feat(iap): update the API

#### iap:v1beta1 The following keys were changed: - schemas.Policy.properties.bindings.description #### iap:v1 The following keys were added: - schemas.AccessSettings.properties.reauthSettings.$ref - schemas.AccessSettings.properties.reauthSettings.description - schemas.ReauthSettings.description - schemas.ReauthSettings.id - schemas.ReauthSettings.properties.maxAge.description - schemas.ReauthSettings.properties.maxAge.format - schemas.ReauthSettings.properties.maxAge.type - schemas.ReauthSettings.properties.method.description - schemas.ReauthSettings.properties.method.enum - schemas.ReauthSettings.properties.method.enumDescriptions - schemas.ReauthSettings.properties.method.type - schemas.ReauthSettings.properties.policyType.description - schemas.ReauthSettings.properties.policyType.enum - schemas.ReauthSettings.properties.policyType.enumDescriptions - schemas.ReauthSettings.properties.policyType.type - schemas.ReauthSettings.type The following keys were changed: - resources.projects.resources.brands.methods.create.description - schemas.Policy.properties.bindings.description
googleapis · Oct 18, 2021 · b95fd46 · b95fd46
1 parent 96eec6e
commit b95fd46
Show file tree

Hide file tree

Showing 4 changed files with 75 additions and 8 deletions.
diff --git a/discovery/iap-v1.json b/discovery/iap-v1.json
@@ -110,7 +110,7 @@
         "brands": {
           "methods": {
             "create": {
-              "description": "Constructs a new OAuth brand for the project if one does not exist. The created brand is \"internal only\", meaning that OAuth clients created under it only accept requests from users who belong to the same G Suite organization as the project. The brand is created in an un-reviewed status. NOTE: The \"internal only\" status can be manually changed in the Google Cloud console. Requires that a brand does not already exist for the project, and that the specified support email is owned by the caller.",
+              "description": "Constructs a new OAuth brand for the project if one does not exist. The created brand is \"internal only\", meaning that OAuth clients created under it only accept requests from users who belong to the same Google Workspace organization as the project. The brand is created in an un-reviewed status. NOTE: The \"internal only\" status can be manually changed in the Google Cloud Console. Requires that a brand does not already exist for the project, and that the specified support email is owned by the caller.",
               "flatPath": "v1/projects/{projectsId}/brands",
               "httpMethod": "POST",
               "id": "iap.projects.brands.create",
@@ -487,7 +487,7 @@
       }
     }
   },
-  "revision": "20210820",
+  "revision": "20210930",
   "rootUrl": "https://iap.googleapis.com/",
   "schemas": {
     "AccessDeniedPageSettings": {
@@ -524,6 +524,10 @@
         "policyDelegationSettings": {
           "$ref": "PolicyDelegationSettings",
           "description": "Settings to configure Policy delegation for apps hosted in tenant projects. INTERNAL_ONLY."
+        },
+        "reauthSettings": {
+          "$ref": "ReauthSettings",
+          "description": "Settings to configure reauthentication policies in IAP."
         }
       },
       "type": "object"
@@ -774,7 +778,7 @@
       "id": "Policy",
       "properties": {
         "bindings": {
-          "description": "Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member.",
+          "description": "Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member. The `bindings` in a `Policy` can refer to up to 1,500 members; up to 250 of these members can be Google groups. Each occurrence of a member counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other member, then you can add another 1,450 members to the `bindings` in the `Policy`.",
           "items": {
             "$ref": "Binding"
           },
@@ -835,6 +839,48 @@
       },
       "type": "object"
     },
+    "ReauthSettings": {
+      "description": "Configuration for IAP reauthentication policies.",
+      "id": "ReauthSettings",
+      "properties": {
+        "maxAge": {
+          "description": "Reauth session lifetime, how long before a user has to reauthenticate again.",
+          "format": "google-duration",
+          "type": "string"
+        },
+        "method": {
+          "description": "Reauth method required by the policy.",
+          "enum": [
+            "METHOD_UNSPECIFIED",
+            "LOGIN",
+            "PASSWORD",
+            "SECURE_KEY"
+          ],
+          "enumDescriptions": [
+            "Reauthentication disabled.",
+            "Mimicks the behavior as if the user had logged out and tried to log in again. Users with 2SV (step verification) enabled will see their 2SV challenges if they did not opt to have their second factor responses saved. Apps Core (GSuites) admins can configure settings to disable 2SV cookies and require 2-step verification for all Apps Core users in their domains.",
+            "User must type their password.",
+            "User must use their secure key 2nd factor device."
+          ],
+          "type": "string"
+        },
+        "policyType": {
+          "description": "How IAP determines the effective policy in cases of hierarchial policies. Policies are merged from higher in the hierarchy to lower in the hierarchy.",
+          "enum": [
+            "POLICY_TYPE_UNSPECIFIED",
+            "MINIMUM",
+            "DEFAULT"
+          ],
+          "enumDescriptions": [
+            "Default value. This value is unused/invalid.",
+            "This policy acts as a minimum to other policies, lower in the hierarchy. Effective policy may only be the same or stricter.",
+            "This policy acts as a default if no other reauth policy is set."
+          ],
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "ResetIdentityAwareProxyClientSecretRequest": {
       "description": "The request sent to ResetIdentityAwareProxyClientSecret.",
       "id": "ResetIdentityAwareProxyClientSecretRequest",

diff --git a/discovery/iap-v1beta1.json b/discovery/iap-v1beta1.json
@@ -194,7 +194,7 @@
       }
     }
   },
-  "revision": "20210820",
+  "revision": "20210930",
   "rootUrl": "https://iap.googleapis.com/",
   "schemas": {
     "Binding": {
@@ -270,7 +270,7 @@
       "id": "Policy",
       "properties": {
         "bindings": {
-          "description": "Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member.",
+          "description": "Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member. The `bindings` in a `Policy` can refer to up to 1,500 members; up to 250 of these members can be Google groups. Each occurrence of a member counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other member, then you can add another 1,450 members to the `bindings` in the `Policy`.",
           "items": {
             "$ref": "Binding"
           },

diff --git a/src/apis/iap/v1.ts b/src/apis/iap/v1.ts
@@ -160,6 +160,10 @@ export namespace iap_v1 {
      * Settings to configure Policy delegation for apps hosted in tenant projects. INTERNAL_ONLY.
      */
     policyDelegationSettings?: Schema$PolicyDelegationSettings;
+    /**
+     * Settings to configure reauthentication policies in IAP.
+     */
+    reauthSettings?: Schema$ReauthSettings;
   }
   /**
    * Wrapper over application specific settings for IAP.
@@ -360,7 +364,7 @@ export namespace iap_v1 {
    */
   export interface Schema$Policy {
     /**
-     * Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member.
+     * Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member. The `bindings` in a `Policy` can refer to up to 1,500 members; up to 250 of these members can be Google groups. Each occurrence of a member counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other member, then you can add another 1,450 members to the `bindings` in the `Policy`.
      */
     bindings?: Schema$Binding[];
     /**
@@ -410,6 +414,23 @@ export namespace iap_v1 {
      */
     type?: string | null;
   }
+  /**
+   * Configuration for IAP reauthentication policies.
+   */
+  export interface Schema$ReauthSettings {
+    /**
+     * Reauth session lifetime, how long before a user has to reauthenticate again.
+     */
+    maxAge?: string | null;
+    /**
+     * Reauth method required by the policy.
+     */
+    method?: string | null;
+    /**
+     * How IAP determines the effective policy in cases of hierarchial policies. Policies are merged from higher in the hierarchy to lower in the hierarchy.
+     */
+    policyType?: string | null;
+  }
   /**
    * The request sent to ResetIdentityAwareProxyClientSecret.
    */
@@ -479,7 +500,7 @@ export namespace iap_v1 {
     }
 
     /**
-     * Constructs a new OAuth brand for the project if one does not exist. The created brand is "internal only", meaning that OAuth clients created under it only accept requests from users who belong to the same G Suite organization as the project. The brand is created in an un-reviewed status. NOTE: The "internal only" status can be manually changed in the Google Cloud console. Requires that a brand does not already exist for the project, and that the specified support email is owned by the caller.
+     * Constructs a new OAuth brand for the project if one does not exist. The created brand is "internal only", meaning that OAuth clients created under it only accept requests from users who belong to the same Google Workspace organization as the project. The brand is created in an un-reviewed status. NOTE: The "internal only" status can be manually changed in the Google Cloud Console. Requires that a brand does not already exist for the project, and that the specified support email is owned by the caller.
      * @example
      * ```js
      * // Before running the sample:

diff --git a/src/apis/iap/v1beta1.ts b/src/apis/iap/v1beta1.ts
@@ -186,7 +186,7 @@ export namespace iap_v1beta1 {
    */
   export interface Schema$Policy {
     /**
-     * Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member.
+     * Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member. The `bindings` in a `Policy` can refer to up to 1,500 members; up to 250 of these members can be Google groups. Each occurrence of a member counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other member, then you can add another 1,450 members to the `bindings` in the `Policy`.
      */
     bindings?: Schema$Binding[];
     /**