Skip to content

Commit 3e79bd5

Browse files
feat(iap): update the api
#### iap:v1 The following keys were added: - schemas.ApplicationSettings.properties.attributePropagationSettings.$ref (Total Keys: 1) - schemas.AttributePropagationSettings (Total Keys: 6)
1 parent 25769cc commit 3e79bd5

File tree

3 files changed

+61
-2
lines changed

3 files changed

+61
-2
lines changed

docs/dyn/iap_v1.v1.html

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -204,6 +204,13 @@ <h3>Method Details</h3>
204204
&quot;generateTroubleshootingUri&quot;: True or False, # Whether to generate a troubleshooting URL on access denied events to this application.
205205
&quot;remediationTokenGenerationEnabled&quot;: True or False, # Whether to generate remediation token on access denied events to this application.
206206
},
207+
&quot;attributePropagationSettings&quot;: { # Configuration for propagating attributes to customer applications protected by IAP. These attributes may be SAML attributes from a 3rd party IdP, or potentially other sources in the future. # Settings to configure attribute propagation to customer application. These attributes may come from SAML/SessionStorage integration, or other sources in the future.
208+
&quot;enable&quot;: True or False, # Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
209+
&quot;expression&quot;: &quot;A String&quot;, # Raw string CEL expression. Expression should be of the form attributes.saml_attributes.filter(attribute, attribute.name in [{attribute_list}]). An example expression to select the attributes &quot;my_attr&quot; and &quot;other_attr&quot;: attributes.saml_attributes.filter(attribute, attribute.name in [&quot;my_attr&quot;, &quot;other_attr&quot;])
210+
&quot;outputCredentials&quot;: [ # Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
211+
&quot;A String&quot;,
212+
],
213+
},
207214
&quot;cookieDomain&quot;: &quot;A String&quot;, # The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.
208215
&quot;csmSettings&quot;: { # Configuration for RCToken generated for service mesh workloads protected by IAP. RCToken are IAP generated JWTs that can be verified at the application. The RCToken is primarily used for service mesh deployments, and can be scoped to a single mesh by configuring the audience field accordingly. # Settings to configure IAP&#x27;s behavior for a service mesh.
209216
&quot;rctokenAud&quot;: &quot;A String&quot;, # Audience claim set in the generated RCToken. This value is not validated by IAP.
@@ -359,6 +366,13 @@ <h3>Method Details</h3>
359366
&quot;generateTroubleshootingUri&quot;: True or False, # Whether to generate a troubleshooting URL on access denied events to this application.
360367
&quot;remediationTokenGenerationEnabled&quot;: True or False, # Whether to generate remediation token on access denied events to this application.
361368
},
369+
&quot;attributePropagationSettings&quot;: { # Configuration for propagating attributes to customer applications protected by IAP. These attributes may be SAML attributes from a 3rd party IdP, or potentially other sources in the future. # Settings to configure attribute propagation to customer application. These attributes may come from SAML/SessionStorage integration, or other sources in the future.
370+
&quot;enable&quot;: True or False, # Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
371+
&quot;expression&quot;: &quot;A String&quot;, # Raw string CEL expression. Expression should be of the form attributes.saml_attributes.filter(attribute, attribute.name in [{attribute_list}]). An example expression to select the attributes &quot;my_attr&quot; and &quot;other_attr&quot;: attributes.saml_attributes.filter(attribute, attribute.name in [&quot;my_attr&quot;, &quot;other_attr&quot;])
372+
&quot;outputCredentials&quot;: [ # Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
373+
&quot;A String&quot;,
374+
],
375+
},
362376
&quot;cookieDomain&quot;: &quot;A String&quot;, # The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.
363377
&quot;csmSettings&quot;: { # Configuration for RCToken generated for service mesh workloads protected by IAP. RCToken are IAP generated JWTs that can be verified at the application. The RCToken is primarily used for service mesh deployments, and can be scoped to a single mesh by configuring the audience field accordingly. # Settings to configure IAP&#x27;s behavior for a service mesh.
364378
&quot;rctokenAud&quot;: &quot;A String&quot;, # Audience claim set in the generated RCToken. This value is not validated by IAP.
@@ -425,6 +439,13 @@ <h3>Method Details</h3>
425439
&quot;generateTroubleshootingUri&quot;: True or False, # Whether to generate a troubleshooting URL on access denied events to this application.
426440
&quot;remediationTokenGenerationEnabled&quot;: True or False, # Whether to generate remediation token on access denied events to this application.
427441
},
442+
&quot;attributePropagationSettings&quot;: { # Configuration for propagating attributes to customer applications protected by IAP. These attributes may be SAML attributes from a 3rd party IdP, or potentially other sources in the future. # Settings to configure attribute propagation to customer application. These attributes may come from SAML/SessionStorage integration, or other sources in the future.
443+
&quot;enable&quot;: True or False, # Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
444+
&quot;expression&quot;: &quot;A String&quot;, # Raw string CEL expression. Expression should be of the form attributes.saml_attributes.filter(attribute, attribute.name in [{attribute_list}]). An example expression to select the attributes &quot;my_attr&quot; and &quot;other_attr&quot;: attributes.saml_attributes.filter(attribute, attribute.name in [&quot;my_attr&quot;, &quot;other_attr&quot;])
445+
&quot;outputCredentials&quot;: [ # Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
446+
&quot;A String&quot;,
447+
],
448+
},
428449
&quot;cookieDomain&quot;: &quot;A String&quot;, # The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.
429450
&quot;csmSettings&quot;: { # Configuration for RCToken generated for service mesh workloads protected by IAP. RCToken are IAP generated JWTs that can be verified at the application. The RCToken is primarily used for service mesh deployments, and can be scoped to a single mesh by configuring the audience field accordingly. # Settings to configure IAP&#x27;s behavior for a service mesh.
430451
&quot;rctokenAud&quot;: &quot;A String&quot;, # Audience claim set in the generated RCToken. This value is not validated by IAP.

googleapiclient/discovery_cache/documents/iap.v1.json

Lines changed: 39 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -652,7 +652,7 @@
652652
}
653653
}
654654
},
655-
"revision": "20220805",
655+
"revision": "20220822",
656656
"rootUrl": "https://iap.googleapis.com/",
657657
"schemas": {
658658
"AccessDeniedPageSettings": {
@@ -731,6 +731,10 @@
731731
"$ref": "AccessDeniedPageSettings",
732732
"description": "Customization for Access Denied page."
733733
},
734+
"attributePropagationSettings": {
735+
"$ref": "AttributePropagationSettings",
736+
"description": "Settings to configure attribute propagation to customer application. These attributes may come from SAML/SessionStorage integration, or other sources in the future."
737+
},
734738
"cookieDomain": {
735739
"description": "The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.",
736740
"type": "string"
@@ -742,6 +746,40 @@
742746
},
743747
"type": "object"
744748
},
749+
"AttributePropagationSettings": {
750+
"description": "Configuration for propagating attributes to customer applications protected by IAP. These attributes may be SAML attributes from a 3rd party IdP, or potentially other sources in the future.",
751+
"id": "AttributePropagationSettings",
752+
"properties": {
753+
"enable": {
754+
"description": "Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.",
755+
"type": "boolean"
756+
},
757+
"expression": {
758+
"description": "Raw string CEL expression. Expression should be of the form attributes.saml_attributes.filter(attribute, attribute.name in [{attribute_list}]). An example expression to select the attributes \"my_attr\" and \"other_attr\": attributes.saml_attributes.filter(attribute, attribute.name in [\"my_attr\", \"other_attr\"])",
759+
"type": "string"
760+
},
761+
"outputCredentials": {
762+
"description": "Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.",
763+
"items": {
764+
"enum": [
765+
"OUTPUT_CREDENTIALS_UNSPECIFIED",
766+
"HEADER",
767+
"JWT",
768+
"RCTOKEN"
769+
],
770+
"enumDescriptions": [
771+
"No output credential. This is unsupported in IAP, there must be an output credential.",
772+
"Propagate attributes in the headers with \"x-goog-iap-attr-\" prefix.",
773+
"Propagate attributes in the JWT of the form: \"additional_claims\": { \"my_attribute\": [\"value1\", \"value2\"] }",
774+
"Propagate attributes in the RCToken of the form: \"additional_claims\": { \"my_attribute\": [\"value1\", \"value2\"] }"
775+
],
776+
"type": "string"
777+
},
778+
"type": "array"
779+
}
780+
},
781+
"type": "object"
782+
},
745783
"Binding": {
746784
"description": "Associates `members`, or principals, with a `role`.",
747785
"id": "Binding",

googleapiclient/discovery_cache/documents/iap.v1beta1.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -194,7 +194,7 @@
194194
}
195195
}
196196
},
197-
"revision": "20220805",
197+
"revision": "20220822",
198198
"rootUrl": "https://iap.googleapis.com/",
199199
"schemas": {
200200
"Binding": {

0 commit comments

Comments
 (0)