AclAuthMethodConfigArgs

data class AclAuthMethodConfigArgs(val allowedRedirectUris: Output<List<String>>? = null, val boundAudiences: Output<List<String>>? = null, val boundIssuers: Output<List<String>>? = null, val claimMappings: Output<Map<String, String>>? = null, val clockSkewLeeway: Output<String>? = null, val discoveryCaPems: Output<List<String>>? = null, val expirationLeeway: Output<String>? = null, val jwksCaCert: Output<String>? = null, val jwksUrl: Output<String>? = null, val jwtValidationPubKeys: Output<List<String>>? = null, val listClaimMappings: Output<Map<String, String>>? = null, val notBeforeLeeway: Output<String>? = null, val oidcClientId: Output<String>? = null, val oidcClientSecret: Output<String>? = null, val oidcDisableUserinfo: Output<Boolean>? = null, val oidcDiscoveryUrl: Output<String>? = null, val oidcScopes: Output<List<String>>? = null, val signingAlgs: Output<List<String>>? = null) : ConvertibleToJava<AclAuthMethodConfigArgs>

Constructors

Link copied to clipboard
constructor(allowedRedirectUris: Output<List<String>>? = null, boundAudiences: Output<List<String>>? = null, boundIssuers: Output<List<String>>? = null, claimMappings: Output<Map<String, String>>? = null, clockSkewLeeway: Output<String>? = null, discoveryCaPems: Output<List<String>>? = null, expirationLeeway: Output<String>? = null, jwksCaCert: Output<String>? = null, jwksUrl: Output<String>? = null, jwtValidationPubKeys: Output<List<String>>? = null, listClaimMappings: Output<Map<String, String>>? = null, notBeforeLeeway: Output<String>? = null, oidcClientId: Output<String>? = null, oidcClientSecret: Output<String>? = null, oidcDisableUserinfo: Output<Boolean>? = null, oidcDiscoveryUrl: Output<String>? = null, oidcScopes: Output<List<String>>? = null, signingAlgs: Output<List<String>>? = null)

Properties

Link copied to clipboard
val allowedRedirectUris: Output<List<String>>? = null

([]string: <optional>) - A list of allowed values that can be used for the redirect URI.

Link copied to clipboard
val boundAudiences: Output<List<String>>? = null

([]string: <optional>) - List of auth claims that are valid for login.

Link copied to clipboard
val boundIssuers: Output<List<String>>? = null

([]string: <optional>) - The value against which to match the iss claim in a JWT.

Link copied to clipboard
val claimMappings: Output<Map<String, String>>? = null

Mappings of claims (key) that will be copied to a metadata field (value).

Link copied to clipboard
val clockSkewLeeway: Output<String>? = null

(string: <optional>) - Duration of leeway when validating all claims in the form of a time duration such as "5m" or "1h".

Link copied to clipboard
val discoveryCaPems: Output<List<String>>? = null

([]string: <optional>) - PEM encoded CA certs for use by the TLS client used to talk with the OIDC Discovery URL.

Link copied to clipboard
val expirationLeeway: Output<String>? = null

(string: <optional>) - Duration of leeway when validating expiration of a JWT in the form of a time duration such as "5m" or "1h".

Link copied to clipboard
val jwksCaCert: Output<String>? = null

(string: <optional>) - PEM encoded CA cert for use by the TLS client used to talk with the JWKS server.

Link copied to clipboard
val jwksUrl: Output<String>? = null

(string: <optional>) - JSON Web Key Sets url for authenticating signatures.

Link copied to clipboard
val jwtValidationPubKeys: Output<List<String>>? = null

([]string: <optional>) - List of PEM-encoded public keys to use to authenticate signatures locally.

Link copied to clipboard
val listClaimMappings: Output<Map<String, String>>? = null

Mappings of list claims (key) that will be copied to a metadata field (value).

Link copied to clipboard
val notBeforeLeeway: Output<String>? = null

(string: <optional>) - Duration of leeway when validating not before values of a token in the form of a time duration such as "5m" or "1h".

Link copied to clipboard
val oidcClientId: Output<String>? = null

(string: <optional>) - The OAuth Client ID configured with the OIDC provider.

Link copied to clipboard
val oidcClientSecret: Output<String>? = null

(string: <optional>) - The OAuth Client Secret configured with the OIDC provider.

Link copied to clipboard
val oidcDisableUserinfo: Output<Boolean>? = null

(bool: false) - When set to true, Nomad will not make a request to the identity provider to get OIDC UserInfo. You may wish to set this if your identity provider doesn't send any additional claims from the UserInfo endpoint.

Link copied to clipboard
val oidcDiscoveryUrl: Output<String>? = null

(string: <optional>) - The OIDC Discovery URL, without any .well-known component (base path).

Link copied to clipboard
val oidcScopes: Output<List<String>>? = null

([]string: <optional>) - List of OIDC scopes.

Link copied to clipboard
val signingAlgs: Output<List<String>>? = null

([]string: <optional>) - A list of supported signing algorithms.

Functions

Link copied to clipboard
open override fun toJava(): AclAuthMethodConfigArgs