OAuthSettings(mapping=None, *, ignore_unknown_fields=False, **kwargs)Configuration for OAuth login&consent flow behavior as well as for OAuth Credentials.
Attributes |
|
|---|---|
| Name | Description |
login_hint |
google.protobuf.wrappers_pb2.StringValue
Domain hint to send as hd=? parameter in OAuth request flow. Enables redirect to primary IDP by skipping Google's login screen. https://developers.google.com/identity/protocols/OpenIDConnect#hd-param Note: IAP does not verify that the id token's hd claim matches this value since access behavior is managed by IAM policies. |
client_id |
google.protobuf.wrappers_pb2.StringValue
Optional. OAuth 2.0 client ID used in the OAuth flow. This allows for client sharing. The risks of client sharing are outlined here: https://cloud.google.com/iap/docs/sharing-oauth-clients#risks. |
client_secret |
google.protobuf.wrappers_pb2.StringValue
Optional. Input only. OAuth secret paired with client ID. |
client_secret_sha256 |
google.protobuf.wrappers_pb2.StringValue
Output only. OAuth secret SHA256 paired with client ID. |
programmatic_clients |
MutableSequence[str]
Optional. List of client ids allowed to use IAP programmatically. |