Reference documentation and code samples for the Identity-Aware Proxy V1 API class Google::Cloud::Iap::V1::AttributePropagationSettings.
Configuration for propagating attributes to applications protected by IAP.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#enable
def enable() -> ::Boolean- (::Boolean) — Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
#enable=
def enable=(value) -> ::Boolean- value (::Boolean) — Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
- (::Boolean) — Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
#expression
def expression() -> ::String-
(::String) — Raw string CEL expression. Must return a list of attributes. A maximum of
45 attributes can be selected. Expressions can select different attribute
types from
attributes:attributes.saml_attributes,attributes.iap_attributes. The following functions are supported:filter
<list>.filter(<iter_var>, <predicate>): Returns a subset of<list>where<predicate>is true for every item.in
<var> in <list>: Returns true if<list>contains<var>.selectByName
<list>.selectByName(<string>): Returns the attribute in<list>with the given<string>name, otherwise returns empty.emitAs
<attribute>.emitAs(<string>): Sets the<attribute>name field to the given<string>for propagation in selected output credentials.strict
<attribute>.strict(): Ignores thex-goog-iap-attr-prefix for the provided<attribute>when propagating with theHEADERoutput credential, such as request headers.append
<target_list>.append(<attribute>)OR<target_list>.append(<list>): Appends the provided<attribute>or<list>to the end of<target_list>.
Example expression:
attributes.saml_attributes.filter(x, x.name in ['test']).append(attributes.iap_attributes.selectByName('exact').emitAs('custom').strict())
#expression=
def expression=(value) -> ::String-
value (::String) — Raw string CEL expression. Must return a list of attributes. A maximum of
45 attributes can be selected. Expressions can select different attribute
types from
attributes:attributes.saml_attributes,attributes.iap_attributes. The following functions are supported:filter
<list>.filter(<iter_var>, <predicate>): Returns a subset of<list>where<predicate>is true for every item.in
<var> in <list>: Returns true if<list>contains<var>.selectByName
<list>.selectByName(<string>): Returns the attribute in<list>with the given<string>name, otherwise returns empty.emitAs
<attribute>.emitAs(<string>): Sets the<attribute>name field to the given<string>for propagation in selected output credentials.strict
<attribute>.strict(): Ignores thex-goog-iap-attr-prefix for the provided<attribute>when propagating with theHEADERoutput credential, such as request headers.append
<target_list>.append(<attribute>)OR<target_list>.append(<list>): Appends the provided<attribute>or<list>to the end of<target_list>.
Example expression:
attributes.saml_attributes.filter(x, x.name in ['test']).append(attributes.iap_attributes.selectByName('exact').emitAs('custom').strict())
-
(::String) — Raw string CEL expression. Must return a list of attributes. A maximum of
45 attributes can be selected. Expressions can select different attribute
types from
attributes:attributes.saml_attributes,attributes.iap_attributes. The following functions are supported:filter
<list>.filter(<iter_var>, <predicate>): Returns a subset of<list>where<predicate>is true for every item.in
<var> in <list>: Returns true if<list>contains<var>.selectByName
<list>.selectByName(<string>): Returns the attribute in<list>with the given<string>name, otherwise returns empty.emitAs
<attribute>.emitAs(<string>): Sets the<attribute>name field to the given<string>for propagation in selected output credentials.strict
<attribute>.strict(): Ignores thex-goog-iap-attr-prefix for the provided<attribute>when propagating with theHEADERoutput credential, such as request headers.append
<target_list>.append(<attribute>)OR<target_list>.append(<list>): Appends the provided<attribute>or<list>to the end of<target_list>.
Example expression:
attributes.saml_attributes.filter(x, x.name in ['test']).append(attributes.iap_attributes.selectByName('exact').emitAs('custom').strict())
#output_credentials
def output_credentials() -> ::Array<::Google::Cloud::Iap::V1::AttributePropagationSettings::OutputCredentials>- (::Array<::Google::Cloud::Iap::V1::AttributePropagationSettings::OutputCredentials>) — Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
#output_credentials=
def output_credentials=(value) -> ::Array<::Google::Cloud::Iap::V1::AttributePropagationSettings::OutputCredentials>- value (::Array<::Google::Cloud::Iap::V1::AttributePropagationSettings::OutputCredentials>) — Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
- (::Array<::Google::Cloud::Iap::V1::AttributePropagationSettings::OutputCredentials>) — Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.