oidc

type Config struct {
	ClientId     string `protobuf:"bytes,1,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	ClientSecret string `protobuf:"bytes,2,opt,name=client_secret,json=clientSecret,proto3" json:"client_secret,omitempty"`
	// The issuer is the URL identifier for the service. For example: "https://accounts.google.com"
	// or "https://login.salesforce.com".
	Issuer string `protobuf:"bytes,3,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// The configured URL MUST exactly match one of the Redirection URI values
	// for the Client pre-registered at the OpenID Provider
	RedirectUrl string   `protobuf:"bytes,4,opt,name=redirect_url,json=redirectUrl,proto3" json:"redirect_url,omitempty"`
	Scopes      []string `protobuf:"bytes,5,rep,name=scopes,proto3" json:"scopes,omitempty"`
	// This option is provided to skip the nonce verification. It is designed for local development.
	SkipNonceVerify bool `protobuf:"varint,6,opt,name=skip_nonce_verify,json=skipNonceVerify,proto3" json:"skip_nonce_verify,omitempty"`
	// Default to "x-id-token"
	IdTokenHeader string `protobuf:"bytes,7,opt,name=id_token_header,json=idTokenHeader,proto3" json:"id_token_header,omitempty"`
	// The timeout to wait for the OIDC provider to respond. Default to 3s.
	Timeout                   *durationpb.Duration `protobuf:"bytes,8,opt,name=timeout,proto3" json:"timeout,omitempty"`
	DisableAccessTokenRefresh bool                 `` /* 141-byte string literal not displayed */
	// The duration to determines how earlier a token should be considered
	// expired than its actual expiration time. It is used to avoid late
	// expirations due to client-server time mismatches. Default to 10s.
	AccessTokenRefreshLeeway *durationpb.Duration `` /* 138-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ConfigMultiError []error

type ConfigValidationError struct {
	// contains filtered or unexported fields
}

type Plugin struct {
	plugins.PluginMethodDefaultImpl
}