Émetteurs

Créer un émetteur de fédération

$client->organization->federation->issuers->create(string issuerURL, string name, ?bool checkJTI, ?JWKS jwks, ?int maxJWTLifetimeSeconds): FederationIssuer

POST/v1/organizations/federation_issuers

Nécessite un jeton d'accès OAuth avec la portée org:admin, obtenu via ant auth login --scope org:admin ou une règle de workload identity federation (fédération d'identité de charge de travail) ; les clés Admin API ne sont pas acceptées. Consultez Gérer WIF avec l'Admin API.

Lister les émetteurs de fédération

$client->organization->federation->issuers->list(?bool includeArchived, ?int limit, ?string page): PageCursor<FederationIssuer>

GET/v1/organizations/federation_issuers

Obtenir un émetteur de fédération

$client->organization->federation->issuers->retrieve(string federationIssuerID): FederationIssuer

GET/v1/organizations/federation_issuers/{federation_issuer_id}

Mettre à jour un émetteur de fédération

$client->organization->federation->issuers->update(string federationIssuerID, ?bool checkJTI, ?string issuerURL, ?JWKS jwks, ?bool jwksPollingDisabled, ?int maxJWTLifetimeSeconds, ?string name): FederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}

Archiver un émetteur de fédération

$client->organization->federation->issuers->archive(string federationIssuerID): FederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Models

class FederationIssuer { $type = 'federation_issuer'; $id; $archivedAt; /* 12 more */ }

class FederationIssuerPollStatus { $consecutiveFailures; $lastFetchedAt; $nextPollAt; }

int consecutiveFailures

Consecutive fetch failures since the last success.

?\Datetime lastFetchedAt

When the last successful fetch completed.

?\Datetime nextPollAt

When the next fetch is scheduled. Null if paused.

class JWKSDiscovery { $type = 'discovery'; $caCertPEM; $discoveryBase; }

"discovery" type

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

?string discoveryBase

Set when the discovery URL differs from issuer_url.

class JWKSExplicitURL { $type = 'explicit_url'; $url; $caCertPEM; }

"explicit_url" type

string url

JWKS endpoint.

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

class JWKSInline { $type = 'inline'; $keys; }

"inline" type

list<array<string,mixed>> keys

Inline JWK objects.