software.amazon.awscdk.services.elasticloadbalancingv2

Interface AuthenticateOidcOptions

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

AuthenticateOidcOptions.Jsii$Proxy

@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)",
           date="2022-09-19T20:26:39.062Z")
 @Stability(value=Stable)
public interface AuthenticateOidcOptions
extends software.amazon.jsii.JsiiSerializable

Options for `ListenerAction.authenciateOidc()`.

Example:

 ApplicationListener listener;
 ApplicationTargetGroup myTargetGroup;
 listener.addAction("DefaultAction", AddApplicationActionProps.builder()
         .action(ListenerAction.authenticateOidc(AuthenticateOidcOptions.builder()
                 .authorizationEndpoint("https://example.com/openid")
                 // Other OIDC properties here
                 .clientId("...")
                 .clientSecret(SecretValue.secretsManager("..."))
                 .issuer("...")
                 .tokenEndpoint("...")
                 .userInfoEndpoint("...")
                 // Next
                 .next(ListenerAction.forward(List.of(myTargetGroup)))
                 .build()))
         .build());
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	AuthenticateOidcOptions.Builder A builder for AuthenticateOidcOptions
static class	AuthenticateOidcOptions.Jsii$Proxy An implementation for AuthenticateOidcOptions

Method Summary

Modifier and Type	Method and Description
static AuthenticateOidcOptions.Builder	builder()
default Map<String,String>	getAuthenticationRequestExtraParams() The query parameters (up to 10) to include in the redirect request to the authorization endpoint.
String	getAuthorizationEndpoint() The authorization endpoint of the IdP.
String	getClientId() The OAuth 2.0 client identifier.
SecretValue	getClientSecret() The OAuth 2.0 client secret.
String	getIssuer() The OIDC issuer identifier of the IdP.
ListenerAction	getNext() What action to execute next.
default UnauthenticatedAction	getOnUnauthenticatedRequest() The behavior if the user is not authenticated.
default String	getScope() The set of user claims to be requested from the IdP.
default String	getSessionCookieName() The name of the cookie used to maintain session information.
default Duration	getSessionTimeout() The maximum duration of the authentication session.
String	getTokenEndpoint() The token endpoint of the IdP.
String	getUserInfoEndpoint() The user info endpoint of the IdP.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getAuthorizationEndpoint

@Stability(value=Stable)
 @NotNull
String getAuthorizationEndpoint()

The authorization endpoint of the IdP.

This must be a full URL, including the HTTPS protocol, the domain, and the path.

getClientId

@Stability(value=Stable)
 @NotNull
String getClientId()

The OAuth 2.0 client identifier.

getClientSecret

@Stability(value=Stable)
 @NotNull
SecretValue getClientSecret()

The OAuth 2.0 client secret.

getIssuer

@Stability(value=Stable)
 @NotNull
String getIssuer()

The OIDC issuer identifier of the IdP.

This must be a full URL, including the HTTPS protocol, the domain, and the path.

getNext

@Stability(value=Stable)
 @NotNull
ListenerAction getNext()

What action to execute next.

getTokenEndpoint

@Stability(value=Stable)
 @NotNull
String getTokenEndpoint()

The token endpoint of the IdP.

This must be a full URL, including the HTTPS protocol, the domain, and the path.

getUserInfoEndpoint

@Stability(value=Stable)
 @NotNull
String getUserInfoEndpoint()

The user info endpoint of the IdP.

This must be a full URL, including the HTTPS protocol, the domain, and the path.

getAuthenticationRequestExtraParams

@Stability(value=Stable)
 @Nullable
default Map<String,String> getAuthenticationRequestExtraParams()

The query parameters (up to 10) to include in the redirect request to the authorization endpoint.

Default: - No extra parameters

getOnUnauthenticatedRequest

@Stability(value=Stable)
 @Nullable
default UnauthenticatedAction getOnUnauthenticatedRequest()

The behavior if the user is not authenticated.

Default: UnauthenticatedAction.AUTHENTICATE

getScope

@Stability(value=Stable)
 @Nullable
default String getScope()

The set of user claims to be requested from the IdP.

To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP.

Default: "openid"

getSessionCookieName

@Stability(value=Stable)
 @Nullable
default String getSessionCookieName()

The name of the cookie used to maintain session information.

Default: "AWSELBAuthSessionCookie"

getSessionTimeout

@Stability(value=Stable)
 @Nullable
default Duration getSessionTimeout()

The maximum duration of the authentication session.

Default: Duration.days(7)

builder

@Stability(value=Stable)
static AuthenticateOidcOptions.Builder builder()

Returns:

a AuthenticateOidcOptions.Builder of AuthenticateOidcOptions