OAuthSession
kauth.io / v1alpha1
apiVersion: kauth.io/v1alpha1
kind: OAuthSession
metadata:
name: example
spec object
createdAt
string
Timestamp when session was created
format:
date-time
lastUsed
string
Timestamp when the session last refreshed or used the Kubernetes API proxy
format:
date-time
sessionID
string required
Unique identifier for this session
userID
string
User identifier (email or sub)
verifier
string required
PKCE verifier for code exchange
status object
apiToken
string
Encrypted credential for the Kubernetes API proxy
completedAt
string
Timestamp when OAuth flow completed
format:
date-time
email
string
Authenticated user's email address
error
string
Error message if OAuth flow failed
expiredAt
string
Timestamp when the session expired
format:
date-time
groups
[]string
User's group memberships from OIDC at login time
issuer
string
OIDC issuer that asserted the subject
phase
string
Lifecycle phase of the session
enum:
Pending, Authenticating, Failed, Active, Revoked, Expired
refreshToken
string
Encrypted JWT refresh token for token rotation
revokedAt
string
Timestamp when the session was revoked
format:
date-time
subject
string
Immutable OIDC subject identifier
username
string
Authenticated user's preferred username
No matches. Try .spec.createdAt for an exact path