The configuration of the social login for Google.
Name | Type | Default | Description |
---|---|---|---|
id | string | A unique configuration ID. | |
clientId | string | The application or client ID. | |
clientSecret | Reversably encoded password (string) | The secret of the application or client. | |
authorizationEndpoint | string | https://accounts.google.com/o/oauth2/v2/auth | Specifies an Authorization end point URL. |
tokenEndpoint | string | https://www.googleapis.com/oauth2/v4/token | Specifies a token end point URL. |
jwksUri | string | https://www.googleapis.com/oauth2/v3/certs | Specifies a JSON Web Key service URL. |
scope | string | openid profile email | Specifies required scope. |
userNameAttribute | string | The value of the claim is authenticated user principal. | |
mapToUserRegistry | boolean | false | Specifies whether to map userIdentifier to registry user. |
sslRef | A reference to top level ssl element (string). | Specifies an ID of the SSL configuration that is used to connect to the social media. | |
authFilterRef | A reference to top level authFilter element (string). | Specifies the authentication filter reference. | |
isClientSideRedirectSupported | boolean | true | Specifies whether client side redirection is supported. Examples of a client include a browser or a standalone JavaScript application. If set to true, the client must support JavaScript. |
displayName | string | The name of the social login configuration for display. | |
website | tokenType | https://accounts.google.com | The website address. |
redirectToRPHostAndPort | string | Specifies a callback host and port number. | |
issuer | string | https://accounts.google.com | The url of the issuer. |
realmNameAttribute | string | iss | The value of the claim is used as the subject realm. |
groupNameAttribute | string | The value of the claim is used as the user group membership. | |
userUniqueIdAttribute | string | The value of the claim is used as the subject uniqueId. | |
clockSkew | int | 300000 | The maximum time difference in milliseconds between when a key is issued and when it can be used. |
signatureAlgorithm | string | RS256 | The algorithm that is used to sign a token or key. |
Specifies the authentication filter reference.
A unique configuration ID.
Name | Type | Default | Description |
---|---|---|---|
id | string | A unique configuration ID. | |
name | string | Specifies the name. | |
matchType |
| contains | Specifies the match type. contains Contains notContain Not contain equals Equals |
A unique configuration ID.
Name | Type | Default | Description |
---|---|---|---|
id | string | A unique configuration ID. | |
urlPattern | string | Specifies the URL pattern. | |
matchType |
| contains | Specifies the match type. contains Contains notContain Not contain equals Equals |
A unique configuration ID.
Name | Type | Default | Description |
---|---|---|---|
id | string | A unique configuration ID. | |
matchType |
| contains | Specifies the match type. contains Contains notContain Not contain equals Equals lessThan Less than greaterThan Greater than |
ip | string | Specifies the IP address. |
A unique configuration ID.
Name | Type | Default | Description |
---|---|---|---|
id | string | A unique configuration ID. | |
name | string | Specifies the name. | |
matchType |
| contains | Specifies the match type. contains Contains notContain Not contain equals Equals |
A unique configuration ID.
Name | Type | Default | Description |
---|---|---|---|
id | string | A unique configuration ID. | |
agent | string | Specifies the user agent | |
matchType |
| contains | Specifies the match type. contains Contains notContain Not contain equals Equals |
Specifies the information that is used to build the JWT tokens. This information includes the JWT builder reference and the claims from the id token.
Name | Type | Default | Description |
---|---|---|---|
builder | tokenType | The referenced JWT builder creates a JWT token, and the token is added to the authenticated subject. |
Specifies a comma-separated list of claims to copy from the user information or the id token.