"j`SSKJr SSKJrJr SSKrSSKJrJrJ r J r J r J r J r SSKJrJrJr SSKJr SSKJrJr SS KJrJrJrJr SS KJrJr SS KJ r J!r! SS K"J#r# SS K$J%r%J&r& SSK'J(r( SS/r)"SS\5r*"SS\5r+"SS5r,"SS5r-"SS5r."SS5r/g)) annotations)ListOptionalN)BodyOmitQueryHeadersNotGivenomit not_given)is_given path_templatestrip_not_given)cached_property)SyncAPIResourceAsyncAPIResource)to_raw_response_wrapperto_streamed_response_wrapperasync_to_raw_response_wrapper"async_to_streamed_response_wrapper)SyncPageCursorAsyncPageCursor)AsyncPaginatormake_request_options)AnthropicBetaParam)issuer_create_paramsissuer_update_params)BetaFederationIssuerIssuers AsyncIssuersc \rSrSr\SSj5r\SSj5r\\\\SSS\S.SSjjr \SSS\S.SSjjr \\\\\\\SSS\S . SS jjr \\\\SSS\S .SS jjr \SSS\S.SS jjr Srg)r c[U5$z This property can be used as a prefix for any HTTP method call to return the raw response object instead of the parsed content. For more information, see https://www.github.com/anthropics/anthropic-sdk-python#accessing-raw-response-data-eg-headers )IssuersWithRawResponseselfs u/home/mande/repo/quber/.venv/lib/python3.13/site-packages/anthropic/resources/beta/organization/federation/issuers.pywith_raw_responseIssuers.with_raw_responses&d++c[U5$z An alternative to `.with_raw_response` that doesn't eagerly read the response body. For more information, see https://www.github.com/anthropics/anthropic-sdk-python#with_streaming_response )IssuersWithStreamingResponser's r)with_streaming_responseIssuers.with_streaming_response%s,D11r,N check_jtijwksmax_jwt_lifetime_secondsbetas extra_headers extra_query extra_bodytimeoutc 0[S[U5(aSRSU55O[05EU=(d 0EnUR SUUUUUS.[ XxXS9[ S9$) **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api). Register an OIDC issuer that Anthropic will trust for workload identity federation in your organization. The `jwks` field controls how the issuer's signing keys are obtained and takes one of three shapes selected by `type`: `discovery` (resolve keys through OIDC discovery), `explicit_url` (fetch keys from a fixed JWKS URL), or `inline` (provide a static key set). When `jwks.type` is `discovery` and no `discovery_base` is set, the issuer URL must be publicly reachable over HTTPS so Anthropic can fetch the discovery document; for `explicit_url` and `inline` modes the issuer URL is only matched as the JWT's `iss` claim and is not fetched. Args: issuer_url: The `iss` claim value to match against. name: Slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409. check_jti: Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Defaults to true. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. jwks: How signing keys are obtained. Defaults to OIDC discovery. max_jwt_lifetime_seconds: Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Defaults to 3600 (1h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. betas: Optional header to specify the beta version(s) you want to use. extra_headers: Send extra headers extra_query: Add additional query parameters to the request extra_body: Add additional JSON properties to the request timeout: Override the client-level default timeout for this request, in seconds anthropic-beta,c38# UHn[U5v M g7fNstr.0es r) !Issuers.create..k9P%Q#a&&%./v1/organizations/federation_issuers?beta=true issuer_urlnamer3r4r5r7r8r9r:bodyoptionscast_torrjoinr _postrr r(rLrMr3r4r5r6r7r8r9r:s r)createIssuers.create.sx /T\]bTcTc9P%9P1Pirst " zz <(&,D )+Q[)  r,r6r7r8r9r:c U(d[SU<35e0[S[U5(aSRSU55O[05EU=(d 0EnUR [ SUS9[X4XVS9[S9$)  **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api). Retrieve a federation issuer by its ID (`fdis_...`). Args: federation_issuer_id: ID of the federation issuer. betas: Optional header to specify the beta version(s) you want to use. extra_headers: Send extra headers extra_query: Add additional query parameters to the request extra_body: Add additional JSON properties to the request timeout: Override the client-level default timeout for this request, in seconds CExpected a non-empty value for `federation_issuer_id` but received r=r>c38# UHn[U5v M g7fr@rArCs r)rF#Issuers.retrieve..rHrIE/v1/organizations/federation_issuers/{federation_issuer_id}?beta=truefederation_issuer_idrNrQrR ValueErrorrrrTr _getrrrr(rar6r7r8r9r:s r)retrieveIssuers.retrieve}sB$UVjUmn  /T\]bTcTc9P%9P1Pirst " yy W%9 )+Q[)  r, r3rLr4jwks_polling_disabledr5rMr6r7r8r9r:c U(d[SU<35e0[S[U5(aSRSU55O[05EU =(d 0En UR [ SUS9UUUUUUS.[XXS9[S 9$)  **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api). Partially update a federation issuer. Setting `jwks` replaces the full JWKS shape at once. Archived issuers cannot be updated; this returns 400. Create a new issuer instead. Updating an issuer that backs a rule with a scope outside `workspace:developer` or `workspace:inference` requires a Console session. Args: federation_issuer_id: ID of the federation issuer to update. check_jti: Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. issuer_url: Replaces the `iss` claim value to match against. For discovery-mode issuers without a `discovery_base`, this is also the URL Anthropic fetches the OIDC discovery document and signing keys from, so changing it repoints the JWKS source. Changing the issuer URL to a well-known shared platform is rejected while any live rule under this issuer would not constrain tenant identity. jwks: Replaces the entire JWKS configuration. jwks_polling_disabled: Only `false` is accepted, to re-enable polling after the system pauses it. Polling is paused automatically; sending `true` is rejected. max_jwt_lifetime_seconds: Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. name: Replaces the slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409. betas: Optional header to specify the beta version(s) you want to use. extra_headers: Send extra headers extra_query: Add additional query parameters to the request extra_body: Add additional JSON properties to the request timeout: Override the client-level default timeout for this request, in seconds r\r=r>c38# UHn[U5v M g7fr@rArCs r)rF!Issuers.update..rHrIr_r`r3rLr4rjr5rMrNrO rdrrrTr rUrrr r(rar3rLr4rjr5rMr6r7r8r9r:s r)updateIssuers.updatesF$UVjUmn  /T\]bTcTc9P%9P1Pirst " zz W%9  '()>,D )+Q[)!  r,include_archivedlimitpager6r7r8r9r:c0[S[U5(aSRSU55O[05EU=(d 0EnUR S[ [ [UUUUUUUS.S9[ S9$)W **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api). List federation issuers in your organization. Archived issuers are excluded unless `include_archived=true`. Args: include_archived: Include archived resources. Defaults to false. limit: Number of results per page. page: Opaque cursor from a previous response's `next_page`. betas: Optional header to specify the beta version(s) you want to use. extra_headers: Send extra headers extra_query: Add additional query parameters to the request extra_body: Add additional JSON properties to the request timeout: Override the client-level default timeout for this request, in seconds r=r>c38# UHn[U5v M g7fr@rArCs r)rFIssuers.list..9rHrIrJrurvrwr7r8r9r:queryrwrQmodel)rrrTr _get_api_listrrr r(rurvrwr6r7r8r9r:s r)list Issuers.listsR /T\]bTcTc9P%9P1Pirst " !! < 45(+'%(8"  '"  r,c U(d[SU<35e0[S[U5(aSRSU55O[05EU=(d 0EnUR [ SUS9[X4XVS9[S9$)  **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api). Archive a federation issuer. Idempotent; re-archiving returns the issuer with its original `archived_at`. Rejected with 400 if any live (non-archived) federation rule still references the issuer; archive those rules first (a rule's issuer cannot be changed), or recreate them against another issuer. Args: federation_issuer_id: ID of the federation issuer to archive. betas: Optional header to specify the beta version(s) you want to use. extra_headers: Send extra headers extra_query: Add additional query parameters to the request extra_body: Add additional JSON properties to the request timeout: Override the client-level default timeout for this request, in seconds r\r=r>c38# UHn[U5v M g7fr@rArCs r)rF"Issuers.archive..xrHrIM/v1/organizations/federation_issuers/{federation_issuer_id}/archive?beta=truer`rNrbrprfs r)archiveIssuers.archiveMsL$UVjUmn  /T\]bTcTc9P%9P1Pirst " zz _%9 )+Q[)  r,)returnr&)rr/rLrBrMrBr3Optional[bool] | Omitr4z issuer_create_params.JWKS | Omitr5Optional[int] | Omitr6List[AnthropicBetaParam] | Omitr7Headers | Noner8 Query | Noner9 Body | Noner:(float | httpx2.Timeout | None | NotGivenrrrarBr6rr7rr8rr9rr:rrrrarBr3rrLOptional[str] | Omitr4z*Optional[issuer_update_params.JWKS] | Omitrjrr5rrMrr6rr7rr8rr9rr:rrr)ru bool | Omitrv int | Omitrwrr6rr7rr8rr9rr:rrz$SyncPageCursor[BetaFederationIssuer]__name__ __module__ __qualname____firstlineno__rr*r0r r rWrgrrrr__static_attributes__rr,r)r r s,,22,0159=15)-$("&c38# UHn[U5v M g7fr@rArCs r)rF&AsyncIssuers.create..rHrIrJrKrNrONrSrVs r)rWAsyncIssuers.createsx /T\]bTcTc9P%9P1Pirst " ZZ <(&,D )+Q[)    sA.A70A51A7rYc  # U(d[SU<35e0[S[U5(aSRSU55O[05EU=(d 0EnUR [ SUS9[X4XVS9[S9IS hvN $N7f) r[r\r=r>c38# UHn[U5v M g7fr@rArCs r)rF(AsyncIssuers.retrieve..rHrIr_r`rNrbNrcrfs r)rgAsyncIssuers.retrievesB$UVjUmn  /T\]bTcTc9P%9P1Pirst " YY W%9 )+Q[)    BBB Bric 0# U(d[SU<35e0[S[U5(aSRSU55O[05EU =(d 0En UR [ SUS9UUUUUUS.[XXS9[S 9IS hvN $N7f) rlr\r=r>c38# UHn[U5v M g7fr@rArCs r)rF&AsyncIssuers.update..frHrIr_r`rorNrONrprqs r)rrAsyncIssuers.updatesF$UVjUmn  /T\]bTcTc9P%9P1Pirst " ZZ W%9  '()>,D )+Q[)!     sB BBBrtc0[S[U5(aSRSU55O[05EU=(d 0EnUR S[ [ [UUUUUUUS.S9[ S9$)ryr=r>c38# UHn[U5v M g7fr@rArCs r)rF$AsyncIssuers.list..rHrIrJr|r}r)rrrTr rrrrrs r)rAsyncIssuers.list|sR /T\]bTcTc9P%9P1Pirst " !! < !56(+'%(8"  '"  r,c  # U(d[SU<35e0[S[U5(aSRSU55O[05EU=(d 0EnUR [ SUS9[X4XVS9[S9IS hvN $N7f) rr\r=r>c38# UHn[U5v M g7fr@rArCs r)rF'AsyncIssuers.archive..rHrIrr`rNrbNrprfs r)rAsyncIssuers.archivesL$UVjUmn  /T\]bTcTc9P%9P1Pirst " ZZ _%9 )+Q[)    rr)rr)rrrrr)rurrvrrwrr6rr7rr8rr9rr:rrzKAsyncPaginator[BetaFederationIssuer, AsyncPageCursor[BetaFederationIssuer]]rrr,r)r!r!s1177,0159=15)-$("&rs"! MMM@@(< <B>^_ n %j oj Z j #j Z   *  *  *  r,