Issuer

Federation-Issuer erstellen

$client->organization->federation->issuers->create(string issuerURL, string name, ?bool checkJTI, ?JWKS jwks, ?int maxJWTLifetimeSeconds): FederationIssuer

POST/v1/organizations/federation_issuers

Erfordert ein OAuth-Zugriffstoken mit dem Scope org:admin, aus ant auth login --scope org:admin oder einer Workload-Identity-Federation-Regel; Admin-API-Keys werden nicht akzeptiert. Siehe WIF mit der Admin API verwalten.

Federation-Issuer auflisten

$client->organization->federation->issuers->list(?bool includeArchived, ?int limit, ?string page): PageCursor<FederationIssuer>

GET/v1/organizations/federation_issuers

Federation-Issuer abrufen

$client->organization->federation->issuers->retrieve(string federationIssuerID): FederationIssuer

GET/v1/organizations/federation_issuers/{federation_issuer_id}

Federation-Issuer aktualisieren

$client->organization->federation->issuers->update(string federationIssuerID, ?bool checkJTI, ?string issuerURL, ?JWKS jwks, ?bool jwksPollingDisabled, ?int maxJWTLifetimeSeconds, ?string name): FederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}

Federation-Issuer archivieren

$client->organization->federation->issuers->archive(string federationIssuerID): FederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Models

class FederationIssuer { $type = 'federation_issuer'; $id; $archivedAt; /* 12 more */ }

class FederationIssuerPollStatus { $consecutiveFailures; $lastFetchedAt; $nextPollAt; }

int consecutiveFailures

Consecutive fetch failures since the last success.

?\Datetime lastFetchedAt

When the last successful fetch completed.

?\Datetime nextPollAt

When the next fetch is scheduled. Null if paused.

class JWKSDiscovery { $type = 'discovery'; $caCertPEM; $discoveryBase; }

"discovery" type

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

?string discoveryBase

Set when the discovery URL differs from issuer_url.

class JWKSExplicitURL { $type = 'explicit_url'; $url; $caCertPEM; }

"explicit_url" type

string url

JWKS endpoint.

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

class JWKSInline { $type = 'inline'; $keys; }

"inline" type

list<array<string,mixed>> keys

Inline JWK objects.