Table of Contents

Class CredentialTokenGrant

Namespace
OpenShell
Assembly
OpenShell.Sdk.dll

Dynamic credential acquisition through an OAuth2 grant.

public sealed record CredentialTokenGrant : IEquatable<CredentialTokenGrant>
Inheritance
CredentialTokenGrant
Implements
Inherited Members

Properties

Audience

Default resource audience.

public string Audience { get; init; }

Property Value

string

AudienceOverrides

Endpoint-specific audience overrides.

public IReadOnlyList<TokenGrantAudienceOverride> AudienceOverrides { get; init; }

Property Value

IReadOnlyList<TokenGrantAudienceOverride>

CacheTtl

Token cache TTL override; null means use expires_in.

public TimeSpan? CacheTtl { get; init; }

Property Value

TimeSpan?

ClientAssertionType

OAuth2 client assertion type.

public string ClientAssertionType { get; init; }

Property Value

string

GrantType

Grant type.

public CredentialTokenGrantType GrantType { get; init; }

Property Value

CredentialTokenGrantType

JwtSvidAudience

Audience for the SPIRE JWT-SVID.

public string JwtSvidAudience { get; init; }

Property Value

string

Owners

Output-only: endpoint authorities allowed to obtain this grant.

public IReadOnlyList<string> Owners { get; init; }

Property Value

IReadOnlyList<string>

RequestedTokenType

OAuth2 requested token type.

public string RequestedTokenType { get; init; }

Property Value

string

Scopes

Scopes to request.

public IReadOnlyList<string> Scopes { get; init; }

Property Value

IReadOnlyList<string>

SubjectToken

Subject token for token exchange.

public TokenGrantSubjectToken? SubjectToken { get; init; }

Property Value

TokenGrantSubjectToken

TokenEndpoint

OAuth2 token endpoint URL.

public string TokenEndpoint { get; init; }

Property Value

string