@tailor-platform/sdk 2.0.0-next.0 → 2.0.0-next.10

package/dist/tailor-proto/src/tailor/v1/auth_resource_pb.d.mts

@@ -0,0 +1,865 @@
+import { Namespace } from "./resource_pb.mjs";
+import { SecretValue } from "./secret_manager_resource_pb.mjs";
+import { GenMessage } from "@bufbuild/protobuf/codegenv2";
+import { Message } from "@bufbuild/protobuf";
+import { Duration, Timestamp, Value } from "@bufbuild/protobuf/wkt";
+//#region ../tailor-proto/src/tailor/v1/auth_resource_pb.d.ts
+/**
+ * @generated from message tailor.v1.AuthService
+ */
+declare type AuthService = Message<"tailor.v1.AuthService"> & {
+  /**
+   * @generated from field: tailor.v1.Namespace namespace = 1;
+   */
+  namespace?: Namespace;
+  /**
+   * Enable publishing session lifecycle events (issued, revoked, refreshed).
+   * When enabled, events are published to the dataplane event topic.
+   *
+   * @generated from field: bool publish_session_events = 2;
+   */
+  publishSessionEvents: boolean;
+};
+/**
+ * @generated from message tailor.v1.AuthIDPConfig
+ */
+declare type AuthIDPConfig = Message<"tailor.v1.AuthIDPConfig"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+  /**
+   * @generated from field: tailor.v1.AuthIDPConfig.AuthType auth_type = 2;
+   */
+  authType: AuthIDPConfig_AuthType;
+  /**
+   * @generated from field: tailor.v1.AuthIDPConfig.Config config = 3;
+   */
+  config?: AuthIDPConfig_Config;
+};
+/**
+ * @generated from message tailor.v1.AuthIDPConfig.Config
+ */
+declare type AuthIDPConfig_Config = Message<"tailor.v1.AuthIDPConfig.Config"> & {
+  /**
+   * @generated from oneof tailor.v1.AuthIDPConfig.Config.config
+   */
+  config: {
+    /**
+     * @generated from field: tailor.v1.AuthIDPConfig.OIDCConfig oidc = 1;
+     */
+    value: AuthIDPConfig_OIDCConfig;
+    case: "oidc";
+  } | {
+    /**
+     * @generated from field: tailor.v1.AuthIDPConfig.SAMLConfig saml = 2;
+     */
+    value: AuthIDPConfig_SAMLConfig;
+    case: "saml";
+  } | {
+    /**
+     * @generated from field: tailor.v1.AuthIDPConfig.IDTokenConfig id_token = 3;
+     */
+    value: AuthIDPConfig_IDTokenConfig;
+    case: "idToken";
+  } | {
+    case: undefined;
+    value?: undefined;
+  };
+};
+/**
+ * @generated from message tailor.v1.AuthIDPConfig.OIDCConfig
+ */
+declare type AuthIDPConfig_OIDCConfig = Message<"tailor.v1.AuthIDPConfig.OIDCConfig"> & {
+  /**
+   * @generated from field: string client_id_key = 1;
+   */
+  clientIdKey: string;
+  /**
+   * @generated from field: tailor.v1.SecretValue client_secret_key = 2;
+   */
+  clientSecretKey?: SecretValue;
+  /**
+   * @generated from field: string provider_url = 3;
+   */
+  providerUrl: string;
+  /**
+   * @generated from field: string issuer_url = 4;
+   */
+  issuerUrl: string;
+  /**
+   * @generated from field: string username_claim = 5;
+   */
+  usernameClaim: string;
+};
+/**
+ * @generated from message tailor.v1.AuthIDPConfig.SAMLConfig
+ */
+declare type AuthIDPConfig_SAMLConfig = Message<"tailor.v1.AuthIDPConfig.SAMLConfig"> & {
+  /**
+   * @generated from field: string metadata_url = 1;
+   */
+  metadataUrl: string;
+  /**
+   * @generated from field: string raw_metadata = 4;
+   */
+  rawMetadata: string;
+  /**
+   * @generated from field: bool enable_sign_request = 5;
+   */
+  enableSignRequest: boolean;
+  /**
+   * @generated from field: string default_redirect_url = 6;
+   */
+  defaultRedirectUrl: string;
+};
+/**
+ * @generated from message tailor.v1.AuthIDPConfig.IDTokenConfig
+ */
+declare type AuthIDPConfig_IDTokenConfig = Message<"tailor.v1.AuthIDPConfig.IDTokenConfig"> & {
+  /**
+   * @generated from field: string provider_url = 1;
+   */
+  providerUrl: string;
+  /**
+   * @generated from field: string client_id = 2;
+   */
+  clientId: string;
+  /**
+   * @generated from field: string issuer_url = 3;
+   */
+  issuerUrl: string;
+  /**
+   * @generated from field: string username_claim = 4;
+   */
+  usernameClaim: string;
+};
+/**
+ * @generated from enum tailor.v1.AuthIDPConfig.AuthType
+ */
+declare enum AuthIDPConfig_AuthType {
+  /**
+   * @generated from enum value: AUTH_TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: AUTH_TYPE_OIDC = 1;
+   */
+  OIDC = 1,
+  /**
+   * @generated from enum value: AUTH_TYPE_SAML = 2;
+   */
+  SAML = 2,
+  /**
+   * @generated from enum value: AUTH_TYPE_ID_TOKEN = 3;
+   */
+  ID_TOKEN = 3
+}
+/**
+ * @generated from message tailor.v1.UserProfileProviderConfig
+ */
+declare type UserProfileProviderConfig = Message<"tailor.v1.UserProfileProviderConfig"> & {
+  /**
+   * @generated from field: string provider = 1 [deprecated = true];
+   * @deprecated
+   */
+  provider: string;
+  /**
+   * @generated from field: tailor.v1.UserProfileProviderConfig.UserProfileProviderType provider_type = 2;
+   */
+  providerType: UserProfileProviderConfig_UserProfileProviderType;
+  /**
+   * @generated from field: tailor.v1.UserProfileProviderConfig.Config config = 3;
+   */
+  config?: UserProfileProviderConfig_Config;
+};
+/**
+ * @generated from message tailor.v1.UserProfileProviderConfig.Config
+ */
+declare type UserProfileProviderConfig_Config = Message<"tailor.v1.UserProfileProviderConfig.Config"> & {
+  /**
+   * @generated from oneof tailor.v1.UserProfileProviderConfig.Config.config
+   */
+  config: {
+    /**
+     * @generated from field: tailor.v1.UserProfileProviderConfig.TailorDBProviderConfig tailordb = 1;
+     */
+    value: UserProfileProviderConfig_TailorDBProviderConfig;
+    case: "tailordb";
+  } | {
+    case: undefined;
+    value?: undefined;
+  };
+};
+/**
+ * @generated from message tailor.v1.UserProfileProviderConfig.TailorDBProviderConfig
+ */
+declare type UserProfileProviderConfig_TailorDBProviderConfig = Message<"tailor.v1.UserProfileProviderConfig.TailorDBProviderConfig"> & {
+  /**
+   * @generated from field: string namespace = 1;
+   */
+  namespace: string;
+  /**
+   * @generated from field: string type = 2;
+   */
+  type: string;
+  /**
+   * @generated from field: string username_field = 3;
+   */
+  usernameField: string;
+  /**
+   * @generated from field: repeated string attributes_fields = 4;
+   */
+  attributesFields: string[];
+  /**
+   * @generated from field: string tenant_id_field = 5;
+   */
+  tenantIdField: string;
+  /**
+   * @generated from field: map<string, string> attribute_map = 6;
+   */
+  attributeMap: {
+    [key: string]: string;
+  };
+};
+/**
+ * @generated from enum tailor.v1.UserProfileProviderConfig.UserProfileProviderType
+ */
+declare enum UserProfileProviderConfig_UserProfileProviderType {
+  /**
+   * @generated from enum value: USER_PROFILE_PROVIDER_TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: USER_PROFILE_PROVIDER_TYPE_TAILORDB = 1;
+   */
+  TAILORDB = 1
+}
+/**
+ * @generated from message tailor.v1.TenantProviderConfig
+ */
+declare type TenantProviderConfig = Message<"tailor.v1.TenantProviderConfig"> & {
+  /**
+   * @generated from field: string provider = 1;
+   */
+  provider: string;
+  /**
+   * @generated from field: tailor.v1.TenantProviderConfig.TenantProviderType provider_type = 2;
+   */
+  providerType: TenantProviderConfig_TenantProviderType;
+  /**
+   * @generated from field: tailor.v1.TenantProviderConfig.Config config = 3;
+   */
+  config?: TenantProviderConfig_Config;
+};
+/**
+ * @generated from message tailor.v1.TenantProviderConfig.Config
+ */
+declare type TenantProviderConfig_Config = Message<"tailor.v1.TenantProviderConfig.Config"> & {
+  /**
+   * @generated from oneof tailor.v1.TenantProviderConfig.Config.config
+   */
+  config: {
+    /**
+     * @generated from field: tailor.v1.TenantProviderConfig.TailorDBProviderConfig tailordb = 1;
+     */
+    value: TenantProviderConfig_TailorDBProviderConfig;
+    case: "tailordb";
+  } | {
+    case: undefined;
+    value?: undefined;
+  };
+};
+/**
+ * @generated from message tailor.v1.TenantProviderConfig.TailorDBProviderConfig
+ */
+declare type TenantProviderConfig_TailorDBProviderConfig = Message<"tailor.v1.TenantProviderConfig.TailorDBProviderConfig"> & {
+  /**
+   * @generated from field: string namespace = 1;
+   */
+  namespace: string;
+  /**
+   * @generated from field: string type = 2;
+   */
+  type: string;
+  /**
+   * @generated from field: string signature_field = 3;
+   */
+  signatureField: string;
+};
+/**
+ * @generated from enum tailor.v1.TenantProviderConfig.TenantProviderType
+ */
+declare enum TenantProviderConfig_TenantProviderType {
+  /**
+   * @generated from enum value: TENANT_PROVIDER_TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: TENANT_PROVIDER_TYPE_TAILORDB = 1;
+   */
+  TAILORDB = 1
+}
+/**
+ * @generated from message tailor.v1.AuthInvoker
+ */
+declare type AuthInvoker = Message<"tailor.v1.AuthInvoker"> & {
+  /**
+   * @generated from field: string namespace = 1;
+   */
+  namespace: string;
+  /**
+   * @generated from field: string machine_user_name = 2;
+   */
+  machineUserName: string;
+};
+/**
+ * Describes the message tailor.v1.AuthInvoker.
+ * Use `create(AuthInvokerSchema)` to create a new message.
+ */
+declare const AuthInvokerSchema: GenMessage<AuthInvoker>;
+/**
+ * Personal Access Token ---------------------------------------------
+ *
+ * @generated from message tailor.v1.PersonalAccessToken
+ */
+declare type PersonalAccessToken = Message<"tailor.v1.PersonalAccessToken"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+  /**
+   * @generated from field: repeated tailor.v1.PATScope scopes = 2;
+   */
+  scopes: PATScope[];
+};
+/**
+ * Machine User ------------------------------------------------------
+ *
+ * @generated from message tailor.v1.MachineUser
+ */
+declare type MachineUser = Message<"tailor.v1.MachineUser"> & {
+  /**
+   * @generated from field: string id = 1;
+   */
+  id: string;
+  /**
+   * @generated from field: string name = 2;
+   */
+  name: string;
+  /**
+   * @generated from field: string client_id = 3;
+   */
+  clientId: string;
+  /**
+   * @generated from field: string client_secret = 4;
+   */
+  clientSecret: string;
+  /**
+   * @generated from field: repeated string attributes = 5;
+   */
+  attributes: string[];
+  /**
+   * @generated from field: google.protobuf.Timestamp created_at = 6;
+   */
+  createdAt?: Timestamp;
+  /**
+   * @generated from field: google.protobuf.Timestamp updated_at = 7;
+   */
+  updatedAt?: Timestamp;
+  /**
+   * @generated from field: map<string, google.protobuf.Value> attribute_map = 8;
+   */
+  attributeMap: {
+    [key: string]: Value;
+  };
+};
+/**
+ * Auth SCIM ------------------------------------------------
+ *
+ * @generated from message tailor.v1.AuthSCIMConfig
+ */
+declare type AuthSCIMConfig = Message<"tailor.v1.AuthSCIMConfig"> & {
+  /**
+   * @generated from field: string machine_user_name = 1;
+   */
+  machineUserName: string;
+  /**
+   * @generated from field: tailor.v1.AuthSCIMConfig.AuthorizationType authorization_type = 2;
+   */
+  authorizationType: AuthSCIMConfig_AuthorizationType;
+  /**
+   * @generated from oneof tailor.v1.AuthSCIMConfig.authorization_config
+   */
+  authorizationConfig: {
+    /**
+     * @generated from field: tailor.v1.SecretValue bearer_secret = 10;
+     */
+    value: SecretValue;
+    case: "bearerSecret";
+  } | {
+    case: undefined;
+    value?: undefined;
+  };
+};
+/**
+ * @generated from enum tailor.v1.AuthSCIMConfig.AuthorizationType
+ */
+declare enum AuthSCIMConfig_AuthorizationType {
+  /**
+   * @generated from enum value: AUTHORIZATION_TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: AUTHORIZATION_TYPE_BEARER = 1;
+   */
+  BEARER = 1,
+  /**
+   * @generated from enum value: AUTHORIZATION_TYPE_OAUTH2 = 2;
+   */
+  OAUTH2 = 2
+}
+/**
+ * @generated from message tailor.v1.AuthSCIMResource
+ */
+declare type AuthSCIMResource = Message<"tailor.v1.AuthSCIMResource"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+  /**
+   * @generated from field: string tailor_db_namespace = 2;
+   */
+  tailorDbNamespace: string;
+  /**
+   * @generated from field: string tailor_db_type = 3;
+   */
+  tailorDbType: string;
+  /**
+   * @generated from field: repeated tailor.v1.AuthSCIMAttributeMapping attribute_mapping = 4;
+   */
+  attributeMapping: AuthSCIMAttributeMapping[];
+  /**
+   * @generated from field: tailor.v1.AuthSCIMSchema core_schema = 5;
+   */
+  coreSchema?: AuthSCIMSchema;
+};
+/**
+ * @generated from message tailor.v1.AuthSCIMAttributeMapping
+ */
+declare type AuthSCIMAttributeMapping = Message<"tailor.v1.AuthSCIMAttributeMapping"> & {
+  /**
+   * @generated from field: string tailor_db_field = 1;
+   */
+  tailorDbField: string;
+  /**
+   * @generated from field: string scim_path = 2;
+   */
+  scimPath: string;
+};
+/**
+ * @generated from message tailor.v1.AuthSCIMSchema
+ */
+declare type AuthSCIMSchema = Message<"tailor.v1.AuthSCIMSchema"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+  /**
+   * @generated from field: repeated tailor.v1.AuthSCIMAttribute attributes = 2;
+   */
+  attributes: AuthSCIMAttribute[];
+};
+/**
+ * @generated from message tailor.v1.AuthSCIMAttribute
+ */
+declare type AuthSCIMAttribute = Message<"tailor.v1.AuthSCIMAttribute"> & {
+  /**
+   * @generated from field: tailor.v1.AuthSCIMAttribute.Type type = 1;
+   */
+  type: AuthSCIMAttribute_Type;
+  /**
+   * @generated from field: string name = 2;
+   */
+  name: string;
+  /**
+   * @generated from field: string description = 3;
+   */
+  description: string;
+  /**
+   * @generated from field: tailor.v1.AuthSCIMAttribute.Mutability mutability = 4;
+   */
+  mutability: AuthSCIMAttribute_Mutability;
+  /**
+   * @generated from field: bool required = 5;
+   */
+  required: boolean;
+  /**
+   * @generated from field: bool multi_valued = 6;
+   */
+  multiValued: boolean;
+  /**
+   * @generated from field: tailor.v1.AuthSCIMAttribute.Uniqueness uniqueness = 7;
+   */
+  uniqueness: AuthSCIMAttribute_Uniqueness;
+  /**
+   * @generated from field: repeated string canonical_values = 8;
+   */
+  canonicalValues: string[];
+  /**
+   * @generated from field: repeated tailor.v1.AuthSCIMAttribute sub_attributes = 9;
+   */
+  subAttributes: AuthSCIMAttribute[];
+};
+/**
+ * @generated from enum tailor.v1.AuthSCIMAttribute.Type
+ */
+declare enum AuthSCIMAttribute_Type {
+  /**
+   * @generated from enum value: TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: TYPE_COMPLEX = 1;
+   */
+  COMPLEX = 1,
+  /**
+   * @generated from enum value: TYPE_STRING = 2;
+   */
+  STRING = 2,
+  /**
+   * @generated from enum value: TYPE_NUMBER = 3;
+   */
+  NUMBER = 3,
+  /**
+   * @generated from enum value: TYPE_BOOLEAN = 4;
+   */
+  BOOLEAN = 4,
+  /**
+   * @generated from enum value: TYPE_DATETIME = 5;
+   */
+  DATETIME = 5
+}
+/**
+ * @generated from enum tailor.v1.AuthSCIMAttribute.Mutability
+ */
+declare enum AuthSCIMAttribute_Mutability {
+  /**
+   * @generated from enum value: MUTABILITY_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: MUTABILITY_READ_ONLY = 1;
+   */
+  READ_ONLY = 1,
+  /**
+   * @generated from enum value: MUTABILITY_READ_WRITE = 2;
+   */
+  READ_WRITE = 2,
+  /**
+   * @generated from enum value: MUTABILITY_WRITE_ONLY = 3;
+   */
+  WRITE_ONLY = 3
+}
+/**
+ * @generated from enum tailor.v1.AuthSCIMAttribute.Uniqueness
+ */
+declare enum AuthSCIMAttribute_Uniqueness {
+  /**
+   * @generated from enum value: UNIQUENESS_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: UNIQUENESS_NONE = 1;
+   */
+  NONE = 1,
+  /**
+   * @generated from enum value: UNIQUENESS_SERVER = 2;
+   */
+  SERVER = 2,
+  /**
+   * @generated from enum value: UNIQUENESS_GLOBAL = 3;
+   */
+  GLOBAL = 3
+}
+/**
+ * @generated from message tailor.v1.AuthHook
+ */
+declare type AuthHook = Message<"tailor.v1.AuthHook"> & {
+  /**
+   * @generated from field: tailor.v1.AuthHookPoint hook_point = 1;
+   */
+  hookPoint: AuthHookPoint;
+  /**
+   * @generated from field: string script_ref = 2;
+   */
+  scriptRef: string;
+  /**
+   * @generated from field: tailor.v1.AuthInvoker invoker = 4;
+   */
+  invoker?: AuthInvoker;
+};
+/**
+ * @generated from message tailor.v1.AuthConnection
+ */
+declare type AuthConnection = Message<"tailor.v1.AuthConnection"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+  /**
+   * @generated from field: tailor.v1.AuthConnection.Type type = 2;
+   */
+  type: AuthConnection_Type;
+  /**
+   * @generated from oneof tailor.v1.AuthConnection.config
+   */
+  config: {
+    /**
+     * @generated from field: tailor.v1.AuthConnection.AuthConnectionOAuth2Config oauth2 = 3;
+     */
+    value: AuthConnection_AuthConnectionOAuth2Config;
+    case: "oauth2";
+  } | {
+    case: undefined;
+    value?: undefined;
+  };
+  /**
+   * @generated from field: google.protobuf.Timestamp created_at = 5;
+   */
+  createdAt?: Timestamp;
+  /**
+   * @generated from field: tailor.v1.AuthConnection.Status status = 6;
+   */
+  status: AuthConnection_Status;
+};
+/**
+ * @generated from message tailor.v1.AuthConnection.AuthConnectionOAuth2Config
+ */
+declare type AuthConnection_AuthConnectionOAuth2Config = Message<"tailor.v1.AuthConnection.AuthConnectionOAuth2Config"> & {
+  /**
+   * @generated from field: string provider_url = 1;
+   */
+  providerUrl: string;
+  /**
+   * @generated from field: string issuer_url = 2;
+   */
+  issuerUrl: string;
+  /**
+   * @generated from field: string client_id = 3;
+   */
+  clientId: string;
+  /**
+   * @generated from field: string client_secret = 4;
+   */
+  clientSecret: string;
+  /**
+   * Optional override for the OAuth2 authorization endpoint. If unset, the default
+   * authorization URL derived from the provider's metadata (e.g. via provider_url)
+   * will be used. Must be an HTTPS URL with a hostname (no IP literals).
+   *
+   * @generated from field: string auth_url = 5;
+   */
+  authUrl: string;
+  /**
+   * Optional override for the OAuth2 token endpoint. If unset, the default token URL
+   * derived from the provider's metadata (e.g. via provider_url) will be used. Must be
+   * an HTTPS URL with a hostname (no IP literals).
+   *
+   * @generated from field: string token_url = 6;
+   */
+  tokenUrl: string;
+};
+/**
+ * @generated from enum tailor.v1.AuthConnection.Type
+ */
+declare enum AuthConnection_Type {
+  /**
+   * @generated from enum value: TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: TYPE_OAUTH2 = 1;
+   */
+  OAUTH2 = 1
+}
+/**
+ * @generated from enum tailor.v1.AuthConnection.Status
+ */
+declare enum AuthConnection_Status {
+  /**
+   * @generated from enum value: STATUS_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: STATUS_UNAUTHORIZED = 1;
+   */
+  UNAUTHORIZED = 1,
+  /**
+   * @generated from enum value: STATUS_AUTHORIZED = 2;
+   */
+  AUTHORIZED = 2
+}
+/**
+ * @generated from message tailor.v1.AuthOAuth2Client
+ */
+declare type AuthOAuth2Client = Message<"tailor.v1.AuthOAuth2Client"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+  /**
+   * @generated from field: string description = 2;
+   */
+  description: string;
+  /**
+   * @generated from field: repeated tailor.v1.AuthOAuth2Client.GrantType grant_types = 3;
+   */
+  grantTypes: AuthOAuth2Client_GrantType[];
+  /**
+   * @generated from field: repeated string redirect_uris = 4;
+   */
+  redirectUris: string[];
+  /**
+   * @generated from field: string client_id = 5;
+   */
+  clientId: string;
+  /**
+   * @generated from field: string client_secret = 6;
+   */
+  clientSecret: string;
+  /**
+   * @generated from field: google.protobuf.Timestamp created_at = 7;
+   */
+  createdAt?: Timestamp;
+  /**
+   * @generated from field: tailor.v1.AuthOAuth2Client.ClientType client_type = 8;
+   */
+  clientType: AuthOAuth2Client_ClientType;
+  /**
+   * Optional access token lifetime. If not set, uses the default lifetime.
+   * Minimum allowed value is 60 seconds, maximum is 1 day (86400 seconds).
+   *
+   * @generated from field: google.protobuf.Duration access_token_lifetime = 9;
+   */
+  accessTokenLifetime?: Duration;
+  /**
+   * Optional refresh token lifetime. If not set, uses the default lifetime.
+   * Minimum allowed value is 60 seconds, maximum is 7 days (604800 seconds).
+   *
+   * @generated from field: google.protobuf.Duration refresh_token_lifetime = 10;
+   */
+  refreshTokenLifetime?: Duration;
+  /**
+   * When true, DPoP proof is required for token requests.
+   * Cannot be set to true for browser clients as they don't support DPoP.
+   *
+   * @generated from field: bool require_dpop = 11;
+   */
+  requireDpop: boolean;
+};
+/**
+ * @generated from enum tailor.v1.AuthOAuth2Client.GrantType
+ */
+declare enum AuthOAuth2Client_GrantType {
+  /**
+   * @generated from enum value: GRANT_TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: GRANT_TYPE_AUTHORIZATION_CODE = 1;
+   */
+  AUTHORIZATION_CODE = 1,
+  /**
+   * @generated from enum value: GRANT_TYPE_REFRESH_TOKEN = 2;
+   */
+  REFRESH_TOKEN = 2
+}
+/**
+ * @generated from enum tailor.v1.AuthOAuth2Client.ClientType
+ */
+declare enum AuthOAuth2Client_ClientType {
+  /**
+   * @generated from enum value: CLIENT_TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: CLIENT_TYPE_CONFIDENTIAL = 1;
+   */
+  CONFIDENTIAL = 1,
+  /**
+   * @generated from enum value: CLIENT_TYPE_PUBLIC = 2;
+   */
+  PUBLIC = 2,
+  /**
+   * @generated from enum value: CLIENT_TYPE_BROWSER = 3;
+   */
+  BROWSER = 3
+}
+/**
+ * @generated from message tailor.v1.ControlplaneMachineUser
+ */
+declare type ControlplaneMachineUser = Message<"tailor.v1.ControlplaneMachineUser"> & {
+  /**
+   * @generated from field: string id = 1;
+   */
+  id: string;
+  /**
+   * @generated from field: string name = 2;
+   */
+  name: string;
+  /**
+   * @generated from field: string description = 3;
+   */
+  description: string;
+  /**
+   * @generated from field: string organization_id = 4;
+   */
+  organizationId: string;
+  /**
+   * @generated from field: string folder_id = 5;
+   */
+  folderId: string;
+  /**
+   * @generated from field: string client_id = 6;
+   */
+  clientId: string;
+  /**
+   * @generated from field: string client_secret = 7;
+   */
+  clientSecret: string;
+};
+/**
+ * @generated from enum tailor.v1.PATScope
+ */
+declare enum PATScope {
+  /**
+   * @generated from enum value: PAT_SCOPE_UNSPECIFIED = 0;
+   */
+  PAT_SCOPE_UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: PAT_SCOPE_READ = 1;
+   */
+  PAT_SCOPE_READ = 1,
+  /**
+   * @generated from enum value: PAT_SCOPE_WRITE = 2;
+   */
+  PAT_SCOPE_WRITE = 2
+}
+/**
+ * Auth Hook --------------------------------------------------------
+ *
+ * @generated from enum tailor.v1.AuthHookPoint
+ */
+declare enum AuthHookPoint {
+  /**
+   * @generated from enum value: AUTH_HOOK_POINT_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: AUTH_HOOK_POINT_BEFORE_LOGIN = 1;
+   */
+  BEFORE_LOGIN = 1
+}
+//#endregion
+export { AuthConnection, AuthConnection_AuthConnectionOAuth2Config, AuthConnection_Status, AuthConnection_Type, AuthHook, AuthHookPoint, AuthIDPConfig, AuthIDPConfig_AuthType, AuthIDPConfig_Config, AuthIDPConfig_IDTokenConfig, AuthIDPConfig_OIDCConfig, AuthIDPConfig_SAMLConfig, AuthInvoker, AuthInvokerSchema, AuthOAuth2Client, AuthOAuth2Client_ClientType, AuthOAuth2Client_GrantType, AuthSCIMAttribute, AuthSCIMAttributeMapping, AuthSCIMAttribute_Mutability, AuthSCIMAttribute_Type, AuthSCIMAttribute_Uniqueness, AuthSCIMConfig, AuthSCIMConfig_AuthorizationType, AuthSCIMResource, AuthSCIMSchema, AuthService, ControlplaneMachineUser, MachineUser, PATScope, PersonalAccessToken, TenantProviderConfig, TenantProviderConfig_Config, TenantProviderConfig_TailorDBProviderConfig, TenantProviderConfig_TenantProviderType, UserProfileProviderConfig, UserProfileProviderConfig_Config, UserProfileProviderConfig_TailorDBProviderConfig, UserProfileProviderConfig_UserProfileProviderType };