Cloud Identity-Aware Proxy API

Controls access to cloud applications running on Google Cloud Platform.

Service: iap.googleapis.com

We recommend that you call this service using Google-provided client libraries. If your application needs to call this service using your own libraries, you should use the following information when making the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service may have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://iap.googleapis.com

REST Resource: v1beta1

Methods
getIamPolicy POST /v1beta1/{resource=**}:getIamPolicy
Gets the access control policy for an Identity-Aware Proxy protected resource.
setIamPolicy POST /v1beta1/{resource=**}:setIamPolicy
Sets the access control policy for an Identity-Aware Proxy protected resource.
testIamPermissions POST /v1beta1/{resource=**}:testIamPermissions
Returns permissions that a caller has on the Identity-Aware Proxy protected resource.

Service: iap.googleapis.com

We recommend that you call this service using Google-provided client libraries. If your application needs to call this service using your own libraries, you should use the following information when making the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service may have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://iap.googleapis.com

REST Resource: v1

Methods
getIamPolicy POST /v1/{resource=**}:getIamPolicy
Gets the access control policy for an Identity-Aware Proxy protected resource.
getIapSettings GET /v1/{name=**}:iapSettings
Gets the IAP settings on a particular IAP protected resource.
setIamPolicy POST /v1/{resource=**}:setIamPolicy
Sets the access control policy for an Identity-Aware Proxy protected resource.
testIamPermissions POST /v1/{resource=**}:testIamPermissions
Returns permissions that a caller has on the Identity-Aware Proxy protected resource.
updateIapSettings PATCH /v1/{iapSettings.name=**}:iapSettings
Updates the IAP settings on a particular IAP protected resource.

REST Resource: v1.projects.brands

Methods
create POST /v1/{parent=projects/*}/brands
Constructs a new OAuth brand for the project if one does not exist.
get GET /v1/{name=projects/*/brands/*}
Retrieves the OAuth brand of the project.
list GET /v1/{parent=projects/*}/brands
Lists the existing brands for the project.

REST Resource: v1.projects.brands.identityAwareProxyClients

Methods
create POST /v1/{parent=projects/*/brands/*}/identityAwareProxyClients
Creates an Identity Aware Proxy (IAP) OAuth client.
delete DELETE /v1/{name=projects/*/brands/*/identityAwareProxyClients/*}
Deletes an Identity Aware Proxy (IAP) OAuth client.
get GET /v1/{name=projects/*/brands/*/identityAwareProxyClients/*}
Retrieves an Identity Aware Proxy (IAP) OAuth client.
list GET /v1/{parent=projects/*/brands/*}/identityAwareProxyClients
Lists the existing clients for the brand.
resetSecret POST /v1/{name=projects/*/brands/*/identityAwareProxyClients/*}:resetSecret
Resets an Identity Aware Proxy (IAP) OAuth client secret.