Class: Anthropic::Models::Beta::Organization::Federation::BetaFederationIssuer

Inherits:
Internal::Type::BaseModel show all
Defined in:
lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb,
sig/anthropic/models/beta/organization/federation/beta_federation_issuer.rbs

Overview

See Also:

  • Anthropic::Resources::Beta::Organization::Federation::Issuers#create

Defined Under Namespace

Modules: JWKS

Instance Attribute Summary collapse

Instance Method Summary collapse

Methods inherited from Internal::Type::BaseModel

==, #==, #[], coerce, #deconstruct_keys, #deep_to_h, dump, fields, hash, #hash, inherited, inspect, #inspect, known_fields, optional, recursively_to_h, required, #to_h, #to_json, #to_s, to_sorbet_type, #to_yaml

Methods included from Internal::Type::Converter

#coerce, coerce, #dump, dump, #inspect, inspect, meta_info, new_coerce_state, type_info

Methods included from Internal::Util::SorbetRuntimeSupport

#const_missing, #define_sorbet_constant!, #sorbet_constant_defined?, #to_sorbet_type, to_sorbet_type

Constructor Details

#initialize(id:, archived_at:, archived_by_actor_id:, check_jti:, created_at:, created_by_actor_id:, issuer_url:, jwks:, jwks_polling_disabled_at:, max_jwt_lifetime_seconds:, name:, poll_status:, updated_at:, updated_by_actor_id:, type: :federation_issuer) ⇒ Object

Registered external OIDC identity provider.

Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The issuer_url must match the JWT iss claim exactly.

Some parameter documentations has been truncated, see Anthropic::Models::Beta::Organization::Federation::BetaFederationIssuer for more details.

Parameters:

  • id (String) —

    Tagged ID of the federation issuer.

  • archived_at (Time, nil) —

    If set, all rules referencing this issuer reject token exchange.

  • archived_by_actor_id (String, nil) —

    Tagged ID (user_/svac_) of the actor that archived this issuer.

  • check_jti (Boolean) —

    Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for

  • created_at (Time) —

    When this issuer was created.

  • created_by_actor_id (String, nil) —

    Tagged ID (user_/svac_) of the actor that created this issuer.

  • issuer_url (String) —

    The iss claim value. Incoming JWTs must match exactly.

  • jwks (Anthropic::Models::Beta::Organization::Federation::BetaJWKSDiscovery, Anthropic::Models::Beta::Organization::Federation::BetaJWKSExplicitURL, Anthropic::Models::Beta::Organization::Federation::BetaJWKSInline) —

    How signing keys are obtained for signature verification.

  • jwks_polling_disabled_at (Time, nil) —

    If set, Anthropic's JWKS poller has paused polling for this issuer after repeate

  • max_jwt_lifetime_seconds (Integer) —

    Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds

  • name (String) —

    Admin-chosen slug identifier.

  • poll_status (Anthropic::Models::Beta::Organization::Federation::BetaFederationIssuerPollStatus, nil) —

    Status of automatic JWKS polling for a federation issuer.

  • updated_at (Time) —

    When this issuer was last updated.

  • updated_by_actor_id (String, nil) —

    Tagged ID (user_/svac_) of the actor that last updated this issuer.

  • type (Symbol, :federation_issuer) (defaults to: :federation_issuer) 



# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 113

Instance Attribute Details

#archived_at ⇒ Time?

If set, all rules referencing this issuer reject token exchange.

Parameters:

  • value (Time, nil)

Returns:

  • (Time, nil) 


20
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 20

required :archived_at, Time, nil?: true

#archived_by_actor_id ⇒ String?

Tagged ID (user_/svac_) of the actor that archived this issuer.

Parameters:

  • value (String, nil)

Returns:

  • (String, nil) 


26
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 26

required :archived_by_actor_id, String, nil?: true

#check_jti ⇒ Boolean

Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a jti claim; tokens without one are accepted without single-use enforcement.

Parameters:

Returns:



34
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 34

required :check_jti, Anthropic::Internal::Type::Boolean

#created_at ⇒ Time

When this issuer was created.

Parameters:

  • value (Time)

Returns:

  • (Time) 


40
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 40

required :created_at, Time

#created_by_actor_id ⇒ String?

Tagged ID (user_/svac_) of the actor that created this issuer.

Parameters:

  • value (String, nil)

Returns:

  • (String, nil) 


46
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 46

required :created_by_actor_id, String, nil?: true

#id ⇒ String

Tagged ID of the federation issuer.

Parameters:

  • value (String)

Returns:

  • (String) 


14
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 14

required :id, String

#issuer_url ⇒ String

The iss claim value. Incoming JWTs must match exactly.

Parameters:

  • value (String)

Returns:

  • (String) 


52
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 52

required :issuer_url, String

#jwks ⇒ Anthropic::Models::Beta::Organization::Federation::BetaJWKSDiscovery, ...

How signing keys are obtained for signature verification.

Parameters:

  • value (Anthropic::Models::Beta::Organization::Federation::BetaFederationIssuer::jwks)

Returns:



58
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 58

required :jwks, union: -> { Anthropic::Beta::Organization::Federation::BetaFederationIssuer::JWKS }

#jwks_polling_disabled_at ⇒ Time?

If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending jwks_polling_disabled: false via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than workspace:developer or workspace:inference; use a Console session.

Parameters:

  • value (Time, nil)

Returns:

  • (Time, nil) 


68
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 68

required :jwks_polling_disabled_at, Time, nil?: true

#max_jwt_lifetime_seconds ⇒ Integer

Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both iat and exp; a missing iat is rejected.

Parameters:

  • value (Integer)

Returns:

  • (Integer) 


76
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 76

required :max_jwt_lifetime_seconds, Integer

#name ⇒ String

Admin-chosen slug identifier.

Parameters:

  • value (String)

Returns:

  • (String) 


82
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 82

required :name, String

#poll_status ⇒ Anthropic::Models::Beta::Organization::Federation::BetaFederationIssuerPollStatus?

Status of automatic JWKS polling for a federation issuer.

Anthropic periodically fetches the issuer's signing keys in the background. These fields summarize the most recent fetches so the health of the JWKS endpoint can be monitored.

Parameters:

  • value (Anthropic::Beta::Organization::Federation::BetaFederationIssuerPollStatus, nil)

Returns:



92
93
94
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 92

required :poll_status,
-> { Anthropic::Beta::Organization::Federation::BetaFederationIssuerPollStatus },
nil?: true

#type ⇒ Symbol, :federation_issuer

Parameters:

  • value (:federation_issuer)

Returns:

  • (Symbol, :federation_issuer) 


99
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 99

required :type, const: :federation_issuer

#updated_at ⇒ Time

When this issuer was last updated.

Parameters:

  • value (Time)

Returns:

  • (Time) 


105
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 105

required :updated_at, Time

#updated_by_actor_id ⇒ String?

Tagged ID (user_/svac_) of the actor that last updated this issuer.

Parameters:

  • value (String, nil)

Returns:

  • (String, nil) 


111
 
# File 'lib/anthropic/models/beta/organization/federation/beta_federation_issuer.rb', line 111

required :updated_by_actor_id, String, nil?: true

Instance Method Details

#to_hash ⇒ {

Returns:

  • ({) 


74
 
# File 'sig/anthropic/models/beta/organization/federation/beta_federation_issuer.rbs', line 74

def to_hash: -> {