Skip to content

Commit

Permalink
DXCDT-474: Integrate with the go-auth0 beta branch (#652)
Browse files Browse the repository at this point in the history
Co-authored-by: Will Vedder <[email protected]>
Co-authored-by: Will Vedder <[email protected]>
  • Loading branch information
3 people authored Jun 27, 2023
1 parent 2416438 commit c0bb5c8
Show file tree
Hide file tree
Showing 79 changed files with 584 additions and 1,264 deletions.
64 changes: 0 additions & 64 deletions docs/data-sources/client.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,6 @@ data "auth0_client" "some-client-by-id" {

### Read-Only

- `addons` (List of Object) Addons enabled for this client and their associated configurations. (see [below for nested schema](#nestedatt--addons))
- `allowed_clients` (List of String) List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
- `allowed_logout_urls` (List of String) URLs that Auth0 may redirect to after logout.
- `allowed_origins` (List of String) URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
Expand Down Expand Up @@ -68,69 +67,6 @@ data "auth0_client" "some-client-by-id" {
- `token_endpoint_auth_method` (String) Defines the requested authentication method for the token endpoint. Options include `none` (public client without a client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic).
- `web_origins` (List of String) URLs that represent valid web origins for use with web message response mode.

<a id="nestedatt--addons"></a>
### Nested Schema for `addons`

Read-Only:

- `aws` (Map of String)
- `azure_blob` (Map of String)
- `azure_sb` (Map of String)
- `box` (Map of String)
- `cloudbees` (Map of String)
- `concur` (Map of String)
- `dropbox` (Map of String)
- `echosign` (Map of String)
- `egnyte` (Map of String)
- `firebase` (Map of String)
- `layer` (Map of String)
- `mscrm` (Map of String)
- `newrelic` (Map of String)
- `office365` (Map of String)
- `rms` (Map of String)
- `salesforce` (Map of String)
- `salesforce_api` (Map of String)
- `salesforce_sandbox_api` (Map of String)
- `samlp` (List of Object) (see [below for nested schema](#nestedobjatt--addons--samlp))
- `sap_api` (Map of String)
- `sentry` (Map of String)
- `sharepoint` (Map of String)
- `slack` (Map of String)
- `springcm` (Map of String)
- `wams` (Map of String)
- `wsfed` (Map of String)
- `zendesk` (Map of String)
- `zoom` (Map of String)

<a id="nestedobjatt--addons--samlp"></a>
### Nested Schema for `addons.samlp`

Read-Only:

- `audience` (String)
- `authn_context_class_ref` (String)
- `binding` (String)
- `create_upn_claim` (Boolean)
- `destination` (String)
- `digest_algorithm` (String)
- `include_attribute_name_format` (Boolean)
- `issuer` (String)
- `lifetime_in_seconds` (Number)
- `logout` (Map of String)
- `map_identities` (Boolean)
- `map_unknown_claims_as_is` (Boolean)
- `mappings` (Map of String)
- `name_identifier_format` (String)
- `name_identifier_probes` (List of String)
- `passthrough_claims_with_no_mapping` (Boolean)
- `recipient` (String)
- `sign_response` (Boolean)
- `signature_algorithm` (String)
- `signing_cert` (String)
- `typed_attributes` (Boolean)



<a id="nestedatt--jwt_configuration"></a>
### Nested Schema for `jwt_configuration`

Expand Down
64 changes: 0 additions & 64 deletions docs/data-sources/global_client.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,6 @@ data "auth0_global_client" "global" {}

### Read-Only

- `addons` (List of Object) Addons enabled for this client and their associated configurations. (see [below for nested schema](#nestedatt--addons))
- `allowed_clients` (List of String) List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
- `allowed_logout_urls` (List of String) URLs that Auth0 may redirect to after logout.
- `allowed_origins` (List of String) URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
Expand Down Expand Up @@ -57,69 +56,6 @@ data "auth0_global_client" "global" {}
- `token_endpoint_auth_method` (String) Defines the requested authentication method for the token endpoint. Options include `none` (public client without a client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic).
- `web_origins` (List of String) URLs that represent valid web origins for use with web message response mode.

<a id="nestedatt--addons"></a>
### Nested Schema for `addons`

Read-Only:

- `aws` (Map of String)
- `azure_blob` (Map of String)
- `azure_sb` (Map of String)
- `box` (Map of String)
- `cloudbees` (Map of String)
- `concur` (Map of String)
- `dropbox` (Map of String)
- `echosign` (Map of String)
- `egnyte` (Map of String)
- `firebase` (Map of String)
- `layer` (Map of String)
- `mscrm` (Map of String)
- `newrelic` (Map of String)
- `office365` (Map of String)
- `rms` (Map of String)
- `salesforce` (Map of String)
- `salesforce_api` (Map of String)
- `salesforce_sandbox_api` (Map of String)
- `samlp` (List of Object) (see [below for nested schema](#nestedobjatt--addons--samlp))
- `sap_api` (Map of String)
- `sentry` (Map of String)
- `sharepoint` (Map of String)
- `slack` (Map of String)
- `springcm` (Map of String)
- `wams` (Map of String)
- `wsfed` (Map of String)
- `zendesk` (Map of String)
- `zoom` (Map of String)

<a id="nestedobjatt--addons--samlp"></a>
### Nested Schema for `addons.samlp`

Read-Only:

- `audience` (String)
- `authn_context_class_ref` (String)
- `binding` (String)
- `create_upn_claim` (Boolean)
- `destination` (String)
- `digest_algorithm` (String)
- `include_attribute_name_format` (Boolean)
- `issuer` (String)
- `lifetime_in_seconds` (Number)
- `logout` (Map of String)
- `map_identities` (Boolean)
- `map_unknown_claims_as_is` (Boolean)
- `mappings` (Map of String)
- `name_identifier_format` (String)
- `name_identifier_probes` (List of String)
- `passthrough_claims_with_no_mapping` (Boolean)
- `recipient` (String)
- `sign_response` (Boolean)
- `signature_algorithm` (String)
- `signing_cert` (String)
- `typed_attributes` (Boolean)



<a id="nestedatt--jwt_configuration"></a>
### Nested Schema for `jwt_configuration`

Expand Down
64 changes: 0 additions & 64 deletions docs/resources/client.md
Original file line number Diff line number Diff line change
Expand Up @@ -89,7 +89,6 @@ resource "auth0_client" "my_client" {

### Optional

- `addons` (Block List, Max: 1) Addons enabled for this client and their associated configurations. (see [below for nested schema](#nestedblock--addons))
- `allowed_clients` (List of String) List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
- `allowed_logout_urls` (List of String) URLs that Auth0 may redirect to after logout.
- `allowed_origins` (List of String) URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
Expand Down Expand Up @@ -130,69 +129,6 @@ resource "auth0_client" "my_client" {
- `id` (String) The ID of this resource.
- `signing_keys` (List of Map of String, Sensitive) List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.

<a id="nestedblock--addons"></a>
### Nested Schema for `addons`

Optional:

- `aws` (Map of String)
- `azure_blob` (Map of String)
- `azure_sb` (Map of String)
- `box` (Map of String)
- `cloudbees` (Map of String)
- `concur` (Map of String)
- `dropbox` (Map of String)
- `echosign` (Map of String)
- `egnyte` (Map of String)
- `firebase` (Map of String)
- `layer` (Map of String)
- `mscrm` (Map of String)
- `newrelic` (Map of String)
- `office365` (Map of String)
- `rms` (Map of String)
- `salesforce` (Map of String)
- `salesforce_api` (Map of String)
- `salesforce_sandbox_api` (Map of String)
- `samlp` (Block List, Max: 1) Configuration settings for a SAML add-on. (see [below for nested schema](#nestedblock--addons--samlp))
- `sap_api` (Map of String)
- `sentry` (Map of String)
- `sharepoint` (Map of String)
- `slack` (Map of String)
- `springcm` (Map of String)
- `wams` (Map of String)
- `wsfed` (Map of String) WS-Fed (WIF) addon indicator. Actual configuration is stored in callback and `client_aliases` properties on the client.
- `zendesk` (Map of String)
- `zoom` (Map of String)

<a id="nestedblock--addons--samlp"></a>
### Nested Schema for `addons.samlp`

Optional:

- `audience` (String) Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
- `authn_context_class_ref` (String) Class reference of the authentication context.
- `binding` (String) Protocol binding used for SAML logout responses.
- `create_upn_claim` (Boolean) Indicates whether a UPN claim should be created. Defaults to `true`.
- `destination` (String) Destination of the SAML Response. If not specified, it will be `AssertionConsumerUrl` of SAMLRequest or callback URL if there was no SAMLRequest.
- `digest_algorithm` (String) Algorithm used to calculate the digest of the SAML Assertion or response. Options include `sha1` and `sha256`. Defaults to `sha1`.
- `include_attribute_name_format` (Boolean) Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion. Defaults to `true`.
- `issuer` (String) Issuer of the SAML Assertion.
- `lifetime_in_seconds` (Number) Number of seconds during which the token is valid.
- `logout` (Map of String) Configuration settings for logout.
- `map_identities` (Boolean) Indicates whether or not to add additional identity information in the token, such as the provider used and the `access_token`, if available. Defaults to `true`.
- `map_unknown_claims_as_is` (Boolean) Indicates whether to add a prefix of `http://schema.auth0.com` to any claims that are not mapped to the common profile when passed through in the output assertion. Defaults to `false`.
- `mappings` (Map of String) Mappings between the Auth0 user profile property name (`name`) and the output attributes on the SAML attribute in the assertion (`value`).
- `name_identifier_format` (String) Format of the name identifier.
- `name_identifier_probes` (List of String) Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
- `passthrough_claims_with_no_mapping` (Boolean) Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion. Defaults to `true`.
- `recipient` (String) Recipient of the SAML Assertion (SubjectConfirmationData). Default is `AssertionConsumerUrl` on SAMLRequest or callback URL if no SAMLRequest was sent.
- `sign_response` (Boolean) Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
- `signature_algorithm` (String) Algorithm used to sign the SAML Assertion or response. Options include `rsa-sha1` and `rsa-sha256`. Defaults to `rsa-sha1`.
- `signing_cert` (String) Optionally indicates the public key certificate used to validate SAML requests. If set, SAML requests will be required to be signed. A sample value would be `-----BEGIN PUBLIC KEY-----\nMIGf...bpP/t3\n+JGNGIRMj1hF1rnb6QIDAQAB\n-----END PUBLIC KEY-----\n`.
- `typed_attributes` (Boolean) Indicates whether or not we should infer the `xs:type` of the element. Types include `xs:string`, `xs:boolean`, `xs:double`, and `xs:anyType`. When set to false, all `xs:type` are `xs:anyType`. Defaults to `true`.



<a id="nestedblock--jwt_configuration"></a>
### Nested Schema for `jwt_configuration`

Expand Down
64 changes: 0 additions & 64 deletions docs/resources/global_client.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,6 @@ PAGE

### Optional

- `addons` (Block List, Max: 1) Addons enabled for this client and their associated configurations. (see [below for nested schema](#nestedblock--addons))
- `allowed_clients` (List of String) List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
- `allowed_logout_urls` (List of String) URLs that Auth0 may redirect to after logout.
- `allowed_origins` (List of String) URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
Expand Down Expand Up @@ -73,69 +72,6 @@ PAGE

- `id` (String) The ID of this resource.

<a id="nestedblock--addons"></a>
### Nested Schema for `addons`

Optional:

- `aws` (Map of String)
- `azure_blob` (Map of String)
- `azure_sb` (Map of String)
- `box` (Map of String)
- `cloudbees` (Map of String)
- `concur` (Map of String)
- `dropbox` (Map of String)
- `echosign` (Map of String)
- `egnyte` (Map of String)
- `firebase` (Map of String)
- `layer` (Map of String)
- `mscrm` (Map of String)
- `newrelic` (Map of String)
- `office365` (Map of String)
- `rms` (Map of String)
- `salesforce` (Map of String)
- `salesforce_api` (Map of String)
- `salesforce_sandbox_api` (Map of String)
- `samlp` (Block List, Max: 1) Configuration settings for a SAML add-on. (see [below for nested schema](#nestedblock--addons--samlp))
- `sap_api` (Map of String)
- `sentry` (Map of String)
- `sharepoint` (Map of String)
- `slack` (Map of String)
- `springcm` (Map of String)
- `wams` (Map of String)
- `wsfed` (Map of String) WS-Fed (WIF) addon indicator. Actual configuration is stored in callback and `client_aliases` properties on the client.
- `zendesk` (Map of String)
- `zoom` (Map of String)

<a id="nestedblock--addons--samlp"></a>
### Nested Schema for `addons.samlp`

Optional:

- `audience` (String) Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
- `authn_context_class_ref` (String) Class reference of the authentication context.
- `binding` (String) Protocol binding used for SAML logout responses.
- `create_upn_claim` (Boolean) Indicates whether a UPN claim should be created. Defaults to `true`.
- `destination` (String) Destination of the SAML Response. If not specified, it will be `AssertionConsumerUrl` of SAMLRequest or callback URL if there was no SAMLRequest.
- `digest_algorithm` (String) Algorithm used to calculate the digest of the SAML Assertion or response. Options include `sha1` and `sha256`. Defaults to `sha1`.
- `include_attribute_name_format` (Boolean) Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion. Defaults to `true`.
- `issuer` (String) Issuer of the SAML Assertion.
- `lifetime_in_seconds` (Number) Number of seconds during which the token is valid.
- `logout` (Map of String) Configuration settings for logout.
- `map_identities` (Boolean) Indicates whether or not to add additional identity information in the token, such as the provider used and the `access_token`, if available. Defaults to `true`.
- `map_unknown_claims_as_is` (Boolean) Indicates whether to add a prefix of `http://schema.auth0.com` to any claims that are not mapped to the common profile when passed through in the output assertion. Defaults to `false`.
- `mappings` (Map of String) Mappings between the Auth0 user profile property name (`name`) and the output attributes on the SAML attribute in the assertion (`value`).
- `name_identifier_format` (String) Format of the name identifier.
- `name_identifier_probes` (List of String) Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
- `passthrough_claims_with_no_mapping` (Boolean) Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion. Defaults to `true`.
- `recipient` (String) Recipient of the SAML Assertion (SubjectConfirmationData). Default is `AssertionConsumerUrl` on SAMLRequest or callback URL if no SAMLRequest was sent.
- `sign_response` (Boolean) Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
- `signature_algorithm` (String) Algorithm used to sign the SAML Assertion or response. Options include `rsa-sha1` and `rsa-sha256`. Defaults to `rsa-sha1`.
- `signing_cert` (String) Optionally indicates the public key certificate used to validate SAML requests. If set, SAML requests will be required to be signed. A sample value would be `-----BEGIN PUBLIC KEY-----\nMIGf...bpP/t3\n+JGNGIRMj1hF1rnb6QIDAQAB\n-----END PUBLIC KEY-----\n`.
- `typed_attributes` (Boolean) Indicates whether or not we should infer the `xs:type` of the element. Types include `xs:string`, `xs:boolean`, `xs:double`, and `xs:anyType`. When set to false, all `xs:type` are `xs:anyType`. Defaults to `true`.



<a id="nestedblock--jwt_configuration"></a>
### Nested Schema for `jwt_configuration`

Expand Down
12 changes: 6 additions & 6 deletions go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ module github.com/auth0/terraform-provider-auth0
go 1.20

require (
github.com/auth0/go-auth0 v0.17.2
github.com/auth0/go-auth0 v1.0.0-beta.0
github.com/google/go-cmp v0.5.9
github.com/hashicorp/go-cty v1.4.1-0.20200414143053-d3edf31b6320
github.com/hashicorp/go-multierror v1.1.1
Expand Down Expand Up @@ -66,12 +66,12 @@ require (
github.com/vmihailenco/msgpack/v5 v5.3.5 // indirect
github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
github.com/zclconf/go-cty v1.13.2 // indirect
golang.org/x/crypto v0.9.0 // indirect
golang.org/x/crypto v0.10.0 // indirect
golang.org/x/mod v0.10.0 // indirect
golang.org/x/net v0.10.0 // indirect
golang.org/x/oauth2 v0.8.0 // indirect
golang.org/x/sys v0.8.0 // indirect
golang.org/x/text v0.9.0 // indirect
golang.org/x/net v0.11.0 // indirect
golang.org/x/oauth2 v0.9.0 // indirect
golang.org/x/sys v0.9.0 // indirect
golang.org/x/text v0.10.0 // indirect
google.golang.org/appengine v1.6.7 // indirect
google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f // indirect
google.golang.org/grpc v1.54.0 // indirect
Expand Down
Loading

0 comments on commit c0bb5c8

Please sign in to comment.