basedpyright 1.7.0 → 1.8.0

package/dist/typeshed-fallback/stubs/hvac/hvac/adapters.pyi

@@ -0,0 +1,60 @@
+from _typeshed import Incomplete
+from abc import ABCMeta, abstractmethod
+from collections.abc import Mapping
+from typing import Any
+from typing_extensions import Self
+
+class Adapter(metaclass=ABCMeta):
+    @classmethod
+    def from_adapter(cls, adapter: Adapter) -> Self: ...
+    base_uri: str
+    token: str | None
+    namespace: str | None
+    session: bool
+    allow_redirects: bool
+    ignore_exceptions: bool
+    strict_http: bool
+    request_header: bool
+    def __init__(
+        self,
+        base_uri: str = "http://localhost:8200",
+        token: str | None = None,
+        cert: tuple[str, str] | None = None,
+        verify: bool = True,
+        timeout: int = 30,
+        proxies: Mapping[str, str] | None = None,
+        allow_redirects: bool = True,
+        session: Incomplete | None = None,
+        namespace: str | None = None,
+        ignore_exceptions: bool = False,
+        strict_http: bool = False,
+        request_header: bool = True,
+    ) -> None: ...
+    @staticmethod
+    def urljoin(*args: object) -> str: ...
+    def close(self) -> None: ...
+    def get(self, url: str, **kwargs: Any): ...
+    def post(self, url: str, **kwargs: Any): ...
+    def put(self, url: str, **kwargs: Any): ...
+    def delete(self, url: str, **kwargs: Any): ...
+    def list(self, url: str, **kwargs: Any): ...
+    def head(self, url: str, **kwargs: Any): ...
+    def login(self, url: str, use_token: bool = True, **kwargs: Any): ...
+    @abstractmethod
+    def get_login_token(self, response) -> str: ...
+    @abstractmethod
+    def request(
+        self, method, url: str, headers: Mapping[str, str] | None = None, raise_exception: bool = True, **kwargs: Any
+    ): ...
+
+class RawAdapter(Adapter):
+    def get_login_token(self, response) -> str: ...
+    def request(
+        self, method: str, url: str, headers: Mapping[str, str] | None = None, raise_exception: bool = True, **kwargs: Any
+    ): ...
+
+class JSONAdapter(RawAdapter):
+    def get_login_token(self, response) -> str: ...
+    def request(self, *args: Any, **kwargs: Any): ...
+
+Request = RawAdapter

package/dist/typeshed-fallback/stubs/hvac/hvac/api/__init__.pyi

@@ -0,0 +1,7 @@
+from hvac.api.auth_methods import AuthMethods as AuthMethods
+from hvac.api.secrets_engines import SecretsEngines as SecretsEngines
+from hvac.api.system_backend import SystemBackend as SystemBackend
+from hvac.api.vault_api_base import VaultApiBase as VaultApiBase
+from hvac.api.vault_api_category import VaultApiCategory as VaultApiCategory
+
+__all__ = ("AuthMethods", "SecretsEngines", "SystemBackend", "VaultApiBase", "VaultApiCategory")

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/__init__.pyi

@@ -0,0 +1,41 @@
+from _typeshed import Incomplete
+
+from hvac.api.auth_methods.approle import AppRole as AppRole
+from hvac.api.auth_methods.aws import Aws as Aws
+from hvac.api.auth_methods.azure import Azure as Azure
+from hvac.api.auth_methods.cert import Cert as Cert
+from hvac.api.auth_methods.gcp import Gcp as Gcp
+from hvac.api.auth_methods.github import Github as Github
+from hvac.api.auth_methods.jwt import JWT as JWT
+from hvac.api.auth_methods.kubernetes import Kubernetes as Kubernetes
+from hvac.api.auth_methods.ldap import Ldap as Ldap
+from hvac.api.auth_methods.legacy_mfa import LegacyMfa as LegacyMfa
+from hvac.api.auth_methods.oidc import OIDC as OIDC
+from hvac.api.auth_methods.okta import Okta as Okta
+from hvac.api.auth_methods.radius import Radius as Radius
+from hvac.api.auth_methods.token import Token as Token
+from hvac.api.auth_methods.userpass import Userpass as Userpass
+from hvac.api.vault_api_category import VaultApiCategory
+
+__all__ = (
+    "AuthMethods",
+    "AppRole",
+    "Azure",
+    "Gcp",
+    "Github",
+    "JWT",
+    "Kubernetes",
+    "Ldap",
+    "Userpass",
+    "LegacyMfa",
+    "OIDC",
+    "Okta",
+    "Radius",
+    "Token",
+    "Aws",
+    "Cert",
+)
+
+class AuthMethods(VaultApiCategory):
+    implemented_classes: Incomplete
+    unimplemented_classes: Incomplete

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/approle.pyi

@@ -0,0 +1,54 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+class AppRole(VaultApiBase):
+    def create_or_update_approle(
+        self,
+        role_name,
+        bind_secret_id: Incomplete | None = None,
+        secret_id_bound_cidrs: Incomplete | None = None,
+        secret_id_num_uses: Incomplete | None = None,
+        secret_id_ttl: Incomplete | None = None,
+        enable_local_secret_ids: Incomplete | None = None,
+        token_ttl: Incomplete | None = None,
+        token_max_ttl: Incomplete | None = None,
+        token_policies: Incomplete | None = None,
+        token_bound_cidrs: Incomplete | None = None,
+        token_explicit_max_ttl: Incomplete | None = None,
+        token_no_default_policy: Incomplete | None = None,
+        token_num_uses: Incomplete | None = None,
+        token_period: Incomplete | None = None,
+        token_type: Incomplete | None = None,
+        mount_point="approle",
+    ): ...
+    def list_roles(self, mount_point="approle"): ...
+    def read_role(self, role_name, mount_point="approle"): ...
+    def delete_role(self, role_name, mount_point="approle"): ...
+    def read_role_id(self, role_name, mount_point="approle"): ...
+    def update_role_id(self, role_name, role_id, mount_point="approle"): ...
+    def generate_secret_id(
+        self,
+        role_name,
+        metadata: Incomplete | None = None,
+        cidr_list: Incomplete | None = None,
+        token_bound_cidrs: Incomplete | None = None,
+        mount_point="approle",
+        wrap_ttl: Incomplete | None = None,
+    ): ...
+    def create_custom_secret_id(
+        self,
+        role_name,
+        secret_id,
+        metadata: Incomplete | None = None,
+        cidr_list: Incomplete | None = None,
+        token_bound_cidrs: Incomplete | None = None,
+        mount_point="approle",
+        wrap_ttl: Incomplete | None = None,
+    ): ...
+    def read_secret_id(self, role_name, secret_id, mount_point="approle"): ...
+    def destroy_secret_id(self, role_name, secret_id, mount_point="approle"): ...
+    def list_secret_id_accessors(self, role_name, mount_point="approle"): ...
+    def read_secret_id_accessor(self, role_name, secret_id_accessor, mount_point="approle"): ...
+    def destroy_secret_id_accessor(self, role_name, secret_id_accessor, mount_point="approle"): ...
+    def login(self, role_id, secret_id: Incomplete | None = None, use_token: bool = True, mount_point="approle"): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/aws.pyi

@@ -0,0 +1,110 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+logger: Incomplete
+
+class Aws(VaultApiBase):
+    def configure(
+        self,
+        max_retries: Incomplete | None = None,
+        access_key: Incomplete | None = None,
+        secret_key: Incomplete | None = None,
+        endpoint: Incomplete | None = None,
+        iam_endpoint: Incomplete | None = None,
+        sts_endpoint: Incomplete | None = None,
+        iam_server_id_header_value: Incomplete | None = None,
+        mount_point: str = "aws",
+    ): ...
+    def read_config(self, mount_point: str = "aws"): ...
+    def delete_config(self, mount_point: str = "aws"): ...
+    def configure_identity_integration(
+        self, iam_alias: Incomplete | None = None, ec2_alias: Incomplete | None = None, mount_point: str = "aws"
+    ): ...
+    def read_identity_integration(self, mount_point: str = "aws"): ...
+    def create_certificate_configuration(
+        self, cert_name, aws_public_cert, document_type: Incomplete | None = None, mount_point: str = "aws"
+    ): ...
+    def read_certificate_configuration(self, cert_name, mount_point: str = "aws"): ...
+    def delete_certificate_configuration(self, cert_name, mount_point: str = "aws"): ...
+    def list_certificate_configurations(self, mount_point: str = "aws"): ...
+    def create_sts_role(self, account_id, sts_role, mount_point: str = "aws"): ...
+    def read_sts_role(self, account_id, mount_point: str = "aws"): ...
+    def list_sts_roles(self, mount_point: str = "aws"): ...
+    def delete_sts_role(self, account_id, mount_point: str = "aws"): ...
+    def configure_identity_whitelist_tidy(
+        self, safety_buffer: Incomplete | None = None, disable_periodic_tidy: Incomplete | None = None, mount_point: str = "aws"
+    ): ...
+    def read_identity_whitelist_tidy(self, mount_point: str = "aws"): ...
+    def delete_identity_whitelist_tidy(self, mount_point: str = "aws"): ...
+    def configure_role_tag_blacklist_tidy(
+        self, safety_buffer: Incomplete | None = None, disable_periodic_tidy: Incomplete | None = None, mount_point: str = "aws"
+    ): ...
+    def read_role_tag_blacklist_tidy(self, mount_point: str = "aws"): ...
+    def delete_role_tag_blacklist_tidy(self, mount_point: str = "aws"): ...
+    def create_role(
+        self,
+        role,
+        auth_type: Incomplete | None = None,
+        bound_ami_id: Incomplete | None = None,
+        bound_account_id: Incomplete | None = None,
+        bound_region: Incomplete | None = None,
+        bound_vpc_id: Incomplete | None = None,
+        bound_subnet_id: Incomplete | None = None,
+        bound_iam_role_arn: Incomplete | None = None,
+        bound_iam_instance_profile_arn: Incomplete | None = None,
+        bound_ec2_instance_id: Incomplete | None = None,
+        role_tag: Incomplete | None = None,
+        bound_iam_principal_arn: Incomplete | None = None,
+        inferred_entity_type: Incomplete | None = None,
+        inferred_aws_region: Incomplete | None = None,
+        resolve_aws_unique_ids: Incomplete | None = None,
+        ttl: Incomplete | None = None,
+        max_ttl: Incomplete | None = None,
+        period: Incomplete | None = None,
+        policies: Incomplete | None = None,
+        allow_instance_migration: Incomplete | None = None,
+        disallow_reauthentication: Incomplete | None = None,
+        mount_point: str = "aws",
+    ): ...
+    def read_role(self, role, mount_point: str = "aws"): ...
+    def list_roles(self, mount_point: str = "aws"): ...
+    def delete_role(self, role, mount_point: str = "aws"): ...
+    def create_role_tags(
+        self,
+        role,
+        policies: Incomplete | None = None,
+        max_ttl: Incomplete | None = None,
+        instance_id: Incomplete | None = None,
+        allow_instance_migration: Incomplete | None = None,
+        disallow_reauthentication: Incomplete | None = None,
+        mount_point: str = "aws",
+    ): ...
+    def iam_login(
+        self,
+        access_key,
+        secret_key,
+        session_token: Incomplete | None = None,
+        header_value: Incomplete | None = None,
+        role: Incomplete | None = None,
+        use_token: bool = True,
+        region: str = "us-east-1",
+        mount_point: str = "aws",
+    ): ...
+    def ec2_login(
+        self,
+        pkcs7,
+        nonce: Incomplete | None = None,
+        role: Incomplete | None = None,
+        use_token: bool = True,
+        mount_point: str = "aws",
+    ): ...
+    def place_role_tags_in_blacklist(self, role_tag, mount_point: str = "aws"): ...
+    def read_role_tag_blacklist(self, role_tag, mount_point: str = "aws"): ...
+    def list_blacklist_tags(self, mount_point: str = "aws"): ...
+    def delete_blacklist_tags(self, role_tag, mount_point: str = "aws"): ...
+    def tidy_blacklist_tags(self, safety_buffer: str = "72h", mount_point: str = "aws"): ...
+    def read_identity_whitelist(self, instance_id, mount_point: str = "aws"): ...
+    def list_identity_whitelist(self, mount_point: str = "aws"): ...
+    def delete_identity_whitelist_entries(self, instance_id, mount_point: str = "aws"): ...
+    def tidy_identity_whitelist_entries(self, safety_buffer: str = "72h", mount_point: str = "aws"): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/azure.pyi

@@ -0,0 +1,49 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+DEFAULT_MOUNT_POINT: str
+logger: Incomplete
+
+class Azure(VaultApiBase):
+    def configure(
+        self,
+        tenant_id,
+        resource,
+        environment: Incomplete | None = None,
+        client_id: Incomplete | None = None,
+        client_secret: Incomplete | None = None,
+        mount_point="azure",
+    ): ...
+    def read_config(self, mount_point="azure"): ...
+    def delete_config(self, mount_point="azure"): ...
+    def create_role(
+        self,
+        name,
+        policies: Incomplete | None = None,
+        ttl: Incomplete | None = None,
+        max_ttl: Incomplete | None = None,
+        period: Incomplete | None = None,
+        bound_service_principal_ids: Incomplete | None = None,
+        bound_group_ids: Incomplete | None = None,
+        bound_locations: Incomplete | None = None,
+        bound_subscription_ids: Incomplete | None = None,
+        bound_resource_groups: Incomplete | None = None,
+        bound_scale_sets: Incomplete | None = None,
+        num_uses: Incomplete | None = None,
+        mount_point="azure",
+    ): ...
+    def read_role(self, name, mount_point="azure"): ...
+    def list_roles(self, mount_point="azure"): ...
+    def delete_role(self, name, mount_point="azure"): ...
+    def login(
+        self,
+        role,
+        jwt,
+        subscription_id: Incomplete | None = None,
+        resource_group_name: Incomplete | None = None,
+        vm_name: Incomplete | None = None,
+        vmss_name: Incomplete | None = None,
+        use_token: bool = True,
+        mount_point="azure",
+    ): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/cert.pyi

@@ -0,0 +1,41 @@
+from hvac.api.vault_api_base import VaultApiBase
+
+class Cert(VaultApiBase):
+    def create_ca_certificate_role(
+        self,
+        name,
+        certificate: str = "",
+        certificate_file: str = "",
+        allowed_common_names: str = "",
+        allowed_dns_sans: str = "",
+        allowed_email_sans: str = "",
+        allowed_uri_sans: str = "",
+        allowed_organizational_units: str = "",
+        required_extensions: str = "",
+        display_name: str = "",
+        token_ttl: int = 0,
+        token_max_ttl: int = 0,
+        token_policies=[],
+        token_bound_cidrs=[],
+        token_explicit_max_ttl: int = 0,
+        token_no_default_policy: bool = False,
+        token_num_uses: int = 0,
+        token_period: int = 0,
+        token_type: str = "",
+        mount_point: str = "cert",
+    ): ...
+    def read_ca_certificate_role(self, name, mount_point: str = "cert"): ...
+    def list_certificate_roles(self, mount_point: str = "cert"): ...
+    def delete_certificate_role(self, name, mount_point: str = "cert"): ...
+    def configure_tls_certificate(self, mount_point: str = "cert", disable_binding: bool = False): ...
+    def login(
+        self,
+        name: str = "",
+        cacert: bool = False,
+        cert_pem: str = "",
+        key_pem: str = "",
+        mount_point: str = "cert",
+        use_token: bool = True,
+    ): ...
+
+    class CertificateAuthError(Exception): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/gcp.pyi

@@ -0,0 +1,44 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+DEFAULT_MOUNT_POINT: str
+logger: Incomplete
+
+class Gcp(VaultApiBase):
+    def configure(
+        self,
+        credentials: Incomplete | None = None,
+        google_certs_endpoint="https://www.googleapis.com/oauth2/v3/certs",
+        mount_point="gcp",
+    ): ...
+    def read_config(self, mount_point="gcp"): ...
+    def delete_config(self, mount_point="gcp"): ...
+    def create_role(
+        self,
+        name,
+        role_type,
+        project_id,
+        ttl: Incomplete | None = None,
+        max_ttl: Incomplete | None = None,
+        period: Incomplete | None = None,
+        policies: Incomplete | None = None,
+        bound_service_accounts: Incomplete | None = None,
+        max_jwt_exp: Incomplete | None = None,
+        allow_gce_inference: Incomplete | None = None,
+        bound_zones: Incomplete | None = None,
+        bound_regions: Incomplete | None = None,
+        bound_instance_groups: Incomplete | None = None,
+        bound_labels: Incomplete | None = None,
+        mount_point="gcp",
+    ): ...
+    def edit_service_accounts_on_iam_role(
+        self, name, add: Incomplete | None = None, remove: Incomplete | None = None, mount_point="gcp"
+    ): ...
+    def edit_labels_on_gce_role(
+        self, name, add: Incomplete | None = None, remove: Incomplete | None = None, mount_point="gcp"
+    ): ...
+    def read_role(self, name, mount_point="gcp"): ...
+    def list_roles(self, mount_point="gcp"): ...
+    def delete_role(self, role, mount_point="gcp"): ...
+    def login(self, role, jwt, use_token: bool = True, mount_point="gcp"): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/github.pyi

@@ -0,0 +1,21 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+DEFAULT_MOUNT_POINT: str
+
+class Github(VaultApiBase):
+    def configure(
+        self,
+        organization,
+        base_url: Incomplete | None = None,
+        ttl: Incomplete | None = None,
+        max_ttl: Incomplete | None = None,
+        mount_point="github",
+    ): ...
+    def read_configuration(self, mount_point="github"): ...
+    def map_team(self, team_name, policies: Incomplete | None = None, mount_point="github"): ...
+    def read_team_mapping(self, team_name, mount_point="github"): ...
+    def map_user(self, user_name, policies: Incomplete | None = None, mount_point="github"): ...
+    def read_user_mapping(self, user_name, mount_point="github"): ...
+    def login(self, token, use_token: bool = True, mount_point="github"): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/jwt.pyi

@@ -0,0 +1,60 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+class JWT(VaultApiBase):
+    DEFAULT_PATH: str
+    def resolve_path(self, path): ...
+    def configure(
+        self,
+        oidc_discovery_url: Incomplete | None = None,
+        oidc_discovery_ca_pem: Incomplete | None = None,
+        oidc_client_id: Incomplete | None = None,
+        oidc_client_secret: Incomplete | None = None,
+        oidc_response_mode: Incomplete | None = None,
+        oidc_response_types: Incomplete | None = None,
+        jwks_url: Incomplete | None = None,
+        jwks_ca_pem: Incomplete | None = None,
+        jwt_validation_pubkeys: Incomplete | None = None,
+        bound_issuer: Incomplete | None = None,
+        jwt_supported_algs: Incomplete | None = None,
+        default_role: Incomplete | None = None,
+        provider_config: Incomplete | None = None,
+        path: Incomplete | None = None,
+    ): ...
+    def read_config(self, path: Incomplete | None = None): ...
+    def create_role(
+        self,
+        name,
+        user_claim,
+        allowed_redirect_uris,
+        role_type: str = "jwt",
+        bound_audiences: Incomplete | None = None,
+        clock_skew_leeway: Incomplete | None = None,
+        expiration_leeway: Incomplete | None = None,
+        not_before_leeway: Incomplete | None = None,
+        bound_subject: Incomplete | None = None,
+        bound_claims: Incomplete | None = None,
+        groups_claim: Incomplete | None = None,
+        claim_mappings: Incomplete | None = None,
+        oidc_scopes: Incomplete | None = None,
+        bound_claims_type: str = "string",
+        verbose_oidc_logging: bool = False,
+        token_ttl: Incomplete | None = None,
+        token_max_ttl: Incomplete | None = None,
+        token_policies: Incomplete | None = None,
+        token_bound_cidrs: Incomplete | None = None,
+        token_explicit_max_ttl: Incomplete | None = None,
+        token_no_default_policy: Incomplete | None = None,
+        token_num_uses: Incomplete | None = None,
+        token_period: Incomplete | None = None,
+        token_type: Incomplete | None = None,
+        path: Incomplete | None = None,
+        user_claim_json_pointer: Incomplete | None = None,
+    ): ...
+    def read_role(self, name, path: Incomplete | None = None): ...
+    def list_roles(self, path: Incomplete | None = None): ...
+    def delete_role(self, name, path: Incomplete | None = None): ...
+    def oidc_authorization_url_request(self, role, redirect_uri, path: Incomplete | None = None): ...
+    def oidc_callback(self, state, nonce, code, path: Incomplete | None = None): ...
+    def jwt_login(self, role, jwt, use_token: bool = True, path: Incomplete | None = None): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/kubernetes.pyi

@@ -0,0 +1,35 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+DEFAULT_MOUNT_POINT: str
+
+class Kubernetes(VaultApiBase):
+    def configure(
+        self,
+        kubernetes_host,
+        kubernetes_ca_cert: Incomplete | None = None,
+        token_reviewer_jwt: Incomplete | None = None,
+        pem_keys: Incomplete | None = None,
+        issuer: Incomplete | None = None,
+        mount_point="kubernetes",
+        disable_local_ca_jwt: bool = False,
+    ): ...
+    def read_config(self, mount_point="kubernetes"): ...
+    def create_role(
+        self,
+        name,
+        bound_service_account_names,
+        bound_service_account_namespaces,
+        ttl: Incomplete | None = None,
+        max_ttl: Incomplete | None = None,
+        period: Incomplete | None = None,
+        policies: Incomplete | None = None,
+        token_type: str = "",
+        mount_point="kubernetes",
+        alias_name_source: Incomplete | None = None,
+    ): ...
+    def read_role(self, name, mount_point="kubernetes"): ...
+    def list_roles(self, mount_point="kubernetes"): ...
+    def delete_role(self, name, mount_point="kubernetes"): ...
+    def login(self, role, jwt, use_token: bool = True, mount_point="kubernetes"): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/ldap.pyi

@@ -0,0 +1,60 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+DEFAULT_MOUNT_POINT: str
+
+class Ldap(VaultApiBase):
+    def configure(
+        self,
+        userdn: Incomplete | None = None,
+        groupdn: Incomplete | None = None,
+        url: Incomplete | None = None,
+        case_sensitive_names: Incomplete | None = None,
+        starttls: Incomplete | None = None,
+        tls_min_version: Incomplete | None = None,
+        tls_max_version: Incomplete | None = None,
+        insecure_tls: Incomplete | None = None,
+        certificate: Incomplete | None = None,
+        binddn: Incomplete | None = None,
+        bindpass: Incomplete | None = None,
+        userattr: Incomplete | None = None,
+        discoverdn: Incomplete | None = None,
+        deny_null_bind: bool = True,
+        upndomain: Incomplete | None = None,
+        groupfilter: Incomplete | None = None,
+        groupattr: Incomplete | None = None,
+        use_token_groups: Incomplete | None = None,
+        token_ttl: Incomplete | None = None,
+        token_max_ttl: Incomplete | None = None,
+        mount_point="ldap",
+        *,
+        anonymous_group_search: Incomplete | None = None,
+        client_tls_cert: Incomplete | None = None,
+        client_tls_key: Incomplete | None = None,
+        connection_timeout: Incomplete | None = None,
+        dereference_aliases: Incomplete | None = None,
+        max_page_size: Incomplete | None = None,
+        request_timeout: Incomplete | None = None,
+        token_bound_cidrs: Incomplete | None = None,
+        token_explicit_max_ttl: Incomplete | None = None,
+        token_no_default_policy: Incomplete | None = None,
+        token_num_uses: Incomplete | None = None,
+        token_period: Incomplete | None = None,
+        token_policies: Incomplete | None = None,
+        token_type: Incomplete | None = None,
+        userfilter: Incomplete | None = None,
+        username_as_alias: Incomplete | None = None,
+    ): ...
+    def read_configuration(self, mount_point="ldap"): ...
+    def create_or_update_group(self, name, policies: Incomplete | None = None, mount_point="ldap"): ...
+    def list_groups(self, mount_point="ldap"): ...
+    def read_group(self, name, mount_point="ldap"): ...
+    def delete_group(self, name, mount_point="ldap"): ...
+    def create_or_update_user(
+        self, username, policies: Incomplete | None = None, groups: Incomplete | None = None, mount_point="ldap"
+    ): ...
+    def list_users(self, mount_point="ldap"): ...
+    def read_user(self, username, mount_point="ldap"): ...
+    def delete_user(self, username, mount_point="ldap"): ...
+    def login(self, username, password, use_token: bool = True, mount_point="ldap"): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/legacy_mfa.pyi

@@ -0,0 +1,15 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+SUPPORTED_MFA_TYPES: Incomplete
+SUPPORTED_AUTH_METHODS: Incomplete
+
+class LegacyMfa(VaultApiBase):
+    def configure(self, mount_point, mfa_type: str = "duo", force: bool = False): ...
+    def read_configuration(self, mount_point): ...
+    def configure_duo_access(self, mount_point, host, integration_key, secret_key): ...
+    def configure_duo_behavior(
+        self, mount_point, push_info: Incomplete | None = None, user_agent: Incomplete | None = None, username_format: str = "%s"
+    ): ...
+    def read_duo_behavior_configuration(self, mount_point): ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/oidc.pyi

@@ -0,0 +1,35 @@
+from _typeshed import Incomplete
+
+from hvac.api.auth_methods.jwt import JWT
+
+class OIDC(JWT):
+    DEFAULT_PATH: str
+    def create_role(
+        self,
+        name,
+        user_claim,
+        allowed_redirect_uris,
+        role_type: str = "oidc",
+        bound_audiences: Incomplete | None = None,
+        clock_skew_leeway: Incomplete | None = None,
+        expiration_leeway: Incomplete | None = None,
+        not_before_leeway: Incomplete | None = None,
+        bound_subject: Incomplete | None = None,
+        bound_claims: Incomplete | None = None,
+        groups_claim: Incomplete | None = None,
+        claim_mappings: Incomplete | None = None,
+        oidc_scopes: Incomplete | None = None,
+        bound_claims_type: str = "string",
+        verbose_oidc_logging: bool = False,
+        token_ttl: Incomplete | None = None,
+        token_max_ttl: Incomplete | None = None,
+        token_policies: Incomplete | None = None,
+        token_bound_cidrs: Incomplete | None = None,
+        token_explicit_max_ttl: Incomplete | None = None,
+        token_no_default_policy: Incomplete | None = None,
+        token_num_uses: Incomplete | None = None,
+        token_period: Incomplete | None = None,
+        token_type: Incomplete | None = None,
+        path: Incomplete | None = None,
+        user_claim_json_pointer: Incomplete | None = None,
+    ) -> None: ...

package/dist/typeshed-fallback/stubs/hvac/hvac/api/auth_methods/okta.pyi

@@ -0,0 +1,29 @@
+from _typeshed import Incomplete
+
+from hvac.api.vault_api_base import VaultApiBase
+
+DEFAULT_MOUNT_POINT: str
+
+class Okta(VaultApiBase):
+    def configure(
+        self,
+        org_name,
+        api_token: Incomplete | None = None,
+        base_url: Incomplete | None = None,
+        ttl: Incomplete | None = None,
+        max_ttl: Incomplete | None = None,
+        bypass_okta_mfa: Incomplete | None = None,
+        mount_point="okta",
+    ): ...
+    def read_config(self, mount_point="okta"): ...
+    def list_users(self, mount_point="okta"): ...
+    def register_user(
+        self, username, groups: Incomplete | None = None, policies: Incomplete | None = None, mount_point="okta"
+    ): ...
+    def read_user(self, username, mount_point="okta"): ...
+    def delete_user(self, username, mount_point="okta"): ...
+    def list_groups(self, mount_point="okta"): ...
+    def register_group(self, name, policies: Incomplete | None = None, mount_point="okta"): ...
+    def read_group(self, name, mount_point="okta"): ...
+    def delete_group(self, name, mount_point="okta"): ...
+    def login(self, username, password, use_token: bool = True, mount_point="okta"): ...