gcloud alpha auth application-default

NAME

gcloud alpha auth application-default - manage your active Application Default Credentials

SYNOPSIS

gcloud alpha auth application-default COMMAND [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(ALPHA) Application Default Credentials (ADC) provide a method to get credentials used in calling Google APIs. The gcloud alpha auth application-default command group allows you to manage active credentials on your machine that are used for local application development.

These credentials are only used by Google client libraries in your own application.

For more information about ADC and how it works, see Authenticating as a service account.

EXAMPLES

To use your own user credentials for your application to access an API, run:

gcloud alpha auth application-default login

This will take you through a web flow to acquire new user credentials.

To create a service account and have your application use it for API access, run:

gcloud iam service-accounts create my-account
gcloud iam service-accounts keys create key.json --iam-account=[e-mail]
export GOOGLE_APPLICATION_CREDENTIALS=key.json
./my_application.sh

GCLOUD WIDE FLAGS

These flags are available to all commands: --help.

Run $ gcloud help for details.

COMMANDS

COMMAND is one of the following:

login

(ALPHA) Acquire new user credentials to use for Application Default Credentials.

print-access-token

(ALPHA) Print an access token for your current Application Default Credentials.

revoke

(ALPHA) Revoke previously generated Application Default Credentials.

set-quota-project

(ALPHA) Update or add a quota project in application default credentials (ADC).

NOTES

This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:

gcloud auth application-default

gcloud beta auth application-default