OidcResponse class
Represents an OpenId Connect 1.0 identity provider.
Constructors
-
OidcResponse({required Input<
List< allowedAudiences, required Input<String> >String> issuerUri, required Input<String> jwksJson}) -
Creates a new OidcResponse.
allowedAudiencesAcceptable values for theaudfield (audience) in the OIDC token. Token exchange requests are rejected if the token audience does not match one of the configured values. Each audience may be at most 256 characters. A maximum of 10 audiences may be configured. If this list is empty, the OIDC token audience must be equal to the full canonical resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix. For example://iam.googleapis.com/projects//locations//workloadIdentityPools//providers/ https://iam.googleapis.com/projects//locations//workloadIdentityPools//providers/issuerUriThe OIDC issuer URL. Must be an HTTPS endpoint.jwksJsonOptional. OIDC JWKs in JSON String format. For details on the definition of a JWK, see https://tools.ietf.org/html/rfc7517. If not set, thejwks_urifrom the discovery document(fetched from the .well-known path of theissuer_uri) will be used. Currently, RSA and EC asymmetric keys are supported. The JWK must use following format and include only the following fields: { "keys":{ "kty": "RSA/EC", "alg": "", "use": "sig", "kid": "", "n": "", "e": "", "x": "", "y": "", "crv": "" }}const -
OidcResponse.fromMap(Map<
String, dynamic> map) -
factory
Properties
-
allowedAudiences
→ Input<
List< String> > -
Acceptable values for the
audfield (audience) in the OIDC token. Token exchange requests are rejected if the token audience does not match one of the configured values. Each audience may be at most 256 characters. A maximum of 10 audiences may be configured. If this list is empty, the OIDC token audience must be equal to the full canonical resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix. For example://iam.googleapis.com/projects//locations//workloadIdentityPools//providers/ https://iam.googleapis.com/projects//locations//workloadIdentityPools//providers/final - hashCode → int
-
The hash code for this object.
no setterinherited
-
issuerUri
→ Input<
String> -
The OIDC issuer URL. Must be an HTTPS endpoint.
final
-
jwksJson
→ Input<
String> -
Optional. OIDC JWKs in JSON String format. For details on the definition of a JWK, see https://tools.ietf.org/html/rfc7517. If not set, the
jwks_urifrom the discovery document(fetched from the .well-known path of theissuer_uri) will be used. Currently, RSA and EC asymmetric keys are supported. The JWK must use following format and include only the following fields: { "keys":{ "kty": "RSA/EC", "alg": "", "use": "sig", "kid": "", "n": "", "e": "", "x": "", "y": "", "crv": "" }}final - runtimeType → Type
-
A representation of the runtime type of the object.
no setterinherited
Methods
-
noSuchMethod(
Invocation invocation) → dynamic -
Invoked when a nonexistent method or property is accessed.
inherited
-
toMap(
) → Map< String, dynamic> -
toString(
) → String -
A string representation of this object.
inherited
Operators
-
operator ==(
Object other) → bool -
The equality operator.
inherited