software.amazon.awscdk.services.appsync

Interface OpenIdConnectConfig

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

OpenIdConnectConfig.Jsii$Proxy

@Generated(value="jsii-pacmak/1.58.0 (build f8ba112)",
           date="2022-05-11T19:24:24.876Z")
 @Stability(value=Experimental)
public interface OpenIdConnectConfig
extends software.amazon.jsii.JsiiSerializable

(experimental) Configuration for OpenID Connect authorization in AppSync.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.appsync.*;
 OpenIdConnectConfig openIdConnectConfig = OpenIdConnectConfig.builder()
         .oidcProvider("oidcProvider")
         // the properties below are optional
         .clientId("clientId")
         .tokenExpiryFromAuth(123)
         .tokenExpiryFromIssue(123)
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	OpenIdConnectConfig.Builder A builder for OpenIdConnectConfig
static class	OpenIdConnectConfig.Jsii$Proxy An implementation for OpenIdConnectConfig

Method Summary

Modifier and Type	Method and Description
static OpenIdConnectConfig.Builder	builder()
default String	getClientId() (experimental) The client identifier of the Relying party at the OpenID identity provider.
String	getOidcProvider() (experimental) The issuer for the OIDC configuration.
default Number	getTokenExpiryFromAuth() (experimental) The number of milliseconds an OIDC token is valid after being authenticated by OIDC provider.
default Number	getTokenExpiryFromIssue() (experimental) The number of milliseconds an OIDC token is valid after being issued to a user.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getOidcProvider

@Stability(value=Experimental)
 @NotNull
String getOidcProvider()

(experimental) The issuer for the OIDC configuration.

The issuer returned by discovery must exactly match the value of iss in the OIDC token.

getClientId

@Stability(value=Experimental)
 @Nullable
default String getClientId()

(experimental) The client identifier of the Relying party at the OpenID identity provider.

A regular expression can be specified so AppSync can validate against multiple client identifiers at a time.

Default: - * (All)

Example:

 -"ABCD|CDEF";
 

getTokenExpiryFromAuth

@Stability(value=Experimental)
 @Nullable
default Number getTokenExpiryFromAuth()

(experimental) The number of milliseconds an OIDC token is valid after being authenticated by OIDC provider.

auth_time claim in OIDC token is required for this validation to work.

Default: - no validation

getTokenExpiryFromIssue

@Stability(value=Experimental)
 @Nullable
default Number getTokenExpiryFromIssue()

(experimental) The number of milliseconds an OIDC token is valid after being issued to a user.

This validation uses iat claim of OIDC token.

Default: - no validation

builder

@Stability(value=Experimental)
static OpenIdConnectConfig.Builder builder()

Returns:

a OpenIdConnectConfig.Builder of OpenIdConnectConfig