Class: Google::Apis::IamV1::Oidc

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/iam_v1/classes.rb,
lib/google/apis/iam_v1/representations.rb,
lib/google/apis/iam_v1/representations.rb

Overview

Represents an OpenId Connect 1.0 identity provider.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ Oidc

Returns a new instance of Oidc.



778
779
780
# File 'lib/google/apis/iam_v1/classes.rb', line 778

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#allowed_audiencesArray<String>

Acceptable values for the aud field (audience) in the OIDC token. Token exchange requests are rejected if the token audience does not match one of the configured values. Each audience may be at most 256 characters. A maximum of 10 audiences may be configured. If this list is empty, the OIDC token audience must be equal to the full canonical resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix. For example: ` //iam.googleapis.com/projects//locations//workloadIdentityPools//providers/ https://iam.googleapis.com/projects//locations//workloadIdentityPools// providers/ Corresponds to the JSON propertyallowedAudiences`

Returns:

  • (Array<String>)


771
772
773
# File 'lib/google/apis/iam_v1/classes.rb', line 771

def allowed_audiences
  @allowed_audiences
end

#issuer_uriString

Required. The OIDC issuer URL. Must be an HTTPS endpoint. Corresponds to the JSON property issuerUri

Returns:

  • (String)


776
777
778
# File 'lib/google/apis/iam_v1/classes.rb', line 776

def issuer_uri
  @issuer_uri
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



783
784
785
786
# File 'lib/google/apis/iam_v1/classes.rb', line 783

def update!(**args)
  @allowed_audiences = args[:allowed_audiences] if args.key?(:allowed_audiences)
  @issuer_uri = args[:issuer_uri] if args.key?(:issuer_uri)
end