@structured-id/ui-core 0.1.5

package/src/generated/sid/v1/federation/upstream.ts

@@ -0,0 +1,1736 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/federation/upstream.proto" (package "sid.v1.federation", syntax proto3)
+// tslint:disable
+import { ServiceType } from "@protobuf-ts/runtime-rpc";
+import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
+import type { IBinaryWriter } from "@protobuf-ts/runtime";
+import { WireType } from "@protobuf-ts/runtime";
+import type { BinaryReadOptions } from "@protobuf-ts/runtime";
+import type { IBinaryReader } from "@protobuf-ts/runtime";
+import { UnknownFieldHandler } from "@protobuf-ts/runtime";
+import type { PartialMessage } from "@protobuf-ts/runtime";
+import { reflectionMergePartial } from "@protobuf-ts/runtime";
+import { MessageType } from "@protobuf-ts/runtime";
+import { Timestamp } from "../../../google/protobuf/timestamp";
+/**
+ * UpstreamProvider represents a configured upstream identity provider.
+ * NOTE: client_secret is write-only and NEVER included in responses.
+ *
+ * @generated from protobuf message sid.v1.federation.UpstreamProvider
+ */
+export interface UpstreamProvider {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * @generated from protobuf field: string name = 2
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: sid.v1.federation.UpstreamProtocol protocol = 3
+     */
+    protocol: UpstreamProtocol;
+    /**
+     * @generated from protobuf field: sid.v1.federation.TrustCategory trust_category = 4
+     */
+    trustCategory: TrustCategory;
+    /**
+     * @generated from protobuf field: bool enabled = 5
+     */
+    enabled: boolean;
+    /**
+     * @generated from protobuf field: string client_id = 6
+     */
+    clientId: string; // Field 7 reserved: client_secret is write-only (in create/update requests only).
+    /**
+     * OIDC discovery or manual endpoint configuration.
+     *
+     * @generated from protobuf field: string discovery_url = 8
+     */
+    discoveryUrl: string;
+    /**
+     * @generated from protobuf field: string authorization_endpoint = 9
+     */
+    authorizationEndpoint: string;
+    /**
+     * @generated from protobuf field: string token_endpoint = 10
+     */
+    tokenEndpoint: string;
+    /**
+     * @generated from protobuf field: string userinfo_endpoint = 11
+     */
+    userinfoEndpoint: string;
+    /**
+     * @generated from protobuf field: repeated string scopes = 12
+     */
+    scopes: string[];
+    /**
+     * Login screen display settings.
+     *
+     * @generated from protobuf field: bool show_on_login = 13
+     */
+    showOnLogin: boolean;
+    /**
+     * @generated from protobuf field: int32 display_order = 14
+     */
+    displayOrder: number;
+    /**
+     * @generated from protobuf field: string logo_url = 15
+     */
+    logoUrl: string;
+    /**
+     * Timestamps.
+     *
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 16
+     */
+    createdAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp updated_at = 17
+     */
+    updatedAt?: Timestamp;
+}
+/**
+ * Minimal provider info for the login screen (public, no admin details).
+ *
+ * @generated from protobuf message sid.v1.federation.EnabledProviderInfo
+ */
+export interface EnabledProviderInfo {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * @generated from protobuf field: string name = 2
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: sid.v1.federation.UpstreamProtocol protocol = 3
+     */
+    protocol: UpstreamProtocol;
+    /**
+     * @generated from protobuf field: sid.v1.federation.TrustCategory trust_category = 4
+     */
+    trustCategory: TrustCategory;
+    /**
+     * @generated from protobuf field: string logo_url = 5
+     */
+    logoUrl: string;
+    /**
+     * @generated from protobuf field: int32 display_order = 6
+     */
+    displayOrder: number;
+}
+// ── Provider CRUD messages ──
+
+/**
+ * @generated from protobuf message sid.v1.federation.CreateUpstreamProviderRequest
+ */
+export interface CreateUpstreamProviderRequest {
+    /**
+     * @generated from protobuf field: string name = 1
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: sid.v1.federation.UpstreamProtocol protocol = 2
+     */
+    protocol: UpstreamProtocol;
+    /**
+     * @generated from protobuf field: sid.v1.federation.TrustCategory trust_category = 3
+     */
+    trustCategory: TrustCategory;
+    /**
+     * @generated from protobuf field: string client_id = 4
+     */
+    clientId: string;
+    /**
+     * @generated from protobuf field: string client_secret = 5
+     */
+    clientSecret: string; // Plaintext; encrypted by server before storage.
+    /**
+     * @generated from protobuf field: string discovery_url = 6
+     */
+    discoveryUrl: string;
+    /**
+     * @generated from protobuf field: string authorization_endpoint = 7
+     */
+    authorizationEndpoint: string;
+    /**
+     * @generated from protobuf field: string token_endpoint = 8
+     */
+    tokenEndpoint: string;
+    /**
+     * @generated from protobuf field: string userinfo_endpoint = 9
+     */
+    userinfoEndpoint: string;
+    /**
+     * @generated from protobuf field: repeated string scopes = 10
+     */
+    scopes: string[];
+    /**
+     * @generated from protobuf field: bool show_on_login = 11
+     */
+    showOnLogin: boolean;
+    /**
+     * @generated from protobuf field: int32 display_order = 12
+     */
+    displayOrder: number;
+    /**
+     * @generated from protobuf field: string logo_url = 13
+     */
+    logoUrl: string;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.UpstreamProviderResponse
+ */
+export interface UpstreamProviderResponse {
+    /**
+     * @generated from protobuf field: sid.v1.federation.UpstreamProvider provider = 1
+     */
+    provider?: UpstreamProvider;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.GetUpstreamProviderRequest
+ */
+export interface GetUpstreamProviderRequest {
+    /**
+     * @generated from protobuf field: string provider_id = 1
+     */
+    providerId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.UpdateUpstreamProviderRequest
+ */
+export interface UpdateUpstreamProviderRequest {
+    /**
+     * @generated from protobuf field: string provider_id = 1
+     */
+    providerId: string;
+    /**
+     * @generated from protobuf field: optional string name = 2
+     */
+    name?: string;
+    /**
+     * @generated from protobuf field: optional sid.v1.federation.UpstreamProtocol protocol = 3
+     */
+    protocol?: UpstreamProtocol;
+    /**
+     * @generated from protobuf field: optional sid.v1.federation.TrustCategory trust_category = 4
+     */
+    trustCategory?: TrustCategory;
+    /**
+     * @generated from protobuf field: optional bool enabled = 5
+     */
+    enabled?: boolean;
+    /**
+     * @generated from protobuf field: optional string client_id = 6
+     */
+    clientId?: string;
+    /**
+     * @generated from protobuf field: optional string client_secret = 7
+     */
+    clientSecret?: string; // Write-only; encrypted by server.
+    /**
+     * @generated from protobuf field: optional string discovery_url = 8
+     */
+    discoveryUrl?: string;
+    /**
+     * @generated from protobuf field: optional string authorization_endpoint = 9
+     */
+    authorizationEndpoint?: string;
+    /**
+     * @generated from protobuf field: optional string token_endpoint = 10
+     */
+    tokenEndpoint?: string;
+    /**
+     * @generated from protobuf field: optional string userinfo_endpoint = 11
+     */
+    userinfoEndpoint?: string;
+    /**
+     * @generated from protobuf field: repeated string scopes = 12
+     */
+    scopes: string[];
+    /**
+     * @generated from protobuf field: optional bool show_on_login = 13
+     */
+    showOnLogin?: boolean;
+    /**
+     * @generated from protobuf field: optional int32 display_order = 14
+     */
+    displayOrder?: number;
+    /**
+     * @generated from protobuf field: optional string logo_url = 15
+     */
+    logoUrl?: string;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.DeleteUpstreamProviderRequest
+ */
+export interface DeleteUpstreamProviderRequest {
+    /**
+     * @generated from protobuf field: string provider_id = 1
+     */
+    providerId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.DeleteUpstreamProviderResponse
+ */
+export interface DeleteUpstreamProviderResponse {
+}
+/**
+ * @generated from protobuf message sid.v1.federation.ListUpstreamProvidersRequest
+ */
+export interface ListUpstreamProvidersRequest {
+}
+/**
+ * @generated from protobuf message sid.v1.federation.ListUpstreamProvidersResponse
+ */
+export interface ListUpstreamProvidersResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.federation.UpstreamProvider providers = 1
+     */
+    providers: UpstreamProvider[];
+}
+/**
+ * @generated from protobuf message sid.v1.federation.ListEnabledProvidersRequest
+ */
+export interface ListEnabledProvidersRequest {
+}
+/**
+ * @generated from protobuf message sid.v1.federation.ListEnabledProvidersResponse
+ */
+export interface ListEnabledProvidersResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.federation.EnabledProviderInfo providers = 1
+     */
+    providers: EnabledProviderInfo[];
+}
+// ── Upstream auth flow messages ──
+
+/**
+ * @generated from protobuf message sid.v1.federation.InitiateUpstreamAuthRequest
+ */
+export interface InitiateUpstreamAuthRequest {
+    /**
+     * @generated from protobuf field: string provider_id = 1
+     */
+    providerId: string;
+    /**
+     * @generated from protobuf field: string redirect_uri = 2
+     */
+    redirectUri: string;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.InitiateUpstreamAuthResponse
+ */
+export interface InitiateUpstreamAuthResponse {
+    /**
+     * @generated from protobuf field: string authorization_url = 1
+     */
+    authorizationUrl: string;
+    /**
+     * @generated from protobuf field: string state_token = 2
+     */
+    stateToken: string;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.HandleUpstreamCallbackRequest
+ */
+export interface HandleUpstreamCallbackRequest {
+    /**
+     * @generated from protobuf field: string provider_id = 1
+     */
+    providerId: string;
+    /**
+     * @generated from protobuf field: string code = 2
+     */
+    code: string;
+    /**
+     * @generated from protobuf field: string state = 3
+     */
+    state: string;
+    /**
+     * @generated from protobuf field: string redirect_uri = 4
+     */
+    redirectUri: string;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.HandleUpstreamCallbackResponse
+ */
+export interface HandleUpstreamCallbackResponse {
+    /**
+     * @generated from protobuf oneof: result
+     */
+    result: {
+        oneofKind: "success";
+        /**
+         * @generated from protobuf field: sid.v1.federation.UpstreamAuthSuccess success = 1
+         */
+        success: UpstreamAuthSuccess;
+    } | {
+        oneofKind: "linkingRequired";
+        /**
+         * @generated from protobuf field: sid.v1.federation.UpstreamLinkingRequired linking_required = 2
+         */
+        linkingRequired: UpstreamLinkingRequired;
+    } | {
+        oneofKind: undefined;
+    };
+}
+/**
+ * @generated from protobuf message sid.v1.federation.UpstreamAuthSuccess
+ */
+export interface UpstreamAuthSuccess {
+    /**
+     * @generated from protobuf field: string session_id = 1
+     */
+    sessionId: string;
+    /**
+     * @generated from protobuf field: string access_token = 2
+     */
+    accessToken: string;
+    /**
+     * @generated from protobuf field: int64 expires_in = 3
+     */
+    expiresIn: bigint;
+    /**
+     * @generated from protobuf field: bool new_profile_created = 4
+     */
+    newProfileCreated: boolean;
+}
+/**
+ * @generated from protobuf message sid.v1.federation.UpstreamLinkingRequired
+ */
+export interface UpstreamLinkingRequired {
+    /**
+     * @generated from protobuf field: string linking_token = 1
+     */
+    linkingToken: string;
+    /**
+     * @generated from protobuf field: string upstream_email = 2
+     */
+    upstreamEmail: string;
+}
+/**
+ * Protocol used by the upstream identity provider.
+ *
+ * @generated from protobuf enum sid.v1.federation.UpstreamProtocol
+ */
+export enum UpstreamProtocol {
+    /**
+     * @generated from protobuf enum value: UPSTREAM_PROTOCOL_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: UPSTREAM_PROTOCOL_OIDC = 1;
+     */
+    OIDC = 1,
+    /**
+     * @generated from protobuf enum value: UPSTREAM_PROTOCOL_OAUTH2 = 2;
+     */
+    OAUTH2 = 2
+}
+/**
+ * Trust category for the upstream provider.
+ *
+ * @generated from protobuf enum sid.v1.federation.TrustCategory
+ */
+export enum TrustCategory {
+    /**
+     * @generated from protobuf enum value: TRUST_CATEGORY_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Google, GitHub, Apple, etc.
+     *
+     * @generated from protobuf enum value: TRUST_CATEGORY_SOCIAL = 1;
+     */
+    SOCIAL = 1,
+    /**
+     * Azure AD, Okta, etc.
+     *
+     * @generated from protobuf enum value: TRUST_CATEGORY_CORPORATE = 2;
+     */
+    CORPORATE = 2,
+    /**
+     * eID, DigiD, etc.
+     *
+     * @generated from protobuf enum value: TRUST_CATEGORY_GOVERNMENT = 3;
+     */
+    GOVERNMENT = 3,
+    /**
+     * Bank-issued identity.
+     *
+     * @generated from protobuf enum value: TRUST_CATEGORY_FINANCIAL = 4;
+     */
+    FINANCIAL = 4
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class UpstreamProvider$Type extends MessageType<UpstreamProvider> {
+    constructor() {
+        super("sid.v1.federation.UpstreamProvider", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "protocol", kind: "enum", T: () => ["sid.v1.federation.UpstreamProtocol", UpstreamProtocol, "UPSTREAM_PROTOCOL_"] },
+            { no: 4, name: "trust_category", kind: "enum", T: () => ["sid.v1.federation.TrustCategory", TrustCategory, "TRUST_CATEGORY_"] },
+            { no: 5, name: "enabled", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 6, name: "client_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 8, name: "discovery_url", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 9, name: "authorization_endpoint", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 10, name: "token_endpoint", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 11, name: "userinfo_endpoint", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 12, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 13, name: "show_on_login", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 14, name: "display_order", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 15, name: "logo_url", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 16, name: "created_at", kind: "message", T: () => Timestamp },
+            { no: 17, name: "updated_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<UpstreamProvider>): UpstreamProvider {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.name = "";
+        message.protocol = 0;
+        message.trustCategory = 0;
+        message.enabled = false;
+        message.clientId = "";
+        message.discoveryUrl = "";
+        message.authorizationEndpoint = "";
+        message.tokenEndpoint = "";
+        message.userinfoEndpoint = "";
+        message.scopes = [];
+        message.showOnLogin = false;
+        message.displayOrder = 0;
+        message.logoUrl = "";
+        if (value !== undefined)
+            reflectionMergePartial<UpstreamProvider>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpstreamProvider): UpstreamProvider {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* sid.v1.federation.UpstreamProtocol protocol */ 3:
+                    message.protocol = reader.int32();
+                    break;
+                case /* sid.v1.federation.TrustCategory trust_category */ 4:
+                    message.trustCategory = reader.int32();
+                    break;
+                case /* bool enabled */ 5:
+                    message.enabled = reader.bool();
+                    break;
+                case /* string client_id */ 6:
+                    message.clientId = reader.string();
+                    break;
+                case /* string discovery_url */ 8:
+                    message.discoveryUrl = reader.string();
+                    break;
+                case /* string authorization_endpoint */ 9:
+                    message.authorizationEndpoint = reader.string();
+                    break;
+                case /* string token_endpoint */ 10:
+                    message.tokenEndpoint = reader.string();
+                    break;
+                case /* string userinfo_endpoint */ 11:
+                    message.userinfoEndpoint = reader.string();
+                    break;
+                case /* repeated string scopes */ 12:
+                    message.scopes.push(reader.string());
+                    break;
+                case /* bool show_on_login */ 13:
+                    message.showOnLogin = reader.bool();
+                    break;
+                case /* int32 display_order */ 14:
+                    message.displayOrder = reader.int32();
+                    break;
+                case /* string logo_url */ 15:
+                    message.logoUrl = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 16:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                case /* google.protobuf.Timestamp updated_at */ 17:
+                    message.updatedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.updatedAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpstreamProvider, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string name = 2; */
+        if (message.name !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* sid.v1.federation.UpstreamProtocol protocol = 3; */
+        if (message.protocol !== 0)
+            writer.tag(3, WireType.Varint).int32(message.protocol);
+        /* sid.v1.federation.TrustCategory trust_category = 4; */
+        if (message.trustCategory !== 0)
+            writer.tag(4, WireType.Varint).int32(message.trustCategory);
+        /* bool enabled = 5; */
+        if (message.enabled !== false)
+            writer.tag(5, WireType.Varint).bool(message.enabled);
+        /* string client_id = 6; */
+        if (message.clientId !== "")
+            writer.tag(6, WireType.LengthDelimited).string(message.clientId);
+        /* string discovery_url = 8; */
+        if (message.discoveryUrl !== "")
+            writer.tag(8, WireType.LengthDelimited).string(message.discoveryUrl);
+        /* string authorization_endpoint = 9; */
+        if (message.authorizationEndpoint !== "")
+            writer.tag(9, WireType.LengthDelimited).string(message.authorizationEndpoint);
+        /* string token_endpoint = 10; */
+        if (message.tokenEndpoint !== "")
+            writer.tag(10, WireType.LengthDelimited).string(message.tokenEndpoint);
+        /* string userinfo_endpoint = 11; */
+        if (message.userinfoEndpoint !== "")
+            writer.tag(11, WireType.LengthDelimited).string(message.userinfoEndpoint);
+        /* repeated string scopes = 12; */
+        for (let i = 0; i < message.scopes.length; i++)
+            writer.tag(12, WireType.LengthDelimited).string(message.scopes[i]);
+        /* bool show_on_login = 13; */
+        if (message.showOnLogin !== false)
+            writer.tag(13, WireType.Varint).bool(message.showOnLogin);
+        /* int32 display_order = 14; */
+        if (message.displayOrder !== 0)
+            writer.tag(14, WireType.Varint).int32(message.displayOrder);
+        /* string logo_url = 15; */
+        if (message.logoUrl !== "")
+            writer.tag(15, WireType.LengthDelimited).string(message.logoUrl);
+        /* google.protobuf.Timestamp created_at = 16; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(16, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp updated_at = 17; */
+        if (message.updatedAt)
+            Timestamp.internalBinaryWrite(message.updatedAt, writer.tag(17, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.UpstreamProvider
+ */
+export const UpstreamProvider = new UpstreamProvider$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class EnabledProviderInfo$Type extends MessageType<EnabledProviderInfo> {
+    constructor() {
+        super("sid.v1.federation.EnabledProviderInfo", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "protocol", kind: "enum", T: () => ["sid.v1.federation.UpstreamProtocol", UpstreamProtocol, "UPSTREAM_PROTOCOL_"] },
+            { no: 4, name: "trust_category", kind: "enum", T: () => ["sid.v1.federation.TrustCategory", TrustCategory, "TRUST_CATEGORY_"] },
+            { no: 5, name: "logo_url", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "display_order", kind: "scalar", T: 5 /*ScalarType.INT32*/ }
+        ]);
+    }
+    create(value?: PartialMessage<EnabledProviderInfo>): EnabledProviderInfo {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.name = "";
+        message.protocol = 0;
+        message.trustCategory = 0;
+        message.logoUrl = "";
+        message.displayOrder = 0;
+        if (value !== undefined)
+            reflectionMergePartial<EnabledProviderInfo>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: EnabledProviderInfo): EnabledProviderInfo {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* sid.v1.federation.UpstreamProtocol protocol */ 3:
+                    message.protocol = reader.int32();
+                    break;
+                case /* sid.v1.federation.TrustCategory trust_category */ 4:
+                    message.trustCategory = reader.int32();
+                    break;
+                case /* string logo_url */ 5:
+                    message.logoUrl = reader.string();
+                    break;
+                case /* int32 display_order */ 6:
+                    message.displayOrder = reader.int32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: EnabledProviderInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string name = 2; */
+        if (message.name !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* sid.v1.federation.UpstreamProtocol protocol = 3; */
+        if (message.protocol !== 0)
+            writer.tag(3, WireType.Varint).int32(message.protocol);
+        /* sid.v1.federation.TrustCategory trust_category = 4; */
+        if (message.trustCategory !== 0)
+            writer.tag(4, WireType.Varint).int32(message.trustCategory);
+        /* string logo_url = 5; */
+        if (message.logoUrl !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.logoUrl);
+        /* int32 display_order = 6; */
+        if (message.displayOrder !== 0)
+            writer.tag(6, WireType.Varint).int32(message.displayOrder);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.EnabledProviderInfo
+ */
+export const EnabledProviderInfo = new EnabledProviderInfo$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class CreateUpstreamProviderRequest$Type extends MessageType<CreateUpstreamProviderRequest> {
+    constructor() {
+        super("sid.v1.federation.CreateUpstreamProviderRequest", [
+            { no: 1, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "protocol", kind: "enum", T: () => ["sid.v1.federation.UpstreamProtocol", UpstreamProtocol, "UPSTREAM_PROTOCOL_"] },
+            { no: 3, name: "trust_category", kind: "enum", T: () => ["sid.v1.federation.TrustCategory", TrustCategory, "TRUST_CATEGORY_"] },
+            { no: 4, name: "client_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "client_secret", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "discovery_url", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "authorization_endpoint", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 8, name: "token_endpoint", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 9, name: "userinfo_endpoint", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 10, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 11, name: "show_on_login", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 12, name: "display_order", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 13, name: "logo_url", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<CreateUpstreamProviderRequest>): CreateUpstreamProviderRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.name = "";
+        message.protocol = 0;
+        message.trustCategory = 0;
+        message.clientId = "";
+        message.clientSecret = "";
+        message.discoveryUrl = "";
+        message.authorizationEndpoint = "";
+        message.tokenEndpoint = "";
+        message.userinfoEndpoint = "";
+        message.scopes = [];
+        message.showOnLogin = false;
+        message.displayOrder = 0;
+        message.logoUrl = "";
+        if (value !== undefined)
+            reflectionMergePartial<CreateUpstreamProviderRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CreateUpstreamProviderRequest): CreateUpstreamProviderRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string name */ 1:
+                    message.name = reader.string();
+                    break;
+                case /* sid.v1.federation.UpstreamProtocol protocol */ 2:
+                    message.protocol = reader.int32();
+                    break;
+                case /* sid.v1.federation.TrustCategory trust_category */ 3:
+                    message.trustCategory = reader.int32();
+                    break;
+                case /* string client_id */ 4:
+                    message.clientId = reader.string();
+                    break;
+                case /* string client_secret */ 5:
+                    message.clientSecret = reader.string();
+                    break;
+                case /* string discovery_url */ 6:
+                    message.discoveryUrl = reader.string();
+                    break;
+                case /* string authorization_endpoint */ 7:
+                    message.authorizationEndpoint = reader.string();
+                    break;
+                case /* string token_endpoint */ 8:
+                    message.tokenEndpoint = reader.string();
+                    break;
+                case /* string userinfo_endpoint */ 9:
+                    message.userinfoEndpoint = reader.string();
+                    break;
+                case /* repeated string scopes */ 10:
+                    message.scopes.push(reader.string());
+                    break;
+                case /* bool show_on_login */ 11:
+                    message.showOnLogin = reader.bool();
+                    break;
+                case /* int32 display_order */ 12:
+                    message.displayOrder = reader.int32();
+                    break;
+                case /* string logo_url */ 13:
+                    message.logoUrl = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: CreateUpstreamProviderRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string name = 1; */
+        if (message.name !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.name);
+        /* sid.v1.federation.UpstreamProtocol protocol = 2; */
+        if (message.protocol !== 0)
+            writer.tag(2, WireType.Varint).int32(message.protocol);
+        /* sid.v1.federation.TrustCategory trust_category = 3; */
+        if (message.trustCategory !== 0)
+            writer.tag(3, WireType.Varint).int32(message.trustCategory);
+        /* string client_id = 4; */
+        if (message.clientId !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.clientId);
+        /* string client_secret = 5; */
+        if (message.clientSecret !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.clientSecret);
+        /* string discovery_url = 6; */
+        if (message.discoveryUrl !== "")
+            writer.tag(6, WireType.LengthDelimited).string(message.discoveryUrl);
+        /* string authorization_endpoint = 7; */
+        if (message.authorizationEndpoint !== "")
+            writer.tag(7, WireType.LengthDelimited).string(message.authorizationEndpoint);
+        /* string token_endpoint = 8; */
+        if (message.tokenEndpoint !== "")
+            writer.tag(8, WireType.LengthDelimited).string(message.tokenEndpoint);
+        /* string userinfo_endpoint = 9; */
+        if (message.userinfoEndpoint !== "")
+            writer.tag(9, WireType.LengthDelimited).string(message.userinfoEndpoint);
+        /* repeated string scopes = 10; */
+        for (let i = 0; i < message.scopes.length; i++)
+            writer.tag(10, WireType.LengthDelimited).string(message.scopes[i]);
+        /* bool show_on_login = 11; */
+        if (message.showOnLogin !== false)
+            writer.tag(11, WireType.Varint).bool(message.showOnLogin);
+        /* int32 display_order = 12; */
+        if (message.displayOrder !== 0)
+            writer.tag(12, WireType.Varint).int32(message.displayOrder);
+        /* string logo_url = 13; */
+        if (message.logoUrl !== "")
+            writer.tag(13, WireType.LengthDelimited).string(message.logoUrl);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.CreateUpstreamProviderRequest
+ */
+export const CreateUpstreamProviderRequest = new CreateUpstreamProviderRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpstreamProviderResponse$Type extends MessageType<UpstreamProviderResponse> {
+    constructor() {
+        super("sid.v1.federation.UpstreamProviderResponse", [
+            { no: 1, name: "provider", kind: "message", T: () => UpstreamProvider }
+        ]);
+    }
+    create(value?: PartialMessage<UpstreamProviderResponse>): UpstreamProviderResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<UpstreamProviderResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpstreamProviderResponse): UpstreamProviderResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.federation.UpstreamProvider provider */ 1:
+                    message.provider = UpstreamProvider.internalBinaryRead(reader, reader.uint32(), options, message.provider);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpstreamProviderResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.federation.UpstreamProvider provider = 1; */
+        if (message.provider)
+            UpstreamProvider.internalBinaryWrite(message.provider, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.UpstreamProviderResponse
+ */
+export const UpstreamProviderResponse = new UpstreamProviderResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetUpstreamProviderRequest$Type extends MessageType<GetUpstreamProviderRequest> {
+    constructor() {
+        super("sid.v1.federation.GetUpstreamProviderRequest", [
+            { no: 1, name: "provider_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetUpstreamProviderRequest>): GetUpstreamProviderRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providerId = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetUpstreamProviderRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetUpstreamProviderRequest): GetUpstreamProviderRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string provider_id */ 1:
+                    message.providerId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetUpstreamProviderRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string provider_id = 1; */
+        if (message.providerId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.providerId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.GetUpstreamProviderRequest
+ */
+export const GetUpstreamProviderRequest = new GetUpstreamProviderRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpdateUpstreamProviderRequest$Type extends MessageType<UpdateUpstreamProviderRequest> {
+    constructor() {
+        super("sid.v1.federation.UpdateUpstreamProviderRequest", [
+            { no: 1, name: "provider_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "protocol", kind: "enum", opt: true, T: () => ["sid.v1.federation.UpstreamProtocol", UpstreamProtocol, "UPSTREAM_PROTOCOL_"] },
+            { no: 4, name: "trust_category", kind: "enum", opt: true, T: () => ["sid.v1.federation.TrustCategory", TrustCategory, "TRUST_CATEGORY_"] },
+            { no: 5, name: "enabled", kind: "scalar", opt: true, T: 8 /*ScalarType.BOOL*/ },
+            { no: 6, name: "client_id", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "client_secret", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 8, name: "discovery_url", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 9, name: "authorization_endpoint", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 10, name: "token_endpoint", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 11, name: "userinfo_endpoint", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 12, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 13, name: "show_on_login", kind: "scalar", opt: true, T: 8 /*ScalarType.BOOL*/ },
+            { no: 14, name: "display_order", kind: "scalar", opt: true, T: 5 /*ScalarType.INT32*/ },
+            { no: 15, name: "logo_url", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<UpdateUpstreamProviderRequest>): UpdateUpstreamProviderRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providerId = "";
+        message.scopes = [];
+        if (value !== undefined)
+            reflectionMergePartial<UpdateUpstreamProviderRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpdateUpstreamProviderRequest): UpdateUpstreamProviderRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string provider_id */ 1:
+                    message.providerId = reader.string();
+                    break;
+                case /* optional string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* optional sid.v1.federation.UpstreamProtocol protocol */ 3:
+                    message.protocol = reader.int32();
+                    break;
+                case /* optional sid.v1.federation.TrustCategory trust_category */ 4:
+                    message.trustCategory = reader.int32();
+                    break;
+                case /* optional bool enabled */ 5:
+                    message.enabled = reader.bool();
+                    break;
+                case /* optional string client_id */ 6:
+                    message.clientId = reader.string();
+                    break;
+                case /* optional string client_secret */ 7:
+                    message.clientSecret = reader.string();
+                    break;
+                case /* optional string discovery_url */ 8:
+                    message.discoveryUrl = reader.string();
+                    break;
+                case /* optional string authorization_endpoint */ 9:
+                    message.authorizationEndpoint = reader.string();
+                    break;
+                case /* optional string token_endpoint */ 10:
+                    message.tokenEndpoint = reader.string();
+                    break;
+                case /* optional string userinfo_endpoint */ 11:
+                    message.userinfoEndpoint = reader.string();
+                    break;
+                case /* repeated string scopes */ 12:
+                    message.scopes.push(reader.string());
+                    break;
+                case /* optional bool show_on_login */ 13:
+                    message.showOnLogin = reader.bool();
+                    break;
+                case /* optional int32 display_order */ 14:
+                    message.displayOrder = reader.int32();
+                    break;
+                case /* optional string logo_url */ 15:
+                    message.logoUrl = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpdateUpstreamProviderRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string provider_id = 1; */
+        if (message.providerId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.providerId);
+        /* optional string name = 2; */
+        if (message.name !== undefined)
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* optional sid.v1.federation.UpstreamProtocol protocol = 3; */
+        if (message.protocol !== undefined)
+            writer.tag(3, WireType.Varint).int32(message.protocol);
+        /* optional sid.v1.federation.TrustCategory trust_category = 4; */
+        if (message.trustCategory !== undefined)
+            writer.tag(4, WireType.Varint).int32(message.trustCategory);
+        /* optional bool enabled = 5; */
+        if (message.enabled !== undefined)
+            writer.tag(5, WireType.Varint).bool(message.enabled);
+        /* optional string client_id = 6; */
+        if (message.clientId !== undefined)
+            writer.tag(6, WireType.LengthDelimited).string(message.clientId);
+        /* optional string client_secret = 7; */
+        if (message.clientSecret !== undefined)
+            writer.tag(7, WireType.LengthDelimited).string(message.clientSecret);
+        /* optional string discovery_url = 8; */
+        if (message.discoveryUrl !== undefined)
+            writer.tag(8, WireType.LengthDelimited).string(message.discoveryUrl);
+        /* optional string authorization_endpoint = 9; */
+        if (message.authorizationEndpoint !== undefined)
+            writer.tag(9, WireType.LengthDelimited).string(message.authorizationEndpoint);
+        /* optional string token_endpoint = 10; */
+        if (message.tokenEndpoint !== undefined)
+            writer.tag(10, WireType.LengthDelimited).string(message.tokenEndpoint);
+        /* optional string userinfo_endpoint = 11; */
+        if (message.userinfoEndpoint !== undefined)
+            writer.tag(11, WireType.LengthDelimited).string(message.userinfoEndpoint);
+        /* repeated string scopes = 12; */
+        for (let i = 0; i < message.scopes.length; i++)
+            writer.tag(12, WireType.LengthDelimited).string(message.scopes[i]);
+        /* optional bool show_on_login = 13; */
+        if (message.showOnLogin !== undefined)
+            writer.tag(13, WireType.Varint).bool(message.showOnLogin);
+        /* optional int32 display_order = 14; */
+        if (message.displayOrder !== undefined)
+            writer.tag(14, WireType.Varint).int32(message.displayOrder);
+        /* optional string logo_url = 15; */
+        if (message.logoUrl !== undefined)
+            writer.tag(15, WireType.LengthDelimited).string(message.logoUrl);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.UpdateUpstreamProviderRequest
+ */
+export const UpdateUpstreamProviderRequest = new UpdateUpstreamProviderRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DeleteUpstreamProviderRequest$Type extends MessageType<DeleteUpstreamProviderRequest> {
+    constructor() {
+        super("sid.v1.federation.DeleteUpstreamProviderRequest", [
+            { no: 1, name: "provider_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<DeleteUpstreamProviderRequest>): DeleteUpstreamProviderRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providerId = "";
+        if (value !== undefined)
+            reflectionMergePartial<DeleteUpstreamProviderRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteUpstreamProviderRequest): DeleteUpstreamProviderRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string provider_id */ 1:
+                    message.providerId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DeleteUpstreamProviderRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string provider_id = 1; */
+        if (message.providerId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.providerId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.DeleteUpstreamProviderRequest
+ */
+export const DeleteUpstreamProviderRequest = new DeleteUpstreamProviderRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DeleteUpstreamProviderResponse$Type extends MessageType<DeleteUpstreamProviderResponse> {
+    constructor() {
+        super("sid.v1.federation.DeleteUpstreamProviderResponse", []);
+    }
+    create(value?: PartialMessage<DeleteUpstreamProviderResponse>): DeleteUpstreamProviderResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<DeleteUpstreamProviderResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteUpstreamProviderResponse): DeleteUpstreamProviderResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DeleteUpstreamProviderResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.DeleteUpstreamProviderResponse
+ */
+export const DeleteUpstreamProviderResponse = new DeleteUpstreamProviderResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListUpstreamProvidersRequest$Type extends MessageType<ListUpstreamProvidersRequest> {
+    constructor() {
+        super("sid.v1.federation.ListUpstreamProvidersRequest", []);
+    }
+    create(value?: PartialMessage<ListUpstreamProvidersRequest>): ListUpstreamProvidersRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<ListUpstreamProvidersRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListUpstreamProvidersRequest): ListUpstreamProvidersRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListUpstreamProvidersRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.ListUpstreamProvidersRequest
+ */
+export const ListUpstreamProvidersRequest = new ListUpstreamProvidersRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListUpstreamProvidersResponse$Type extends MessageType<ListUpstreamProvidersResponse> {
+    constructor() {
+        super("sid.v1.federation.ListUpstreamProvidersResponse", [
+            { no: 1, name: "providers", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => UpstreamProvider }
+        ]);
+    }
+    create(value?: PartialMessage<ListUpstreamProvidersResponse>): ListUpstreamProvidersResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providers = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListUpstreamProvidersResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListUpstreamProvidersResponse): ListUpstreamProvidersResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.federation.UpstreamProvider providers */ 1:
+                    message.providers.push(UpstreamProvider.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListUpstreamProvidersResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.federation.UpstreamProvider providers = 1; */
+        for (let i = 0; i < message.providers.length; i++)
+            UpstreamProvider.internalBinaryWrite(message.providers[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.ListUpstreamProvidersResponse
+ */
+export const ListUpstreamProvidersResponse = new ListUpstreamProvidersResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListEnabledProvidersRequest$Type extends MessageType<ListEnabledProvidersRequest> {
+    constructor() {
+        super("sid.v1.federation.ListEnabledProvidersRequest", []);
+    }
+    create(value?: PartialMessage<ListEnabledProvidersRequest>): ListEnabledProvidersRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<ListEnabledProvidersRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListEnabledProvidersRequest): ListEnabledProvidersRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListEnabledProvidersRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.ListEnabledProvidersRequest
+ */
+export const ListEnabledProvidersRequest = new ListEnabledProvidersRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListEnabledProvidersResponse$Type extends MessageType<ListEnabledProvidersResponse> {
+    constructor() {
+        super("sid.v1.federation.ListEnabledProvidersResponse", [
+            { no: 1, name: "providers", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => EnabledProviderInfo }
+        ]);
+    }
+    create(value?: PartialMessage<ListEnabledProvidersResponse>): ListEnabledProvidersResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providers = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListEnabledProvidersResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListEnabledProvidersResponse): ListEnabledProvidersResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.federation.EnabledProviderInfo providers */ 1:
+                    message.providers.push(EnabledProviderInfo.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListEnabledProvidersResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.federation.EnabledProviderInfo providers = 1; */
+        for (let i = 0; i < message.providers.length; i++)
+            EnabledProviderInfo.internalBinaryWrite(message.providers[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.ListEnabledProvidersResponse
+ */
+export const ListEnabledProvidersResponse = new ListEnabledProvidersResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class InitiateUpstreamAuthRequest$Type extends MessageType<InitiateUpstreamAuthRequest> {
+    constructor() {
+        super("sid.v1.federation.InitiateUpstreamAuthRequest", [
+            { no: 1, name: "provider_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "redirect_uri", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<InitiateUpstreamAuthRequest>): InitiateUpstreamAuthRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providerId = "";
+        message.redirectUri = "";
+        if (value !== undefined)
+            reflectionMergePartial<InitiateUpstreamAuthRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: InitiateUpstreamAuthRequest): InitiateUpstreamAuthRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string provider_id */ 1:
+                    message.providerId = reader.string();
+                    break;
+                case /* string redirect_uri */ 2:
+                    message.redirectUri = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: InitiateUpstreamAuthRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string provider_id = 1; */
+        if (message.providerId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.providerId);
+        /* string redirect_uri = 2; */
+        if (message.redirectUri !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.redirectUri);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.InitiateUpstreamAuthRequest
+ */
+export const InitiateUpstreamAuthRequest = new InitiateUpstreamAuthRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class InitiateUpstreamAuthResponse$Type extends MessageType<InitiateUpstreamAuthResponse> {
+    constructor() {
+        super("sid.v1.federation.InitiateUpstreamAuthResponse", [
+            { no: 1, name: "authorization_url", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "state_token", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<InitiateUpstreamAuthResponse>): InitiateUpstreamAuthResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.authorizationUrl = "";
+        message.stateToken = "";
+        if (value !== undefined)
+            reflectionMergePartial<InitiateUpstreamAuthResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: InitiateUpstreamAuthResponse): InitiateUpstreamAuthResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string authorization_url */ 1:
+                    message.authorizationUrl = reader.string();
+                    break;
+                case /* string state_token */ 2:
+                    message.stateToken = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: InitiateUpstreamAuthResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string authorization_url = 1; */
+        if (message.authorizationUrl !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.authorizationUrl);
+        /* string state_token = 2; */
+        if (message.stateToken !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.stateToken);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.InitiateUpstreamAuthResponse
+ */
+export const InitiateUpstreamAuthResponse = new InitiateUpstreamAuthResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class HandleUpstreamCallbackRequest$Type extends MessageType<HandleUpstreamCallbackRequest> {
+    constructor() {
+        super("sid.v1.federation.HandleUpstreamCallbackRequest", [
+            { no: 1, name: "provider_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "code", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "state", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "redirect_uri", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<HandleUpstreamCallbackRequest>): HandleUpstreamCallbackRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providerId = "";
+        message.code = "";
+        message.state = "";
+        message.redirectUri = "";
+        if (value !== undefined)
+            reflectionMergePartial<HandleUpstreamCallbackRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: HandleUpstreamCallbackRequest): HandleUpstreamCallbackRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string provider_id */ 1:
+                    message.providerId = reader.string();
+                    break;
+                case /* string code */ 2:
+                    message.code = reader.string();
+                    break;
+                case /* string state */ 3:
+                    message.state = reader.string();
+                    break;
+                case /* string redirect_uri */ 4:
+                    message.redirectUri = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: HandleUpstreamCallbackRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string provider_id = 1; */
+        if (message.providerId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.providerId);
+        /* string code = 2; */
+        if (message.code !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.code);
+        /* string state = 3; */
+        if (message.state !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.state);
+        /* string redirect_uri = 4; */
+        if (message.redirectUri !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.redirectUri);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.HandleUpstreamCallbackRequest
+ */
+export const HandleUpstreamCallbackRequest = new HandleUpstreamCallbackRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class HandleUpstreamCallbackResponse$Type extends MessageType<HandleUpstreamCallbackResponse> {
+    constructor() {
+        super("sid.v1.federation.HandleUpstreamCallbackResponse", [
+            { no: 1, name: "success", kind: "message", oneof: "result", T: () => UpstreamAuthSuccess },
+            { no: 2, name: "linking_required", kind: "message", oneof: "result", T: () => UpstreamLinkingRequired }
+        ]);
+    }
+    create(value?: PartialMessage<HandleUpstreamCallbackResponse>): HandleUpstreamCallbackResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.result = { oneofKind: undefined };
+        if (value !== undefined)
+            reflectionMergePartial<HandleUpstreamCallbackResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: HandleUpstreamCallbackResponse): HandleUpstreamCallbackResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.federation.UpstreamAuthSuccess success */ 1:
+                    message.result = {
+                        oneofKind: "success",
+                        success: UpstreamAuthSuccess.internalBinaryRead(reader, reader.uint32(), options, (message.result as any).success)
+                    };
+                    break;
+                case /* sid.v1.federation.UpstreamLinkingRequired linking_required */ 2:
+                    message.result = {
+                        oneofKind: "linkingRequired",
+                        linkingRequired: UpstreamLinkingRequired.internalBinaryRead(reader, reader.uint32(), options, (message.result as any).linkingRequired)
+                    };
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: HandleUpstreamCallbackResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.federation.UpstreamAuthSuccess success = 1; */
+        if (message.result.oneofKind === "success")
+            UpstreamAuthSuccess.internalBinaryWrite(message.result.success, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        /* sid.v1.federation.UpstreamLinkingRequired linking_required = 2; */
+        if (message.result.oneofKind === "linkingRequired")
+            UpstreamLinkingRequired.internalBinaryWrite(message.result.linkingRequired, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.HandleUpstreamCallbackResponse
+ */
+export const HandleUpstreamCallbackResponse = new HandleUpstreamCallbackResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpstreamAuthSuccess$Type extends MessageType<UpstreamAuthSuccess> {
+    constructor() {
+        super("sid.v1.federation.UpstreamAuthSuccess", [
+            { no: 1, name: "session_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "access_token", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "expires_in", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 4, name: "new_profile_created", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+        ]);
+    }
+    create(value?: PartialMessage<UpstreamAuthSuccess>): UpstreamAuthSuccess {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.sessionId = "";
+        message.accessToken = "";
+        message.expiresIn = 0n;
+        message.newProfileCreated = false;
+        if (value !== undefined)
+            reflectionMergePartial<UpstreamAuthSuccess>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpstreamAuthSuccess): UpstreamAuthSuccess {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string session_id */ 1:
+                    message.sessionId = reader.string();
+                    break;
+                case /* string access_token */ 2:
+                    message.accessToken = reader.string();
+                    break;
+                case /* int64 expires_in */ 3:
+                    message.expiresIn = reader.int64().toBigInt();
+                    break;
+                case /* bool new_profile_created */ 4:
+                    message.newProfileCreated = reader.bool();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpstreamAuthSuccess, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string session_id = 1; */
+        if (message.sessionId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.sessionId);
+        /* string access_token = 2; */
+        if (message.accessToken !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.accessToken);
+        /* int64 expires_in = 3; */
+        if (message.expiresIn !== 0n)
+            writer.tag(3, WireType.Varint).int64(message.expiresIn);
+        /* bool new_profile_created = 4; */
+        if (message.newProfileCreated !== false)
+            writer.tag(4, WireType.Varint).bool(message.newProfileCreated);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.UpstreamAuthSuccess
+ */
+export const UpstreamAuthSuccess = new UpstreamAuthSuccess$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpstreamLinkingRequired$Type extends MessageType<UpstreamLinkingRequired> {
+    constructor() {
+        super("sid.v1.federation.UpstreamLinkingRequired", [
+            { no: 1, name: "linking_token", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "upstream_email", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<UpstreamLinkingRequired>): UpstreamLinkingRequired {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.linkingToken = "";
+        message.upstreamEmail = "";
+        if (value !== undefined)
+            reflectionMergePartial<UpstreamLinkingRequired>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpstreamLinkingRequired): UpstreamLinkingRequired {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string linking_token */ 1:
+                    message.linkingToken = reader.string();
+                    break;
+                case /* string upstream_email */ 2:
+                    message.upstreamEmail = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpstreamLinkingRequired, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string linking_token = 1; */
+        if (message.linkingToken !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.linkingToken);
+        /* string upstream_email = 2; */
+        if (message.upstreamEmail !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.upstreamEmail);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.federation.UpstreamLinkingRequired
+ */
+export const UpstreamLinkingRequired = new UpstreamLinkingRequired$Type();
+/**
+ * @generated ServiceType for protobuf service sid.v1.federation.UpstreamService
+ */
+export const UpstreamService = new ServiceType("sid.v1.federation.UpstreamService", [
+    { name: "CreateUpstreamProvider", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/upstream/providers", body: "*" } }, I: CreateUpstreamProviderRequest, O: UpstreamProviderResponse },
+    { name: "GetUpstreamProvider", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/upstream/providers/{provider_id}" } }, I: GetUpstreamProviderRequest, O: UpstreamProviderResponse },
+    { name: "UpdateUpstreamProvider", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/upstream/providers/{provider_id}", body: "*" } }, I: UpdateUpstreamProviderRequest, O: UpstreamProviderResponse },
+    { name: "DeleteUpstreamProvider", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/upstream/providers/{provider_id}" } }, I: DeleteUpstreamProviderRequest, O: DeleteUpstreamProviderResponse },
+    { name: "ListUpstreamProviders", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/upstream/providers" } }, I: ListUpstreamProvidersRequest, O: ListUpstreamProvidersResponse },
+    { name: "ListEnabledProviders", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/upstream/providers/enabled" } }, I: ListEnabledProvidersRequest, O: ListEnabledProvidersResponse },
+    { name: "InitiateUpstreamAuth", options: { "google.api.http": { post: "/v1/upstream/auth/initiate", body: "*" } }, I: InitiateUpstreamAuthRequest, O: InitiateUpstreamAuthResponse },
+    { name: "HandleUpstreamCallback", options: { "google.api.http": { post: "/v1/upstream/auth/callback", body: "*" } }, I: HandleUpstreamCallbackRequest, O: HandleUpstreamCallbackResponse }
+]);