conductorone-sdk-typescript

SDK Installation

NPM

npm add https://github.com/ConductorOne/conductorone-sdk-typescript

Yarn

yarn add https://github.com/ConductorOne/conductorone-sdk-typescript

SDK Example Usage

Example

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

async function run() {
    const sdk = new ConductoroneSDKTypescript({
        security: {
            bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            oauth: "Bearer <YOUR_ACCESS_TOKEN_HERE>",
        },
    });

    const result = await sdk.apps.create({
        owners: ["<value>"],
    });

    // Handle the result
    console.log(result);
}

run();

Available Resources and Operations

apps

• create - Create
• delete - Delete
• get - Get
• list - List
• update - Update

connector

• create - Create
• createDelegated - Create Delegated
• delete - Delete
• forceSync - Force Sync
• get - Get
• getCredentials - Get Credentials
• list - List
• revokeCredential - Revoke Credential
• rotateCredential - Rotate Credential
• update - Update
• updateDelegated - Update Delegated

appEntitlements

• get - Get
• list - List
• listForAppResource - List For App Resource
• listForAppUser - List For App User
• listUsers - List Users
• update - Update

appEntitlementUserBinding

• listAppUsersForIdentityWithGrant - List App Users For Identity With Grant

appEntitlementOwners

• add - Add
• list - List
• remove - Remove
• set - Set

appOwners

• add - Add
• list - List
• remove - Remove
• set - Set

appReport

• list - List

appReportAction

• generateReport - Generate Report

appResourceType

• get - Get
• list - List

appResource

• get - Get
• list - List

appResourceOwners

• list - List

appUsageControls

• get - Get
• update - Update

appUser

• update - Update

attributes

• createAttributeValue - Create Attribute Value
• deleteAttributeValue - Delete Attribute Value
• getAttributeValue - Get Attribute Value
• listAttributeTypes - List Attribute Types
• listAttributeValues - List Attribute Values

auth

• introspect - Introspect

requestCatalogManagement

• addAccessEntitlements - Add Access Entitlements
• addAppEntitlements - Add App Entitlements
• create - Create
• delete - Delete
• get - Get
• list - List
• listEntitlementsForAccess - List Entitlements For Access
• listEntitlementsPerCatalog - List Entitlements Per Catalog
• removeAccessEntitlements - Remove Access Entitlements
• removeAppEntitlements - Remove App Entitlements
• update - Update

directory

• create - Create
• delete - Delete
• get - Get
• list - List

personalClient

• create - Create

roles

• get - Get
• list - List
• update - Update

policies

• create - Create
• delete - Delete
• get - Get
• list - List
• update - Update

policyValidate

• validateCEL - Validate Cel

appResourceSearch

• searchAppResourceTypes - Search App Resource Types

appSearch

• search - Search

attributeSearch

• searchAttributeValues - Search Attribute Values

appEntitlementSearch

• search - Search

policySearch

• search - Search

requestCatalogSearch

• searchEntitlements - Search Entitlements

taskSearch

• search - Search

userSearch

• search - Search

awsExternalIDSettings

• get - Get

sessionSettings

• get - Get
• update - Update

task

• createGrantTask - Create Grant Task
• createRevokeTask - Create Revoke Task
• get - Get

taskActions

• approve - Approve
• comment - Comment
• deny - Deny
• escalateToEmergencyAccess - Escalate To Emergency Access
• restart - Restart

user

• get - Get
• list - List

webhooks

• test - Test

Requirements

For supported JavaScript runtimes, please consult RUNTIMES.md.

Error Handling

All SDK methods return a response object or throw an error. If Error objects are specified in your OpenAPI Spec, the SDK will throw the appropriate Error type.

Error Object	Status Code	Content Type
errors.SDKError	4xx-5xx	/

Validation errors can also occur when either method arguments or data returned from the server do not match the expected format. The SDKValidationError that is thrown as a result will capture the raw value that failed validation in an attribute called rawValue. Additionally, a pretty() method is available on this error that can be used to log a nicely formatted string since validation errors can list many issues and the plain error string may be difficult read when debugging.

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";
import * as errors from "conductorone-sdk-typescript/sdk/models/errors";

async function run() {
    const sdk = new ConductoroneSDKTypescript({
        security: {
            bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            oauth: "Bearer <YOUR_ACCESS_TOKEN_HERE>",
        },
    });

    let result;
    try {
        result = await sdk.apps.create({
            owners: ["<value>"],
        });
    } catch (err) {
        switch (true) {
            case err instanceof errors.SDKValidationError: {
                // Validation errors can be pretty-printed
                console.error(err.pretty());
                // Raw value may also be inspected
                console.error(err.rawValue);
                return;
            }
            default: {
                throw err;
            }
        }
    }

    // Handle the result
    console.log(result);
}

run();

Server Selection

Select Server by Index

You can override the default server globally by passing a server index to the serverIdx optional parameter when initializing the SDK client instance. The selected server will then be used as the default on the operations that use it. This table lists the indexes associated with the available servers:

#	Server	Variables
0	https://{tenantDomain}.conductor.one	tenantDomain (default is example)

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

async function run() {
    const sdk = new ConductoroneSDKTypescript({
        serverIdx: 0,
        security: {
            bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            oauth: "Bearer <YOUR_ACCESS_TOKEN_HERE>",
        },
    });

    const result = await sdk.apps.create({
        owners: ["<value>"],
    });

    // Handle the result
    console.log(result);
}

run();

Variables

Some of the server options above contain variables. If you want to set the values of those variables, the following optional parameters are available when initializing the SDK client instance:

• tenantDomain: string

Override Server URL Per-Client

The default server can also be overridden globally by passing a URL to the serverURL optional parameter when initializing the SDK client instance. For example:

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

async function run() {
    const sdk = new ConductoroneSDKTypescript({
        serverURL: "https://{tenantDomain}.conductor.one",
        security: {
            bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            oauth: "Bearer <YOUR_ACCESS_TOKEN_HERE>",
        },
    });

    const result = await sdk.apps.create({
        owners: ["<value>"],
    });

    // Handle the result
    console.log(result);
}

run();

Custom HTTP Client

The TypeScript SDK makes API calls using an HTTPClient that wraps the native Fetch API. This client is a thin wrapper around fetch and provides the ability to attach hooks around the request lifecycle that can be used to modify the request or handle errors and response.

The HTTPClient constructor takes an optional fetcher argument that can be used to integrate a third-party HTTP client or when writing tests to mock out the HTTP client and feed in fixtures.

The following example shows how to use the "beforeRequest" hook to to add a custom header and a timeout to requests and how to use the "requestError" hook to log errors:

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";
import { HTTPClient } from "conductorone-sdk-typescript/lib/http";

const httpClient = new HTTPClient({
  // fetcher takes a function that has the same signature as native `fetch`.
  fetcher: (request) => {
    return fetch(request);
  }
});

httpClient.addHook("beforeRequest", (request) => {
  const nextRequest = new Request(request, {
    signal: request.signal || AbortSignal.timeout(5000);
  });

  nextRequest.headers.set("x-custom-header", "custom value");

  return nextRequest;
});

httpClient.addHook("requestError", (error, request) => {
  console.group("Request Error");
  console.log("Reason:", `${error}`);
  console.log("Endpoint:", `${request.method} ${request.url}`);
  console.groupEnd();
});

const sdk = new ConductoroneSDKTypescript({ httpClient });

Authentication

Per-Client Security Schemes

This SDK supports the following security schemes globally:

Name	Type	Scheme
bearerAuth	http	HTTP Bearer
oauth	oauth2	OAuth2 token

You can set the security parameters through the security optional parameter when initializing the SDK client instance. The selected scheme will be used by default to authenticate with the API for all operations that support it. For example:

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

async function run() {
    const sdk = new ConductoroneSDKTypescript({
        security: {
            bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            oauth: "Bearer <YOUR_ACCESS_TOKEN_HERE>",
        },
    });

    const result = await sdk.apps.create({
        owners: ["<value>"],
    });

    // Handle the result
    console.log(result);
}

run();

Maturity

This SDK is in beta, and there may be breaking changes between versions without a major version update. Therefore, we recommend pinning usage to a specific package version. This way, you can install the same version each time without breaking changes unless you are intentionally looking for the latest version.

Contributions

While we value open-source contributions to this SDK, this library is generated programmatically. Feel free to open a PR or a Github issue as a proof of concept and we'll do our best to include it in a future release!

SDK Created by Speakeasy