OIDCProviderProps
Properties for defining a OIDCProvider.
See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-ram-oidcprovider
Initializer
import ros_cdk_ram
ros_cdk_ram.OIDCProviderProps(
fingerprints: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]],
issuer_url: typing.Union[str, IResolvable],
oidc_provider_name: typing.Union[str, IResolvable],
client_ids: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]] = None,
description: typing.Union[str, IResolvable] = None,
issuance_limit_time: typing.Union[typing.Union[int, float], IResolvable] = None
)
Properties
| Name | Type | Description |
|---|---|---|
fingerprints | typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]] | Property fingerprints: The list of the fingerprints, max length is 5. |
issuer_url | typing.Union[str, ros_cdk_core.IResolvable] | Property issuerUrl: The URL of the issuer, which is provided by the external IdP. |
oidc_provider_name | typing.Union[str, ros_cdk_core.IResolvable] | Property oidcProviderName: The name of the OIDC IdP. |
client_ids | typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]] | Property clientIds: The ID of the client, which is provided by the external IdP. |
description | typing.Union[str, ros_cdk_core.IResolvable] | Property description: The description of the OIDC IdP. |
issuance_limit_time | typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable] | Property issuanceLimitTime: The earliest time when an external IdP can issue an ID token. |
fingerprintsRequired
fingerprints: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]]
- Type: typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]]
Property fingerprints: The list of the fingerprints, max length is 5.
issuer_urlRequired
issuer_url: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property issuerUrl: The URL of the issuer, which is provided by the external IdP.
The URL of the issuer must be unique within an Alibaba Cloud account. The URL of the issuer must start with https and be in the valid URL format. The URL cannot contain query parameters that follow a question mark (?) or logon information that is identified by at signs (@). The URL cannot be a fragment URL that contains number signs (#). The URL can be up to 255 characters in length.
oidc_provider_nameRequired
oidc_provider_name: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property oidcProviderName: The name of the OIDC IdP.
The name can contain letters, digits, and special characters and cannot start or end with the special characters. The special characters are periods, (.), hyphens (-), and underscores (_).`` The name can be up to 128 characters in length.
client_idsOptional
client_ids: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]]
- Type: typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]]
Property clientIds: The ID of the client, which is provided by the external IdP.
If you want to specify multiple client IDs, separate the client IDs with commas (,). The client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are periods (.), hyphens (-), underscores (_), colons (:), and forward slashes (\/).`` The client ID can be up to 128 characters in length.
descriptionOptional
description: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property description: The description of the OIDC IdP.
The description can be up to 256 characters in length.
issuance_limit_timeOptional
issuance_limit_time: typing.Union[typing.Union[int, float], IResolvable]
- Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]
Property issuanceLimitTime: The earliest time when an external IdP can issue an ID token.
If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.