GoogleApi.IAM.V1.Model.GoogleIamAdminV1WorkforcePoolProviderExtraAttributesOAuth2Client (google_api_iam v0.45.0)
View SourceRepresents the OAuth 2.0 client credential configuration for retrieving additional user attributes that are not present in the initial authentication credentials from the identity provider, e.g. groups. See https://datatracker.ietf.org/doc/html/rfc6749#section-4.4 for more details on client credentials grant flow.
Attributes
-
attributesType
(type:String.t
, default:nil
) - Required. Represents the IdP and type of claims that should be fetched. -
clientId
(type:String.t
, default:nil
) - Required. The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow. -
clientSecret
(type:GoogleApi.IAM.V1.Model.GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret.t
, default:nil
) - Required. The OAuth 2.0 client secret for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow. -
issuerUri
(type:String.t
, default:nil
) - Required. The OIDC identity provider's issuer URI. Must be a valid URI using thehttps
scheme. Required to get the OIDC discovery document. -
queryParameters
(type:GoogleApi.IAM.V1.Model.GoogleIamAdminV1WorkforcePoolProviderExtraAttributesOAuth2ClientQueryParameters.t
, default:nil
) - Optional. Represents the parameters to control which claims are fetched from an IdP.
Summary
Functions
Unwrap a decoded JSON object into its complex fields.
Types
@type t() :: %GoogleApi.IAM.V1.Model.GoogleIamAdminV1WorkforcePoolProviderExtraAttributesOAuth2Client{ attributesType: String.t() | nil, clientId: String.t() | nil, clientSecret: GoogleApi.IAM.V1.Model.GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret.t() | nil, issuerUri: String.t() | nil, queryParameters: GoogleApi.IAM.V1.Model.GoogleIamAdminV1WorkforcePoolProviderExtraAttributesOAuth2ClientQueryParameters.t() | nil }