Options

Stay organized with collections Save and categorize content based on your preferences.

An Options object configures features that the Security Token Service supports, but that are not supported by standard OAuth 2.0 token exchange endpoints, as defined in https://tools.ietf.org/html/rfc8693.

JSON representation
{
  "accessBoundary": {
    object (AccessBoundary)
  },
  "audiences": [
    string
  ],
  "userProject": string
}
Fields
accessBoundary

object (AccessBoundary)

An access boundary that defines the upper bound of permissions the credential may have.

The value should be a JSON object of AccessBoundary.

The access boundary can include up to 10 rules. The size of the parameter value should not exceed 2048 characters.

audiences[]

string

The intended audience(s) of the credential. The audience value(s) should be the name(s) of services intended to receive the credential. Example: ["https://pubsub.googleapis.com/", "https://storage.googleapis.com/"].

A maximum of 5 audiences can be included. For each provided audience, the maximum length is 262 characters.

userProject

string

A Google project used for quota and billing purposes when the credential is used to access Google APIs. The provided project overrides the project bound to the credential. The value must be a project number or a project ID. Example: my-sample-project-191923.

The maximum length is 32 characters.