Acl
Constructors
Properties
([]string: <optional>) - A list of allowed values that can be used for the redirect URI.
([]string: <optional>) - List of auth claims that are valid for login.
([]string: <optional>) - The value against which to match the iss claim in a JWT.
Mappings of claims (key) that will be copied to a metadata field (value).
(string: <optional>) - Duration of leeway when validating all claims in the form of a time duration such as "5m" or "1h".
([]string: <optional>) - PEM encoded CA certs for use by the TLS client used to talk with the OIDC Discovery URL.
(string: <optional>) - Duration of leeway when validating expiration of a JWT in the form of a time duration such as "5m" or "1h".
(string: <optional>) - PEM encoded CA cert for use by the TLS client used to talk with the JWKS server.
([]string: <optional>) - List of PEM-encoded public keys to use to authenticate signatures locally.
Mappings of list claims (key) that will be copied to a metadata field (value).
(string: <optional>) - Duration of leeway when validating not before values of a token in the form of a time duration such as "5m" or "1h".
(OIDCClientAssertion: <optional>) - Optionally send a signed JWT ("private key jwt") as a client assertion to the OIDC provider. Browse to the concepts-assertions page to learn more.
(string: <optional>) - The OAuth Client ID configured with the OIDC provider.
(string: <optional>) - The OAuth Client Secret configured with the OIDC provider.
(bool: false) - When set to true, Nomad will not make a request to the identity provider to get OIDC UserInfo. You may wish to set this if your identity provider doesn't send any additional claims from the UserInfo endpoint.
(string: <optional>) - The OIDC Discovery URL, without any .well-known component (base path).
(bool: false) - When set to true, Nomad will include PKCE verification in the auth flow. Even with PKCE enabled in Nomad, you may still need to enable it in your OIDC provider.
([]string: <optional>) - List of OIDC scopes.
([]string: <optional>) - A list of supported signing algorithms.
Enable OIDC verbose logging on the Nomad server.