Class: Anthropic::Models::Organization::Federation::FederationIssuer

Inherits:
Internal::Type::BaseModel show all
Defined in:
lib/anthropic/models/organization/federation/federation_issuer.rb,
sig/anthropic/models/organization/federation/federation_issuer.rbs

Overview

See Also:

  • Anthropic::Resources::Organization::Federation::Issuers#create

Defined Under Namespace

Modules: JWKS

Instance Attribute Summary collapse

Instance Method Summary collapse

Methods inherited from Internal::Type::BaseModel

==, #==, #[], coerce, #deconstruct_keys, #deep_to_h, dump, fields, hash, #hash, inherited, inspect, #inspect, known_fields, optional, recursively_to_h, required, #to_h, #to_json, #to_s, to_sorbet_type, #to_yaml

Methods included from Internal::Type::Converter

#coerce, coerce, #dump, dump, inspect, #inspect, meta_info, new_coerce_state, type_info

Methods included from Internal::Util::SorbetRuntimeSupport

#const_missing, #define_sorbet_constant!, #sorbet_constant_defined?, #to_sorbet_type, to_sorbet_type

Constructor Details

#initialize(id:, archived_at:, archived_by_actor_id:, check_jti:, created_at:, created_by_actor_id:, issuer_url:, jwks:, jwks_polling_disabled_at:, max_jwt_lifetime_seconds:, name:, poll_status:, updated_at:, updated_by_actor_id:, type: :federation_issuer) ⇒ void

Registered external OIDC identity provider.

Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The issuer_url must match the JWT iss claim exactly.

Some parameter documentations has been truncated, see Anthropic::Models::Organization::Federation::FederationIssuer for more details.

Parameters:

  • id (String) —

    Tagged ID of the federation issuer.

  • archived_at (Time, nil) —

    If set, all rules referencing this issuer reject token exchange.

  • archived_by_actor_id (String, nil) —

    Tagged ID (user_/svac_) of the actor that archived this issuer.

  • check_jti (Boolean) —

    Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for

  • created_at (Time) —

    When this issuer was created.

  • created_by_actor_id (String, nil) —

    Tagged ID (user_/svac_) of the actor that created this issuer.

  • issuer_url (String) —

    The iss claim value. Incoming JWTs must match exactly.

  • jwks (Anthropic::Models::Organization::Federation::JWKSDiscovery, Anthropic::Models::Organization::Federation::JWKSExplicitURL, Anthropic::Models::Organization::Federation::JWKSInline) —

    How signing keys are obtained for signature verification.

  • jwks_polling_disabled_at (Time, nil) —

    If set, Anthropic's JWKS poller has paused polling for this issuer after repeate

  • max_jwt_lifetime_seconds (Integer) —

    Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds

  • name (String) —

    Admin-chosen slug identifier.

  • poll_status (Anthropic::Models::Organization::Federation::FederationIssuerPollStatus, nil) —

    Live state of Anthropic's JWKS polling for this issuer. Populated on both single

  • updated_at (Time) —

    When this issuer was last updated.

  • updated_by_actor_id (String, nil) —

    Tagged ID (user_/svac_) of the actor that last updated this issuer.

  • type (Symbol, :federation_issuer) (defaults to: :federation_issuer) 



# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 113

Instance Attribute Details

#archived_at ⇒ Time?

If set, all rules referencing this issuer reject token exchange.

Parameters:

  • value (Time, nil)

Returns:

  • (Time, nil) 


19
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 19

required :archived_at, Time, nil?: true

#archived_by_actor_id ⇒ String?

Tagged ID (user_/svac_) of the actor that archived this issuer.

Parameters:

  • value (String, nil)

Returns:

  • (String, nil) 


25
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 25

required :archived_by_actor_id, String, nil?: true

#check_jti ⇒ Boolean

Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a jti claim; tokens without one are accepted without single-use enforcement.

Parameters:

Returns:



33
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 33

required :check_jti, Anthropic::Internal::Type::Boolean

#created_at ⇒ Time

When this issuer was created.

Parameters:

  • value (Time)

Returns:

  • (Time) 


39
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 39

required :created_at, Time

#created_by_actor_id ⇒ String?

Tagged ID (user_/svac_) of the actor that created this issuer.

Parameters:

  • value (String, nil)

Returns:

  • (String, nil) 


45
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 45

required :created_by_actor_id, String, nil?: true

#id ⇒ String

Tagged ID of the federation issuer.

Parameters:

  • value (String)

Returns:

  • (String) 


13
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 13

required :id, String

#issuer_url ⇒ String

The iss claim value. Incoming JWTs must match exactly.

Parameters:

  • value (String)

Returns:

  • (String) 


51
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 51

required :issuer_url, String

#jwks ⇒ Anthropic::Models::Organization::Federation::JWKSDiscovery, ...

How signing keys are obtained for signature verification.

Parameters:

  • value (Anthropic::Models::Organization::Federation::FederationIssuer::jwks)

Returns:



57
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 57

required :jwks, union: -> { Anthropic::Organization::Federation::FederationIssuer::JWKS }

#jwks_polling_disabled_at ⇒ Time?

If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending jwks_polling_disabled: false via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than workspace:developer or workspace:inference; use a Console session.

Parameters:

  • value (Time, nil)

Returns:

  • (Time, nil) 


67
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 67

required :jwks_polling_disabled_at, Time, nil?: true

#max_jwt_lifetime_seconds ⇒ Integer

Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both iat and exp; a missing iat is rejected.

Parameters:

  • value (Integer)

Returns:

  • (Integer) 


75
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 75

required :max_jwt_lifetime_seconds, Integer

#name ⇒ String

Admin-chosen slug identifier.

Parameters:

  • value (String)

Returns:

  • (String) 


81
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 81

required :name, String

#poll_status ⇒ Anthropic::Models::Organization::Federation::FederationIssuerPollStatus?

Live state of Anthropic's JWKS polling for this issuer. Populated on both single-issuer retrieval and list responses, including archived issuers. Typically null for inline-key issuers (no polling), or when poll status is temporarily unavailable or polling has not started yet.

Parameters:

  • value (Anthropic::Organization::Federation::FederationIssuerPollStatus, nil)

Returns:



90
91
92
93
94
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 90

required :poll_status,
-> {
  Anthropic::Organization::Federation::FederationIssuerPollStatus
},
nil?: true

#type ⇒ Symbol, :federation_issuer

Parameters:

  • value (:federation_issuer)

Returns:

  • (Symbol, :federation_issuer) 


99
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 99

required :type, const: :federation_issuer

#updated_at ⇒ Time

When this issuer was last updated.

Parameters:

  • value (Time)

Returns:

  • (Time) 


105
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 105

required :updated_at, Time

#updated_by_actor_id ⇒ String?

Tagged ID (user_/svac_) of the actor that last updated this issuer.

Parameters:

  • value (String, nil)

Returns:

  • (String, nil) 


111
 
# File 'lib/anthropic/models/organization/federation/federation_issuer.rb', line 111

required :updated_by_actor_id, String, nil?: true

Instance Method Details

#to_hash ⇒ {

Returns:

  • ({) 


75
 
# File 'sig/anthropic/models/organization/federation/federation_issuer.rbs', line 75

def to_hash: -> {