@Generated(value="software.amazon.awssdk:codegen") public final class AuthenticateOidcActionConfig extends Object implements SdkPojo, Serializable, ToCopyableBuilder<AuthenticateOidcActionConfig.Builder,AuthenticateOidcActionConfig>
Request parameters when using an identity provider (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.
Modifier and Type | Class and Description |
---|---|
static interface |
AuthenticateOidcActionConfig.Builder |
Modifier and Type | Method and Description |
---|---|
Map<String,String> |
authenticationRequestExtraParams()
The query parameters (up to 10) to include in the redirect request to the authorization endpoint.
|
String |
authorizationEndpoint()
The authorization endpoint of the IdP.
|
static AuthenticateOidcActionConfig.Builder |
builder() |
String |
clientId()
The OAuth 2.0 client identifier.
|
String |
clientSecret()
The OAuth 2.0 client secret.
|
boolean |
equals(Object obj) |
<T> Optional<T> |
getValueForField(String fieldName,
Class<T> clazz) |
int |
hashCode() |
String |
issuer()
The OIDC issuer identifier of the IdP.
|
AuthenticateOidcActionConditionalBehaviorEnum |
onUnauthenticatedRequest()
The behavior if the user is not authenticated.
|
String |
onUnauthenticatedRequestAsString()
The behavior if the user is not authenticated.
|
String |
scope()
The set of user claims to be requested from the IdP.
|
List<SdkField<?>> |
sdkFields() |
static Class<? extends AuthenticateOidcActionConfig.Builder> |
serializableBuilderClass() |
String |
sessionCookieName()
The name of the cookie used to maintain session information.
|
Long |
sessionTimeout()
The maximum duration of the authentication session, in seconds.
|
AuthenticateOidcActionConfig.Builder |
toBuilder()
Take this object and create a builder that contains all of the current property values of this object.
|
String |
tokenEndpoint()
The token endpoint of the IdP.
|
String |
toString() |
Boolean |
useExistingClientSecret()
Returns the value of the UseExistingClientSecret property for this object.
|
String |
userInfoEndpoint()
The user info endpoint of the IdP.
|
copy
public String issuer()
The OIDC issuer identifier of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
public String authorizationEndpoint()
The authorization endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
public String tokenEndpoint()
The token endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
public String userInfoEndpoint()
The user info endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
public String clientId()
The OAuth 2.0 client identifier.
public String clientSecret()
The OAuth 2.0 client secret.
public String sessionCookieName()
The name of the cookie used to maintain session information. The default is AWSELBAuthSessionCookie.
public String scope()
The set of user claims to be requested from the IdP. The default is openid
.
To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP.
openid
.
To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP.
public Long sessionTimeout()
The maximum duration of the authentication session, in seconds. The default is 604800 seconds (7 days).
public Map<String,String> authenticationRequestExtraParams()
The query parameters (up to 10) to include in the redirect request to the authorization endpoint.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
public AuthenticateOidcActionConditionalBehaviorEnum onUnauthenticatedRequest()
The behavior if the user is not authenticated. The following are possible values:
deny - Return an HTTP 401 Unauthorized error.
allow - Allow the request to be forwarded to the target.
authenticate - Redirect the request to the IdP authorization endpoint. This is the default value.
If the service returns an enum value that is not available in the current SDK version,
onUnauthenticatedRequest
will return
AuthenticateOidcActionConditionalBehaviorEnum.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the
service is available from onUnauthenticatedRequestAsString()
.
deny - Return an HTTP 401 Unauthorized error.
allow - Allow the request to be forwarded to the target.
authenticate - Redirect the request to the IdP authorization endpoint. This is the default value.
AuthenticateOidcActionConditionalBehaviorEnum
public String onUnauthenticatedRequestAsString()
The behavior if the user is not authenticated. The following are possible values:
deny - Return an HTTP 401 Unauthorized error.
allow - Allow the request to be forwarded to the target.
authenticate - Redirect the request to the IdP authorization endpoint. This is the default value.
If the service returns an enum value that is not available in the current SDK version,
onUnauthenticatedRequest
will return
AuthenticateOidcActionConditionalBehaviorEnum.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the
service is available from onUnauthenticatedRequestAsString()
.
deny - Return an HTTP 401 Unauthorized error.
allow - Allow the request to be forwarded to the target.
authenticate - Redirect the request to the IdP authorization endpoint. This is the default value.
AuthenticateOidcActionConditionalBehaviorEnum
public Boolean useExistingClientSecret()
public AuthenticateOidcActionConfig.Builder toBuilder()
ToCopyableBuilder
toBuilder
in interface ToCopyableBuilder<AuthenticateOidcActionConfig.Builder,AuthenticateOidcActionConfig>
public static AuthenticateOidcActionConfig.Builder builder()
public static Class<? extends AuthenticateOidcActionConfig.Builder> serializableBuilderClass()
Copyright © 2017 Amazon Web Services, Inc. All Rights Reserved.