Interface: Wso2ProviderOptions

Defined in: packages/identity/src/wso2.ts:58

Options for Wso2IdentityProvider.

Properties

baseUrl

readonly baseUrl: string

Defined in: packages/identity/src/wso2.ts:64

Where WSO2 is reached from this process: https://wso2:9443 inside compose, https://127.0.0.1:19443 on a host. Never through the edge, which forwards only public end-user paths. No trailing path.

---

superAdmin

readonly superAdmin: object

Defined in: packages/identity/src/wso2.ts:66

The super tenant's administrator, who alone may create a tenant.

password

readonly password: Secret<string>

username?

readonly optional username?: string

---

tenantDomains?

readonly optional tenantDomains?: Readonly<Record<string, string>>

Defined in: packages/identity/src/wso2.ts:74

Logical realm name to tenant domain, for names WSO2 would refuse. Absent entries map to themselves: oktoid-staff is a valid tenant domain (step 1.1 showed dot-free domains work).

---

tenantOwner

readonly tenantOwner: (realm) => TenantOwner | Promise<TenantOwner>

Defined in: packages/identity/src/wso2.ts:68

Resolves the owner of a tenant by logical realm name.

Parameters

realm

string

Returns

TenantOwner | Promise<TenantOwner>

---

timeoutMs?

readonly optional timeoutMs?: number

Defined in: packages/identity/src/wso2.ts:80

Per-call timeout. Defaults to 15 seconds.

---

tls?

readonly optional tls?: TlsOptions

Defined in: packages/identity/src/wso2.ts:76

TLS trust: WSO2's certificate is self-signed in development.

---

transport?

readonly optional transport?: Transport

Defined in: packages/identity/src/wso2.ts:78

Replaces the transport, for tests.