{  "apps": [    {      "id": "string",      "name": "string",      "description": "string",      "clientId": "string",      "logo": "string",      "loginPageUrl": "string",      "approvedCallbackUrls": [        "string"      ],      "permissionsScopes": [        {          "name": "string",          "description": "string",          "optional": true,          "values": [            "string"          ]        }      ],      "attributesScopes": [        {          "name": "string",          "description": "string",          "optional": true,          "values": [            "string"          ]        }      ],      "dynamic": true,      "status": "string",      "logoUrl": "string",      "jwtBearerSettings": {        "issuers": {          "property1": {            "jwksUri": "string",            "signAlgorithm": "string",            "userInfoUri": "string",            "externalIdFieldName": "string",            "jitDisabled": true,            "attributeMapping": {              "name": "string",              "email": "string",              "group": "string",              "givenName": "string",              "middleName": "string",              "familyName": "string",              "picture": "string",              "customAttributes": {                "property1": "string",                "property2": "string"              }            }          },          "property2": {            "jwksUri": "string",            "signAlgorithm": "string",            "userInfoUri": "string",            "externalIdFieldName": "string",            "jitDisabled": true,            "attributeMapping": {              "name": "string",              "email": "string",              "group": "string",              "givenName": "string",              "middleName": "string",              "familyName": "string",              "picture": "string",              "customAttributes": {                "property1": "string",                "property2": "string"              }            }          }        },        "jwtBearerGrantTypeAudienceToUse": "string",        "jwtBearerGrantTypeScopeToUse": "string",        "jwtBearerGrantTypeCustomClaimsToUse": "string"      },      "sessionSettings": {        "enabled": true,        "refreshTokenExpiration": 0,        "refreshTokenExpirationUnit": "string",        "sessionTokenExpiration": 0,        "sessionTokenExpirationUnit": "string",        "userTemplateId": "string",        "keyTemplateId": "string",        "keySessionTokenExpiration": 0,        "keySessionTokenExpirationUnit": "string"      },      "nonConfidentialClient": true,      "audienceWhitelist": [        "string"      ],      "forceAddAllAuthorizationInfo": true,      "connectionsScopes": [        {          "name": "string",          "description": "string",          "optional": true,          "values": [            "string"          ]        }      ],      "defaultAudience": "string",      "skipConsentScreen": true,      "useResources": true,      "customAttributes": {        "attribute-key": "attribute-value"      },      "cibaSettings": {        "enabled": true,        "expirationTime": 0,        "expirationTimeUnit": "string",        "emailServiceProvider": "string",        "emailServiceProviderFallback": "string",        "emailServiceTemplateId": "string",        "loginPageURL": "string"      },      "jarSettings": {        "enforce": true,        "publicKey": "string",        "maxLifetimeSeconds": 0,        "fapi": true      },      "allowedTenants": [        "string"      ],      "clientType": "string",      "forcePkce": true,      "allowPartialScopes": true,      "scopeClaimMapping": [        {          "scope": "string",          "claims": {            "property1": "string",            "property2": "string"          },          "description": "string",          "useProjectMapping": true,          "mandatory": true,          "claimTargets": {            "property1": {              "tokens": [                "string"              ]            },            "property2": {              "tokens": [                "string"              ]            }          }        }      ],      "mtlsClientAuthMethods": {        "tlsClientAuth": {          "credentials": [            {              "id": "string",              "name": "string",              "subjectDn": "string",              "pem": "string",              "thumbprint": "string",              "createdAt": 0            }          ]        },        "selfSignedTlsClientAuth": {          "credentials": [            {              "id": "string",              "name": "string",              "subjectDn": "string",              "pem": "string",              "thumbprint": "string",              "createdAt": 0            }          ]        }      },      "createdTime": 0,      "forceDpop": true,      "rarSettings": {        "excludeInAccessToken": true,        "schemas": [          {            "type": "string",            "description": "string",            "schema": {}          }        ]      }    }  ],  "total": 0}

export interface Response {apps?: ThirdPartyApplication[]total?: number}export interface ThirdPartyApplication {id?: string/** * int64 version - excluded *  string projectId - copied */name?: stringdescription?: stringclientId?: stringlogo?: stringloginPageUrl?: stringapprovedCallbackUrls?: string[]permissionsScopes?: {name?: stringdescription?: stringoptional?: booleanvalues?: string[]}[]attributesScopes?: {name?: stringdescription?: stringoptional?: booleanvalues?: string[]}[]dynamic?: booleanstatus?: stringlogoUrl?: string/** * string backChannelLogoutUrl = 13 [(validate).string = {url: true, optional: true}]; is not supported now as its exist only in project service but there is no end_session endpoint in onetime service */jwtBearerSettings?: {issuers?: {[k: string]: IssuerSettings}jwtBearerGrantTypeAudienceToUse?: stringjwtBearerGrantTypeScopeToUse?: stringjwtBearerGrantTypeCustomClaimsToUse?: string}sessionSettings?: {enabled?: booleanrefreshTokenExpiration?: numberrefreshTokenExpirationUnit?: stringsessionTokenExpiration?: numbersessionTokenExpirationUnit?: stringuserTemplateId?: stringkeyTemplateId?: stringkeySessionTokenExpiration?: numberkeySessionTokenExpirationUnit?: string}nonConfidentialClient?: booleanaudienceWhitelist?: string[]forceAddAllAuthorizationInfo?: booleanconnectionsScopes?: {name?: stringdescription?: stringoptional?: booleanvalues?: string[]}[]defaultAudience?: stringskipConsentScreen?: booleanuseResources?: boolean/** * Custom attributes as key-value pairs. Keys must be strings; values can be strings, numbers, booleans, or arrays. */customAttributes?: {[k: string]: string}cibaSettings?: {enabled?: booleanexpirationTime?: numberexpirationTimeUnit?: stringemailServiceProvider?: stringemailServiceProviderFallback?: stringemailServiceTemplateId?: stringloginPageURL?: string}/** * JAR (JWT-Secured Authorization Request, RFC 9101) settings for Third Party Applications */jarSettings?: {enforce?: booleanpublicKey?: stringmaxLifetimeSeconds?: numberfapi?: boolean}allowedTenants?: string[]clientType?: stringforcePkce?: booleanallowPartialScopes?: boolean/** * scopeClaimMapping is the structured scope→claim model that supersedes attributesScopes. *  The v2 API exposes only this field; v1/import/export carry both (new-wins per scope). */scopeClaimMapping?: {scope?: string/** * claims is consulted only when useProjectMapping is false. When useProjectMapping is true, *  the project-wide mapping's entry for `scope` provides the claims and this field is ignored. */claims?: {[k: string]: string}description?: string/** * useProjectMapping, when true, reuses the project-wide ScopeClaimMapping's entry for this *  scope (the app's `claims` field is ignored). Default false uses the app's own `claims`. */useProjectMapping?: boolean/** * mandatory, when true, means the scope is always granted and cannot be deselected by the *  user on the consent screen. Mirrors the inverse of the legacy ApplicationScope.optional. */mandatory?: boolean/** * claimTargets narrows which tokens a claim is written to, keyed by the claim name. *  Consulted only when useProjectMapping is false — when it is true the project-wide *  entry supplies both the claims and their targets. Empty means every token. */claimTargets?: {/** * ClaimTokenTargets lists the tokens a single mapped claim is written to. An empty *  list means every token, which is the default for claims with no entry. *  *  Values are plain strings rather than an enum because this field is served over two *  JSON surfaces with different enum encodings: the management API marshals via protojson *  (enum names) while the console API marshals the proto with encoding/json (enum numbers). *  A string renders identically on both. Unknown values are dropped on write, so a claim *  with no valid target falls back to the "every token" default. *  *  Wrapper message because proto3 map values cannot be `repeated`. */[k: string]: {tokens?: string[]}}}[]mtlsClientAuthMethods?: {tlsClientAuth?: TLSClientAuthselfSignedTlsClientAuth?: SelfSignedTLSClientAuth}/** * createdTime is epoch seconds (int32 so it serializes as a JSON number). */createdTime?: numberforceDpop?: booleanrarSettings?: {excludeInAccessToken?: booleanschemas?: RARTypeSchema[]}}export interface IssuerSettings {jwksUri?: stringsignAlgorithm?: stringuserInfoUri?: stringexternalIdFieldName?: string/** * Cross-App Access JIT provisioning, per trusted issuer. jitDisabled: only sign in an already- *  provisioned user, do not create. attributeMapping maps assertion claims to user fields. Group->role / *  FGA / default-role / priority mapping is read from the tenant's shared SSO config, NOT per issuer. */jitDisabled?: booleanattributeMapping?: {name?: stringemail?: stringgroup?: stringgivenName?: stringmiddleName?: stringfamilyName?: stringpicture?: stringcustomAttributes?: {[k: string]: string}}}export interface TLSClientAuth {credentials?: {id?: stringname?: stringsubjectDn?: stringpem?: stringthumbprint?: stringcreatedAt?: number}[]}export interface SelfSignedTLSClientAuth {credentials?: MTLSClientAuthCredential[]}export interface MTLSClientAuthCredential {id?: stringname?: stringsubjectDn?: stringpem?: stringthumbprint?: stringcreatedAt?: number}export interface RARTypeSchema {type?: stringdescription?: stringschema?: {}}