Skip to content

Commit 5de8cb0

Browse files
Madhuri-BhumaMadhuri-Bhuma
authored
feat(IAM Identity): add few new account settings (#317)
Signed-off-by: Madhuri Bhooma <madhuri.bhooma@ibm.com>
1 parent 387b136 commit 5de8cb0

File tree

5 files changed

+516
-247
lines changed

5 files changed

+516
-247
lines changed

‎.secrets.baseline‎

Lines changed: 30 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"files": "package-lock.json|go.sum|^.secrets.baseline$",
44
"lines": null
55
},
6-
"generated_at": "2025-03-10T16:45:41Z",
6+
"generated_at": "2025-10-31T17:17:55Z",
77
"plugins_used": [
88
{
99
"name": "AWSKeyDetector"
@@ -88,49 +88,57 @@
8888
"hashed_secret": "a2190c299b60e882d9fb33736d5e6ab6ffe42708",
8989
"is_secret": false,
9090
"is_verified": false,
91-
"line_number": 1256,
91+
"line_number": 1457,
9292
"type": "Secret Keyword",
9393
"verified_result": null
9494
},
9595
{
9696
"hashed_secret": "cf4d2385b84329a52ca542285b93d9c4618420df",
9797
"is_secret": false,
9898
"is_verified": false,
99-
"line_number": 2115,
99+
"line_number": 2134,
100+
"type": "Secret Keyword",
101+
"verified_result": null
102+
},
103+
{
104+
"hashed_secret": "469f62fa9e1c6afe62e8808180668934ee548e8f",
105+
"is_secret": false,
106+
"is_verified": false,
107+
"line_number": 2397,
100108
"type": "Secret Keyword",
101109
"verified_result": null
102110
}
103111
],
104112
"iam-identity/v1.ts": [
105113
{
106-
"hashed_secret": "aa4ad361672f4c98fd64bf0db80127dd79be59d0",
114+
"hashed_secret": "0a49d517da94f14c36ac92806c1d15cf95fbca67",
107115
"is_secret": false,
108116
"is_verified": false,
109-
"line_number": 316,
117+
"line_number": 1031,
110118
"type": "Secret Keyword",
111119
"verified_result": null
112120
},
113121
{
114-
"hashed_secret": "0a49d517da94f14c36ac92806c1d15cf95fbca67",
122+
"hashed_secret": "aa4ad361672f4c98fd64bf0db80127dd79be59d0",
115123
"is_secret": false,
116124
"is_verified": false,
117-
"line_number": 799,
125+
"line_number": 1109,
118126
"type": "Secret Keyword",
119127
"verified_result": null
120128
},
121129
{
122130
"hashed_secret": "835e124f126ae02c1c18b3c992a28dde441f5e04",
123131
"is_secret": false,
124132
"is_verified": false,
125-
"line_number": 2335,
133+
"line_number": 3057,
126134
"type": "Secret Keyword",
127135
"verified_result": null
128136
},
129137
{
130138
"hashed_secret": "e058a1c493ad749bd67d368340e9056ed1c2f3ed",
131139
"is_secret": false,
132140
"is_verified": false,
133-
"line_number": 6908,
141+
"line_number": 7687,
134142
"type": "Secret Keyword",
135143
"verified_result": null
136144
}
@@ -150,15 +158,23 @@
150158
"hashed_secret": "a2190c299b60e882d9fb33736d5e6ab6ffe42708",
151159
"is_secret": false,
152160
"is_verified": false,
153-
"line_number": 1485,
161+
"line_number": 1656,
154162
"type": "Secret Keyword",
155163
"verified_result": null
156164
},
157165
{
158166
"hashed_secret": "cf4d2385b84329a52ca542285b93d9c4618420df",
159167
"is_secret": false,
160168
"is_verified": false,
161-
"line_number": 2208,
169+
"line_number": 2387,
170+
"type": "Secret Keyword",
171+
"verified_result": null
172+
},
173+
{
174+
"hashed_secret": "469f62fa9e1c6afe62e8808180668934ee548e8f",
175+
"is_secret": false,
176+
"is_verified": false,
177+
"line_number": 2484,
162178
"type": "Secret Keyword",
163179
"verified_result": null
164180
}
@@ -256,23 +272,15 @@
256272
"hashed_secret": "b8473b86d4c2072ca9b08bd28e373e8253e865c4",
257273
"is_secret": false,
258274
"is_verified": false,
259-
"line_number": 1083,
260-
"type": "Secret Keyword",
261-
"verified_result": null
262-
},
263-
{
264-
"hashed_secret": "cf4d2385b84329a52ca542285b93d9c4618420df",
265-
"is_secret": false,
266-
"is_verified": false,
267-
"line_number": 3573,
275+
"line_number": 1400,
268276
"type": "Secret Keyword",
269277
"verified_result": null
270278
},
271279
{
272280
"hashed_secret": "469f62fa9e1c6afe62e8808180668934ee548e8f",
273281
"is_secret": false,
274282
"is_verified": false,
275-
"line_number": 5072,
283+
"line_number": 7467,
276284
"type": "Secret Keyword",
277285
"verified_result": null
278286
}
@@ -304,7 +312,7 @@
304312
}
305313
]
306314
},
307-
"version": "0.13.1+ibm.62.dss",
315+
"version": "0.13.1+ibm.64.dss",
308316
"word_list": {
309317
"file": null,
310318
"hash": null

‎examples/iam-identity.v1.test.js‎

Lines changed: 105 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -2109,15 +2109,45 @@ test('createApiKey request example', async () => {
21092109
originalLog('createAccountSettingsTemplate() result:');
21102110

21112111
// begin-create_account_settings_template
2112-
const settings = {
2113-
mfa: "LEVEL1",
2114-
system_access_token_expiration_in_seconds: "3000",
2115-
}
2112+
// UserMfa
2113+
const userMfaModel = {
2114+
iam_id: iamId,
2115+
mfa: 'LEVEL1',
2116+
};
2117+
2118+
// AccountSettingsUserDomainRestriction
2119+
const accountSettingsUserDomainRestrictionModel = {
2120+
realm_id: 'IBMid',
2121+
invitation_email_allow_patterns: ["*.*@sap.com"],
2122+
restrict_invitation: false,
2123+
};
2124+
2125+
// TemplateAccountSettingsRestrictUserDomains
2126+
const templateAccountSettingsRestrictUserDomainsModel = {
2127+
account_sufficient: false,
2128+
restrictions: [accountSettingsUserDomainRestrictionModel],
2129+
};
2130+
2131+
// TemplateAccountSettings
2132+
const templateAccountSettingsModel = {
2133+
restrict_create_service_id: 'RESTRICTED',
2134+
restrict_create_platform_apikey: 'RESTRICTED',
2135+
mfa: 'LEVEL1',
2136+
user_mfa: [userMfaModel],
2137+
session_expiration_in_seconds: '86400',
2138+
session_invalidation_in_seconds: '7200',
2139+
max_sessions_per_identity: '10',
2140+
system_access_token_expiration_in_seconds: '3600',
2141+
system_refresh_token_expiration_in_seconds: '259200',
2142+
restrict_user_list_visibility: 'NOT_RESTRICTED',
2143+
restrict_user_domains: templateAccountSettingsRestrictUserDomainsModel,
2144+
};
2145+
21162146
const templateParams = {
21172147
name: accountSettingsTemplateName,
21182148
description: "IAM enterprise account settings template example",
21192149
accountId: enterpriseAccountId,
2120-
accountSettings: settings,
2150+
accountSettings: templateAccountSettingsModel,
21212151
}
21222152

21232153
try {
@@ -2201,18 +2231,48 @@ test('createApiKey request example', async () => {
22012231
originalLog('updateAccountSettingsTemplate() result:');
22022232

22032233
// begin-update_account_settings_template_version
2204-
const settings = {
2205-
mfa: "LEVEL1",
2206-
system_access_token_expiration_in_seconds: "3000",
2207-
}
2234+
// UserMfa
2235+
const userMfaModel = {
2236+
iam_id: iamId,
2237+
mfa: 'LEVEL1',
2238+
};
2239+
2240+
// AccountSettingsUserDomainRestriction
2241+
const accountSettingsUserDomainRestrictionModel = {
2242+
realm_id: 'IBMid',
2243+
invitation_email_allow_patterns: ["*.*@sap.com"],
2244+
restrict_invitation: false,
2245+
};
2246+
2247+
// TemplateAccountSettingsRestrictUserDomains
2248+
const templateAccountSettingsRestrictUserDomainsModel = {
2249+
account_sufficient: false,
2250+
restrictions: [accountSettingsUserDomainRestrictionModel],
2251+
};
2252+
2253+
// TemplateAccountSettings
2254+
const templateAccountSettingsModel = {
2255+
restrict_create_service_id: 'NOT_SET',
2256+
restrict_create_platform_apikey: 'NOT_SET',
2257+
mfa: 'LEVEL1',
2258+
user_mfa: [userMfaModel],
2259+
session_expiration_in_seconds: '72400',
2260+
session_invalidation_in_seconds: '6000',
2261+
max_sessions_per_identity: '5',
2262+
system_access_token_expiration_in_seconds: '3000',
2263+
system_refresh_token_expiration_in_seconds: '59200',
2264+
restrict_user_list_visibility: 'RESTRICTED',
2265+
restrict_user_domains: templateAccountSettingsRestrictUserDomainsModel,
2266+
};
2267+
22082268
const params = {
22092269
accountId: enterpriseAccountId,
22102270
templateId: accountSettingsTemplateId,
22112271
version: accountSettingsTemplateVersion,
22122272
ifMatch: accountSettingsTemplateEtag,
22132273
name: accountSettingsTemplateName,
22142274
description: "IAM enterprise account settings template example - updated",
2215-
accountSettings: settings,
2275+
accountSettings: templateAccountSettingsModel,
22162276
}
22172277
try {
22182278
const res = await iamIdentityService.updateAccountSettingsTemplateVersion(params);
@@ -2312,18 +2372,46 @@ test('createApiKey request example', async () => {
23122372
originalLog('createNewAccountSettingsTemplateVersion() result:');
23132373

23142374
// begin-create_account_settings_template_version
2315-
const settings = {
2316-
mfa: "LEVEL1",
2317-
system_access_token_expiration_in_seconds: "2600",
2318-
restrict_create_platform_apikey: "RESTRICTED",
2319-
restrict_create_service_id: "RESTRICTED",
2320-
}
2375+
// UserMfa
2376+
const userMfaModel = {
2377+
iam_id: iamId,
2378+
mfa: 'LEVEL1',
2379+
};
2380+
2381+
// AccountSettingsUserDomainRestriction
2382+
const accountSettingsUserDomainRestrictionModel = {
2383+
realm_id: 'IBMid',
2384+
invitation_email_allow_patterns: ["*.*@sap.com"],
2385+
restrict_invitation: false,
2386+
};
2387+
2388+
// TemplateAccountSettingsRestrictUserDomains
2389+
const templateAccountSettingsRestrictUserDomainsModel = {
2390+
account_sufficient: false,
2391+
restrictions: [accountSettingsUserDomainRestrictionModel],
2392+
};
2393+
2394+
// TemplateAccountSettings
2395+
const templateAccountSettingsModel = {
2396+
restrict_create_service_id: 'NOT_SET',
2397+
restrict_create_platform_apikey: 'NOT_SET',
2398+
mfa: 'LEVEL1',
2399+
user_mfa: [userMfaModel],
2400+
session_expiration_in_seconds: '72400',
2401+
session_invalidation_in_seconds: '6000',
2402+
max_sessions_per_identity: '5',
2403+
system_access_token_expiration_in_seconds: '3000',
2404+
system_refresh_token_expiration_in_seconds: '59200',
2405+
restrict_user_list_visibility: 'RESTRICTED',
2406+
restrict_user_domains: templateAccountSettingsRestrictUserDomainsModel,
2407+
};
2408+
23212409
const templateParams = {
23222410
templateId: accountSettingsTemplateId,
23232411
name: accountSettingsTemplateName,
23242412
description: "IAM enterprise account settings template example - new version",
23252413
accountId: enterpriseAccountId,
2326-
accountSettings: settings,
2414+
accountSettings: templateAccountSettingsModel,
23272415
}
23282416

23292417
try {

0 commit comments

Comments
 (0)