@versori/run 0.2.30 → 0.3.0-beta.10

package/esm/src/services/credentials/generated/versori/credential/v1alpha1/credential_pb.d.ts

@@ -0,0 +1,1468 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Duration, Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file versori/credential/v1alpha1/credential.proto.
+ */
+export declare const file_versori_credential_v1alpha1_credential: GenFile;
+/**
+ * Credential holds sensitive data not owned by Versori. Users can create credentials so that Versori systems can
+ * authenticate to external services on behalf of the user.
+ *
+ * @generated from message versori.credential.v1alpha1.Credential
+ */
+export type Credential = Message<"versori.credential.v1alpha1.Credential"> & {
+    /**
+     * ID is the unique identifier for the Credential.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * OrganisationID is the organisation which owns the Credential
+     *
+     * @generated from field: string organisation_id = 2;
+     */
+    organisationId: string;
+    /**
+     * Name is a human-friendly name for the Credential.
+     *
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * Type provides additional context to what data the credential contains. Certain types dictate that certain fields
+     * must be set in order for the credential to be considered "valid". Details of which properties for which types can
+     * be found on the documentation for each Type enum value.
+     *
+     * @generated from field: versori.credential.v1alpha1.Credential.Type type = 4;
+     */
+    type: Credential_Type;
+    /**
+     * IsValid is true if the credential data is valid, as specified by Type.
+     *
+     * @generated from field: bool is_valid = 5;
+     */
+    isValid: boolean;
+    /**
+     * Data is a key-value map of credential data. Keys must be alpha-numeric characters, `-`, `_` or `.`. Values must be
+     * base64 encoded.
+     *
+     * @generated from field: map<string, bytes> data = 6;
+     */
+    data: {
+        [key: string]: Uint8Array;
+    };
+    /**
+     * RedactFields is a list of strings corresponding to fields from data which should never be exposed outside of the
+     * credentials service. This should only be set for credentials of type Default, the service may automatically redact
+     * fields of other types as necessary and ignore this list.
+     *
+     * @generated from field: repeated string redact_fields = 7;
+     */
+    redactFields: string[];
+    /**
+     * ExpiresAt denotes the time this credential should be automatically deleted. External systems can subscribe to
+     * deletion events and if the reason is "expired", can trigger the correct notifications to interested parties (such
+     * as un-publishing jobs which rely on the credential and emailing the owner to rectify it).
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 8;
+     */
+    expiresAt?: Timestamp;
+    /**
+     * @generated from field: repeated string validation_errors = 9;
+     */
+    validationErrors: string[];
+};
+/**
+ * Describes the message versori.credential.v1alpha1.Credential.
+ * Use `create(CredentialSchema)` to create a new message.
+ */
+export declare const CredentialSchema: GenMessage<Credential>;
+/**
+ * @generated from enum versori.credential.v1alpha1.Credential.Type
+ */
+export declare enum Credential_Type {
+    /**
+     * Default is the default type for a Credential. Data may contain arbitrary properties and will always be considered
+     * valid.
+     *
+     * @generated from enum value: Default = 0;
+     */
+    Default = 0,
+    /**
+     * OAuth2Token signifies the credential is to be used for issuing OAuth 2.0 access tokens. The credential data
+     * must json-marshal into a CredentialDataOAuth2Token in order to be valid.
+     *
+     * @generated from enum value: OAuth2Token = 1;
+     */
+    OAuth2Token = 1,
+    /**
+     * Raw signifies the credential contains a value which can be used until the credential expires (or never if the
+     * credential has no expiry). The credential data must json-marshal into a CredentialDataRaw in order to be valid.
+     *
+     * @generated from enum value: Raw = 2;
+     */
+    Raw = 2,
+    /**
+     * BasicAuth signifies the credential contains credentials to be used in HTTP Basic authentication schemes. The
+     * credential data must json-marshal into a CredentialDataBasicAuth in order to be valid.
+     *
+     * @generated from enum value: BasicAuth = 3;
+     */
+    BasicAuth = 3,
+    /**
+     * OAuth2Client is the credential type used to store a client ID and client secret for OAuth 2.0 flows.
+     *
+     * @generated from enum value: OAuth2Client = 4;
+     */
+    OAuth2Client = 4,
+    /**
+     * CredentialHTTPRefreshData is the user configuration containing the config id and the sensitive data to send.
+     *
+     * @generated from enum value: HTTPRefreshData = 5;
+     */
+    HTTPRefreshData = 5,
+    /**
+     * HTTPRefreshConfig contains the config of how to refresh a token.
+     *
+     * @generated from enum value: HTTPRefreshConfig = 6;
+     */
+    HTTPRefreshConfig = 6,
+    /**
+     * @generated from enum value: JWTBearer = 7;
+     */
+    JWTBearer = 7,
+    /**
+     * CustomFunction contains the Function URL to authenticate the request.
+     *
+     * @generated from enum value: CustomFunction = 8;
+     */
+    CustomFunction = 8,
+    /**
+     * OAuth2ResourceOwner is the credential type used to store a username, password and temporary access_tokens used
+     * in OAuth 2.0 "password" grant type flows.
+     *
+     * @generated from enum value: OAuth2ResourceOwner = 9;
+     */
+    OAuth2ResourceOwner = 9,
+    /**
+     * Certificate is the credential type used to store a certificate and certificate key used
+     * for services that require mutual TLS.
+     *
+     * @generated from enum value: Certificate = 10;
+     */
+    Certificate = 10,
+    /**
+     * OAuth1Client is the credential type used to store a consumer key, secret and other configuration
+     * for OAuth 1.0 flows.
+     *
+     * @generated from enum value: OAuth1Client = 11;
+     */
+    OAuth1Client = 11,
+    /**
+     * OAuth1Token is the credential type used to store an oauth_token and oauth_token_secret for
+     * OAuth 1.0 flows.
+     *
+     * @generated from enum value: OAuth1Token = 12;
+     */
+    OAuth1Token = 12
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.Credential.Type.
+ */
+export declare const Credential_TypeSchema: GenEnum<Credential_Type>;
+/**
+ * CredentialDataOAuth2Token holds the configuration required to issue access tokens from a refresh token.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth2Token
+ */
+export type CredentialDataOAuth2Token = Message<"versori.credential.v1alpha1.CredentialDataOAuth2Token"> & {
+    /**
+     * OAuth2ClientCredentialID is a reference to another Credential of type OAuth2Client, containing the configuration
+     * on how to use the refresh_token to obtain an access_token.
+     *
+     * @generated from field: string oauth2_client_credential_id = 1;
+     */
+    oauth2ClientCredentialId: string;
+    /**
+     * AccessToken is a static token retrieved during the initial OAuth2 flow. If expires_at is not set, this token
+     * should be valid indefinitely and will never be refreshed.
+     *
+     * @generated from field: string access_token = 2;
+     */
+    accessToken: string;
+    /**
+     * TokenType is the type of token being issued, defaulting to "Bearer" if not set.
+     *
+     * @generated from field: string token_type = 3;
+     */
+    tokenType: string;
+    /**
+     * RefreshToken is provided by the OAuth2 provider for refreshing access tokens when they expire. If this field is
+     * not set and the access_token has expired, the user will be required to re-authenticate.
+     * +required
+     *
+     * @generated from field: string refresh_token = 4;
+     */
+    refreshToken: string;
+    /**
+     * ExpiresAt is the time at which the access_token expires. Since all fields within credential.data must be base64
+     * encoded, this value is stored an RFC3339 formatted string, which can be parsed into a proper time.Time at runtime.
+     *
+     * @generated from field: string expires_at = 5;
+     */
+    expiresAt: string;
+    /**
+     * Scopes contains the list of scopes which the user in an authorization_code flow has consented to, or have been
+     * requested in a client_credentials flow.
+     *
+     * @generated from field: repeated string scopes = 8;
+     */
+    scopes: string[];
+    /**
+     * AdditionalParams is a URL-encoded query string containing additional parameters which were sent in the
+     * Authorization Response as defined by
+     * [RFC-6749 §4.1.2](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2).
+     *
+     * Only parameters which are defined in the owning OAuth 2.0 Client will be persisted, unrecognized parameters will be
+     * ignored.
+     *
+     * These parameters will be provided to the token endpoint when performing authorization_code or refresh_token grant
+     * type to the token endpoint, and will override any additional_params defined in the owning OAuth2Client.
+     *
+     * @generated from field: string additional_params = 9;
+     */
+    additionalParams: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth2Token.
+ * Use `create(CredentialDataOAuth2TokenSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth2TokenSchema: GenMessage<CredentialDataOAuth2Token>;
+/**
+ * CredentialDataRaw holds a single value which can be used to store an arbitrary secret like an API key or password.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataRaw
+ */
+export type CredentialDataRaw = Message<"versori.credential.v1alpha1.CredentialDataRaw"> & {
+    /**
+     * Raw is the raw value which this credential manages.
+     * +required
+     *
+     * @generated from field: bytes raw = 1;
+     */
+    raw: Uint8Array;
+    /**
+     * RefreshCredentialID is a reference to another Credential of type CredentialHTTPRefreshData, containing the data
+     * and configuration for refreshing a raw credential if it has expired.
+     *
+     * @generated from field: string refresh_credential_id = 2;
+     */
+    refreshCredentialId: string;
+    /**
+     * ExpiresAt is the time at which the access_token expires. Since all fields within credential.data must be base64
+     * encoded, this value is stored an RFC3339 formatted string, which can be parsed into a proper time.Time at runtime.
+     *
+     * @generated from field: string expires_at = 3;
+     */
+    expiresAt: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataRaw.
+ * Use `create(CredentialDataRawSchema)` to create a new message.
+ */
+export declare const CredentialDataRawSchema: GenMessage<CredentialDataRaw>;
+/**
+ * CredentialHTTPRefreshData is the user configuration containing the config id and the sensitive data to send.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialHTTPRefreshData
+ */
+export type CredentialHTTPRefreshData = Message<"versori.credential.v1alpha1.CredentialHTTPRefreshData"> & {
+    /**
+     * Data is the sensitive user data required to generate a new token using the associated HTTPRefreshConfig.
+     * +required
+     *
+     * @generated from field: bytes data = 1;
+     */
+    data: Uint8Array;
+    /**
+     * HTTPRefreshConfigID is a reference to another Credential of type HTTPRefreshConfig, containing the configuration for
+     * refreshing a credential.
+     * +required
+     *
+     * @generated from field: string http_refresh_config_id = 2;
+     */
+    httpRefreshConfigId: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialHTTPRefreshData.
+ * Use `create(CredentialHTTPRefreshDataSchema)` to create a new message.
+ */
+export declare const CredentialHTTPRefreshDataSchema: GenMessage<CredentialHTTPRefreshData>;
+/**
+ * CredentialHTTPRefreshConfig is used to unmarshal the body into a HTTPRefreshConfig message.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialHTTPRefreshConfig
+ */
+export type CredentialHTTPRefreshConfig = Message<"versori.credential.v1alpha1.CredentialHTTPRefreshConfig"> & {
+    /**
+     * Body will unmarshal to a HTTPRefreshConfig message
+     * +required
+     *
+     * @generated from field: bytes body = 1;
+     */
+    body: Uint8Array;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialHTTPRefreshConfig.
+ * Use `create(CredentialHTTPRefreshConfigSchema)` to create a new message.
+ */
+export declare const CredentialHTTPRefreshConfigSchema: GenMessage<CredentialHTTPRefreshConfig>;
+/**
+ * CustomFunction contains the Function URL to authenticate the request.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialCustomFunction
+ */
+export type CredentialCustomFunction = Message<"versori.credential.v1alpha1.CredentialCustomFunction"> & {
+    /**
+     * Data is the sensitive user data required to generate a new token using the associated Function.
+     * +required
+     *
+     * @generated from field: bytes data = 1;
+     */
+    data: Uint8Array;
+    /**
+     * FunctionURL is the URL to the deployed Function to pass the request template to in order to configure the request
+     * authentication.
+     * +required
+     *
+     * @generated from field: string function_url = 2;
+     */
+    functionUrl: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialCustomFunction.
+ * Use `create(CredentialCustomFunctionSchema)` to create a new message.
+ */
+export declare const CredentialCustomFunctionSchema: GenMessage<CredentialCustomFunction>;
+/**
+ * HTTPRefreshConfig contains the config of how to refresh a token.
+ *
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig
+ */
+export type HTTPRefreshConfig = Message<"versori.credential.v1alpha1.HTTPRefreshConfig"> & {
+    /**
+     * Template defines how to perform the HTTP request for obtaining a new credential.
+     *
+     * @generated from field: versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate template = 1;
+     */
+    template?: HTTPRefreshConfig_RequestTemplate;
+    /**
+     * ExpiresAfter is the duration new tokens are valid after issuing.
+     *
+     * @generated from field: google.protobuf.Duration expires_after = 2;
+     */
+    expiresAfter?: Duration;
+    /**
+     * Selector extracts the new credential from the response of the HTTP request.
+     *
+     * @generated from field: versori.credential.v1alpha1.HTTPRefreshConfig.Selector selector = 3;
+     */
+    selector?: HTTPRefreshConfig_Selector;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.
+ * Use `create(HTTPRefreshConfigSchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfigSchema: GenMessage<HTTPRefreshConfig>;
+/**
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate
+ */
+export type HTTPRefreshConfig_RequestTemplate = Message<"versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate"> & {
+    /**
+     * @generated from field: string url = 1;
+     */
+    url: string;
+    /**
+     * @generated from field: string method = 2;
+     */
+    method: string;
+    /**
+     * @generated from field: map<string, versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.HeaderValue> headers = 3;
+     */
+    headers: {
+        [key: string]: HTTPRefreshConfig_RequestTemplate_HeaderValue;
+    };
+    /**
+     * CredentialTarget defines where the data of this refresh credential should be placed in the request.
+     *
+     * @generated from oneof versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.credential_target
+     */
+    credentialTarget: {
+        /**
+         * Body signifies the credential data should be placed in the request body.
+         *
+         * @generated from field: versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.Body body = 4;
+         */
+        value: HTTPRefreshConfig_RequestTemplate_CredentialTarget_Body;
+        case: "body";
+    } | {
+        /**
+         * Header signifies the credential data should be placed in a request header.
+         *
+         * @generated from field: versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.Header header = 5;
+         */
+        value: HTTPRefreshConfig_RequestTemplate_CredentialTarget_Header;
+        case: "header";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.
+ * Use `create(HTTPRefreshConfig_RequestTemplateSchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfig_RequestTemplateSchema: GenMessage<HTTPRefreshConfig_RequestTemplate>;
+/**
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.HeaderValue
+ */
+export type HTTPRefreshConfig_RequestTemplate_HeaderValue = Message<"versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.HeaderValue"> & {
+    /**
+     * @generated from field: repeated string values = 1;
+     */
+    values: string[];
+};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.HeaderValue.
+ * Use `create(HTTPRefreshConfig_RequestTemplate_HeaderValueSchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfig_RequestTemplate_HeaderValueSchema: GenMessage<HTTPRefreshConfig_RequestTemplate_HeaderValue>;
+/**
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget
+ */
+export type HTTPRefreshConfig_RequestTemplate_CredentialTarget = Message<"versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget"> & {};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.
+ * Use `create(HTTPRefreshConfig_RequestTemplate_CredentialTargetSchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfig_RequestTemplate_CredentialTargetSchema: GenMessage<HTTPRefreshConfig_RequestTemplate_CredentialTarget>;
+/**
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.Body
+ */
+export type HTTPRefreshConfig_RequestTemplate_CredentialTarget_Body = Message<"versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.Body"> & {};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.Body.
+ * Use `create(HTTPRefreshConfig_RequestTemplate_CredentialTarget_BodySchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfig_RequestTemplate_CredentialTarget_BodySchema: GenMessage<HTTPRefreshConfig_RequestTemplate_CredentialTarget_Body>;
+/**
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.Header
+ */
+export type HTTPRefreshConfig_RequestTemplate_CredentialTarget_Header = Message<"versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.Header"> & {
+    /**
+     * Name is the header name to place the credential data in for retrieving a new token.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.RequestTemplate.CredentialTarget.Header.
+ * Use `create(HTTPRefreshConfig_RequestTemplate_CredentialTarget_HeaderSchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfig_RequestTemplate_CredentialTarget_HeaderSchema: GenMessage<HTTPRefreshConfig_RequestTemplate_CredentialTarget_Header>;
+/**
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig.Selector
+ */
+export type HTTPRefreshConfig_Selector = Message<"versori.credential.v1alpha1.HTTPRefreshConfig.Selector"> & {
+    /**
+     * @generated from oneof versori.credential.v1alpha1.HTTPRefreshConfig.Selector.selector
+     */
+    selector: {
+        /**
+         * @generated from field: versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector body = 1;
+         */
+        value: HTTPRefreshConfig_Selector_BodySelector;
+        case: "body";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.Selector.
+ * Use `create(HTTPRefreshConfig_SelectorSchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfig_SelectorSchema: GenMessage<HTTPRefreshConfig_Selector>;
+/**
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector
+ */
+export type HTTPRefreshConfig_Selector_BodySelector = Message<"versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector"> & {
+    /**
+     * @generated from oneof versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector.expression
+     */
+    expression: {
+        /**
+         * @generated from field: versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector.GvalExpression gval = 1;
+         */
+        value: HTTPRefreshConfig_Selector_BodySelector_GvalExpression;
+        case: "gval";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector.
+ * Use `create(HTTPRefreshConfig_Selector_BodySelectorSchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfig_Selector_BodySelectorSchema: GenMessage<HTTPRefreshConfig_Selector_BodySelector>;
+/**
+ * @generated from message versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector.GvalExpression
+ */
+export type HTTPRefreshConfig_Selector_BodySelector_GvalExpression = Message<"versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector.GvalExpression"> & {
+    /**
+     * @generated from field: string expr = 1;
+     */
+    expr: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.HTTPRefreshConfig.Selector.BodySelector.GvalExpression.
+ * Use `create(HTTPRefreshConfig_Selector_BodySelector_GvalExpressionSchema)` to create a new message.
+ */
+export declare const HTTPRefreshConfig_Selector_BodySelector_GvalExpressionSchema: GenMessage<HTTPRefreshConfig_Selector_BodySelector_GvalExpression>;
+/**
+ * CredentialDataBasicAuth holds credentials to authenticate to a HTTP server protected by Basic Authentication.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataBasicAuth
+ */
+export type CredentialDataBasicAuth = Message<"versori.credential.v1alpha1.CredentialDataBasicAuth"> & {
+    /**
+     * Username is the basic-auth username.
+     *
+     * @generated from field: string username = 1;
+     */
+    username: string;
+    /**
+     * Password is the basic-auth password.
+     *
+     * @generated from field: string password = 2;
+     */
+    password: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataBasicAuth.
+ * Use `create(CredentialDataBasicAuthSchema)` to create a new message.
+ */
+export declare const CredentialDataBasicAuthSchema: GenMessage<CredentialDataBasicAuth>;
+/**
+ * CredentialDataCertificate holds credentials to authenticate to a HTTP server protected by mTLS. All properties
+ * must be PEM encoded.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataCertificate
+ */
+export type CredentialDataCertificate = Message<"versori.credential.v1alpha1.CredentialDataCertificate"> & {
+    /**
+     * Certificate is the certificate.
+     *
+     * @generated from field: bytes certificate = 1;
+     */
+    certificate: Uint8Array;
+    /**
+     * Key is the certificate key.
+     *
+     * @generated from field: bytes key = 2;
+     */
+    key: Uint8Array;
+    /**
+     * CA is the certificate authority.
+     *
+     * @generated from field: bytes ca = 3;
+     */
+    ca: Uint8Array;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataCertificate.
+ * Use `create(CredentialDataCertificateSchema)` to create a new message.
+ */
+export declare const CredentialDataCertificateSchema: GenMessage<CredentialDataCertificate>;
+/**
+ * CredentialDataOAuth2Client holds a client ID, client secret, and other related configuration to implement OAuth 2.0
+ * flows.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth2Client
+ */
+export type CredentialDataOAuth2Client = Message<"versori.credential.v1alpha1.CredentialDataOAuth2Client"> & {
+    /**
+     * ClientID is the identifier for the OAuth2 client.
+     *
+     * @generated from field: string client_id = 1;
+     */
+    clientId: string;
+    /**
+     * ClientSecret is the credential for the OAuth2 client.
+     *
+     * @generated from field: string client_secret = 2;
+     */
+    clientSecret: string;
+    /**
+     * AuthorizationEndpoint is where users should be redirected to initiate an authorization code flow.
+     *
+     * @generated from field: string authorization_endpoint = 3;
+     */
+    authorizationEndpoint: string;
+    /**
+     * TokenEndpoint is where requests should be made to issue an access token in exchange for a refresh token or
+     * authorization code.
+     * +required
+     *
+     * @generated from field: string token_endpoint = 4;
+     */
+    tokenEndpoint: string;
+    /**
+     * UserinfoEndpoint is the endpoint to retrieve a user's information using a valid access_token.
+     *
+     * @generated from field: string userinfo_endpoint = 5;
+     */
+    userinfoEndpoint: string;
+    /**
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth2Client.Flow flow = 6;
+     */
+    flow: CredentialDataOAuth2Client_Flow;
+    /**
+     * Scopes is a space-seperated list of OAuth2 scopes which are being requested by this client. Currently only applies
+     * to tokens issued by a client_credentials flow.
+     *
+     * @generated from field: string scopes = 7;
+     */
+    scopes: string;
+    /**
+     * AdditionalParams is a URL-encoded query string which can be appended to the token endpoint when requesting a
+     * token. How these parameters are handled is defined by the grant_type:
+     *
+     * - authorization_code: See AdditionalParamConfigs.
+     * - refresh_token: See AdditionalParamConfigs.
+     * - client_credentials: The parameters will ALWAYS be placed in the request body, any configuration does not apply.
+     * - password: additional_params is not currently supported.
+     *
+     * @generated from field: string additional_params = 8;
+     */
+    additionalParams: string;
+    /**
+     * Username is the username to use when authenticating to the token endpoint.
+     * Only applies to tokens issued by a password flow.
+     *
+     * @generated from field: string username = 9;
+     */
+    username: string;
+    /**
+     * Password is the password to use when authenticating to the token endpoint.
+     * Only applies to tokens issued by a password flow.
+     *
+     * @generated from field: string password = 10;
+     */
+    password: string;
+    /**
+     * AdditionalParamConfigs is a list of configurations on how to handle additional parameters when issuing a token.
+     * If a parameter is defined by additional_params and does not have a matching config, behaviour will be defined
+     * based on the grant_type:
+     *
+     * - authorization_code: The parameter will be ignored.
+     * - refresh_token: The parameter will be ignored.
+     * - client_credentials: The parameter will ALWAYS be placed in the request body, any configuration does not apply.
+     * - password: additional_params is not currently supported.
+     *
+     * @generated from field: repeated versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig additional_param_configs = 11;
+     */
+    additionalParamConfigs: CredentialDataOAuth2Client_ParameterConfig[];
+    /**
+     * AuthStyle denotes how the client ID and secret should be sent to the token URL. The default is to auto-detect.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth2Client.AuthStyle auth_style = 16;
+     */
+    authStyle: CredentialDataOAuth2Client_AuthStyle;
+    /**
+     * MtlsCredentialId is an optional field that points a CredentialDataCertificate credential
+     * If set the certificates from that credential will be used when refreshing the credential
+     *
+     * @generated from field: string mtls_credential_id = 17;
+     */
+    mtlsCredentialId: string;
+    /**
+     * OtherFlow is the name of a flow that is not a common OAuth2 flow.
+     * This will should only be set id flow is other.
+     *
+     * @generated from field: string other_flow = 18;
+     */
+    otherFlow: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth2Client.
+ * Use `create(CredentialDataOAuth2ClientSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth2ClientSchema: GenMessage<CredentialDataOAuth2Client>;
+/**
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig
+ */
+export type CredentialDataOAuth2Client_ParameterConfig = Message<"versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig"> & {
+    /**
+     * Key is the key of the additional parameter to insert.
+     *
+     * @generated from field: string parameter_name = 1;
+     */
+    parameterName: string;
+    /**
+     * TargetName allows overriding the name of the parameter in the request to the Token Endpoint. If not set, the
+     * parameter will be sent with using the same name as ParameterName.
+     *
+     * @generated from field: string target_name = 2;
+     */
+    targetName: string;
+    /**
+     * Location defines where this parameter should be placed in the request.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig.Location location = 3;
+     */
+    location: CredentialDataOAuth2Client_ParameterConfig_Location;
+    /**
+     * From defines where the value of this parameter should be taken from.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig.From from = 4;
+     */
+    from: CredentialDataOAuth2Client_ParameterConfig_From;
+    /**
+     * GrantTypes is a list of grant types which this parameter should be included in. If empty, the parameter will be
+     * handled according to this configuration for all grant types.
+     *
+     * This is a string and not an enum since custom grant types are allowed as per the specification. Although the
+     * credentials service is currently limited to set grant_types in other areas of the codebase, future functionality
+     * should be implemented without these restrictions.
+     *
+     * @generated from field: repeated string grant_types = 5;
+     */
+    grantTypes: string[];
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig.
+ * Use `create(CredentialDataOAuth2Client_ParameterConfigSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth2Client_ParameterConfigSchema: GenMessage<CredentialDataOAuth2Client_ParameterConfig>;
+/**
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig.Location
+ */
+export declare enum CredentialDataOAuth2Client_ParameterConfig_Location {
+    /**
+     * LocationIgnore denotes that the parameter should be ignored and not sent. This is the default for unknown
+     * parameters due to the wording of
+     * [RFC-6749 §4.1.2](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2):
+     *
+     *   The client MUST ignore unrecognized response parameters.
+     *
+     * @generated from enum value: LocationIgnore = 0;
+     */
+    LocationIgnore = 0,
+    /**
+     * LocationBody denotes that the parameter should be placed in the request body.
+     *
+     * @generated from enum value: LocationBody = 1;
+     */
+    LocationBody = 1,
+    /**
+     * LocationHeader denotes that the parameter should be placed in the request header.
+     *
+     * @generated from enum value: LocationHeader = 2;
+     */
+    LocationHeader = 2,
+    /**
+     * LocationQuery denotes that the parameter should be placed in the request query string.
+     *
+     * @generated from enum value: LocationQuery = 3;
+     */
+    LocationQuery = 3
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig.Location.
+ */
+export declare const CredentialDataOAuth2Client_ParameterConfig_LocationSchema: GenEnum<CredentialDataOAuth2Client_ParameterConfig_Location>;
+/**
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig.From
+ */
+export declare enum CredentialDataOAuth2Client_ParameterConfig_From {
+    /**
+     * FromAdditionalParams denotes that the parameter should be taken from the additional_params field.
+     *
+     * @generated from enum value: FromAdditionalParams = 0;
+     */
+    FromAdditionalParams = 0,
+    /**
+     * FromRandomUUID denotes that the parameter should be a random UUID generated on each request to the token
+     * endpoint.
+     *
+     * @generated from enum value: FromRandomUUID = 1;
+     */
+    FromRandomUUID = 1
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth2Client.ParameterConfig.From.
+ */
+export declare const CredentialDataOAuth2Client_ParameterConfig_FromSchema: GenEnum<CredentialDataOAuth2Client_ParameterConfig_From>;
+/**
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth2Client.AuthStyle
+ */
+export declare enum CredentialDataOAuth2Client_AuthStyle {
+    /**
+     * @generated from enum value: AuthStyleAutoDetect = 0;
+     */
+    AuthStyleAutoDetect = 0,
+    /**
+     * @generated from enum value: AuthStyleInParams = 1;
+     */
+    AuthStyleInParams = 1,
+    /**
+     * @generated from enum value: AuthStyleInHeader = 2;
+     */
+    AuthStyleInHeader = 2
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth2Client.AuthStyle.
+ */
+export declare const CredentialDataOAuth2Client_AuthStyleSchema: GenEnum<CredentialDataOAuth2Client_AuthStyle>;
+/**
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth2Client.Flow
+ */
+export declare enum CredentialDataOAuth2Client_Flow {
+    /**
+     * @generated from enum value: authorization_code = 0;
+     */
+    authorization_code = 0,
+    /**
+     * @generated from enum value: client_credentials = 1;
+     */
+    client_credentials = 1,
+    /**
+     * resource_owner_password represents the `password` flow. This had to be named differently as the password field
+     * is already defined in this message. Once we fully migrate to the new OAuth2ResourceOwner credential, this can be
+     * renamed to `password` as the `username` and `password` fields above can be removed.
+     *
+     * @generated from enum value: resource_owner_password = 2;
+     */
+    resource_owner_password = 2,
+    /**
+     * other is for anything that is not a common OAuth2 flow.
+     * the exact flow will be defined by the credential owner.
+     *
+     * @generated from enum value: other = 3;
+     */
+    other = 3
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth2Client.Flow.
+ */
+export declare const CredentialDataOAuth2Client_FlowSchema: GenEnum<CredentialDataOAuth2Client_Flow>;
+/**
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth2ResourceOwner
+ */
+export type CredentialDataOAuth2ResourceOwner = Message<"versori.credential.v1alpha1.CredentialDataOAuth2ResourceOwner"> & {
+    /**
+     * OAuth2ClientCredentialID is a reference to another Credential of type OAuth2Client, containing the client ID and
+     * secret to use when obtaining an access token.
+     *
+     * N.B. Although the OAuth 2.0 specification does not require the client ID and secret to be sent when executing
+     * the password grant type, this is a requirement of the Versori credential system. Support for this may be added in
+     * the future by adding a flag to the OAuth2Client type so that validation can be suppressed.
+     *
+     * @generated from field: string oauth2_client_credential_id = 1;
+     */
+    oauth2ClientCredentialId: string;
+    /**
+     * Username is the username to use when authenticating to the token endpoint.
+     *
+     * @generated from field: string username = 2;
+     */
+    username: string;
+    /**
+     * Password is the password to use when authenticating to the token endpoint.
+     *
+     * @generated from field: string password = 3;
+     */
+    password: string;
+    /**
+     * AccessToken represents a temporary token for authenticating as the resource owner, this is issued by performing
+     * a `password` grant type flow.
+     *
+     * @generated from field: string access_token = 4;
+     */
+    accessToken: string;
+    /**
+     * TokenType is the type of token being issued, defaulting to "Bearer" if not set.
+     *
+     * @generated from field: string token_type = 5;
+     */
+    tokenType: string;
+    /**
+     * ExpiresAt is the time at which the access_token expires. Since all fields within credential.data must be base64
+     * encoded, this value is stored an RFC3339 formatted string, which can be parsed into a proper time.Time at runtime.
+     *
+     * @generated from field: string expires_at = 6;
+     */
+    expiresAt: string;
+    /**
+     * RefreshToken is an optional token which can be used to obtain a new access token when the current one expires. This
+     * is optional and rarely used for `password` grant types, however it is still supported.
+     *
+     * @generated from field: string refresh_token = 7;
+     */
+    refreshToken: string;
+    /**
+     * Scopes contains the list of scopes to use when requesting an access token.
+     *
+     * @generated from field: repeated string scopes = 8;
+     */
+    scopes: string[];
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth2ResourceOwner.
+ * Use `create(CredentialDataOAuth2ResourceOwnerSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth2ResourceOwnerSchema: GenMessage<CredentialDataOAuth2ResourceOwner>;
+/**
+ * CredentialDataJWTBearer holds the configuration required to issue a JWT for JWT Bearer authentication.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataJWTBearer
+ */
+export type CredentialDataJWTBearer = Message<"versori.credential.v1alpha1.CredentialDataJWTBearer"> & {
+    /**
+     * Algorithm is the algorithm used to sign the JWT, must be a valid JOSE algorithm identifier.
+     *
+     * @generated from field: string algorithm = 1;
+     */
+    algorithm: string;
+    /**
+     * Secret is the secret used to sign the JWT. This is used as-is when signing the JWT but will be stored base64
+     * encoded. If using the JSON representation of this message, the secret will be base64 encoded.
+     *
+     * This is required and must be between 1B and 5KB in size.
+     *
+     * @generated from field: bytes secret = 2;
+     */
+    secret: Uint8Array;
+    /**
+     * Payload contains the raw bytes of the JSON payload to be signed. The resultant payload of a JWT may differ as some
+     * claims such as iat and exp will be automatically added.
+     *
+     * This is required and must be at least 2 bytes long (to encode an empty JSON object).
+     *
+     * @generated from field: bytes payload = 3;
+     */
+    payload: Uint8Array;
+    /**
+     * ExpiresIn is the duration the JWT is valid for, in Golang's time.Duration format. If not set, the JWT will have
+     * no expiry.
+     *
+     * @generated from field: string expires_in = 4;
+     */
+    expiresIn: string;
+    /**
+     * RequestHeaderPrefix is the prefix to use for the Authorization header when sending the JWT. If not set, the default
+     * "Bearer " will be used.
+     *
+     * @generated from field: string request_header_prefix = 5;
+     */
+    requestHeaderPrefix: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataJWTBearer.
+ * Use `create(CredentialDataJWTBearerSchema)` to create a new message.
+ */
+export declare const CredentialDataJWTBearerSchema: GenMessage<CredentialDataJWTBearer>;
+/**
+ * CredentialDataOAuth1Client defines the configuration required to authenticate with an OAuth 1.0
+ * provider as defined by [RFC-5849](https://datatracker.ietf.org/doc/html/rfc5849). The
+ * resultant `oauth_token` and `oauth_token_secret` from a user authorizing the client will be
+ * stored in a CredentialDataOAuth1Token.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Client
+ */
+export type CredentialDataOAuth1Client = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Client"> & {
+    /**
+     * ConsumerKey is the identifier for the OAuth1 client.
+     *
+     * @generated from field: string consumer_key = 1;
+     */
+    consumerKey: string;
+    /**
+     * ConsumerSecret is the credential for the OAuth1 client.
+     *
+     * @generated from field: string consumer_secret = 2;
+     */
+    consumerSecret: string;
+    /**
+     * TempCredentialEndpoint defines the endpoint for requesting a temporary credential for use in
+     * the Resource Owner
+     * Authorization request.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.Endpoint temp_credential_endpoint = 3;
+     */
+    tempCredentialEndpoint?: CredentialDataOAuth1Client_Endpoint;
+    /**
+     * ResourceOwnerAuthorizationEndpoint defines the endpoint where users should be redirected to
+     * for authorizing a temporary credential.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.Endpoint resource_owner_authorization_endpoint = 4;
+     */
+    resourceOwnerAuthorizationEndpoint?: CredentialDataOAuth1Client_Endpoint;
+    /**
+     * TokenEndpoint defines the endpoint for requesting an oauth_token and oauth_token_secret after
+     * the user has authorized the temporary credential.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.Endpoint token_endpoint = 5;
+     */
+    tokenEndpoint?: CredentialDataOAuth1Client_Endpoint;
+    /**
+     * SignatureMethod is the method used to sign authenticated requests.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.SignatureMethod signature_method = 6;
+     */
+    signatureMethod: CredentialDataOAuth1Client_SignatureMethod;
+    /**
+     * OAuthVersion is the version of the OAuth protocol to use, the only supported version is "1.0",
+     * but may be omitted for some providers.
+     *
+     * @generated from field: string oauth_version = 7;
+     */
+    oauthVersion: string;
+    /**
+     * DefaultParameterTransmission defines the default transmission method for authorization
+     * parameters when performing authenticated requests.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterTransmission default_parameter_transmission = 8;
+     */
+    defaultParameterTransmission: CredentialDataOAuth1Client_ParameterTransmission;
+    /**
+     * MtlsCredentialId is an optional field that points a CredentialDataCertificate credential
+     * If set the certificates from that credential will be used making requests to the Authorization
+     * Server.
+     *
+     * @generated from field: string mtls_credential_id = 18;
+     */
+    mtlsCredentialId: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Client.
+ * Use `create(CredentialDataOAuth1ClientSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1ClientSchema: GenMessage<CredentialDataOAuth1Client>;
+/**
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Client.Endpoint
+ */
+export type CredentialDataOAuth1Client_Endpoint = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Client.Endpoint"> & {
+    /**
+     * URL is the URL of the endpoint. This may contain templated values wrapped in curly-braces
+     * which will be replaced with values from the AdditionalParams field stored here, or
+     * provided by the user upon request to initiate the OAuth 1.0 flow.
+     *
+     * @generated from field: string url = 1;
+     */
+    url: string;
+    /**
+     * AdditionalParams is a URL-encoded query string containing additional parameters which will
+     * be used in the request to the endpoint. Additional parameters may be provided by the user
+     * upon request to initiate the OAuth 1.0 flow, which will override any parameters defined
+     * here. Any non-standard parameters will be ignored unless they are explicitly defined in
+     * the AdditionalParamConfigs field.
+     *
+     * @generated from field: string additional_params = 2;
+     */
+    additionalParams: string;
+    /**
+     * AdditionalParamConfigs is a list of configurations on how to handle additional parameters
+     * when making a request to the endpoint.
+     *
+     * @generated from field: repeated versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig additional_param_configs = 3;
+     */
+    additionalParamConfigs: CredentialDataOAuth1Client_ParameterConfig[];
+    /**
+     * ParameterTransmission defines how the authorization parameters should be transmitted to the
+     * server. If not set, the client's DefaultParameterTransmission will be used.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterTransmission parameter_transmission = 4;
+     */
+    parameterTransmission: CredentialDataOAuth1Client_ParameterTransmission;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Client.Endpoint.
+ * Use `create(CredentialDataOAuth1Client_EndpointSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1Client_EndpointSchema: GenMessage<CredentialDataOAuth1Client_Endpoint>;
+/**
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig
+ */
+export type CredentialDataOAuth1Client_ParameterConfig = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig"> & {
+    /**
+     * ParameterName is the key of the additional parameter to insert.
+     *
+     * @generated from field: string parameter_name = 1;
+     */
+    parameterName: string;
+    /**
+     * TargetName allows overriding the name of the parameter in the request to an Endpoint. If
+     * not set, the parameter will be sent with using the same name as ParameterName.
+     *
+     * This field also allows multiple parameters to exist, which are handled against the same
+     * target name. For example, NetSuite documentation uses the `accountID` parameter as a
+     * subdomain of the endpoints, but the parameter is provided to the client in the
+     * `oauth_callback` URL as `company`. You could in theory replace the `accountID` parameter
+     * with `company` in the request to the TempCredentialEndpoint, however `accountID` is more
+     * descriptive.
+     *
+     * @generated from field: string target_name = 2;
+     */
+    targetName: string;
+    /**
+     * Location defines where this parameter should be placed in the request.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.Location location = 3;
+     */
+    location: CredentialDataOAuth1Client_ParameterConfig_Location;
+    /**
+     * Usages is a bitmask of Usage values which define where this parameter should be sent.
+     *
+     * @generated from field: int32 usages = 4;
+     */
+    usages: number;
+    /**
+     * Required denotes whether this parameter is required to be sent in the request. If this is set to true and the
+     * parameter is not defined by the client, it must be provided by the user upon request.
+     *
+     * @generated from field: bool required = 5;
+     */
+    required: boolean;
+    /**
+     * Modifiable denotes whether this parameter can be modified by the user upon request.
+     *
+     * A client with a required parameter which is not modifiable must have that parameter stored in AdditionalParams,
+     * otherwise the credential will be considered invalid.
+     *
+     * @generated from field: bool modifiable = 6;
+     */
+    modifiable: boolean;
+    /**
+     * From defines where the value of this parameter should be taken from.
+     *
+     * If none of these fields are set, the default is to assume AdditionalParams.
+     *
+     * Protobuf field numbers within this OneOf should be in the range 16-31 to allow additional
+     * methods to be added in the future.
+     *
+     * @generated from oneof versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.from
+     */
+    from: {
+        /**
+         * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.AdditionalParams additional_params = 16;
+         */
+        value: CredentialDataOAuth1Client_ParameterConfig_From_AdditionalParams;
+        case: "additionalParams";
+    } | {
+        /**
+         * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.UUID random_uuid = 17;
+         */
+        value: CredentialDataOAuth1Client_ParameterConfig_From_UUID;
+        case: "randomUuid";
+    } | {
+        /**
+         * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.RandomString random_string = 18;
+         */
+        value: CredentialDataOAuth1Client_ParameterConfig_From_RandomString;
+        case: "randomString";
+    } | {
+        /**
+         * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.Timestamp timestamp = 19;
+         */
+        value: CredentialDataOAuth1Client_ParameterConfig_From_Timestamp;
+        case: "timestamp";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.
+ * Use `create(CredentialDataOAuth1Client_ParameterConfigSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfigSchema: GenMessage<CredentialDataOAuth1Client_ParameterConfig>;
+/**
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From
+ */
+export type CredentialDataOAuth1Client_ParameterConfig_From = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From"> & {};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.
+ * Use `create(CredentialDataOAuth1Client_ParameterConfig_FromSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfig_FromSchema: GenMessage<CredentialDataOAuth1Client_ParameterConfig_From>;
+/**
+ * AdditionalParams indicates that the parameter should be taken from the additional_params
+ * field.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.AdditionalParams
+ */
+export type CredentialDataOAuth1Client_ParameterConfig_From_AdditionalParams = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.AdditionalParams"> & {};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.AdditionalParams.
+ * Use `create(CredentialDataOAuth1Client_ParameterConfig_From_AdditionalParamsSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfig_From_AdditionalParamsSchema: GenMessage<CredentialDataOAuth1Client_ParameterConfig_From_AdditionalParams>;
+/**
+ * RandomUUID indicates that the parameter should be a random UUID generated on each request.
+ * UUIDv4 is used.
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.UUID
+ */
+export type CredentialDataOAuth1Client_ParameterConfig_From_UUID = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.UUID"> & {};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.UUID.
+ * Use `create(CredentialDataOAuth1Client_ParameterConfig_From_UUIDSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfig_From_UUIDSchema: GenMessage<CredentialDataOAuth1Client_ParameterConfig_From_UUID>;
+/**
+ * RandomString indicates that the parameter should be a random string generated on each
+ * request. The length and encoding may be configured
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.RandomString
+ */
+export type CredentialDataOAuth1Client_ParameterConfig_From_RandomString = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.RandomString"> & {
+    /**
+     * NumBytes denotes the number of bytes to generate for the random string. The actual
+     * length of the string will be dictated by the encoding used. Defaults
+     *
+     * @generated from field: int32 num_bytes = 1;
+     */
+    numBytes: number;
+    /**
+     * Encoding is the encoding to use when generating the random string.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.RandomString.Encoding encoding = 2;
+     */
+    encoding: CredentialDataOAuth1Client_ParameterConfig_From_RandomString_Encoding;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.RandomString.
+ * Use `create(CredentialDataOAuth1Client_ParameterConfig_From_RandomStringSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfig_From_RandomStringSchema: GenMessage<CredentialDataOAuth1Client_ParameterConfig_From_RandomString>;
+/**
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.RandomString.Encoding
+ */
+export declare enum CredentialDataOAuth1Client_ParameterConfig_From_RandomString_Encoding {
+    /**
+     * @generated from enum value: ENCODING_BASE64 = 0;
+     */
+    BASE64 = 0,
+    /**
+     * @generated from enum value: ENCODING_HEX = 1;
+     */
+    HEX = 1
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.RandomString.Encoding.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfig_From_RandomString_EncodingSchema: GenEnum<CredentialDataOAuth1Client_ParameterConfig_From_RandomString_Encoding>;
+/**
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.Timestamp
+ */
+export type CredentialDataOAuth1Client_ParameterConfig_From_Timestamp = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.Timestamp"> & {};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.From.Timestamp.
+ * Use `create(CredentialDataOAuth1Client_ParameterConfig_From_TimestampSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfig_From_TimestampSchema: GenMessage<CredentialDataOAuth1Client_ParameterConfig_From_Timestamp>;
+/**
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.Location
+ */
+export declare enum CredentialDataOAuth1Client_ParameterConfig_Location {
+    /**
+     * LOCATION_IGNORE denotes that the parameter should be ignored and not sent. This is the default for unknown
+     * parameters due to the wording of
+     * [RFC-6749 §4.1.2](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2):
+     *
+     *   The client MUST ignore unrecognized response parameters.
+     *
+     * @generated from enum value: LOCATION_IGNORE = 0;
+     */
+    IGNORE = 0,
+    /**
+     * LOCATION_BODY denotes that the parameter should be placed in the request body.
+     *
+     * @generated from enum value: LOCATION_BODY = 1;
+     */
+    BODY = 1,
+    /**
+     * LOCATION_HEADER denotes that the parameter should be placed in the request header.
+     *
+     * @generated from enum value: LOCATION_HEADER = 2;
+     */
+    HEADER = 2,
+    /**
+     * LOCATION_QUERY denotes that the parameter should be placed in the request query string.
+     *
+     * @generated from enum value: LOCATION_QUERY = 3;
+     */
+    QUERY = 3,
+    /**
+     * LOCATION_ENDPOINT denotes that the parameter should be interpolated into the endpoint URL based on templated
+     * values denoted by curly braces. If the parameter is not found in the request, the request will fail.
+     *
+     * @generated from enum value: LOCATION_ENDPOINT = 4;
+     */
+    ENDPOINT = 4,
+    /**
+     * LOCATION_HEADER_PARAMETER denotes that the parameter should be added as a header parameter
+     * to the header specified by TargetName. If TargetName is not set, the parameter will be
+     * added based on defaults defined by the underlying credential type.
+     *
+     * The primary use case for this location is to append parameters to the Authorization header
+     * for OAuth 1.0. This type will default TargetName to "Authorization" if not set.
+     *
+     * This Location is only valid when the client's AuthStyle is configured to AUTH_STYLE_AUTHORIZATION_HEADER.
+     *
+     * @generated from enum value: LOCATION_HEADER_PARAMETER = 5;
+     */
+    HEADER_PARAMETER = 5
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.Location.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfig_LocationSchema: GenEnum<CredentialDataOAuth1Client_ParameterConfig_Location>;
+/**
+ * Usage is designed to be used as a bitmask to define which endpoints this parameter is
+ * applicable for. Additions to this enum should be powers of 2 to allow for multiple values
+ * to be set.
+ *
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.Usage
+ */
+export declare enum CredentialDataOAuth1Client_ParameterConfig_Usage {
+    /**
+     * USAGE_UNKNOWN is the default value for the usage field and denotes this parameter should
+     * be ignored. It is the zero-value so will be used as the default for any unknown parameters
+     * sent by the client.
+     *
+     * @generated from enum value: USAGE_UNKNOWN = 0;
+     */
+    UNKNOWN = 0,
+    /**
+     * USAGE_TEMP_CREDENTIAL_ENDPOINT denotes that this parameter should be sent in requests to
+     * the TempCredentialEndpoint.
+     *
+     * @generated from enum value: USAGE_TEMP_CREDENTIAL_ENDPOINT = 1;
+     */
+    TEMP_CREDENTIAL_ENDPOINT = 1,
+    /**
+     * USAGE_TOKEN_REQUEST_ENDPOINT denotes that this parameter should be sent in requests to the
+     * TokenRequestEndpoint.
+     *
+     * @generated from enum value: USAGE_TOKEN_REQUEST_ENDPOINT = 2;
+     */
+    TOKEN_REQUEST_ENDPOINT = 2
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterConfig.Usage.
+ */
+export declare const CredentialDataOAuth1Client_ParameterConfig_UsageSchema: GenEnum<CredentialDataOAuth1Client_ParameterConfig_Usage>;
+/**
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth1Client.SignatureMethod
+ */
+export declare enum CredentialDataOAuth1Client_SignatureMethod {
+    /**
+     * @generated from enum value: SIGNATURE_METHOD_UNKNOWN = 0;
+     */
+    UNKNOWN = 0,
+    /**
+     * @generated from enum value: SIGNATURE_METHOD_PLAINTEXT = 1;
+     */
+    PLAINTEXT = 1,
+    /**
+     * @generated from enum value: SIGNATURE_METHOD_HMAC_SHA1 = 2;
+     */
+    HMAC_SHA1 = 2,
+    /**
+     * @generated from enum value: SIGNATURE_METHOD_HMAC_SHA256 = 3;
+     */
+    HMAC_SHA256 = 3
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth1Client.SignatureMethod.
+ */
+export declare const CredentialDataOAuth1Client_SignatureMethodSchema: GenEnum<CredentialDataOAuth1Client_SignatureMethod>;
+/**
+ * ParameterTransmission defines the possible values for how to transmit the authorization
+ * parameters to the server. See
+ * [RFC-5849 §3.5](https://datatracker.ietf.org/doc/html/rfc5849#section-3.5) for more
+ * information.
+ *
+ * @generated from enum versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterTransmission
+ */
+export declare enum CredentialDataOAuth1Client_ParameterTransmission {
+    /**
+     * @generated from enum value: AUTH_STYLE_AUTHORIZATION_HEADER = 0;
+     */
+    AUTH_STYLE_AUTHORIZATION_HEADER = 0,
+    /**
+     * @generated from enum value: AUTH_STYLE_FORM = 1;
+     */
+    AUTH_STYLE_FORM = 1,
+    /**
+     * @generated from enum value: AUTH_STYLE_QUERY = 2;
+     */
+    AUTH_STYLE_QUERY = 2
+}
+/**
+ * Describes the enum versori.credential.v1alpha1.CredentialDataOAuth1Client.ParameterTransmission.
+ */
+export declare const CredentialDataOAuth1Client_ParameterTransmissionSchema: GenEnum<CredentialDataOAuth1Client_ParameterTransmission>;
+/**
+ * CredentialDataOAuth1Token holds a token and secret for an authenticated OAuth 1.0 resource owner.
+ *
+ * When making requests to a protected resource, both the fields from this Credential and the
+ * Credential referenced by the OAuth1ClientCredentialID field are required to construct the
+ * authenticated request as specified by
+ * [RFC-5849 §3.1](https://datatracker.ietf.org/doc/html/rfc5849#section-3.1).
+ *
+ * @generated from message versori.credential.v1alpha1.CredentialDataOAuth1Token
+ */
+export type CredentialDataOAuth1Token = Message<"versori.credential.v1alpha1.CredentialDataOAuth1Token"> & {
+    /**
+     * OAuth1ClientCredentialID is a reference to another Credential of type OAuth1Client which this
+     * token has been authorized for.
+     *
+     * @generated from field: string oauth1_client_credential_id = 1;
+     */
+    oauth1ClientCredentialId: string;
+    /**
+     * OAuthToken is the token used to authenticate requests.
+     *
+     * @generated from field: string oauth_token = 2;
+     */
+    oauthToken: string;
+    /**
+     * OAuthTokenSecret is the secret used to sign requests.
+     *
+     * @generated from field: string oauth_token_secret = 3;
+     */
+    oauthTokenSecret: string;
+    /**
+     * AdditionalParams is a URL-encoded query string containing additional parameters which were
+     * provided in the oauth_callback URL when the resource owner authorized the client. These
+     * parameters will be merged with the parameters defined on the CredentialDataOAuth1Client
+     * before making requests to the TokenRequestEndpoint.
+     *
+     * @generated from field: string additional_params = 4;
+     */
+    additionalParams: string;
+};
+/**
+ * Describes the message versori.credential.v1alpha1.CredentialDataOAuth1Token.
+ * Use `create(CredentialDataOAuth1TokenSchema)` to create a new message.
+ */
+export declare const CredentialDataOAuth1TokenSchema: GenMessage<CredentialDataOAuth1Token>;
+//# sourceMappingURL=credential_pb.d.ts.map