Class GenerateIdTokenRequest

GenerateIdTokenRequest(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Attributes

NameDescription
name str
Required. The resource name of the service account for which the credentials are requested, in the following format: ``projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}``. The ``-`` wildcard character is required; replacing it with a project ID is invalid.
delegates Sequence[str]
The sequence of service accounts in a delegation chain. Each service account must be granted the ``roles/iam.serviceAccountTokenCreator`` role on its next service account in the chain. The last service account in the chain must be granted the ``roles/iam.serviceAccountTokenCreator`` role on the service account that is specified in the ``name`` field of the request. The delegates must have the following format: ``projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}``. The ``-`` wildcard character is required; replacing it with a project ID is invalid.
audience str
Required. The audience for the token, such as the API or account that this token grants access to.
include_email bool
Include the service account email in the token. If set to ``true``, the token will contain ``email`` and ``email_verified`` claims.

Inheritance

builtins.object > proto.message.Message > GenerateIdTokenRequest