Class IamWorkforcePoolProviderOidcWebSsoConfig.Jsii$Proxy

    • Method Detail

      • getAssertionClaimsBehavior

        public final String getAssertionClaimsBehavior()
        Description copied from interface: IamWorkforcePoolProviderOidcWebSsoConfig
        The behavior for how OIDC Claims are included in the 'assertion' object used for attribute mapping and attribute condition.

        * MERGE_USER_INFO_OVER_ID_TOKEN_CLAIMS: Merge the UserInfo Endpoint Claims with ID Token Claims, preferring UserInfo Claim Values for the same Claim Name. This option is available only for the Authorization Code Flow. * ONLY_ID_TOKEN_CLAIMS: Only include ID Token Claims. Possible values: ["MERGE_USER_INFO_OVER_ID_TOKEN_CLAIMS", "ONLY_ID_TOKEN_CLAIMS"] Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/iam_workforce_pool_provider#assertion_claims_behavior IamWorkforcePoolProvider#assertion_claims_behavior}

        Specified by:
        getAssertionClaimsBehavior in interface IamWorkforcePoolProviderOidcWebSsoConfig
      • getResponseType

        public final String getResponseType()
        Description copied from interface: IamWorkforcePoolProviderOidcWebSsoConfig
        The Response Type to request for in the OIDC Authorization Request for web sign-in.

        The 'CODE' Response Type is recommended to avoid the Implicit Flow, for security reasons. * CODE: The 'response_type=code' selection uses the Authorization Code Flow for web sign-in. Requires a configured client secret. * ID_TOKEN: The 'response_type=id_token' selection uses the Implicit Flow for web sign-in. Possible values: ["CODE", "ID_TOKEN"] Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/iam_workforce_pool_provider#response_type IamWorkforcePoolProvider#response_type}

        Specified by:
        getResponseType in interface IamWorkforcePoolProviderOidcWebSsoConfig
      • getAdditionalScopes

        public final List<String> getAdditionalScopes()
        Description copied from interface: IamWorkforcePoolProviderOidcWebSsoConfig
        Additional scopes to request for in the OIDC authentication request on top of scopes requested by default.

        By default, the 'openid', 'profile' and 'email' scopes that are supported by the identity provider are requested. Each additional scope may be at most 256 characters. A maximum of 10 additional scopes may be configured. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/iam_workforce_pool_provider#additional_scopes IamWorkforcePoolProvider#additional_scopes}

        Specified by:
        getAdditionalScopes in interface IamWorkforcePoolProviderOidcWebSsoConfig
      • $jsii$toJson

        @Internal
        public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()
        Specified by:
        $jsii$toJson in interface software.amazon.jsii.JsiiSerializable
      • hashCode

        public final int hashCode()
        Overrides:
        hashCode in class Object