Package org.cdk8s.plus25.k8s

Interface TokenRequestSpec

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

TokenRequestSpec.Jsii$Proxy

@Generated(value="jsii-pacmak/1.88.0 (build eaabd08)",
           date="2023-09-11T06:17:58.840Z")
@Stability(Stable)
public interface TokenRequestSpec
extends software.amazon.jsii.JsiiSerializable

TokenRequestSpec contains client provided parameters of a token request.

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static class	TokenRequestSpec.Builder	A builder for TokenRequestSpec
static class	TokenRequestSpec.Jsii$Proxy	An implementation for TokenRequestSpec

Method Summary

Modifier and Type	Method	Description
static TokenRequestSpec.Builder	builder()
List<String>	getAudiences()	Audiences are the intendend audiences of the token.
default BoundObjectReference	getBoundObjectRef()	BoundObjectRef is a reference to an object that the token will be bound to.
default Number	getExpirationSeconds()	ExpirationSeconds is the requested duration of validity of the request.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getAudiences

@Stability(Stable)
@NotNull
List<String> getAudiences()

Audiences are the intendend audiences of the token.

A recipient of a token must identify themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.

getBoundObjectRef

@Stability(Stable)
@Nullable
default BoundObjectReference getBoundObjectRef()

BoundObjectRef is a reference to an object that the token will be bound to.

The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation.

getExpirationSeconds

@Stability(Stable)
@Nullable
default Number getExpirationSeconds()

ExpirationSeconds is the requested duration of validity of the request.

The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.

builder

@Stability(Stable)
static TokenRequestSpec.Builder builder()

Returns:

a TokenRequestSpec.Builder of TokenRequestSpec