Class DexOidcConfig

Configuration for backend connectors.

Inheritance

object

DexOidcConfig

Namespace: Neon.Kube.Resources.Dex

Assembly: Neon.Kube.Resources.dll

Syntax

public class DexOidcConfig

Constructors

DexOidcConfig()

Constructor.

Declaration

public DexOidcConfig()

Properties

AcrValues

AcrValues (Authentication Context Class Reference Values) that specifies the Authentication Context Class Values within the Authentication Request that the Authorization Server is being requested to use for processing requests from this Client, with the values appearing in order of preference.

Declaration

[JsonProperty(PropertyName = "AcrValues", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "acrValues", ApplyNamingConventions = false)]
public List<string> AcrValues { get; set; }

Property Value

Type	Description
List<string>

BasicAuthUnsupported

Causes client_secret to be passed as POST parameters instead of basic auth. This is specifically "NOT RECOMMENDED" by the OAuth2 RFC, but some providers require it.

https://tools.ietf.org/html/rfc6749#section-2.3.1

Declaration

[JsonProperty(PropertyName = "BasicAuthUnsupported", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "basicAuthUnsupported", ApplyNamingConventions = false)]
public bool? BasicAuthUnsupported { get; set; }

Property Value

Type	Description
bool?

ClaimMapping

The claim mapping overrides.

Declaration

[JsonProperty(PropertyName = "ClaimMapping", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "claimMapping", ApplyNamingConventions = false)]
public DexOidcClaimMapping ClaimMapping { get; set; }

Property Value

Type	Description
DexOidcClaimMapping

ClientId

OIDC client ID.

Declaration

[JsonProperty(PropertyName = "ClientId", Required = Required.Always, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "clientId", ApplyNamingConventions = false)]
public string ClientId { get; set; }

Property Value

Type	Description
string

ClientSecret

OIDC client Secret.

Declaration

[JsonProperty(PropertyName = "ClientSecret", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "clientSecret", ApplyNamingConventions = false)]
public string ClientSecret { get; set; }

Property Value

Type	Description
string

GetUserInfo

GetUserInfo uses the userinfo endpoint to get additional claims for the token. This is especially useful where upstreams return "thin" id tokens

Declaration

[JsonProperty(PropertyName = "GetUserInfo", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "getUserInfo", ApplyNamingConventions = false)]
public bool GetUserInfo { get; set; }

Property Value

Type	Description
bool

InsecureEnableGroups

InsecureEnableGroups enables groups claims. This is disabled by default until https://github.com/dexidp/dex/issues/1065 is resolved.

Declaration

[JsonProperty(PropertyName = "InsecureEnableGroups", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "insecureEnableGroups", ApplyNamingConventions = false)]
public bool InsecureEnableGroups { get; set; }

Property Value

Type	Description
bool

InsecureSkipEmailVerified

Override the value of email_verifed to true in the returned claims.

Declaration

[JsonProperty(PropertyName = "InsecureSkipEmailVerified", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "insecureSkipEmailVerified", ApplyNamingConventions = false)]
public bool InsecureSkipEmailVerified { get; set; }

Property Value

Type	Description
bool

InsecureSkipVerify

Disable certificate verification.

Declaration

[JsonProperty(PropertyName = "InsecureSkipVerify", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "insecureSkipVerify", ApplyNamingConventions = false)]
public bool InsecureSkipVerify { get; set; }

Property Value

Type	Description
bool

Issuer

OIDC Issuer.

Declaration

[JsonProperty(PropertyName = "Issuer", Required = Required.Always, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "issuer", ApplyNamingConventions = false)]
public string Issuer { get; set; }

Property Value

Type	Description
string

OverrideClaimMapping

OverrideClaimMapping will be used to override the options defined in claimMappings. i.e. if there are 'email' and preferred_email claims available, by default Dex will always use the email claim independent of the ClaimMapping.EmailKey. This setting allows you to override the default behavior of Dex and enforce the mappings defined in claimMapping.

Declaration

[JsonProperty(PropertyName = "OverrideClaimMapping", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "overrideClaimMapping", ApplyNamingConventions = false)]
public bool OverrideClaimMapping { get; set; }

Property Value

Type	Description
bool

PromptType

PromptType will be used for the prompt parameter (when offline_access, by default prompt=consent).

Declaration

[JsonProperty(PropertyName = "PromptType", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "promptType", ApplyNamingConventions = false)]
public string PromptType { get; set; }

Property Value

Type	Description
string

RedirectURI

The OIDC Redirect URL.

Declaration

[JsonProperty(PropertyName = "RedirectURI", Required = Required.Always, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "redirectURI", ApplyNamingConventions = false)]
public string RedirectURI { get; set; }

Property Value

Type	Description
string

RootCAs

OIDC Scopes.

Declaration

[JsonProperty(PropertyName = "RootCAs", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "rootCAs", ApplyNamingConventions = false)]
public List<string> RootCAs { get; set; }

Property Value

Type	Description
List<string>

Scopes

OIDC Scopes.

Declaration

[JsonProperty(PropertyName = "Scopes", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "scopes", ApplyNamingConventions = false)]
public List<string> Scopes { get; set; }

Property Value

Type	Description
List<string>

UserIDKey

Spoecifies the User ID key.

Declaration

[JsonProperty(PropertyName = "UserIDKey", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "userIDKey", ApplyNamingConventions = false)]
public string UserIDKey { get; set; }

Property Value

Type	Description
string

UserNameKey

Spoecifies the User ID key.

Declaration

[JsonProperty(PropertyName = "UserNameKey", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
[YamlMember(Alias = "userNameKey", ApplyNamingConventions = false)]
public string UserNameKey { get; set; }

Property Value

Type	Description
string