pomerium/pkg/grpc/identity/identity.proto
Caleb Doxsey b9fd926618
authorize: support authenticating with idp tokens (#5484)
* identity: add support for verifying access and identity tokens

* allow overriding with policy option

* authenticate: add verify endpoints

* wip

* implement session creation

* add verify test

* implement idp token login

* fix tests

* add pr permission

* make session ids route-specific

* rename method

* add test

* add access token test

* test for newUserFromIDPClaims

* more tests

* make the session id per-idp

* use type for

* add test

* remove nil checks
2025-02-18 13:02:06 -07:00

27 lines
672 B
Protocol Buffer

syntax = "proto3";
package pomerium.identity;
option go_package = "github.com/pomerium/pomerium/pkg/grpc/identity";
import "google/protobuf/struct.proto";
message Provider {
message StringList { repeated string values = 1; }
string id = 1;
string authenticate_service_url = 9;
string client_id = 2;
string client_secret = 3;
string type = 4;
repeated string scopes = 5;
// string service_account = 6;
string url = 7;
map<string, string> request_params = 8;
optional StringList access_token_allowed_audiences = 10;
}
message Profile {
string provider_id = 1;
bytes id_token = 2;
bytes oauth_token = 3;
google.protobuf.Struct claims = 4;
}