WorkloadIdentityPoolProviderOidc class

Constructors

WorkloadIdentityPoolProviderOidc({Input<List<String>?>? allowedAudiences, required Input<String> issuerUri, Input<String?>? jwksJson})

Creates a new WorkloadIdentityPoolProviderOidc. allowedAudiences Acceptable values for the aud field (audience) in the OIDC token. Token exchange issuerUri The OIDC issuer URL. jwksJson OIDC JWKs in JSON String format. For details on definition of a

const

WorkloadIdentityPoolProviderOidc.fromMap(Map<String, dynamic> map)

factory

Properties

allowedAudiences → Input<List<String>?>?

Acceptable values for the aud field (audience) in the OIDC token. Token exchange requests are rejected if the token audience does not match one of the configured values. Each audience may be at most 256 characters. A maximum of 10 audiences may be configured. If this list is empty, the OIDC token audience must be equal to the full canonical resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix. For example:

final

hashCode → int

The hash code for this object.

no setter, inherited

issuerUri → Input<String>

The OIDC issuer URL.

final

jwksJson → Input<String?>?

OIDC JWKs in JSON String format. For details on definition of a JWK, see https:tools.ietf.org/html/rfc7517. If not set, then we use the jwksUri from the discovery document fetched from the .well-known path for the issuerUri. Currently, RSA and EC asymmetric keys are supported. The JWK must use following format and include only the following fields:

final

runtimeType → Type

A representation of the runtime type of the object.

no setter, inherited

Methods

noSuchMethod(Invocation invocation) → dynamic

Invoked when a nonexistent method or property is accessed.

inherited

toMap() → Map<String, dynamic>

toString() → String

A string representation of this object.

inherited

Operators

operator ==(Object other) → bool

The equality operator.

inherited