public final class GenerateIdentityBindingAccessTokenRequest extends com.google.protobuf.GeneratedMessageV3 implements GenerateIdentityBindingAccessTokenRequestOrBuilder
google.iam.credentials.v1.GenerateIdentityBindingAccessTokenRequest| Modifier and Type | Class and Description |
|---|---|
static class |
GenerateIdentityBindingAccessTokenRequest.Builder
Protobuf type
google.iam.credentials.v1.GenerateIdentityBindingAccessTokenRequest |
com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage,BuilderType extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType,BuilderType>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable| Modifier and Type | Field and Description |
|---|---|
static int |
JWT_FIELD_NUMBER |
static int |
NAME_FIELD_NUMBER |
static int |
SCOPE_FIELD_NUMBER |
| Modifier and Type | Method and Description |
|---|---|
boolean |
equals(Object obj) |
static GenerateIdentityBindingAccessTokenRequest |
getDefaultInstance() |
GenerateIdentityBindingAccessTokenRequest |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
String |
getJwt()
Required.
|
com.google.protobuf.ByteString |
getJwtBytes()
Required.
|
String |
getName()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
|
com.google.protobuf.ByteString |
getNameBytes()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
|
com.google.protobuf.Parser<GenerateIdentityBindingAccessTokenRequest> |
getParserForType() |
String |
getScope(int index)
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
com.google.protobuf.ByteString |
getScopeBytes(int index)
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
int |
getScopeCount()
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
com.google.protobuf.ProtocolStringList |
getScopeList()
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
int |
getSerializedSize() |
com.google.protobuf.UnknownFieldSet |
getUnknownFields() |
int |
hashCode() |
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
static GenerateIdentityBindingAccessTokenRequest.Builder |
newBuilder() |
static GenerateIdentityBindingAccessTokenRequest.Builder |
newBuilder(GenerateIdentityBindingAccessTokenRequest prototype) |
GenerateIdentityBindingAccessTokenRequest.Builder |
newBuilderForType() |
protected GenerateIdentityBindingAccessTokenRequest.Builder |
newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) |
static GenerateIdentityBindingAccessTokenRequest |
parseDelimitedFrom(InputStream input) |
static GenerateIdentityBindingAccessTokenRequest |
parseDelimitedFrom(InputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(byte[] data) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(byte[] data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(ByteBuffer data) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(ByteBuffer data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(com.google.protobuf.ByteString data) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(com.google.protobuf.ByteString data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(com.google.protobuf.CodedInputStream input) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(InputStream input) |
static GenerateIdentityBindingAccessTokenRequest |
parseFrom(InputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static com.google.protobuf.Parser<GenerateIdentityBindingAccessTokenRequest> |
parser() |
GenerateIdentityBindingAccessTokenRequest.Builder |
toBuilder() |
void |
writeTo(com.google.protobuf.CodedOutputStream output) |
canUseUnsafe, computeStringSize, computeStringSizeNoTag, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, internalGetMapField, makeExtensionsImmutable, newBuilderForType, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTagfindInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toStringaddAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeToclone, finalize, getClass, notify, notifyAll, wait, wait, waitpublic static final int NAME_FIELD_NUMBER
public static final int SCOPE_FIELD_NUMBER
public static final int JWT_FIELD_NUMBER
public final com.google.protobuf.UnknownFieldSet getUnknownFields()
getUnknownFields in interface com.google.protobuf.MessageOrBuildergetUnknownFields in class com.google.protobuf.GeneratedMessageV3public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3public String getName()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
string name = 1;getName in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic com.google.protobuf.ByteString getNameBytes()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
string name = 1;getNameBytes in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic com.google.protobuf.ProtocolStringList getScopeList()
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;getScopeList in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic int getScopeCount()
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;getScopeCount in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic String getScope(int index)
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;getScope in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic com.google.protobuf.ByteString getScopeBytes(int index)
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;getScopeBytes in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic String getJwt()
Required. Input token.
Must be in JWT format according to
RFC7523 (https://tools.ietf.org/html/rfc7523)
and must have 'kid' field in the header.
Supported signing algorithms: RS256 (RS512, ES256, ES512 coming soon).
Mandatory payload fields (along the lines of RFC 7523, section 3):
- iss: issuer of the token. Must provide a discovery document at
$iss/.well-known/openid-configuration . The document needs to be
formatted according to section 4.2 of the OpenID Connect Discovery
1.0 specification.
- iat: Issue time in seconds since epoch. Must be in the past.
- exp: Expiration time in seconds since epoch. Must be less than 48 hours
after iat. We recommend to create tokens that last shorter than 6
hours to improve security unless business reasons mandate longer
expiration times. Shorter token lifetimes are generally more secure
since tokens that have been exfiltrated by attackers can be used for
a shorter time. you can configure the maximum lifetime of the
incoming token in the configuration of the mapper.
The resulting Google token will expire within an hour or at "exp",
whichever is earlier.
- sub: JWT subject, identity asserted in the JWT.
- aud: Configured in the mapper policy. By default the service account
email.
Claims from the incoming token can be transferred into the output token
accoding to the mapper configuration. The outgoing claim size is limited.
Outgoing claims size must be less than 4kB serialized as JSON without
whitespace.
Example header:
{
"alg": "RS256",
"kid": "92a4265e14ab04d4d228a48d10d4ca31610936f8"
}
Example payload:
{
"iss": "https://accounts.google.com",
"iat": 1517963104,
"exp": 1517966704,
"aud": "https://iamcredentials.googleapis.com/",
"sub": "113475438248934895348",
"my_claims": {
"additional_claim": "value"
}
}
string jwt = 3;getJwt in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic com.google.protobuf.ByteString getJwtBytes()
Required. Input token.
Must be in JWT format according to
RFC7523 (https://tools.ietf.org/html/rfc7523)
and must have 'kid' field in the header.
Supported signing algorithms: RS256 (RS512, ES256, ES512 coming soon).
Mandatory payload fields (along the lines of RFC 7523, section 3):
- iss: issuer of the token. Must provide a discovery document at
$iss/.well-known/openid-configuration . The document needs to be
formatted according to section 4.2 of the OpenID Connect Discovery
1.0 specification.
- iat: Issue time in seconds since epoch. Must be in the past.
- exp: Expiration time in seconds since epoch. Must be less than 48 hours
after iat. We recommend to create tokens that last shorter than 6
hours to improve security unless business reasons mandate longer
expiration times. Shorter token lifetimes are generally more secure
since tokens that have been exfiltrated by attackers can be used for
a shorter time. you can configure the maximum lifetime of the
incoming token in the configuration of the mapper.
The resulting Google token will expire within an hour or at "exp",
whichever is earlier.
- sub: JWT subject, identity asserted in the JWT.
- aud: Configured in the mapper policy. By default the service account
email.
Claims from the incoming token can be transferred into the output token
accoding to the mapper configuration. The outgoing claim size is limited.
Outgoing claims size must be less than 4kB serialized as JSON without
whitespace.
Example header:
{
"alg": "RS256",
"kid": "92a4265e14ab04d4d228a48d10d4ca31610936f8"
}
Example payload:
{
"iss": "https://accounts.google.com",
"iat": 1517963104,
"exp": 1517966704,
"aud": "https://iamcredentials.googleapis.com/",
"sub": "113475438248934895348",
"my_claims": {
"additional_claim": "value"
}
}
string jwt = 3;getJwtBytes in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3public void writeTo(com.google.protobuf.CodedOutputStream output)
throws IOException
writeTo in interface com.google.protobuf.MessageLitewriteTo in class com.google.protobuf.GeneratedMessageV3IOExceptionpublic int getSerializedSize()
getSerializedSize in interface com.google.protobuf.MessageLitegetSerializedSize in class com.google.protobuf.GeneratedMessageV3public boolean equals(Object obj)
equals in interface com.google.protobuf.Messageequals in class com.google.protobuf.AbstractMessagepublic int hashCode()
hashCode in interface com.google.protobuf.MessagehashCode in class com.google.protobuf.AbstractMessagepublic static GenerateIdentityBindingAccessTokenRequest parseFrom(ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(com.google.protobuf.ByteString data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(InputStream input) throws IOException
IOExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseDelimitedFrom(InputStream input) throws IOException
IOExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(com.google.protobuf.CodedInputStream input) throws IOException
IOExceptionpublic static GenerateIdentityBindingAccessTokenRequest parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic GenerateIdentityBindingAccessTokenRequest.Builder newBuilderForType()
newBuilderForType in interface com.google.protobuf.MessagenewBuilderForType in interface com.google.protobuf.MessageLitepublic static GenerateIdentityBindingAccessTokenRequest.Builder newBuilder()
public static GenerateIdentityBindingAccessTokenRequest.Builder newBuilder(GenerateIdentityBindingAccessTokenRequest prototype)
public GenerateIdentityBindingAccessTokenRequest.Builder toBuilder()
toBuilder in interface com.google.protobuf.MessagetoBuilder in interface com.google.protobuf.MessageLiteprotected GenerateIdentityBindingAccessTokenRequest.Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)
newBuilderForType in class com.google.protobuf.GeneratedMessageV3public static GenerateIdentityBindingAccessTokenRequest getDefaultInstance()
public static com.google.protobuf.Parser<GenerateIdentityBindingAccessTokenRequest> parser()
public com.google.protobuf.Parser<GenerateIdentityBindingAccessTokenRequest> getParserForType()
getParserForType in interface com.google.protobuf.MessagegetParserForType in interface com.google.protobuf.MessageLitegetParserForType in class com.google.protobuf.GeneratedMessageV3public GenerateIdentityBindingAccessTokenRequest getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderCopyright © 2019 Google LLC. All rights reserved.