Class ExternalCredentials

new ExternalCredentials(
    transport: Transport,
    options?: { timeoutMs?: number },
): ExternalCredentials

connect(options?: { name?: string; timeoutMs?: number }): ExternalCredentials

createCredential(
    credential?: {
        id?: string;
        subject?: string;
        audience?: string;
        qualifier?: string;
        metadataJson?: string;
        createdAt?: Date;
        updatedAt?: Date;
        credential?:
            | { case: undefined; value?: undefined }
            | {
                case: "grant";
                value: {
                    accessToken?: string;
                    refreshToken?: string;
                    scope?: string;
                    expiresAt?: Date;
                    lastRefreshedAt?: Date;
                    refreshErrorCount?: number;
                };
            }
            | {
                case: "client";
                value: {
                    clientId?: string;
                    clientSecret?: string;
                    clientSecretExpiresAt?: Date;
                };
            }
            | { case: "opaque"; value: { fields?: { [key: string]: string } } };
    },
): Promise<ExternalCredential>

createCredentialRaw(
    request: {
        credential?: {
            id?: string;
            subject?: string;
            audience?: string;
            qualifier?: string;
            metadataJson?: string;
            createdAt?: Date;
            updatedAt?: Date;
            credential?:
                | { case: undefined; value?: undefined }
                | {
                    case: "grant";
                    value: {
                        accessToken?: string;
                        refreshToken?: string;
                        scope?: string;
                        expiresAt?: Date;
                        lastRefreshedAt?: Date;
                        refreshErrorCount?: number;
                    };
                }
                | {
                    case: "client";
                    value: {
                        clientId?: string;
                        clientSecret?: string;
                        clientSecretExpiresAt?: Date;
                    };
                }
                | { case: "opaque"; value: { fields?: { [key: string]: string } } };
        };
    },
): Promise<ExternalCredential>

upsertCredential(
    credential?: {
        id?: string;
        subject?: string;
        audience?: string;
        qualifier?: string;
        metadataJson?: string;
        createdAt?: Date;
        updatedAt?: Date;
        credential?:
            | { case: undefined; value?: undefined }
            | {
                case: "grant";
                value: {
                    accessToken?: string;
                    refreshToken?: string;
                    scope?: string;
                    expiresAt?: Date;
                    lastRefreshedAt?: Date;
                    refreshErrorCount?: number;
                };
            }
            | {
                case: "client";
                value: {
                    clientId?: string;
                    clientSecret?: string;
                    clientSecretExpiresAt?: Date;
                };
            }
            | { case: "opaque"; value: { fields?: { [key: string]: string } } };
    },
): Promise<ExternalCredential>

upsertCredentialRaw(
    request: {
        credential?: {
            id?: string;
            subject?: string;
            audience?: string;
            qualifier?: string;
            metadataJson?: string;
            createdAt?: Date;
            updatedAt?: Date;
            credential?:
                | { case: undefined; value?: undefined }
                | {
                    case: "grant";
                    value: {
                        accessToken?: string;
                        refreshToken?: string;
                        scope?: string;
                        expiresAt?: Date;
                        lastRefreshedAt?: Date;
                        refreshErrorCount?: number;
                    };
                }
                | {
                    case: "client";
                    value: {
                        clientId?: string;
                        clientSecret?: string;
                        clientSecretExpiresAt?: Date;
                    };
                }
                | { case: "opaque"; value: { fields?: { [key: string]: string } } };
        };
    },
): Promise<ExternalCredential>

getCredential(
    subject: string,
    audience: string,
    qualifier: string,
): Promise<ExternalCredential>

getCredentialRaw(
    request: { subject?: string; audience?: string; qualifier?: string },
): Promise<ExternalCredential>

listCredentials(
    subject: string,
    options?: { audience?: string },
): Promise<ExternalCredential[]>

listCredentialsRaw(
    request: { subject?: string; audience?: string },
): Promise<ListExternalCredentialsResponse>

deleteCredential(id: string): Promise<void>

deleteCredentialRaw(request: { id?: string }): Promise<void>

validateCredentialConfig(
    provider: string,
    connection: string,
    connectionId: string,
    mode: string,
    auth?: {
        type?: string;
        token?: string;
        tokenPrefix?: string;
        grantType?: string;
        tokenUrl?: string;
        clientId?: string;
        clientSecret?: string;
        clientAuth?: string;
        tokenExchange?: string;
        scopes?: string[];
        scopeParam?: string;
        scopeSeparator?: string;
        tokenParams?: { [key: string]: string };
        refreshParams?: { [key: string]: string };
        acceptHeader?: string;
        accessTokenPath?: string;
        tokenExchangeDrivers?: {
            type?: string;
            targetPrincipal?: string;
            scopes?: string[];
            lifetimeSeconds?: number;
            endpoint?: string;
            params?: { [key: string]: string };
        }[];
        refreshToken?: string;
    },
): Promise<void>

validateCredentialConfigRaw(
    request: {
        provider?: string;
        connection?: string;
        connectionId?: string;
        mode?: string;
        auth?: {
            type?: string;
            token?: string;
            tokenPrefix?: string;
            grantType?: string;
            tokenUrl?: string;
            clientId?: string;
            clientSecret?: string;
            clientAuth?: string;
            tokenExchange?: string;
            scopes?: string[];
            scopeParam?: string;
            scopeSeparator?: string;
            tokenParams?: { [key: string]: string };
            refreshParams?: { [key: string]: string };
            acceptHeader?: string;
            accessTokenPath?: string;
            tokenExchangeDrivers?: {
                type?: string;
                targetPrincipal?: string;
                scopes?: string[];
                lifetimeSeconds?: number;
                endpoint?: string;
                params?: { [key: string]: string };
            }[];
            refreshToken?: string;
        };
        connectionParams?: { [key: string]: string };
    },
): Promise<void>

resolveCredential(
    provider: string,
    connection: string,
    connectionId: string,
    mode: string,
    credentialSubjectId: string,
    actorSubjectId: string,
    instance: string,
    auth?: {
        type?: string;
        token?: string;
        tokenPrefix?: string;
        grantType?: string;
        tokenUrl?: string;
        clientId?: string;
        clientSecret?: string;
        clientAuth?: string;
        tokenExchange?: string;
        scopes?: string[];
        scopeParam?: string;
        scopeSeparator?: string;
        tokenParams?: { [key: string]: string };
        refreshParams?: { [key: string]: string };
        acceptHeader?: string;
        accessTokenPath?: string;
        tokenExchangeDrivers?: {
            type?: string;
            targetPrincipal?: string;
            scopes?: string[];
            lifetimeSeconds?: number;
            endpoint?: string;
            params?: { [key: string]: string };
        }[];
        refreshToken?: string;
    },
): Promise<ResolveExternalCredentialResponse>

resolveCredentialRaw(
    request: {
        provider?: string;
        connection?: string;
        connectionId?: string;
        mode?: string;
        credentialSubjectId?: string;
        actorSubjectId?: string;
        instance?: string;
        auth?: {
            type?: string;
            token?: string;
            tokenPrefix?: string;
            grantType?: string;
            tokenUrl?: string;
            clientId?: string;
            clientSecret?: string;
            clientAuth?: string;
            tokenExchange?: string;
            scopes?: string[];
            scopeParam?: string;
            scopeSeparator?: string;
            tokenParams?: { [key: string]: string };
            refreshParams?: { [key: string]: string };
            acceptHeader?: string;
            accessTokenPath?: string;
            tokenExchangeDrivers?: {
                type?: string;
                targetPrincipal?: string;
                scopes?: string[];
                lifetimeSeconds?: number;
                endpoint?: string;
                params?: { [key: string]: string };
            }[];
            refreshToken?: string;
        };
        connectionParams?: { [key: string]: string };
    },
): Promise<ResolveExternalCredentialResponse>

exchangeCredential(
    provider: string,
    connection: string,
    connectionId: string,
    credentialSubjectId: string,
    actorSubjectId: string,
    instance: string,
    credentialJson: string,
    auth?: {
        type?: string;
        token?: string;
        tokenPrefix?: string;
        grantType?: string;
        tokenUrl?: string;
        clientId?: string;
        clientSecret?: string;
        clientAuth?: string;
        tokenExchange?: string;
        scopes?: string[];
        scopeParam?: string;
        scopeSeparator?: string;
        tokenParams?: { [key: string]: string };
        refreshParams?: { [key: string]: string };
        acceptHeader?: string;
        accessTokenPath?: string;
        tokenExchangeDrivers?: {
            type?: string;
            targetPrincipal?: string;
            scopes?: string[];
            lifetimeSeconds?: number;
            endpoint?: string;
            params?: { [key: string]: string };
        }[];
        refreshToken?: string;
    },
): Promise<ExternalCredentialTokenResponse | undefined>

exchangeCredentialRaw(
    request: {
        provider?: string;
        connection?: string;
        connectionId?: string;
        credentialSubjectId?: string;
        actorSubjectId?: string;
        instance?: string;
        auth?: {
            type?: string;
            token?: string;
            tokenPrefix?: string;
            grantType?: string;
            tokenUrl?: string;
            clientId?: string;
            clientSecret?: string;
            clientAuth?: string;
            tokenExchange?: string;
            scopes?: string[];
            scopeParam?: string;
            scopeSeparator?: string;
            tokenParams?: { [key: string]: string };
            refreshParams?: { [key: string]: string };
            acceptHeader?: string;
            accessTokenPath?: string;
            tokenExchangeDrivers?: {
                type?: string;
                targetPrincipal?: string;
                scopes?: string[];
                lifetimeSeconds?: number;
                endpoint?: string;
                params?: { [key: string]: string };
            }[];
            refreshToken?: string;
        };
        credentialJson?: string;
        connectionParams?: { [key: string]: string };
    },
): Promise<ExchangeExternalCredentialResponse>