set to `"HTTP-POST"` or `"HTTP-REDIRECT"`.
456
+ * The method of making a token request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`.
449
457
  */
450
458
  tokenBinding: pulumi.Input<string>;
451
459
  /**
@@ -458,7 +466,7 @@ export interface OidcArgs {
458
466
  */
459
467
  userInfoUrl?: pulumi.Input<string>;
460
468
  /**
461
- * Okta EL Expression to generate or transform a unique username for the IdP user.
469
+ * Okta EL Expression to generate or transform a unique username for the IdP user. Default: `idpuser.email`
462
470
  */
463
471
  usernameTemplate?: pulumi.Input<string>;
464
472
  }
package/idp/oidc.js CHANGED
@@ -6,9 +6,7 @@ exports.Oidc = void 0;
6
6
  const pulumi = require("@pulumi/pulumi");
7
7
  const utilities = require("../utilities");
8
8
  /**
9
- * Creates an OIDC Identity Provider.
10
- *
11
- * This resource allows you to create and configure an OIDC Identity Provider.
9
+ * Creates an OIDC Identity Provider. This resource allows you to create and configure an OIDC Identity Provider.
12
10
  *
13
11
  * ## Example Usage
14
12
  *
@@ -36,8 +34,6 @@ const utilities = require("../utilities");
36
34
  *
37
35
  * ## Import
38
36
  *
39
- * An OIDC IdP can be imported via the Okta ID.
40
- *
41
37
  * ```sh
42
38
  * $ pulumi import okta:idp/oidc:Oidc example &#60;idp id&#62;
43
39
  * ```
@@ -87,6 +83,7 @@ class Oidc extends pulumi.CustomResource {
87
83
  resourceInputs["jwksUrl"] = state ? state.jwksUrl : undefined;
88
84
  resourceInputs["maxClockSkew"] = state ? state.maxClockSkew : undefined;
89
85
  resourceInputs["name"] = state ? state.name : undefined;
86
+ resourceInputs["pkceRequired"] = state ? state.pkceRequired : undefined;
90
87
  resourceInputs["profileMaster"] = state ? state.profileMaster : undefined;
91
88
  resourceInputs["protocolType"] = state ? state.protocolType : undefined;
92
89
  resourceInputs["provisioningAction"] = state ? state.provisioningAction : undefined;
@@ -154,6 +151,7 @@ class Oidc extends pulumi.CustomResource {
154
151
  resourceInputs["jwksUrl"] = args ? args.jwksUrl : undefined;
155
152
  resourceInputs["maxClockSkew"] = args ? args.maxClockSkew : undefined;
156
153
  resourceInputs["name"] = args ? args.name : undefined;
154
+ resourceInputs["pkceRequired"] = args ? args.pkceRequired : undefined;
157
155
  resourceInputs["profileMaster"] = args ? args.profileMaster : undefined;
158
156
  resourceInputs["protocolType"] = args ? args.protocolType : undefined;
159
157
  resourceInputs["provisioningAction"] = args ? args.provisioningAction : undefined;
package/idp/oidc.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"oidc.js","sourceRoot":"","sources":["../../idp/oidc.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAgJD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACvE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAxRL,oBAyRC;AA3QG,gBAAgB;AACO,iBAAY,GAAG,oBAAoB,CAAC"}
1
+ {"version":3,"file":"oidc.js","sourceRoot":"","sources":["../../idp/oidc.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAoJD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACvE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AA9RL,oBA+RC;AAjRG,gBAAgB;AACO,iBAAY,GAAG,oBAAoB,CAAC"}