public static interface AuthenticateOidcActionConfig.Builder extends SdkPojo, CopyableBuilder<AuthenticateOidcActionConfig.Builder,AuthenticateOidcActionConfig>
Modifier and Type | Method and Description |
---|---|
AuthenticateOidcActionConfig.Builder |
authenticationRequestExtraParams(Map<String,String> authenticationRequestExtraParams)
The query parameters (up to 10) to include in the redirect request to the authorization endpoint.
|
AuthenticateOidcActionConfig.Builder |
authorizationEndpoint(String authorizationEndpoint)
The authorization endpoint of the IdP.
|
AuthenticateOidcActionConfig.Builder |
clientId(String clientId)
The OAuth 2.0 client identifier.
|
AuthenticateOidcActionConfig.Builder |
clientSecret(String clientSecret)
The OAuth 2.0 client secret.
|
AuthenticateOidcActionConfig.Builder |
issuer(String issuer)
The OIDC issuer identifier of the IdP.
|
AuthenticateOidcActionConfig.Builder |
onUnauthenticatedRequest(AuthenticateOidcActionConditionalBehaviorEnum onUnauthenticatedRequest)
The behavior if the user is not authenticated.
|
AuthenticateOidcActionConfig.Builder |
onUnauthenticatedRequest(String onUnauthenticatedRequest)
The behavior if the user is not authenticated.
|
AuthenticateOidcActionConfig.Builder |
scope(String scope)
The set of user claims to be requested from the IdP.
|
AuthenticateOidcActionConfig.Builder |
sessionCookieName(String sessionCookieName)
The name of the cookie used to maintain session information.
|
AuthenticateOidcActionConfig.Builder |
sessionTimeout(Long sessionTimeout)
The maximum duration of the authentication session, in seconds.
|
AuthenticateOidcActionConfig.Builder |
tokenEndpoint(String tokenEndpoint)
The token endpoint of the IdP.
|
AuthenticateOidcActionConfig.Builder |
useExistingClientSecret(Boolean useExistingClientSecret)
Sets the value of the UseExistingClientSecret property for this object.
|
AuthenticateOidcActionConfig.Builder |
userInfoEndpoint(String userInfoEndpoint)
The user info endpoint of the IdP.
|
copy
applyMutation, build
AuthenticateOidcActionConfig.Builder issuer(String issuer)
The OIDC issuer identifier of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
issuer
- The OIDC issuer identifier of the IdP. This must be a full URL, including the HTTPS protocol, the
domain, and the path.AuthenticateOidcActionConfig.Builder authorizationEndpoint(String authorizationEndpoint)
The authorization endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
authorizationEndpoint
- The authorization endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the
domain, and the path.AuthenticateOidcActionConfig.Builder tokenEndpoint(String tokenEndpoint)
The token endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
tokenEndpoint
- The token endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and
the path.AuthenticateOidcActionConfig.Builder userInfoEndpoint(String userInfoEndpoint)
The user info endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
userInfoEndpoint
- The user info endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain,
and the path.AuthenticateOidcActionConfig.Builder clientId(String clientId)
The OAuth 2.0 client identifier.
clientId
- The OAuth 2.0 client identifier.AuthenticateOidcActionConfig.Builder clientSecret(String clientSecret)
The OAuth 2.0 client secret.
clientSecret
- The OAuth 2.0 client secret.AuthenticateOidcActionConfig.Builder sessionCookieName(String sessionCookieName)
The name of the cookie used to maintain session information. The default is AWSELBAuthSessionCookie.
sessionCookieName
- The name of the cookie used to maintain session information. The default is AWSELBAuthSessionCookie.AuthenticateOidcActionConfig.Builder scope(String scope)
The set of user claims to be requested from the IdP. The default is openid
.
To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP.
scope
- The set of user claims to be requested from the IdP. The default is openid
.
To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP.
AuthenticateOidcActionConfig.Builder sessionTimeout(Long sessionTimeout)
The maximum duration of the authentication session, in seconds. The default is 604800 seconds (7 days).
sessionTimeout
- The maximum duration of the authentication session, in seconds. The default is 604800 seconds (7
days).AuthenticateOidcActionConfig.Builder authenticationRequestExtraParams(Map<String,String> authenticationRequestExtraParams)
The query parameters (up to 10) to include in the redirect request to the authorization endpoint.
authenticationRequestExtraParams
- The query parameters (up to 10) to include in the redirect request to the authorization endpoint.AuthenticateOidcActionConfig.Builder onUnauthenticatedRequest(String onUnauthenticatedRequest)
The behavior if the user is not authenticated. The following are possible values:
deny - Return an HTTP 401 Unauthorized error.
allow - Allow the request to be forwarded to the target.
authenticate - Redirect the request to the IdP authorization endpoint. This is the default value.
onUnauthenticatedRequest
- The behavior if the user is not authenticated. The following are possible values:
deny - Return an HTTP 401 Unauthorized error.
allow - Allow the request to be forwarded to the target.
authenticate
- Redirect the request to the IdP authorization endpoint. This is the default value.
AuthenticateOidcActionConditionalBehaviorEnum
,
AuthenticateOidcActionConditionalBehaviorEnum
AuthenticateOidcActionConfig.Builder onUnauthenticatedRequest(AuthenticateOidcActionConditionalBehaviorEnum onUnauthenticatedRequest)
The behavior if the user is not authenticated. The following are possible values:
deny - Return an HTTP 401 Unauthorized error.
allow - Allow the request to be forwarded to the target.
authenticate - Redirect the request to the IdP authorization endpoint. This is the default value.
onUnauthenticatedRequest
- The behavior if the user is not authenticated. The following are possible values:
deny - Return an HTTP 401 Unauthorized error.
allow - Allow the request to be forwarded to the target.
authenticate
- Redirect the request to the IdP authorization endpoint. This is the default value.
AuthenticateOidcActionConditionalBehaviorEnum
,
AuthenticateOidcActionConditionalBehaviorEnum
AuthenticateOidcActionConfig.Builder useExistingClientSecret(Boolean useExistingClientSecret)
useExistingClientSecret
- The new value for the UseExistingClientSecret property for this object.Copyright © 2017 Amazon Web Services, Inc. All Rights Reserved.