interface OpenIdConnectTokenSelectionProperty
Language | Type name |
---|---|
![]() | Amazon.CDK.aws_verifiedpermissions.CfnIdentitySource.OpenIdConnectTokenSelectionProperty |
![]() | github.com/aws/aws-cdk-go/awscdk/v2/awsverifiedpermissions#CfnIdentitySource_OpenIdConnectTokenSelectionProperty |
![]() | software.amazon.awscdk.services.verifiedpermissions.CfnIdentitySource.OpenIdConnectTokenSelectionProperty |
![]() | aws_cdk.aws_verifiedpermissions.CfnIdentitySource.OpenIdConnectTokenSelectionProperty |
![]() | aws-cdk-lib » aws_verifiedpermissions » CfnIdentitySource » OpenIdConnectTokenSelectionProperty |
The token type that you want to process from your OIDC identity provider.
Your policy store can process either identity (ID) or access tokens from a given OIDC identity source.
This data type is part of a OpenIdConnectConfiguration structure, which is a parameter of CreateIdentitySource .
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_verifiedpermissions as verifiedpermissions } from 'aws-cdk-lib';
const openIdConnectTokenSelectionProperty: verifiedpermissions.CfnIdentitySource.OpenIdConnectTokenSelectionProperty = {
accessTokenOnly: {
audiences: ['audiences'],
principalIdClaim: 'principalIdClaim',
},
identityTokenOnly: {
clientIds: ['clientIds'],
principalIdClaim: 'principalIdClaim',
},
};
Properties
Name | Type | Description |
---|---|---|
access | IResolvable | Open | The OIDC configuration for processing access tokens. |
identity | IResolvable | Open | The OIDC configuration for processing identity (ID) tokens. |
accessTokenOnly?
Type:
IResolvable
|
Open
(optional)
The OIDC configuration for processing access tokens.
Contains allowed audience claims, for example https://auth.example.com
, and the claim that you want to map to the principal, for example sub
.
identityTokenOnly?
Type:
IResolvable
|
Open
(optional)
The OIDC configuration for processing identity (ID) tokens.
Contains allowed client ID claims, for example 1example23456789
, and the claim that you want to map to the principal, for example sub
.