Skip to content

OIDCProviderProps

Properties for defining a OIDCProvider.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-ram-oidcprovider

Initializer

import ros_cdk_ram
ros_cdk_ram.OIDCProviderProps(
  fingerprints: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]],
  issuer_url: typing.Union[str, IResolvable],
  oidc_provider_name: typing.Union[str, IResolvable],
  client_ids: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]] = None,
  description: typing.Union[str, IResolvable] = None,
  issuance_limit_time: typing.Union[typing.Union[int, float], IResolvable] = None
)

Properties

Name Type Description
fingerprints typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]] Property fingerprints: The list of the fingerprints, max length is 5.
issuer_url typing.Union[str, ros_cdk_core.IResolvable] Property issuerUrl: The URL of the issuer, which is provided by the external IdP.
oidc_provider_name typing.Union[str, ros_cdk_core.IResolvable] Property oidcProviderName: The name of the OIDC IdP.
client_ids typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]] Property clientIds: The ID of the client, which is provided by the external IdP.
description typing.Union[str, ros_cdk_core.IResolvable] Property description: The description of the OIDC IdP.
issuance_limit_time typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable] Property issuanceLimitTime: The earliest time when an external IdP can issue an ID token.

fingerprintsRequired

fingerprints: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]]
  • Type: typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]]

Property fingerprints: The list of the fingerprints, max length is 5.


issuer_urlRequired

issuer_url: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property issuerUrl: The URL of the issuer, which is provided by the external IdP.

The URL of the issuer must be unique within an Alibaba Cloud account. The URL of the issuer must start with https and be in the valid URL format. The URL cannot contain query parameters that follow a question mark (?) or logon information that is identified by at signs (@). The URL cannot be a fragment URL that contains number signs (#). The URL can be up to 255 characters in length.


oidc_provider_nameRequired

oidc_provider_name: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property oidcProviderName: The name of the OIDC IdP.

The name can contain letters, digits, and special characters and cannot start or end with the special characters. The special characters are periods, (.), hyphens (-), and underscores (_).`` The name can be up to 128 characters in length.


client_idsOptional

client_ids: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]]
  • Type: typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]]

Property clientIds: The ID of the client, which is provided by the external IdP.

If you want to specify multiple client IDs, separate the client IDs with commas (,). The client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are periods (.), hyphens (-), underscores (_), colons (:), and forward slashes (\/).`` The client ID can be up to 128 characters in length.


descriptionOptional

description: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property description: The description of the OIDC IdP.

The description can be up to 256 characters in length.


issuance_limit_timeOptional

issuance_limit_time: typing.Union[typing.Union[int, float], IResolvable]
  • Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

Property issuanceLimitTime: The earliest time when an external IdP can issue an ID token.

If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.