|
1295 | 1295 | } |
1296 | 1296 | } |
1297 | 1297 | }, |
1298 | | - "revision": "20241028", |
| 1298 | + "revision": "20241103", |
1299 | 1299 | "rootUrl": "https://accesscontextmanager.googleapis.com/", |
1300 | 1300 | "schemas": { |
1301 | 1301 | "AccessContextManagerOperationMetadata": { |
|
1384 | 1384 | }, |
1385 | 1385 | "type": "array" |
1386 | 1386 | }, |
1387 | | - "reauthSettings": { |
1388 | | - "$ref": "ReauthSettings", |
1389 | | - "description": "Optional. Reauth settings applied to user access on a given AccessScope." |
1390 | | - }, |
1391 | 1387 | "sessionSettings": { |
1392 | 1388 | "$ref": "SessionSettings", |
1393 | | - "description": "Optional. Session settings applied to user access on a given AccessScope. Migrated from ReauthSettings" |
| 1389 | + "description": "Optional. Session settings applied to user access on a given AccessScope." |
1394 | 1390 | } |
1395 | 1391 | }, |
1396 | 1392 | "type": "object" |
|
1909 | 1905 | "description": "Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: \"organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N\"", |
1910 | 1906 | "type": "string" |
1911 | 1907 | }, |
1912 | | - "reauthSettings": { |
1913 | | - "$ref": "ReauthSettings", |
1914 | | - "description": "Optional. GCSL policy for the group key." |
1915 | | - }, |
1916 | 1908 | "restrictedClientApplications": { |
1917 | 1909 | "description": "Optional. A list of applications that are subject to this binding's restrictions. If the list is empty, the binding restrictions will universally apply to all applications.", |
1918 | 1910 | "items": { |
|
1929 | 1921 | }, |
1930 | 1922 | "sessionSettings": { |
1931 | 1923 | "$ref": "SessionSettings", |
1932 | | - "description": "Optional. GCSL policy for the group key. Migrated from ReauthSettings" |
| 1924 | + "description": "Optional. GCSL policy for the group key." |
1933 | 1925 | } |
1934 | 1926 | }, |
1935 | 1927 | "type": "object" |
|
2295 | 2287 | }, |
2296 | 2288 | "type": "object" |
2297 | 2289 | }, |
2298 | | - "ReauthSettings": { |
2299 | | - "description": "Stores settings related to Google Cloud Session Length including session duration, the type of challenge (i.e. method) they should face when their session expires, and other related settings.", |
2300 | | - "id": "ReauthSettings", |
2301 | | - "properties": { |
2302 | | - "maxInactivity": { |
2303 | | - "description": "Optional. How long a user is allowed to take between actions before a new access token must be issued. Presently only set for Cloud Apps.", |
2304 | | - "format": "google-duration", |
2305 | | - "type": "string" |
2306 | | - }, |
2307 | | - "reauthMethod": { |
2308 | | - "description": "Optional. Reauth method when users GCP session is up.", |
2309 | | - "enum": [ |
2310 | | - "REAUTH_METHOD_UNSPECIFIED", |
2311 | | - "LOGIN", |
2312 | | - "SECURITY_KEY", |
2313 | | - "PASSWORD" |
2314 | | - ], |
2315 | | - "enumDescriptions": [ |
2316 | | - "If method undefined in API, we will use LOGIN by default.", |
2317 | | - "The user will prompted to perform regular login. Users who are enrolled for two-step verification and haven't chosen to \"Remember this computer\" will be prompted for their second factor.", |
2318 | | - "The user will be prompted to autheticate using their security key. If no security key has been configured, then we will fallback to LOGIN.", |
2319 | | - "The user will be prompted for their password." |
2320 | | - ], |
2321 | | - "type": "string" |
2322 | | - }, |
2323 | | - "sessionLength": { |
2324 | | - "description": "Optional. The session length. Setting this field to zero is equal to disabling. Reauth. Also can set infinite session by flipping the enabled bit to false below. If use_oidc_max_age is true, for OIDC apps, the session length will be the minimum of this field and OIDC max_age param.", |
2325 | | - "format": "google-duration", |
2326 | | - "type": "string" |
2327 | | - }, |
2328 | | - "sessionLengthEnabled": { |
2329 | | - "description": "Optional. Big red button to turn off GCSL. When false, all fields set above will be disregarded and the session length is basically infinite.", |
2330 | | - "type": "boolean" |
2331 | | - }, |
2332 | | - "useOidcMaxAge": { |
2333 | | - "description": "Optional. Only useful for OIDC apps. When false, the OIDC max_age param, if passed in the authentication request will be ignored. When true, the re-auth period will be the minimum of the session_length field and the max_age OIDC param.", |
2334 | | - "type": "boolean" |
2335 | | - } |
2336 | | - }, |
2337 | | - "type": "object" |
2338 | | - }, |
2339 | 2290 | "ReplaceAccessLevelsRequest": { |
2340 | 2291 | "description": "A request to replace all existing Access Levels in an Access Policy with the Access Levels provided. This is done atomically.", |
2341 | 2292 | "id": "ReplaceAccessLevelsRequest", |
|
2427 | 2378 | "description": "Description of the `ServicePerimeter` and its use. Does not affect behavior.", |
2428 | 2379 | "type": "string" |
2429 | 2380 | }, |
| 2381 | + "etag": { |
| 2382 | + "description": "Optional. An opaque identifier for the current version of the `ServicePerimeter`. Clients should not expect this to be in any specific format. If etag is not provided, the operation will be performed as if a valid etag is provided.", |
| 2383 | + "type": "string" |
| 2384 | + }, |
2430 | 2385 | "name": { |
2431 | 2386 | "description": "Identifier. Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter, followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`.", |
2432 | 2387 | "type": "string" |
|
0 commit comments