yandex-cloud 2025.4.14

/// A certificate.
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct Certificate {
    /// ID of the certificate.
    #[prost(string, tag = "1")]
    pub id: ::prost::alloc::string::String,
    /// ID of the federation that the certificate belongs to.
    #[prost(string, tag = "2")]
    pub federation_id: ::prost::alloc::string::String,
    /// Name of the certificate.
    #[prost(string, tag = "3")]
    pub name: ::prost::alloc::string::String,
    /// Description of the certificate.
    #[prost(string, tag = "4")]
    pub description: ::prost::alloc::string::String,
    /// Creation timestamp.
    #[prost(message, optional, tag = "5")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Certificate data in PEM format.
    #[prost(string, tag = "6")]
    pub data: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetCertificateRequest {
    /// ID of the certificate to return.
    /// To get the certificate ID, make a \[CertificateService.List\] request.
    #[prost(string, tag = "1")]
    pub certificate_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListCertificatesRequest {
    /// ID of the federation to list certificates in.
    /// To get the federation ID make a \[yandex.cloud.organizationmanager.v1.saml.FederationService.List\] request.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
    /// The maximum number of results per page to return. If the number of available
    /// results is larger than \[page_size\], the service returns a \[ListCertificatesResponse.next_page_token\]
    /// that can be used to get the next page of results in subsequent list requests.
    /// Default value: 100.
    #[prost(int64, tag = "2")]
    pub page_size: i64,
    /// Page token. To get the next page of results, set \[page_token\]
    /// to the \[ListCertificatesResponse.next_page_token\]
    /// returned by a previous list request.
    #[prost(string, tag = "3")]
    pub page_token: ::prost::alloc::string::String,
    /// A filter expression that filters resources listed in the response.
    /// The expression must specify:
    /// 1. The field name. Currently you can use filtering only on \[Certificate.name\] field.
    /// 2. An `=` operator.
    /// 3. The value in double quotes (`"`). Must be 3-63 characters long and match the regular expression `\[a-z][-a-z0-9]{1,61}[a-z0-9\]`.
    #[prost(string, tag = "4")]
    pub filter: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListCertificatesResponse {
    /// List of certificates.
    #[prost(message, repeated, tag = "1")]
    pub certificates: ::prost::alloc::vec::Vec<Certificate>,
    /// This token allows you to get the next page of results for list requests. If the number of results
    /// is larger than \[ListCertificatesRequest.page_size\], use
    /// the \[next_page_token\] as the value
    /// for the \[ListCertificatesRequest.page_token\] query parameter
    /// in the next list request. Each subsequent list request will have its own
    /// \[next_page_token\] to continue paging through the results.
    #[prost(string, tag = "2")]
    pub next_page_token: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateCertificateRequest {
    /// ID of the federation to add new certificate.
    /// To get the federation ID make a \[yandex.cloud.organizationmanager.v1.saml.FederationService.List\] request.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
    /// Name of the certificate.
    /// The name must be unique within the federation.
    #[prost(string, tag = "2")]
    pub name: ::prost::alloc::string::String,
    /// Description of the certificate.
    #[prost(string, tag = "3")]
    pub description: ::prost::alloc::string::String,
    /// Certificate data in PEM format.
    #[prost(string, tag = "4")]
    pub data: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateCertificateMetadata {
    /// ID of the certificate that is being created.
    #[prost(string, tag = "1")]
    pub certificate_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateCertificateRequest {
    /// ID of the certificate to update.
    /// To get the certificate ID, make a \[CertificateService.List\] request.
    #[prost(string, tag = "1")]
    pub certificate_id: ::prost::alloc::string::String,
    /// Field mask that specifies which fields of the certificate are going to be updated.
    #[prost(message, optional, tag = "2")]
    pub update_mask: ::core::option::Option<::prost_types::FieldMask>,
    /// Name of the certificate.
    /// The name must be unique within the federation.
    #[prost(string, tag = "3")]
    pub name: ::prost::alloc::string::String,
    /// Description of the certificate.
    #[prost(string, tag = "4")]
    pub description: ::prost::alloc::string::String,
    /// Certificate data in PEM format.
    #[prost(string, tag = "5")]
    pub data: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateCertificateMetadata {
    /// ID of the certificate that is being updated.
    #[prost(string, tag = "1")]
    pub certificate_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeleteCertificateRequest {
    /// ID of the certificate to delete.
    /// To get the certificate ID, make a \[CertificateService.List\] request.
    #[prost(string, tag = "1")]
    pub certificate_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeleteCertificateMetadata {
    /// ID of the certificate that is being deleted.
    #[prost(string, tag = "1")]
    pub certificate_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListCertificateOperationsRequest {
    /// ID of the certificate to list operations for.
    #[prost(string, tag = "1")]
    pub certificate_id: ::prost::alloc::string::String,
    /// The maximum number of results per page to return. If the number of available
    /// results is larger than \[page_size\], the service returns a \[ListCertificateOperationsResponse.next_page_token\]
    /// that can be used to get the next page of results in subsequent list requests.
    /// Default value: 100.
    #[prost(int64, tag = "2")]
    pub page_size: i64,
    /// Page token. To get the next page of results, set \[page_token\]
    /// to the \[ListCertificateOperationsResponse.next_page_token\]
    /// returned by a previous list request.
    #[prost(string, tag = "3")]
    pub page_token: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListCertificateOperationsResponse {
    /// List of operations for the specified certificate.
    #[prost(message, repeated, tag = "1")]
    pub operations: ::prost::alloc::vec::Vec<super::super::super::operation::Operation>,
    /// This token allows you to get the next page of results for list requests. If the number of results
    /// is larger than \[ListCertificateOperationsRequest.page_size\], use the \[next_page_token\] as the value
    /// for the \[ListCertificateOperationsRequest.page_token\] query parameter in the next list request.
    /// Each subsequent list request will have its own \[next_page_token\] to continue paging through the results.
    #[prost(string, tag = "2")]
    pub next_page_token: ::prost::alloc::string::String,
}
/// Generated client implementations.
pub mod certificate_service_client {
    #![allow(unused_variables, dead_code, missing_docs, clippy::let_unit_value)]
    use tonic::codegen::*;
    use tonic::codegen::http::Uri;
    /// A set of methods for managing certificates.
    #[derive(Debug, Clone)]
    pub struct CertificateServiceClient<T> {
        inner: tonic::client::Grpc<T>,
    }
    impl CertificateServiceClient<tonic::transport::Channel> {
        /// Attempt to create a new client by connecting to a given endpoint.
        pub async fn connect<D>(dst: D) -> Result<Self, tonic::transport::Error>
        where
            D: TryInto<tonic::transport::Endpoint>,
            D::Error: Into<StdError>,
        {
            let conn = tonic::transport::Endpoint::new(dst)?.connect().await?;
            Ok(Self::new(conn))
        }
    }
    impl<T> CertificateServiceClient<T>
    where
        T: tonic::client::GrpcService<tonic::body::BoxBody>,
        T::Error: Into<StdError>,
        T::ResponseBody: Body<Data = Bytes> + Send + 'static,
        <T::ResponseBody as Body>::Error: Into<StdError> + Send,
    {
        pub fn new(inner: T) -> Self {
            let inner = tonic::client::Grpc::new(inner);
            Self { inner }
        }
        pub fn with_origin(inner: T, origin: Uri) -> Self {
            let inner = tonic::client::Grpc::with_origin(inner, origin);
            Self { inner }
        }
        pub fn with_interceptor<F>(
            inner: T,
            interceptor: F,
        ) -> CertificateServiceClient<InterceptedService<T, F>>
        where
            F: tonic::service::Interceptor,
            T::ResponseBody: Default,
            T: tonic::codegen::Service<
                http::Request<tonic::body::BoxBody>,
                Response = http::Response<
                    <T as tonic::client::GrpcService<tonic::body::BoxBody>>::ResponseBody,
                >,
            >,
            <T as tonic::codegen::Service<
                http::Request<tonic::body::BoxBody>,
            >>::Error: Into<StdError> + Send + Sync,
        {
            CertificateServiceClient::new(InterceptedService::new(inner, interceptor))
        }
        /// Compress requests with the given encoding.
        ///
        /// This requires the server to support it otherwise it might respond with an
        /// error.
        #[must_use]
        pub fn send_compressed(mut self, encoding: CompressionEncoding) -> Self {
            self.inner = self.inner.send_compressed(encoding);
            self
        }
        /// Enable decompressing responses.
        #[must_use]
        pub fn accept_compressed(mut self, encoding: CompressionEncoding) -> Self {
            self.inner = self.inner.accept_compressed(encoding);
            self
        }
        /// Limits the maximum size of a decoded message.
        ///
        /// Default: `4MB`
        #[must_use]
        pub fn max_decoding_message_size(mut self, limit: usize) -> Self {
            self.inner = self.inner.max_decoding_message_size(limit);
            self
        }
        /// Limits the maximum size of an encoded message.
        ///
        /// Default: `usize::MAX`
        #[must_use]
        pub fn max_encoding_message_size(mut self, limit: usize) -> Self {
            self.inner = self.inner.max_encoding_message_size(limit);
            self
        }
        /// Returns the specified certificate.
        ///
        /// To get the list of available certificates, make a [List] request.
        pub async fn get(
            &mut self,
            request: impl tonic::IntoRequest<super::GetCertificateRequest>,
        ) -> std::result::Result<tonic::Response<super::Certificate>, tonic::Status> {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.CertificateService/Get",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.CertificateService",
                        "Get",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Retrieves the list of certificates in the specified federation.
        pub async fn list(
            &mut self,
            request: impl tonic::IntoRequest<super::ListCertificatesRequest>,
        ) -> std::result::Result<
            tonic::Response<super::ListCertificatesResponse>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.CertificateService/List",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.CertificateService",
                        "List",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Creates a certificate in the specified federation.
        pub async fn create(
            &mut self,
            request: impl tonic::IntoRequest<super::CreateCertificateRequest>,
        ) -> std::result::Result<
            tonic::Response<super::super::super::super::operation::Operation>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.CertificateService/Create",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.CertificateService",
                        "Create",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Updates the specified certificate.
        pub async fn update(
            &mut self,
            request: impl tonic::IntoRequest<super::UpdateCertificateRequest>,
        ) -> std::result::Result<
            tonic::Response<super::super::super::super::operation::Operation>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.CertificateService/Update",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.CertificateService",
                        "Update",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Deletes the specified certificate.
        pub async fn delete(
            &mut self,
            request: impl tonic::IntoRequest<super::DeleteCertificateRequest>,
        ) -> std::result::Result<
            tonic::Response<super::super::super::super::operation::Operation>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.CertificateService/Delete",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.CertificateService",
                        "Delete",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Lists operations for the specified certificate.
        pub async fn list_operations(
            &mut self,
            request: impl tonic::IntoRequest<super::ListCertificateOperationsRequest>,
        ) -> std::result::Result<
            tonic::Response<super::ListCertificateOperationsResponse>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.CertificateService/ListOperations",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.CertificateService",
                        "ListOperations",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
    }
}
/// A federation.
/// For more information, see [SAML-compatible identity federations](/docs/iam/concepts/federations).
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct Federation {
    /// ID of the federation.
    #[prost(string, tag = "1")]
    pub id: ::prost::alloc::string::String,
    /// ID of the organization that the federation belongs to.
    #[prost(string, tag = "2")]
    pub organization_id: ::prost::alloc::string::String,
    /// Name of the federation.
    #[prost(string, tag = "3")]
    pub name: ::prost::alloc::string::String,
    /// Description of the federation.
    #[prost(string, tag = "4")]
    pub description: ::prost::alloc::string::String,
    /// Creation timestamp.
    #[prost(message, optional, tag = "5")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Browser cookie lifetime in seconds.
    /// If the cookie is still valid, the management console
    /// authenticates the user immediately and redirects them to the home page.
    #[prost(message, optional, tag = "6")]
    pub cookie_max_age: ::core::option::Option<::prost_types::Duration>,
    /// Add new users automatically on successful authentication.
    /// The user becomes member of the organization automatically,
    /// but you need to grant other roles to them.
    ///
    /// If the value is `false`, users who aren't added to the organization
    /// can't log in, even if they have authenticated on your server.
    #[prost(bool, tag = "7")]
    pub auto_create_account_on_login: bool,
    /// ID of the IdP server to be used for authentication.
    /// The IdP server also responds to IAM with this ID after the user authenticates.
    #[prost(string, tag = "8")]
    pub issuer: ::prost::alloc::string::String,
    /// Single sign-on endpoint binding type. Most Identity Providers support the `POST` binding type.
    ///
    /// SAML Binding is a mapping of a SAML protocol message onto standard messaging
    /// formats and/or communications protocols.
    #[prost(enumeration = "BindingType", tag = "9")]
    pub sso_binding: i32,
    /// Single sign-on endpoint URL.
    /// Specify the link to the IdP login page here.
    #[prost(string, tag = "10")]
    pub sso_url: ::prost::alloc::string::String,
    /// Federation security settings.
    #[prost(message, optional, tag = "11")]
    pub security_settings: ::core::option::Option<FederationSecuritySettings>,
    /// Use case insensitive Name IDs.
    #[prost(bool, tag = "12")]
    pub case_insensitive_name_ids: bool,
    /// Resource labels as `` key:value `` pairs. Maximum of 64 per resource.
    #[prost(map = "string, string", tag = "13")]
    pub labels: ::std::collections::HashMap<
        ::prost::alloc::string::String,
        ::prost::alloc::string::String,
    >,
}
/// Federation security settings.
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct FederationSecuritySettings {
    /// Enable encrypted assertions.
    #[prost(bool, tag = "1")]
    pub encrypted_assertions: bool,
    /// Value parameter ForceAuthn in SAMLRequest.
    #[prost(bool, tag = "2")]
    pub force_authn: bool,
}
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum BindingType {
    Unspecified = 0,
    /// HTTP POST binding.
    Post = 1,
    /// HTTP redirect binding.
    Redirect = 2,
    /// HTTP artifact binding.
    Artifact = 3,
}
impl BindingType {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            BindingType::Unspecified => "BINDING_TYPE_UNSPECIFIED",
            BindingType::Post => "POST",
            BindingType::Redirect => "REDIRECT",
            BindingType::Artifact => "ARTIFACT",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "BINDING_TYPE_UNSPECIFIED" => Some(Self::Unspecified),
            "POST" => Some(Self::Post),
            "REDIRECT" => Some(Self::Redirect),
            "ARTIFACT" => Some(Self::Artifact),
            _ => None,
        }
    }
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetFederationRequest {
    /// ID of the federation to return.
    /// To get the federation ID, make a \[FederationService.List\] request.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListFederationsRequest {
    /// ID of the organization to list federations in.
    /// To get the organization ID, make a \[yandex.cloud.organizationmanager.v1.OrganizationService.List\] request.
    #[prost(string, tag = "6")]
    pub organization_id: ::prost::alloc::string::String,
    /// The maximum number of results per page to return. If the number of available
    /// results is larger than \[page_size\],
    /// the service returns a \[ListFederationsResponse.next_page_token\]
    /// that can be used to get the next page of results in subsequent list requests.
    /// Default value: 100
    #[prost(int64, tag = "3")]
    pub page_size: i64,
    /// Page token. To get the next page of results, set \[page_token\]
    /// to the \[ListFederationsResponse.next_page_token\]
    /// returned by a previous list request.
    #[prost(string, tag = "4")]
    pub page_token: ::prost::alloc::string::String,
    /// A filter expression that filters resources listed in the response.
    /// The expression must specify:
    /// 1. The field name. Currently you can use filtering only on the \[Federation.name\] field.
    /// 2. An `=` operator.
    /// 3. The value in double quotes (`"`). Must be 3-63 characters long and match the regular expression `\[a-z][-a-z0-9]{1,61}[a-z0-9\]`.
    #[prost(string, tag = "5")]
    pub filter: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListFederationsResponse {
    /// List of federations.
    #[prost(message, repeated, tag = "1")]
    pub federations: ::prost::alloc::vec::Vec<Federation>,
    /// This token allows you to get the next page of results for list requests. If the number of results
    /// is larger than \[ListFederationsRequest.page_size\], use
    /// the \[next_page_token\] as the value
    /// for the \[ListFederationsRequest.page_token\] query parameter
    /// in the next list request. Each subsequent list request will have its own
    /// \[next_page_token\] to continue paging through the results.
    #[prost(string, tag = "2")]
    pub next_page_token: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateFederationRequest {
    /// ID of the organization to create a federation in.
    /// To get the organization ID, make a \[yandex.cloud.organizationmanager.v1.OrganizationService.List\] request.
    #[prost(string, tag = "1")]
    pub organization_id: ::prost::alloc::string::String,
    /// Name of the federation.
    /// The name must be unique within the organization.
    #[prost(string, tag = "2")]
    pub name: ::prost::alloc::string::String,
    /// Description of the federation.
    #[prost(string, tag = "3")]
    pub description: ::prost::alloc::string::String,
    /// Browser cookie lifetime in seconds.
    /// If the cookie is still valid, the management console
    /// authenticates the user immediately and redirects them to the home page.
    /// The default value is `8h`.
    #[prost(message, optional, tag = "4")]
    pub cookie_max_age: ::core::option::Option<::prost_types::Duration>,
    /// Add new users automatically on successful authentication.
    /// The user becomes member of the organization automatically,
    /// but you need to grant other roles to them.
    ///
    /// If the value is `false`, users who aren't added to the organization
    /// can't log in, even if they have authenticated on your server.
    #[prost(bool, tag = "5")]
    pub auto_create_account_on_login: bool,
    /// ID of the IdP server to be used for authentication.
    /// The IdP server also responds to IAM with this ID after the user authenticates.
    #[prost(string, tag = "6")]
    pub issuer: ::prost::alloc::string::String,
    /// Single sign-on endpoint binding type. Most Identity Providers support the `POST` binding type.
    ///
    /// SAML Binding is a mapping of a SAML protocol message onto standard messaging
    /// formats and/or communications protocols.
    #[prost(enumeration = "BindingType", tag = "7")]
    pub sso_binding: i32,
    /// Single sign-on endpoint URL.
    /// Specify the link to the IdP login page here.
    #[prost(string, tag = "8")]
    pub sso_url: ::prost::alloc::string::String,
    /// Federation security settings.
    #[prost(message, optional, tag = "9")]
    pub security_settings: ::core::option::Option<FederationSecuritySettings>,
    /// Use case insensitive Name IDs.
    #[prost(bool, tag = "10")]
    pub case_insensitive_name_ids: bool,
    /// Resource labels as `` key:value `` pairs.
    #[prost(map = "string, string", tag = "11")]
    pub labels: ::std::collections::HashMap<
        ::prost::alloc::string::String,
        ::prost::alloc::string::String,
    >,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateFederationMetadata {
    /// ID of the federation that is being created.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateFederationRequest {
    /// ID of the federation to update.
    /// To get the federation ID, make a \[FederationService.List\] request.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
    /// Field mask that specifies which fields of the federation are going to be updated.
    #[prost(message, optional, tag = "2")]
    pub update_mask: ::core::option::Option<::prost_types::FieldMask>,
    /// Name of the federation.
    /// The name must be unique within the organization.
    #[prost(string, tag = "3")]
    pub name: ::prost::alloc::string::String,
    /// Description of the federation.
    #[prost(string, tag = "4")]
    pub description: ::prost::alloc::string::String,
    /// Browser cookie lifetime in seconds.
    /// If the cookie is still valid, the management console
    /// authenticates the user immediately and redirects them to the home page.
    /// The default value is `8h`.
    #[prost(message, optional, tag = "5")]
    pub cookie_max_age: ::core::option::Option<::prost_types::Duration>,
    /// Add new users automatically on successful authentication.
    /// The user becomes member of the organization automatically,
    /// but you need to grant other roles to them.
    ///
    /// If the value is `false`, users who aren't added to the organization
    /// can't log in, even if they have authenticated on your server.
    #[prost(bool, tag = "6")]
    pub auto_create_account_on_login: bool,
    /// ID of the IdP server to be used for authentication.
    /// The IdP server also responds to IAM with this ID after the user authenticates.
    #[prost(string, tag = "7")]
    pub issuer: ::prost::alloc::string::String,
    /// Single sign-on endpoint binding type. Most Identity Providers support the `POST` binding type.
    ///
    /// SAML Binding is a mapping of a SAML protocol message onto standard messaging
    /// formats and/or communications protocols.
    #[prost(enumeration = "BindingType", tag = "8")]
    pub sso_binding: i32,
    /// Single sign-on endpoint URL.
    /// Specify the link to the IdP login page here.
    #[prost(string, tag = "9")]
    pub sso_url: ::prost::alloc::string::String,
    /// Federation security settings.
    #[prost(message, optional, tag = "10")]
    pub security_settings: ::core::option::Option<FederationSecuritySettings>,
    /// Use case insensitive name ids.
    #[prost(bool, tag = "12")]
    pub case_insensitive_name_ids: bool,
    /// Resource labels as `` key:value `` pairs.
    #[prost(map = "string, string", tag = "13")]
    pub labels: ::std::collections::HashMap<
        ::prost::alloc::string::String,
        ::prost::alloc::string::String,
    >,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateFederationMetadata {
    /// ID of the federation that is being updated.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeleteFederationRequest {
    /// ID of the federation to delete.
    /// To get the federation ID, make a \[FederationService.List\] request.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeleteFederationMetadata {
    /// ID of the federation that is being deleted.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AddFederatedUserAccountsRequest {
    /// ID of the federation to add users.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
    /// Name IDs returned by the Identity Provider (IdP) on successful authentication.
    /// These may be UPNs or user email addresses.
    #[prost(string, repeated, tag = "2")]
    pub name_ids: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AddFederatedUserAccountsMetadata {
    /// ID of the federation that is being altered.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AddFederatedUserAccountsResponse {
    /// List of users created by \[FederationService.AddUserAccounts\] request.
    #[prost(message, repeated, tag = "1")]
    pub user_accounts: ::prost::alloc::vec::Vec<super::UserAccount>,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeleteFederatedUserAccountsRequest {
    /// ID of the federation to delete users from.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
    /// List of subjects to delete.
    #[prost(string, repeated, tag = "2")]
    pub subject_ids: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeleteFederatedUserAccountsMetadata {
    /// ID of the federation that is being altered.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeleteFederatedUserAccountsResponse {
    /// List of subjects deleted by \[FederationService.DeleteUserAccounts\] request.
    #[prost(string, repeated, tag = "1")]
    pub deleted_subjects: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
    /// List of subjects found in \[FederationService.DeleteUserAccounts\] request that do not exist.
    #[prost(string, repeated, tag = "2")]
    pub non_existing_subjects: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListFederatedUserAccountsRequest {
    /// ID of the federation to list user accounts for.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
    /// The maximum number of results per page to return. If the number of available
    /// results is larger than \[page_size\], the service returns a \[ListFederatedUserAccountsResponse.next_page_token\]
    /// that can be used to get the next page of results in subsequent list requests.
    /// Default value: 100.
    #[prost(int64, tag = "2")]
    pub page_size: i64,
    /// Page token. To get the next page of results, set \[page_token\]
    /// to the \[ListFederatedUserAccountsResponse.next_page_token\]
    /// returned by a previous list request.
    #[prost(string, tag = "3")]
    pub page_token: ::prost::alloc::string::String,
    /// A filter expression that filters resources listed in the response.
    /// The expression must specify:
    /// 1. The field name. Currently you can use filtering only on the \[name_id\] field.
    /// 2. An `=` operator.
    /// 3. The value in double quotes (`"`). Must be 1-1000 characters long and match the regular expression
    ///    `\[a-z0-9A-Z/@_.\-=+*\\\]+`.
    #[prost(string, tag = "4")]
    pub filter: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListFederatedUserAccountsResponse {
    /// List of user accounts for the specified federation.
    #[prost(message, repeated, tag = "1")]
    pub user_accounts: ::prost::alloc::vec::Vec<super::UserAccount>,
    /// This token allows you to get the next page of results for list requests. If the number of results
    /// is larger than \[ListFederatedUserAccountsRequest.page_size\], use the \[next_page_token\] as the value
    /// for the \[ListFederatedUserAccountsRequest.page_token\] query parameter in the next list request.
    /// Each subsequent list request will have its own \[next_page_token\] to continue paging through the results.
    #[prost(string, tag = "2")]
    pub next_page_token: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListFederationOperationsRequest {
    /// ID of the federation to list operations for.
    #[prost(string, tag = "1")]
    pub federation_id: ::prost::alloc::string::String,
    /// The maximum number of results per page to return. If the number of available
    /// results is larger than \[page_size\], the service returns a \[ListFederationOperationsResponse.next_page_token\]
    /// that can be used to get the next page of results in subsequent list requests.
    /// Default value: 100.
    #[prost(int64, tag = "2")]
    pub page_size: i64,
    /// Page token. To get the next page of results, set \[page_token\]
    /// to the \[ListFederationOperationsResponse.next_page_token\]
    /// returned by a previous list request.
    #[prost(string, tag = "3")]
    pub page_token: ::prost::alloc::string::String,
}
#[allow(clippy::derive_partial_eq_without_eq)]
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListFederationOperationsResponse {
    /// List of operations for the specified federation.
    #[prost(message, repeated, tag = "1")]
    pub operations: ::prost::alloc::vec::Vec<super::super::super::operation::Operation>,
    /// This token allows you to get the next page of results for list requests. If the number of results
    /// is larger than \[ListFederationOperationsRequest.page_size\], use the \[next_page_token\] as the value
    /// for the \[ListFederationOperationsRequest.page_token\] query parameter in the next list request.
    /// Each subsequent list request will have its own \[next_page_token\] to continue paging through the results.
    #[prost(string, tag = "2")]
    pub next_page_token: ::prost::alloc::string::String,
}
/// Generated client implementations.
pub mod federation_service_client {
    #![allow(unused_variables, dead_code, missing_docs, clippy::let_unit_value)]
    use tonic::codegen::*;
    use tonic::codegen::http::Uri;
    /// A set of methods for managing federations.
    #[derive(Debug, Clone)]
    pub struct FederationServiceClient<T> {
        inner: tonic::client::Grpc<T>,
    }
    impl FederationServiceClient<tonic::transport::Channel> {
        /// Attempt to create a new client by connecting to a given endpoint.
        pub async fn connect<D>(dst: D) -> Result<Self, tonic::transport::Error>
        where
            D: TryInto<tonic::transport::Endpoint>,
            D::Error: Into<StdError>,
        {
            let conn = tonic::transport::Endpoint::new(dst)?.connect().await?;
            Ok(Self::new(conn))
        }
    }
    impl<T> FederationServiceClient<T>
    where
        T: tonic::client::GrpcService<tonic::body::BoxBody>,
        T::Error: Into<StdError>,
        T::ResponseBody: Body<Data = Bytes> + Send + 'static,
        <T::ResponseBody as Body>::Error: Into<StdError> + Send,
    {
        pub fn new(inner: T) -> Self {
            let inner = tonic::client::Grpc::new(inner);
            Self { inner }
        }
        pub fn with_origin(inner: T, origin: Uri) -> Self {
            let inner = tonic::client::Grpc::with_origin(inner, origin);
            Self { inner }
        }
        pub fn with_interceptor<F>(
            inner: T,
            interceptor: F,
        ) -> FederationServiceClient<InterceptedService<T, F>>
        where
            F: tonic::service::Interceptor,
            T::ResponseBody: Default,
            T: tonic::codegen::Service<
                http::Request<tonic::body::BoxBody>,
                Response = http::Response<
                    <T as tonic::client::GrpcService<tonic::body::BoxBody>>::ResponseBody,
                >,
            >,
            <T as tonic::codegen::Service<
                http::Request<tonic::body::BoxBody>,
            >>::Error: Into<StdError> + Send + Sync,
        {
            FederationServiceClient::new(InterceptedService::new(inner, interceptor))
        }
        /// Compress requests with the given encoding.
        ///
        /// This requires the server to support it otherwise it might respond with an
        /// error.
        #[must_use]
        pub fn send_compressed(mut self, encoding: CompressionEncoding) -> Self {
            self.inner = self.inner.send_compressed(encoding);
            self
        }
        /// Enable decompressing responses.
        #[must_use]
        pub fn accept_compressed(mut self, encoding: CompressionEncoding) -> Self {
            self.inner = self.inner.accept_compressed(encoding);
            self
        }
        /// Limits the maximum size of a decoded message.
        ///
        /// Default: `4MB`
        #[must_use]
        pub fn max_decoding_message_size(mut self, limit: usize) -> Self {
            self.inner = self.inner.max_decoding_message_size(limit);
            self
        }
        /// Limits the maximum size of an encoded message.
        ///
        /// Default: `usize::MAX`
        #[must_use]
        pub fn max_encoding_message_size(mut self, limit: usize) -> Self {
            self.inner = self.inner.max_encoding_message_size(limit);
            self
        }
        /// Returns the specified federation.
        ///
        /// To get the list of available federations, make a [List] request.
        pub async fn get(
            &mut self,
            request: impl tonic::IntoRequest<super::GetFederationRequest>,
        ) -> std::result::Result<tonic::Response<super::Federation>, tonic::Status> {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/Get",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "Get",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Retrieves the list of federations in the specified organization.
        pub async fn list(
            &mut self,
            request: impl tonic::IntoRequest<super::ListFederationsRequest>,
        ) -> std::result::Result<
            tonic::Response<super::ListFederationsResponse>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/List",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "List",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Creates a federation in the specified organization.
        pub async fn create(
            &mut self,
            request: impl tonic::IntoRequest<super::CreateFederationRequest>,
        ) -> std::result::Result<
            tonic::Response<super::super::super::super::operation::Operation>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/Create",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "Create",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Updates the specified federation.
        pub async fn update(
            &mut self,
            request: impl tonic::IntoRequest<super::UpdateFederationRequest>,
        ) -> std::result::Result<
            tonic::Response<super::super::super::super::operation::Operation>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/Update",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "Update",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Deletes the specified federation.
        pub async fn delete(
            &mut self,
            request: impl tonic::IntoRequest<super::DeleteFederationRequest>,
        ) -> std::result::Result<
            tonic::Response<super::super::super::super::operation::Operation>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/Delete",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "Delete",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Adds users to the specified federation.
        pub async fn add_user_accounts(
            &mut self,
            request: impl tonic::IntoRequest<super::AddFederatedUserAccountsRequest>,
        ) -> std::result::Result<
            tonic::Response<super::super::super::super::operation::Operation>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/AddUserAccounts",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "AddUserAccounts",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Deletes users from the specified federation.
        pub async fn delete_user_accounts(
            &mut self,
            request: impl tonic::IntoRequest<super::DeleteFederatedUserAccountsRequest>,
        ) -> std::result::Result<
            tonic::Response<super::super::super::super::operation::Operation>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/DeleteUserAccounts",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "DeleteUserAccounts",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Lists users for the specified federation.
        pub async fn list_user_accounts(
            &mut self,
            request: impl tonic::IntoRequest<super::ListFederatedUserAccountsRequest>,
        ) -> std::result::Result<
            tonic::Response<super::ListFederatedUserAccountsResponse>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/ListUserAccounts",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "ListUserAccounts",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
        /// Lists operations for the specified federation.
        pub async fn list_operations(
            &mut self,
            request: impl tonic::IntoRequest<super::ListFederationOperationsRequest>,
        ) -> std::result::Result<
            tonic::Response<super::ListFederationOperationsResponse>,
            tonic::Status,
        > {
            self.inner
                .ready()
                .await
                .map_err(|e| {
                    tonic::Status::new(
                        tonic::Code::Unknown,
                        format!("Service was not ready: {}", e.into()),
                    )
                })?;
            let codec = tonic::codec::ProstCodec::default();
            let path = http::uri::PathAndQuery::from_static(
                "/yandex.cloud.organizationmanager.v1.saml.FederationService/ListOperations",
            );
            let mut req = request.into_request();
            req.extensions_mut()
                .insert(
                    GrpcMethod::new(
                        "yandex.cloud.organizationmanager.v1.saml.FederationService",
                        "ListOperations",
                    ),
                );
            self.inner.unary(req, path, codec).await
        }
    }
}