You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Oct 27, 2022. It is now read-only.
gcloud auth print-identity-token is used to create an un-scoped token and passed around the code so requests can be made.
Desired Behavior
The new idtoken library provides an HTTP client that automatically handles identity token minting. Use that instead. This HTTP client can be passed a customized HTTP client, which is how timeouts for #16 would be supported.
I've been testing this draft implementation requires service account credentials provided with respect to the Application Default Credentials protocol.
Currently, we require gcloud to be authorized with either a service account or a user account. I believe that using the Go client library for this would require that the user have a service account and put those credentials in a location in accordance with ADC. And I think this would have to be on top of the separate authorization process for gcloud.
The reason that my draft implementation worked was that I was both authorized with gcloud using gcloud init with my user account and had downloaded separate service account credentials and put their location in the GOOGLE_APPLICATION_CREDENTIALS environment variable.
Sign up for freeto subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Current Behavior
gcloud auth print-identity-token
is used to create an un-scoped token and passed around the code so requests can be made.Desired Behavior
The new idtoken library provides an HTTP client that automatically handles identity token minting. Use that instead. This HTTP client can be passed a customized HTTP client, which is how timeouts for #16 would be supported.
An example of using the library in this way can be found in the Function-to-Function Request Sample.
This issue affects one category in my review of the repository:
The text was updated successfully, but these errors were encountered: