API documentation for iam_credentials_v1.types module.
Classes
Duration
API documentation for iam_credentials_v1.types.Duration class.
GenerateAccessTokenRequest
The sequence of service accounts in a delegation chain. Each
service account must be granted the
roles/iam.serviceAccountTokenCreator role on its next
service account in the chain. The last service account in the
chain must be granted the
roles/iam.serviceAccountTokenCreator role on the service
account that is specified in the name field of the
request. The delegates must have the following format:
projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}.
The - wildcard character is required; replacing it with a
project ID is invalid.
The desired lifetime duration of the access token in seconds. Must be set to a value less than or equal to 3600 (1 hour). If a value is not specified, the token's lifetime will be set to a default value of one hour.
GenerateAccessTokenResponse
Token expiration time. The expiration time is always set.
GenerateIdTokenRequest
The sequence of service accounts in a delegation chain. Each
service account must be granted the
roles/iam.serviceAccountTokenCreator role on its next
service account in the chain. The last service account in the
chain must be granted the
roles/iam.serviceAccountTokenCreator role on the service
account that is specified in the name field of the
request. The delegates must have the following format:
projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}.
The - wildcard character is required; replacing it with a
project ID is invalid.
Include the service account email in the token. If set to
true, the token will contain email and
email_verified claims.
GenerateIdTokenResponse
SignBlobRequest
The sequence of service accounts in a delegation chain. Each
service account must be granted the
roles/iam.serviceAccountTokenCreator role on its next
service account in the chain. The last service account in the
chain must be granted the
roles/iam.serviceAccountTokenCreator role on the service
account that is specified in the name field of the
request. The delegates must have the following format:
projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}.
The - wildcard character is required; replacing it with a
project ID is invalid.
SignBlobResponse
The signed blob.
SignJwtRequest
The sequence of service accounts in a delegation chain. Each
service account must be granted the
roles/iam.serviceAccountTokenCreator role on its next
service account in the chain. The last service account in the
chain must be granted the
roles/iam.serviceAccountTokenCreator role on the service
account that is specified in the name field of the
request. The delegates must have the following format:
projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}.
The - wildcard character is required; replacing it with a
project ID is invalid.
SignJwtResponse
The signed JWT.
Timestamp
API documentation for iam_credentials_v1.types.Timestamp class.