authzadminv1alpha

type AccessTokenConfig struct {

	// Preferred algorithm used to sign tokens.
	Algorithm signalgpb.SigningAlgorithm `protobuf:"varint,1,opt,name=algorithm,proto3,enum=blocky.authz.type.SigningAlgorithm" json:"algorithm,omitempty"`
	// The duration of validity of the access token.
	TokenLifetime *durationpb.Duration `protobuf:"bytes,2,opt,name=token_lifetime,json=tokenLifetime,proto3" json:"token_lifetime,omitempty"`
	// contains filtered or unexported fields
}

type AliasResourcePermissionRequest struct {

	// The name of the resource permission to set alias.
	// Format: projects/{project}/resourceManagers/{resource_manager}/resource_permissions/{resource_permission}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The alias to use for the resource permission.
	// It could be use instead of the resource permission identifier.
	// I.e.: projects/{project}/resourceManagers/{resource_manager}/resource_permissions/{alias}
	AliasId string `protobuf:"bytes,2,opt,name=alias_id,json=aliasId,proto3" json:"alias_id,omitempty"`
	// contains filtered or unexported fields
}

type AliasResourceRequest struct {

	// The name of the resource manager to set alias.
	// Format: projects/{project}/resourceManagers/{resource_manager}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The alias to use for the resource manager.
	// It could be use instead of the resource manager identifier.
	// I.e.: projects/{project}/resourceManagers/{alias}
	AliasId string `protobuf:"bytes,2,opt,name=alias_id,json=aliasId,proto3" json:"alias_id,omitempty"`
	// contains filtered or unexported fields
}

type Client struct {

	// Is a resource name of the client. It uniquely identifies the client.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Is a unique alias identifier of the client.
	Alias string `protobuf:"bytes,2,opt,name=alias,proto3" json:"alias,omitempty"`
	// Is a unique identifier of the client.
	ClientId string `protobuf:"bytes,3,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	// The type of the client, once set, it can not be changed.
	// This needs to be set when the client is created.
	ClientType ClientType `` /* 135-byte string literal not displayed */
	// The name of the client to display.
	DisplayName string `protobuf:"bytes,5,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// The time when the client was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// The time when the client was last updated.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Denotes if a client is internal to the organization.
	// This implies that a OAuth consent screen is not required.
	OrganizationInternal bool `protobuf:"varint,8,opt,name=organization_internal,json=organizationInternal,proto3" json:"organization_internal,omitempty"`
	// The secret data used to authorize with.
	// This field is only populated when the Client is created.
	SecretData []byte `protobuf:"bytes,9,opt,name=secret_data,json=secretData,proto3" json:"secret_data,omitempty"`
	// contains filtered or unexported fields
}

type ClientAdminServiceClient interface {
	// Creates a new authorization client with the specified name,
	// and returns the new client.
	// A newly created client will have a secret generated.
	CreateClient(ctx context.Context, in *CreateClientRequest, opts ...grpc.CallOption) (*Client, error)
	// Lists authorization clients matching the specified filter.
	ListClient(ctx context.Context, in *ListClientRequest, opts ...grpc.CallOption) (*ListClientResponse, error)
	// Gets an authorization client by its identifier.
	GetClient(ctx context.Context, in *GetClientRequest, opts ...grpc.CallOption) (*Client, error)
	// Updates an authorization client, and returns the updated client.
	UpdateClient(ctx context.Context, in *UpdateClientRequest, opts ...grpc.CallOption) (*Client, error)
	// Deletes an authorization client.
	DeleteClient(ctx context.Context, in *DeleteClientRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// CreateClientResourcePermission adds a client the permission to use given resource,
	// defined by the resource permission.
	CreateClientResourcePermission(ctx context.Context, in *CreateClientResourcePermissionRequest, opts ...grpc.CallOption) (*ClientResourcePermission, error)
	ListClientResourcePermissions(ctx context.Context, in *ListClientResourcePermissionsRequest, opts ...grpc.CallOption) (*ListClientResourcePermissionsResponse, error)
}

type ClientAdminServiceServer interface {
	// Creates a new authorization client with the specified name,
	// and returns the new client.
	// A newly created client will have a secret generated.
	CreateClient(context.Context, *CreateClientRequest) (*Client, error)
	// Lists authorization clients matching the specified filter.
	ListClient(context.Context, *ListClientRequest) (*ListClientResponse, error)
	// Gets an authorization client by its identifier.
	GetClient(context.Context, *GetClientRequest) (*Client, error)
	// Updates an authorization client, and returns the updated client.
	UpdateClient(context.Context, *UpdateClientRequest) (*Client, error)
	// Deletes an authorization client.
	DeleteClient(context.Context, *DeleteClientRequest) (*emptypb.Empty, error)
	// CreateClientResourcePermission adds a client the permission to use given resource,
	// defined by the resource permission.
	CreateClientResourcePermission(context.Context, *CreateClientResourcePermissionRequest) (*ClientResourcePermission, error)
	ListClientResourcePermissions(context.Context, *ListClientResourcePermissionsRequest) (*ListClientResourcePermissionsResponse, error)
	// contains filtered or unexported methods
}

type ClientAlgorithm struct {

	// Is a resource name of the client algorithm.
	// Format: projects/{project}/clients/{client}/algorithms/{algorithm}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The signing algorithm that the client can use to authorize with.
	Algorithm signalgpb.SigningAlgorithm `protobuf:"varint,2,opt,name=algorithm,proto3,enum=blocky.authz.type.SigningAlgorithm" json:"algorithm,omitempty"`
	// The priority of the algorithm. The lower the number, the higher the
	// priority.
	Priority int32 `protobuf:"varint,3,opt,name=priority,proto3" json:"priority,omitempty"`
	// contains filtered or unexported fields
}

type ClientResourcePermission struct {

	// Is a resource name of the client resource permission.
	// Format: projects/{project}/clients/{client}/resourcePermissions/{resourcePermission}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The resource name of ResourcePermission that the client has granted access.
	ResourcePermission string `protobuf:"bytes,2,opt,name=resource_permission,json=resourcePermission,proto3" json:"resource_permission,omitempty"`
	// The resource name of the Client that was granted access.
	Client string `protobuf:"bytes,3,opt,name=client,proto3" json:"client,omitempty"`
	// contains filtered or unexported fields
}

type ClientType int32

type CreateClientRequest struct {

	// The parent instance where the client will be created.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Client is a authorization client used to authorize requests.
	Client *Client `protobuf:"bytes,2,opt,name=client,proto3" json:"client,omitempty"`
	// contains filtered or unexported fields
}

type CreateClientResourcePermissionRequest struct {

	// Required. The parent client where the permission will be created.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. A resource permission resource name that
	// this client will be granted access to.
	ResourcePermission string `protobuf:"bytes,2,opt,name=resource_permission,json=resourcePermission,proto3" json:"resource_permission,omitempty"`
	// contains filtered or unexported fields
}

type CreateKeyCoreRequest struct {

	// Required. The resource name of the project in which to create the key.
	// Format: 'projects/{project}'.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required, resource to create.
	KeyCore *KeyCore `protobuf:"bytes,2,opt,name=key_core,json=keyCore,proto3" json:"key_core,omitempty"`
	// contains filtered or unexported fields
}

type CreateResourceManagerRequest struct {

	// Required. The project in which to create the resource manager.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. The resource manager to create.
	ResourceManager *ResourceManager `protobuf:"bytes,2,opt,name=resource_manager,json=resourceManager,proto3" json:"resource_manager,omitempty"`
	// An optional user-defined identifier for the resource manager.
	// The identifier can be up to 128 characters long and can be either
	// alphanumeric (e.g., "myresource") or a UUID (e.g.,
	// "12345678-9ABC-DEF0-1234-56789ABCDEF0").
	// This field is a part of the resource manager's name. The
	// resource manager name and identifier must be unique within a project.
	ResourceManagerId string `protobuf:"bytes,3,opt,name=resource_manager_id,json=resourceManagerId,proto3" json:"resource_manager_id,omitempty"`
	// contains filtered or unexported fields
}

type CreateResourcePermissionRequest struct {

	// Required, parent resource manager to create resource permission.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required resource permission to create.
	ResourcePermission *ResourcePermission `protobuf:"bytes,2,opt,name=resource_permission,json=resourcePermission,proto3" json:"resource_permission,omitempty"`
	// contains filtered or unexported fields
}

type CreateUserConsentRequest struct {

	// Required. The parent resource where this user consent will be created.
	// Format: "projects/{project}"
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. The user consent to create.
	UserConsent *UserConsent `protobuf:"bytes,2,opt,name=user_consent,json=userConsent,proto3" json:"user_consent,omitempty"`
	// contains filtered or unexported fields
}

type DeleteClientRequest struct {

	// The name of the client to delete.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteResourcePermissionRequest struct {

	// Required resource_permission resource name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteResourceRequest struct {

	// Required. The name of the resource manager to delete.
	// Format: projects/{project}/resourceManagers/{resource_manager}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteUserConsentRequest struct {

	// Required. The name of the user consent to delete.
	// Format: "projects/{project}/userConsents/{user_consent}"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetClientRequest struct {

	// Required. The name of the client to retrieve.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetInstanceRequest struct {

	// The name of the instance resource to retrieve.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetKeyCoreRequest struct {

	// Required. The resource name of the key to retrieve.
	// Format: 'projects/{project}/keyCores/{key_core}'.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetKeyRequest struct {

	// Required identifier of the key revision to get.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetResourceManagerRequest struct {

	// The name of the resource manager to retrieve.
	// Format: projects/{project}/resourceManagers/{resource_manager}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetResourcePermissionRequest struct {

	// Required, authorization resource_permission identifier and resource name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetUserConsentRequest struct {

	// Required. The name of the user consent to retrieve.
	// Format: "projects/{project}/userConsents/{user_consent}"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type Instance struct {

	// The unique name of the authorization service instance.
	// Values are of the form:
	// 'projects/{project}/instance'.
	// On a standalone authorization service, the instance identifier
	// could be aliased to a 'default' instance.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Creation timestamp of the instance.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Last modification timestamp of the instance.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Configuration for the authorization service instance.
	Config *InstanceConfig `protobuf:"bytes,4,opt,name=config,proto3" json:"config,omitempty"`
	// contains filtered or unexported fields
}

type InstanceAdminServiceClient interface {
	// Patch an existing instance of an Authorization service.
	UpdateInstance(ctx context.Context, in *UpdateInstanceRequest, opts ...grpc.CallOption) (*Instance, error)
	// Gets the details of an instance of an Authorization service.
	GetInstance(ctx context.Context, in *GetInstanceRequest, opts ...grpc.CallOption) (*Instance, error)
}

type InstanceAdminServiceServer interface {
	// Patch an existing instance of an Authorization service.
	UpdateInstance(context.Context, *UpdateInstanceRequest) (*Instance, error)
	// Gets the details of an instance of an Authorization service.
	GetInstance(context.Context, *GetInstanceRequest) (*Instance, error)
	// contains filtered or unexported methods
}

type InstanceConfig struct {

	// The name of the service issuing tokens.
	Issuer string `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// A default key rotation period for keys with non-specified rotation.
	KeyRotationPeriod *durationpb.Duration `protobuf:"bytes,2,opt,name=key_rotation_period,json=keyRotationPeriod,proto3" json:"key_rotation_period,omitempty"`
	// Access token configuration.
	AccessToken *AccessTokenConfig `protobuf:"bytes,3,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
	// Refresh token configuration.
	RefreshToken *RefreshTokenConfig `protobuf:"bytes,4,opt,name=refresh_token,json=refreshToken,proto3" json:"refresh_token,omitempty"`
	// contains filtered or unexported fields
}

type Key struct {

	// The resource name of the key revision.
	// Format: `projects/{project}/keys/{key}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Is a unique key revision identifier assigned by the server.
	// It is directly used as the 'kid' parameter in the JWK set.
	// I.e.: 'projects/{project}/keys/key_id'
	KeyId string `protobuf:"bytes,2,opt,name=key_id,json=keyId,proto3" json:"key_id,omitempty"`
	// The creation time of the key revision.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// The key revision number for the parent.
	// All the key revisions rotated from the same parent key have the same revision number.
	RevisionNumber int32 `protobuf:"varint,4,opt,name=revision_number,json=revisionNumber,proto3" json:"revision_number,omitempty"`
	// Revocation time of the key.
	// If the key was revoked, it is no longer used for signing and verification.
	// It is not included in the public JWK set.
	// Once rotated, a new key is no longer marked as revoked.
	// Remains null if the key was not revoked.
	RevokeTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=revoke_time,json=revokeTime,proto3" json:"revoke_time,omitempty"`
	// Core from which the key was derived.
	Core string `protobuf:"bytes,6,opt,name=core,proto3" json:"core,omitempty"`
	// contains filtered or unexported fields
}

type KeyAdminServiceClient interface {
	// CreateKeyCore creates a new authorization key.
	// New key is neither active nor used in a set.
	CreateKeyCore(ctx context.Context, in *CreateKeyCoreRequest, opts ...grpc.CallOption) (*KeyCore, error)
	// GetKeyCore returns the specified authorization key.
	GetKeyCore(ctx context.Context, in *GetKeyCoreRequest, opts ...grpc.CallOption) (*KeyCore, error)
	// ListKeyCores lists authorization keys that matches given request.
	ListKeyCores(ctx context.Context, in *ListKeyCoresRequest, opts ...grpc.CallOption) (*ListKeyCoresResponse, error)
	// ListKeyCoreKeys lists authorization keys that matches given request.
	ListKeyCoreKeys(ctx context.Context, in *ListKeyCoreKeysRequest, opts ...grpc.CallOption) (*ListKeyCoreKeysResponse, error)
	// UpdateKeyCore updates the specified authorization key.
	UpdateKeyCore(ctx context.Context, in *UpdateKeyCoreRequest, opts ...grpc.CallOption) (*KeyCore, error)
	// Creates a new key revision and rotates the key.
	RotateKey(ctx context.Context, in *RotateKeyRequest, opts ...grpc.CallOption) (*Key, error)
	// GetKey returns the specified key revision.
	GetKey(ctx context.Context, in *GetKeyRequest, opts ...grpc.CallOption) (*Key, error)
	// ListKeys lists authorization keys that matches given request.
	ListKeys(ctx context.Context, in *ListKeysRequest, opts ...grpc.CallOption) (*ListKeysResponse, error)
	// RevokeKey revokes an authorization key revision.
	// Once revoked the key revision is no longer valid for signing and verification.
	// If revoked key was the only active signing key, the system will not accept
	// any new requests until a new key is created and activated.
	RevokeKey(ctx context.Context, in *RevokeKeyRequest, opts ...grpc.CallOption) (*Key, error)
}

type KeyAdminServiceServer interface {
	// CreateKeyCore creates a new authorization key.
	// New key is neither active nor used in a set.
	CreateKeyCore(context.Context, *CreateKeyCoreRequest) (*KeyCore, error)
	// GetKeyCore returns the specified authorization key.
	GetKeyCore(context.Context, *GetKeyCoreRequest) (*KeyCore, error)
	// ListKeyCores lists authorization keys that matches given request.
	ListKeyCores(context.Context, *ListKeyCoresRequest) (*ListKeyCoresResponse, error)
	// ListKeyCoreKeys lists authorization keys that matches given request.
	ListKeyCoreKeys(context.Context, *ListKeyCoreKeysRequest) (*ListKeyCoreKeysResponse, error)
	// UpdateKeyCore updates the specified authorization key.
	UpdateKeyCore(context.Context, *UpdateKeyCoreRequest) (*KeyCore, error)
	// Creates a new key revision and rotates the key.
	RotateKey(context.Context, *RotateKeyRequest) (*Key, error)
	// GetKey returns the specified key revision.
	GetKey(context.Context, *GetKeyRequest) (*Key, error)
	// ListKeys lists authorization keys that matches given request.
	ListKeys(context.Context, *ListKeysRequest) (*ListKeysResponse, error)
	// RevokeKey revokes an authorization key revision.
	// Once revoked the key revision is no longer valid for signing and verification.
	// If revoked key was the only active signing key, the system will not accept
	// any new requests until a new key is created and activated.
	RevokeKey(context.Context, *RevokeKeyRequest) (*Key, error)
	// contains filtered or unexported methods
}

type KeyCore struct {

	// Name of the key core.
	// Format: 'projects/{project}/keyCores/{key_core}'
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The unique server-generated UUID identifier for the key revision.
	// It could be used as the key revision identifier in its resource name.
	Uid string `protobuf:"bytes,2,opt,name=uid,proto3" json:"uid,omitempty"`
	// Algorithm used for signing and verification.
	Algorithm signalgpb.SigningAlgorithm `protobuf:"varint,3,opt,name=algorithm,proto3,enum=blocky.authz.type.SigningAlgorithm" json:"algorithm,omitempty"`
	// The display name of the key core.
	DisplayName string `protobuf:"bytes,4,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Time when the key core was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Time when the key core was updated.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Time when the key core was last rotated.
	LastRotatedTime *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=last_rotated_time,json=lastRotatedTime,proto3" json:"last_rotated_time,omitempty"`
	// Rotation interval of the key derived from this core.
	// If not provided, the key core will not be rotated automatically.
	RotationInterval *durationpb.Duration `protobuf:"bytes,8,opt,name=rotation_interval,json=rotationInterval,proto3" json:"rotation_interval,omitempty"`
	// Priority of the key core.
	// The higher the priority, the more likely the key will be used for signing.
	// If not provided, the key will be assigned the default priority 0.
	// The keys in the JWK set are sorted by priority in descending order.
	Priority int32 `protobuf:"varint,9,opt,name=priority,proto3" json:"priority,omitempty"`
	// Is the number of keys derived from this core.
	DerivedKeysCount int32 `protobuf:"varint,10,opt,name=derived_keys_count,json=derivedKeysCount,proto3" json:"derived_keys_count,omitempty"`
	// contains filtered or unexported fields
}

type ListClientRequest struct {

	// The parent instance whose clients are listed.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The maximum number of clients to return.
	// The service may return fewer than this value.
	// If unspecified, at most 20 clients will be returned.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A page token, received from a previous
	// [ClientAdminService.ListClient][blocky.authz.admin.v1alpha.ClientAdminService.ListClient] call.
	// Provide this to retrieve the subsequent page.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListClientResourcePermissionsRequest struct {

	// Required. The parent client whose permissions are listed.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The maximum number of permissions to return.
	// The service may return fewer than this value.
	// If unspecified, at most 20 permissions will be returned.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A page token, received from a previous
	// [ClientAdminService.ListClientResourcePermissions][blocky.authz.admin.v1alpha.ClientAdminService.ListClientResourcePermissions] call.
	// Provide this to retrieve the subsequent page.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListClientResourcePermissionsResponse struct {

	// The list of permissions.
	ResourcePermissions []string `protobuf:"bytes,1,rep,name=resource_permissions,json=resourcePermissions,proto3" json:"resource_permissions,omitempty"`
	// A token to retrieve the next page of results.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListClientResponse struct {

	// The list of clients.
	Clients []*Client `protobuf:"bytes,1,rep,name=clients,proto3" json:"clients,omitempty"`
	// A token to retrieve the next page of results.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListKeyCoreKeysRequest struct {

	// Required identifier of the key to list revisions for.
	// Format: 'projects/{project}/keyCores/{key_core}'.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional page_size on the number of key revisions to include in the response.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// optional page token to continue listing key revisions from.
	// If not provided, the service will start listing from the beginning.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListKeyCoreKeysResponse struct {

	// List of key revisions for the requested key.
	Keys []*Key `protobuf:"bytes,1,rep,name=keys,proto3" json:"keys,omitempty"`
	// Token to continue listing key revisions from.
	// If there are no more key revisions to list, the token is not included.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListKeyCoresRequest struct {

	// Required. The resource name of the project whose keys are to be listed.
	// Format: 'projects/{project}'.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. The maximum number of Keys to return in the response. The
	// server allows a maximum of 300 Keys to return. If unspecified, the
	// server will use 50 as the default, unless its configuration specifies
	// a smaller default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A pagination token returned from a previous call to
	// ListKeysRequest that indicates where this listing should continue from.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListKeyCoresResponse struct {

	// List of keys matching the request.
	KeyCores []*KeyCore `protobuf:"bytes,1,rep,name=key_cores,json=keyCores,proto3" json:"key_cores,omitempty"`
	// Token to retrieve the next page of results, or empty if there are no
	// more results in the list.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListKeysRequest struct {

	// Required identifier of the key to list revisions for.
	// This might be either a project, or a key core.
	// Format:
	// - 'projects/{project}'
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional page_size on the number of key revisions to include in the response.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional page token to continue listing key revisions from.
	// If not provided, the service will start listing from the beginning.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListKeysResponse struct {

	// List of key revisions for the requested key.
	Keys []*Key `protobuf:"bytes,1,rep,name=keys,proto3" json:"keys,omitempty"`
	// Token to continue listing key revisions from.
	// If there are no more key revisions to list, the token is not included.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListResourceManagersRequest struct {

	// Required. The project whose resource managers are to be listed.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The maximum number of items to return.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The next_page_token value returned from a previous List request, if any.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListResourceManagersResponse struct {

	// List of resource managers.
	ResourceManagers []*ResourceManager `protobuf:"bytes,1,rep,name=resource_managers,json=resourceManagers,proto3" json:"resource_managers,omitempty"`
	// The pagination token to retrieve the next page of results. If the value is
	// empty, no further results remain.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListResourcePermissionRequest struct {

	// Required, the project to list authorization resource_permissions from.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The maximum number of items to return.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The next_page_token value returned from a previous List request, if any.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListResourcePermissionResponse struct {

	// List of authorization resource_permissions.
	ResourcePermissions []*ResourcePermission `protobuf:"bytes,1,rep,name=resource_permissions,json=resourcePermissions,proto3" json:"resource_permissions,omitempty"`
	// The pagination token to retrieve the next page of results. If the value is
	// empty, no further results remain.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListResourcePermissionUserConsentsRequest struct {

	// Required, the resource permission to list user consents from.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The maximum number of items to return.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The next_page_token value returned from a previous List request, if any.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListResourcePermissionUserConsentsResponse struct {

	// List of user consents.
	UserConsents []*UserConsent `protobuf:"bytes,1,rep,name=user_consents,json=userConsents,proto3" json:"user_consents,omitempty"`
	// The pagination token to retrieve the next page of results. If the value is
	// empty, no further results remain.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListUserConsentsRequest struct {

	// Required. The parent resource whose user consents are to be listed.
	// Format: "projects/{project}"
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The maximum number of user consents to return. The service may return fewer
	// than this value. If unspecified, at most 20 user consents will be returned.
	// The maximum value is 100; values above 100 will be coerced to 100.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A page token, received from a previous
	// [UserConsentAdminService.ListUserConsents][blocky.authz.admin.v1alpha.UserConsentAdminService.ListUserConsents]
	// call. Provide this to retrieve the subsequent page.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListUserConsentsResponse struct {

	// The user consents for the given project.
	UserConsents []*UserConsent `protobuf:"bytes,1,rep,name=user_consents,json=userConsents,proto3" json:"user_consents,omitempty"`
	// A token that can be sent as
	// [ListUserConsentsRequest.page_token][google.cloud.blocky.authz.admin.v1alpha.ListUserConsentsRequest.page_token]
	// to retrieve the next page. If this field is omitted, there are no
	// subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type RefreshTokenConfig struct {

	// Preferred algorithm used to sign tokens.
	Algorithm signalgpb.SigningAlgorithm `protobuf:"varint,1,opt,name=algorithm,proto3,enum=blocky.authz.type.SigningAlgorithm" json:"algorithm,omitempty"`
	// The duration of validity of the refresh token.
	TokenLifetime *durationpb.Duration `protobuf:"bytes,2,opt,name=token_lifetime,json=tokenLifetime,proto3" json:"token_lifetime,omitempty"`
	// The number of bytes used as a refresh token random value.
	// By default this value is 128 bytes.
	// This value should not be greater than 2048 bytes.
	TokenSize int32 `protobuf:"varint,3,opt,name=token_size,json=tokenSize,proto3" json:"token_size,omitempty"`
	// contains filtered or unexported fields
}

type ResourceAdminServiceClient interface {
	// Creates a new resource manager within given project.
	CreateResourceManager(ctx context.Context, in *CreateResourceManagerRequest, opts ...grpc.CallOption) (*ResourceManager, error)
	// Gets a resource manager.
	GetResourceManager(ctx context.Context, in *GetResourceManagerRequest, opts ...grpc.CallOption) (*ResourceManager, error)
	// Gets a list of resource managers.
	ListResourceManagers(ctx context.Context, in *ListResourceManagersRequest, opts ...grpc.CallOption) (*ListResourceManagersResponse, error)
	// Updates an existing resource manager with new information.
	UpdateResourceManager(ctx context.Context, in *UpdateResourceManagerRequest, opts ...grpc.CallOption) (*ResourceManager, error)
	// Deletes a resource manager along with all its dependent permissions.
	DeleteResourceManager(ctx context.Context, in *DeleteResourceRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Creates an alias for a resource manager.
	// If the alias already exists, the former aliased resource manager
	// will have no alias.
	AliasResourceManager(ctx context.Context, in *AliasResourceRequest, opts ...grpc.CallOption) (*ResourceManager, error)
	// Creates a new authorization resource permission.
	CreateResourcePermission(ctx context.Context, in *CreateResourcePermissionRequest, opts ...grpc.CallOption) (*ResourcePermission, error)
	// Lists authorization resource permissions that are registered with the service.
	ListResourcePermission(ctx context.Context, in *ListResourcePermissionRequest, opts ...grpc.CallOption) (*ListResourcePermissionResponse, error)
	// Gets an existing resource permission.
	GetResourcePermission(ctx context.Context, in *GetResourcePermissionRequest, opts ...grpc.CallOption) (*ResourcePermission, error)
	// Updates an existing authorization resource permission with new information.
	UpdateResourcePermission(ctx context.Context, in *UpdateResourcePermissionRequest, opts ...grpc.CallOption) (*ResourcePermission, error)
	// Deletes an authorization resource permission.
	DeleteResourcePermission(ctx context.Context, in *DeleteResourcePermissionRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Creates an alias for an authorization resource permission.
	// If the alias already exists, the former aliased resource permission will have
	// no alias.
	AliasResourcePermission(ctx context.Context, in *AliasResourcePermissionRequest, opts ...grpc.CallOption) (*ResourcePermission, error)
	// Lists user consents associated with given resource permission.
	ListResourcePermissionUserConsents(ctx context.Context, in *ListResourcePermissionUserConsentsRequest, opts ...grpc.CallOption) (*ListResourcePermissionUserConsentsResponse, error)
}

type ResourceAdminServiceServer interface {
	// Creates a new resource manager within given project.
	CreateResourceManager(context.Context, *CreateResourceManagerRequest) (*ResourceManager, error)
	// Gets a resource manager.
	GetResourceManager(context.Context, *GetResourceManagerRequest) (*ResourceManager, error)
	// Gets a list of resource managers.
	ListResourceManagers(context.Context, *ListResourceManagersRequest) (*ListResourceManagersResponse, error)
	// Updates an existing resource manager with new information.
	UpdateResourceManager(context.Context, *UpdateResourceManagerRequest) (*ResourceManager, error)
	// Deletes a resource manager along with all its dependent permissions.
	DeleteResourceManager(context.Context, *DeleteResourceRequest) (*emptypb.Empty, error)
	// Creates an alias for a resource manager.
	// If the alias already exists, the former aliased resource manager
	// will have no alias.
	AliasResourceManager(context.Context, *AliasResourceRequest) (*ResourceManager, error)
	// Creates a new authorization resource permission.
	CreateResourcePermission(context.Context, *CreateResourcePermissionRequest) (*ResourcePermission, error)
	// Lists authorization resource permissions that are registered with the service.
	ListResourcePermission(context.Context, *ListResourcePermissionRequest) (*ListResourcePermissionResponse, error)
	// Gets an existing resource permission.
	GetResourcePermission(context.Context, *GetResourcePermissionRequest) (*ResourcePermission, error)
	// Updates an existing authorization resource permission with new information.
	UpdateResourcePermission(context.Context, *UpdateResourcePermissionRequest) (*ResourcePermission, error)
	// Deletes an authorization resource permission.
	DeleteResourcePermission(context.Context, *DeleteResourcePermissionRequest) (*emptypb.Empty, error)
	// Creates an alias for an authorization resource permission.
	// If the alias already exists, the former aliased resource permission will have
	// no alias.
	AliasResourcePermission(context.Context, *AliasResourcePermissionRequest) (*ResourcePermission, error)
	// Lists user consents associated with given resource permission.
	ListResourcePermissionUserConsents(context.Context, *ListResourcePermissionUserConsentsRequest) (*ListResourcePermissionUserConsentsResponse, error)
	// contains filtered or unexported methods
}

type ResourceManager struct {

	// Is a unique identifier of the resource manager.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Is a system-assigned unique identifier for this resource manager.
	// The format of this identifier is a UUID.s
	Uid string `protobuf:"bytes,2,opt,name=uid,proto3" json:"uid,omitempty"`
	// Is a unique human-readable name of the resource manager.
	// If defined it may be used as an alias for the resource manager identifier.
	// I.e.:  projects/{project}/resourceManagers/my-resource-manager
	// The alias is mutable by custom AliasResourceManager RPC.
	Alias string `protobuf:"bytes,3,opt,name=alias,proto3" json:"alias,omitempty"`
	// Is a human-readable name of the resource manager.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Is a human-readable na/me of the resource manager.
	DisplayName string `protobuf:"bytes,5,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Is a token audience name for this resource manager.
	// The audience name is used by the token issuer to identify the resource manager.
	// If not defined, the audience name is the same as the resource manager name.
	Audience string `protobuf:"bytes,6,opt,name=audience,proto3" json:"audience,omitempty"`
	// Is a human-readable description of the resource manager.
	Description string `protobuf:"bytes,7,opt,name=description,proto3" json:"description,omitempty"`
	// Supported signing algorithms for this resource manager.
	// If not defined, all signing algorithms are supported.
	SigningAlgorithms []signalgpb.SigningAlgorithm `` /* 160-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ResourcePermission struct {

	// The resource permission identifier and resource name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Server-generated unique identifier for the scope.
	// It could be used as an alias for the resource permission identifier.
	// I.e.:  projects/{project}/resourceManagers/{resourceManager}/resourcePermissions/{uid}
	Uid string `protobuf:"bytes,2,opt,name=uid,proto3" json:"uid,omitempty"`
	// The authorization scope string that is used in the OAuth 2.0 access and refresh tokens.
	// It is used as OAuth 2.0 scope parameter.
	// The scope must be unique within the whole project.
	Scope string `protobuf:"bytes,3,opt,name=scope,proto3" json:"scope,omitempty"`
	// The human-readable alias of resource permission identifier.
	// It needs to be unique in the parent resource manager.
	// As a good practice the alias might correspond to the scope,
	// which guarantees uniqueness of the scope within the project.
	Alias string `protobuf:"bytes,4,opt,name=alias,proto3" json:"alias,omitempty"`
	// The date of creation of the resource permission.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// The date of the last modification of the resource permission.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// The human-readable display name of the resource permission.
	DisplayName string `protobuf:"bytes,7,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// The human-readable description of the resource permission.
	Description string `protobuf:"bytes,8,opt,name=description,proto3" json:"description,omitempty"`
	// Etag of the resource permission.
	Etag string `protobuf:"bytes,9,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

type RevokeKeyRequest struct {

	// Required identifier of the key to revoke.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type RotateKeyRequest struct {

	// Required identifier of the key to create a revision for.
	// Format: 'projects/{project}/keyCores/{key_core}'.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedClientAdminServiceServer struct {
}

type UnimplementedInstanceAdminServiceServer struct {
}

type UnimplementedKeyAdminServiceServer struct {
}

type UnimplementedResourceAdminServiceServer struct {
}