/**
 * authentik
 * Making authentication simple.
 *
 * The version of the OpenAPI document: 2026.2.0-rc1
 * Contact: hello@goauthentik.io
 *
 * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
 * https://openapi-generator.tech
 * Do not edit the class manually.
 */
import type { RedirectURIRequest } from './RedirectURIRequest';
import type { ClientTypeEnum } from './ClientTypeEnum';
import type { SubModeEnum } from './SubModeEnum';
import type { OAuth2ProviderLogoutMethodEnum } from './OAuth2ProviderLogoutMethodEnum';
import type { IssuerModeEnum } from './IssuerModeEnum';
/**
 * OAuth2Provider Serializer
 * @export
 * @interface OAuth2ProviderRequest
 */
export interface OAuth2ProviderRequest {
    /**
     *
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    name: string;
    /**
     * Flow used for authentication when the associated application is accessed by an un-authenticated user.
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    authenticationFlow?: string | null;
    /**
     * Flow used when authorizing this provider.
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    authorizationFlow: string;
    /**
     * Flow used ending the session from a provider.
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    invalidationFlow: string;
    /**
     *
     * @type {Array<string>}
     * @memberof OAuth2ProviderRequest
     */
    propertyMappings?: Array<string>;
    /**
     * Confidential clients are capable of maintaining the confidentiality of their credentials. Public clients are incapable
     * @type {ClientTypeEnum}
     * @memberof OAuth2ProviderRequest
     */
    clientType?: ClientTypeEnum;
    /**
     *
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    clientId?: string;
    /**
     *
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    clientSecret?: string;
    /**
     * Access codes not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3).
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    accessCodeValidity?: string;
    /**
     * Tokens not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3).
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    accessTokenValidity?: string;
    /**
     * Tokens not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3).
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    refreshTokenValidity?: string;
    /**
     * When refreshing a token, if the refresh token is valid for less than this duration, it will be renewed. When set to seconds=0, token will always be renewed. (Format: hours=1;minutes=2;seconds=3).
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    refreshTokenThreshold?: string;
    /**
     * Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint.
     * @type {boolean}
     * @memberof OAuth2ProviderRequest
     */
    includeClaimsInIdToken?: boolean;
    /**
     * Key used to sign the tokens.
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    signingKey?: string | null;
    /**
     * Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    encryptionKey?: string | null;
    /**
     *
     * @type {Array<RedirectURIRequest>}
     * @memberof OAuth2ProviderRequest
     */
    redirectUris: Array<RedirectURIRequest>;
    /**
     *
     * @type {string}
     * @memberof OAuth2ProviderRequest
     */
    logoutUri?: string;
    /**
     * Backchannel logs out with server to server calls. Frontchannel uses iframes in your browser
     * @type {OAuth2ProviderLogoutMethodEnum}
     * @memberof OAuth2ProviderRequest
     */
    logoutMethod?: OAuth2ProviderLogoutMethodEnum;
    /**
     * Configure what data should be used as unique User Identifier. For most cases, the default should be fine.
     * @type {SubModeEnum}
     * @memberof OAuth2ProviderRequest
     */
    subMode?: SubModeEnum;
    /**
     * Configure how the issuer field of the ID Token should be filled.
     * @type {IssuerModeEnum}
     * @memberof OAuth2ProviderRequest
     */
    issuerMode?: IssuerModeEnum;
    /**
     *
     * @type {Array<string>}
     * @memberof OAuth2ProviderRequest
     */
    jwtFederationSources?: Array<string>;
    /**
     *
     * @type {Array<number>}
     * @memberof OAuth2ProviderRequest
     */
    jwtFederationProviders?: Array<number>;
}
/**
 * Check if a given object implements the OAuth2ProviderRequest interface.
 */
export declare function instanceOfOAuth2ProviderRequest(value: object): value is OAuth2ProviderRequest;
export declare function OAuth2ProviderRequestFromJSON(json: any): OAuth2ProviderRequest;
export declare function OAuth2ProviderRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): OAuth2ProviderRequest;
export declare function OAuth2ProviderRequestToJSON(json: any): OAuth2ProviderRequest;
export declare function OAuth2ProviderRequestToJSONTyped(value?: OAuth2ProviderRequest | null, ignoreDiscriminator?: boolean): any;
//# sourceMappingURL=OAuth2ProviderRequest.d.ts.map