Package com.daml.ledger.api.v1.admin
Class IdentityProviderConfigServiceGrpc.IdentityProviderConfigServiceImplBase
- java.lang.Object
-
- com.daml.ledger.api.v1.admin.IdentityProviderConfigServiceGrpc.IdentityProviderConfigServiceImplBase
-
- All Implemented Interfaces:
IdentityProviderConfigServiceGrpc.AsyncService
,io.grpc.BindableService
- Enclosing class:
- IdentityProviderConfigServiceGrpc
public abstract static class IdentityProviderConfigServiceGrpc.IdentityProviderConfigServiceImplBase extends java.lang.Object implements io.grpc.BindableService, IdentityProviderConfigServiceGrpc.AsyncService
Base class for the server implementation of the service IdentityProviderConfigService.Identity Provider Config Service makes it possible for participant node administrators to setup and manage additional identity providers at runtime. This allows using access tokens from identity providers unknown at deployment time. When an identity provider is configured, independent IDP administrators can manage their own set of parties and users. Such parties and users have a matching `identity_provider_id` defined and are inaccessible to administrators from other identity providers. A user will only be authenticated if the corresponding JWT token is issued by the appropriate identity provider. Users and parties without `identity_provider_id` defined are assumed to be using the default identity provider, which is configured statically at the participant node's deployment time. The Ledger API uses the "iss" claim of a JWT token to match the token to a specific IDP. If there is no match, the default IDP is assumed. The fields of request messages (and sub-messages) are marked either as ``Optional`` or ``Required``: (1) ``Optional`` denoting the client may leave the field unset when sending a request. (2) ``Required`` denoting the client must set the field to a non-default value when sending a request. An identity provider config resource is described by the ``IdentityProviderConfig`` message, An identity provider config resource, once it has been created, can be modified. In order to update the properties represented by the ``IdentityProviderConfig`` message use the ``UpdateIdentityProviderConfig`` RPC. The only fields that can be modified are those marked as ``Modifiable``.
-
-
Constructor Summary
Constructors Constructor Description IdentityProviderConfigServiceImplBase()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description io.grpc.ServerServiceDefinition
bindService()
-
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
-
Methods inherited from interface com.daml.ledger.api.v1.admin.IdentityProviderConfigServiceGrpc.AsyncService
createIdentityProviderConfig, deleteIdentityProviderConfig, getIdentityProviderConfig, listIdentityProviderConfigs, updateIdentityProviderConfig
-
-