Queries
serviceUser(Experimental) — Fetch a service account by its id.serviceUsers(Experimental) — List service accounts.
Mutations
serviceUserApiKeyCreate(Experimental) — Add an API key to a service account. Returns the key once. Returns null if the caller has no service account with that id.serviceUserCreate(Experimental) — Create a service account. Add credentials to it afterward.serviceUserCredentialDelete(Experimental) — Delete an API key, public key, or federated policy. It stops working at once. Returns false if the caller has no credential with that id.serviceUserDelete(Experimental) — Delete a service account. Its credentials stop working at once. Returns false if the caller has no service account with that id.serviceUserFederatedPolicyCreate(Experimental) — Add a federated policy to a service account. Returns null if the caller has no service account with that id.serviceUserPublicKeyCreate(Experimental) — Add a public key to a service account. Returns null if the caller has no service account with that id.serviceUserUpdate(Experimental) — Update a service account. Returns null if the caller has no service account with that id.
Objects
ServiceUser— A non-human principal that calls the Redo API with its own scopes. It authenticates with any number of credentials, each granting its scopes.ServiceUserApiKey— A Redo-issued secret (redo_sk_…) sent as a bearer token. Only its last four characters are kept for display.ServiceUserClaimCondition— A condition a federated token’s claims must meet.ServiceUserFederatedPolicy— Trusts OpenID Connect tokens from an external issuer, such as a CI provider, whose claims meet every condition.ServiceUserPublicKey— A public key that verifies the JWT assertions the caller signs with its private key.
Interfaces
ServiceUserCredential— Something a service account authenticates with: an API key, a public key, or a federated policy. Each has the service account’s scopes.
Input objects
ServiceUserClaimConditionInput— A condition a federated token’s claims must meet.ServiceUserCreateInput— Input for creating a service account.ServiceUserCredentialCreateInput— What every kind of credential takes.ServiceUserFederatedPolicyCreateInput— Input for adding a federated policy to a service account.ServiceUserPublicKeyCreateInput— Input for adding a public key to a service account.ServiceUserUpdateInput— Input for updating a service account. Omitted fields are left unchanged.
Enums
ApiScope— Access to one kind of resource in the Redo API.ServiceUserManager— Who manages a service account.ServiceUserSortKey— A field this list can be ordered by; pass to the list’sorderByargument and pair withreverseto flip direction.ServiceUserStatus— Whether a service account can authenticate.