Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: define google.auth.downscoped.Credentials class #801

Merged
merged 4 commits into from Jul 9, 2021
Merged

feat: define google.auth.downscoped.Credentials class #801

merged 4 commits into from Jul 9, 2021

Commits on Jul 9, 2021

  1. feat: define google.auth.downscoped.Credentials class

    This is based on [Downscoping with Credential Access Boundaries](https://cloud.google.com/iam/docs/downscoping-short-lived-credentials).
    The new credentials are initialized mainly using elevated source
    credentials and a `google.auth.downscoped.CredentialAccessBoundary`
    instance.
    The credentials will then get access tokens from the source
    credentials and exchange them via the GCP STS token exchange
    endpoint using the provided credentials access boundary rules
    for downscoped access tokens.
    
    The new credentials will inherit the source credentials' scopes
    but the scopes are not exposed as we cannot always determine the
    scopes form the source credentials.
    bojeil-google committed Jul 9, 2021
    Configuration menu
    Copy the full SHA
    ecb1d12 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    374394b View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    743b896 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    3477fa4 View commit details
    Browse the repository at this point in the history