google-apis-sts_v1 0.22.0 → 0.24.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: b0820fc2312867ed0a37f13ba9925e05dacda2212d89b81e097125c8effabd00
4
- data.tar.gz: 55a66de4acd84564664ffc130982b300523e95f56670558fd94e1c3e12d7d86c
3
+ metadata.gz: c26262bf9f498de00ffd81c80f9a3aa843771615d43531ff1e1fe0c33735c7b6
4
+ data.tar.gz: be24c02ca1f42fca2ec9a6470981b77d4b85ab9845d34b39263d5c6a49301cc8
5
5
  SHA512:
6
- metadata.gz: c23f1784ac3775caa70609758b18f18ec5735784f2de7b330b21227550668ba349fe10ad17f71332ac1b4de9657edc64d3c792cab7409af9aa3767bbb2b474ab
7
- data.tar.gz: 65338f2dbf90969ee6aebae95e17325dc5fc911390078c2fe0978cb027d23f06c91166295cc4153e1f389c1260640d95eb2b545dbde562951860a0c4510de486
6
+ metadata.gz: 49049c1b6bec51dcaf8a70e94783e118874add546db44be5b913499935b51c90ea1329b0d5f3f3123a20660a51fdb33e8c9f851c42a95400235b820b672f175e
7
+ data.tar.gz: 2040b3162ca4b4ae4c2f48787e4a55cc9b9c9ad9a151e249596600790f3cc2f11f1da532143bbdea7fc8351b25b4c1145eb624ed115cd5f7186b0705bf3dea89
data/CHANGELOG.md CHANGED
@@ -1,5 +1,14 @@
1
1
  # Release history for google-apis-sts_v1
2
2
 
3
+ ### v0.24.0 (2022-09-28)
4
+
5
+ * Regenerated from discovery document revision 20220916
6
+ * Regenerated using generator version 0.10.0
7
+
8
+ ### v0.23.0 (2022-09-02)
9
+
10
+ * Regenerated from discovery document revision 20220826
11
+
3
12
  ### v0.22.0 (2022-08-13)
4
13
 
5
14
  * Regenerated from discovery document revision 20220806
@@ -49,31 +49,33 @@ module Google
49
49
  # members` can have the following values: * `allUsers`: A special identifier
50
50
  # that represents anyone who is on the internet; with or without a Google
51
51
  # account. * `allAuthenticatedUsers`: A special identifier that represents
52
- # anyone who is authenticated with a Google account or a service account. * `
53
- # user:`emailid``: An email address that represents a specific Google account.
54
- # For example, `alice@example.com` . * `serviceAccount:`emailid``: An email
55
- # address that represents a Google service account. For example, `my-other-app@
56
- # appspot.gserviceaccount.com`. * `serviceAccount:`projectid`.svc.id.goog[`
57
- # namespace`/`kubernetes-sa`]`: An identifier for a [Kubernetes service account](
58
- # https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-
59
- # accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`
60
- # . * `group:`emailid``: An email address that represents a Google group. For
61
- # example, `admins@example.com`. * `deleted:user:`emailid`?uid=`uniqueid``: An
62
- # email address (plus unique identifier) representing a user that has been
63
- # recently deleted. For example, `alice@example.com?uid=123456789012345678901`.
64
- # If the user is recovered, this value reverts to `user:`emailid`` and the
65
- # recovered user retains the role in the binding. * `deleted:serviceAccount:`
66
- # emailid`?uid=`uniqueid``: An email address (plus unique identifier)
67
- # representing a service account that has been recently deleted. For example, `
68
- # my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the
69
- # service account is undeleted, this value reverts to `serviceAccount:`emailid``
70
- # and the undeleted service account retains the role in the binding. * `deleted:
71
- # group:`emailid`?uid=`uniqueid``: An email address (plus unique identifier)
72
- # representing a Google group that has been recently deleted. For example, `
73
- # admins@example.com?uid=123456789012345678901`. If the group is recovered, this
74
- # value reverts to `group:`emailid`` and the recovered group retains the role in
75
- # the binding. * `domain:`domain``: The G Suite domain (primary) that represents
76
- # all the users of that domain. For example, `google.com` or `example.com`.
52
+ # anyone who is authenticated with a Google account or a service account. Does
53
+ # not include identities that come from external identity providers (IdPs)
54
+ # through identity federation. * `user:`emailid``: An email address that
55
+ # represents a specific Google account. For example, `alice@example.com` . * `
56
+ # serviceAccount:`emailid``: An email address that represents a Google service
57
+ # account. For example, `my-other-app@appspot.gserviceaccount.com`. * `
58
+ # serviceAccount:`projectid`.svc.id.goog[`namespace`/`kubernetes-sa`]`: An
59
+ # identifier for a [Kubernetes service account](https://cloud.google.com/
60
+ # kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-
61
+ # project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:`emailid``: An
62
+ # email address that represents a Google group. For example, `admins@example.com`
63
+ # . * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
64
+ # identifier) representing a user that has been recently deleted. For example, `
65
+ # alice@example.com?uid=123456789012345678901`. If the user is recovered, this
66
+ # value reverts to `user:`emailid`` and the recovered user retains the role in
67
+ # the binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email
68
+ # address (plus unique identifier) representing a service account that has been
69
+ # recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
70
+ # 123456789012345678901`. If the service account is undeleted, this value
71
+ # reverts to `serviceAccount:`emailid`` and the undeleted service account
72
+ # retains the role in the binding. * `deleted:group:`emailid`?uid=`uniqueid``:
73
+ # An email address (plus unique identifier) representing a Google group that has
74
+ # been recently deleted. For example, `admins@example.com?uid=
75
+ # 123456789012345678901`. If the group is recovered, this value reverts to `
76
+ # group:`emailid`` and the recovered group retains the role in the binding. * `
77
+ # domain:`domain``: The G Suite domain (primary) that represents all the users
78
+ # of that domain. For example, `google.com` or `example.com`.
77
79
  # Corresponds to the JSON property `members`
78
80
  # @return [Array<String>]
79
81
  attr_accessor :members
@@ -177,8 +179,10 @@ module Google
177
179
  include Google::Apis::Core::Hashable
178
180
 
179
181
  # The full resource name of the identity provider; for example: `//iam.
180
- # googleapis.com/projects//locations/global/workloadIdentityPools//providers/`.
181
- # Required when exchanging an external credential for a Google access token.
182
+ # googleapis.com/projects//locations/global/workloadIdentityPools//providers/`
183
+ # for workload identity pool providers, or `//iam.googleapis.com/locations/
184
+ # global/workforcePools//providers/` for workforce pool providers. Required when
185
+ # exchanging an external credential for a Google access token.
182
186
  # Corresponds to the JSON property `audience`
183
187
  # @return [String]
184
188
  attr_accessor :audience
@@ -232,25 +236,28 @@ module Google
232
236
  # allowed audiences for the workload identity pool provider, or one of the
233
237
  # audiences allowed by default if no audiences were specified. See https://cloud.
234
238
  # google.com/iam/docs/reference/rest/v1/projects.locations.workloadIdentityPools.
235
- # providers#oidc Example header: ``` ` "alg": "RS256", "kid": "us-east-11" ` ```
236
- # Example payload: ``` ` "iss": "https://accounts.google.com", "iat": 1517963104,
237
- # "exp": 1517966704, "aud": "//iam.googleapis.com/projects/1234567890123/
238
- # locations/global/workloadIdentityPools/my-pool/providers/my-provider", "sub": "
239
- # 113475438248934895348", "my_claims": ` "additional_claim": "value" ` ` ``` If `
240
- # subject_token` is for AWS, it must be a serialized `GetCallerIdentity` token.
241
- # This token contains the same information as a request to the AWS [`
242
- # GetCallerIdentity()`](https://docs.aws.amazon.com/STS/latest/APIReference/
243
- # API_GetCallerIdentity) method, as well as the AWS [signature](https://docs.aws.
244
- # amazon.com/general/latest/gr/signing_aws_api_requests.html) for the request
245
- # information. Use Signature Version 4. Format the request as URL-encoded JSON,
246
- # and set the `subject_token_type` parameter to `urn:ietf:params:aws:token-type:
247
- # aws4_request`. The following parameters are required: - `url`: The URL of the
248
- # AWS STS endpoint for `GetCallerIdentity()`, such as `https://sts.amazonaws.com?
249
- # Action=GetCallerIdentity&Version=2011-06-15`. Regional endpoints are also
250
- # supported. - `method`: The HTTP request method: `POST`. - `headers`: The HTTP
251
- # request headers, which must include: - `Authorization`: The request signature.
252
- # - `x-amz-date`: The time you will send the request, formatted as an [ISO8601
253
- # Basic](https://docs.aws.amazon.com/general/latest/gr/sigv4_elements.html#
239
+ # providers#oidc. For workforce pools, this must match the client ID specified
240
+ # in the provider configuration. See https://cloud.google.com/iam/docs/reference/
241
+ # rest/v1/locations.workforcePools.providers#oidc. Example header: ``` ` "alg": "
242
+ # RS256", "kid": "us-east-11" ` ``` Example payload: ``` ` "iss": "https://
243
+ # accounts.google.com", "iat": 1517963104, "exp": 1517966704, "aud": "//iam.
244
+ # googleapis.com/projects/1234567890123/locations/global/workloadIdentityPools/
245
+ # my-pool/providers/my-provider", "sub": "113475438248934895348", "my_claims": `
246
+ # "additional_claim": "value" ` ` ``` If `subject_token` is for AWS, it must be
247
+ # a serialized `GetCallerIdentity` token. This token contains the same
248
+ # information as a request to the AWS [`GetCallerIdentity()`](https://docs.aws.
249
+ # amazon.com/STS/latest/APIReference/API_GetCallerIdentity) method, as well as
250
+ # the AWS [signature](https://docs.aws.amazon.com/general/latest/gr/
251
+ # signing_aws_api_requests.html) for the request information. Use Signature
252
+ # Version 4. Format the request as URL-encoded JSON, and set the `
253
+ # subject_token_type` parameter to `urn:ietf:params:aws:token-type:aws4_request`.
254
+ # The following parameters are required: - `url`: The URL of the AWS STS
255
+ # endpoint for `GetCallerIdentity()`, such as `https://sts.amazonaws.com?Action=
256
+ # GetCallerIdentity&Version=2011-06-15`. Regional endpoints are also supported. -
257
+ # `method`: The HTTP request method: `POST`. - `headers`: The HTTP request
258
+ # headers, which must include: - `Authorization`: The request signature. - `x-
259
+ # amz-date`: The time you will send the request, formatted as an [ISO8601 Basic](
260
+ # https://docs.aws.amazon.com/general/latest/gr/sigv4_elements.html#
254
261
  # sigv4_elements_date) string. This value is typically set to the current time
255
262
  # and is used to help prevent replay attacks. - `host`: The hostname of the `url`
256
263
  # field; for example, `sts.amazonaws.com`. - `x-goog-cloud-target-resource`:
@@ -432,7 +439,10 @@ module Google
432
439
  # The human-readable identifier for the token principal subject. For example, if
433
440
  # the provided token is associated with a workload identity pool, this field
434
441
  # contains a value in the following format: `principal://iam.googleapis.com/
435
- # projects//locations/global/workloadIdentityPools//subject/`
442
+ # projects//locations/global/workloadIdentityPools//subject/`. If the provided
443
+ # token is associated with a workforce pool, this field contains a value in the
444
+ # following format: `principal://iam.googleapis.com/locations/global/
445
+ # workforcePools//subject/`.
436
446
  # Corresponds to the JSON property `username`
437
447
  # @return [String]
438
448
  attr_accessor :username
@@ -16,13 +16,13 @@ module Google
16
16
  module Apis
17
17
  module StsV1
18
18
  # Version of the google-apis-sts_v1 gem
19
- GEM_VERSION = "0.22.0"
19
+ GEM_VERSION = "0.24.0"
20
20
 
21
21
  # Version of the code generator used to generate this client
22
- GENERATOR_VERSION = "0.9.0"
22
+ GENERATOR_VERSION = "0.10.0"
23
23
 
24
24
  # Revision of the discovery document this client was generated from
25
- REVISION = "20220806"
25
+ REVISION = "20220916"
26
26
  end
27
27
  end
28
28
  end
@@ -84,10 +84,11 @@ module Google
84
84
 
85
85
  # Exchanges a credential for a Google OAuth 2.0 access token. The token asserts
86
86
  # an external identity within an identity pool, or it applies a Credential
87
- # Access Boundary to a Google access token. When you call this method, do not
88
- # send the `Authorization` HTTP header in the request. This method does not
89
- # require the `Authorization` header, and using the header can cause the request
90
- # to fail.
87
+ # Access Boundary to a Google access token. Note that workforce pools do not
88
+ # support Credential Access Boundary at the moment. When you call this method,
89
+ # do not send the `Authorization` HTTP header in the request. This method does
90
+ # not require the `Authorization` header, and using the header can cause the
91
+ # request to fail.
91
92
  # @param [Google::Apis::StsV1::GoogleIdentityStsV1ExchangeTokenRequest] google_identity_sts_v1_exchange_token_request_object
92
93
  # @param [String] fields
93
94
  # Selector specifying which fields to include in a partial response.
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-apis-sts_v1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.22.0
4
+ version: 0.24.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-08-15 00:00:00.000000000 Z
11
+ date: 2022-10-03 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: google-apis-core
@@ -16,7 +16,7 @@ dependencies:
16
16
  requirements:
17
17
  - - ">="
18
18
  - !ruby/object:Gem::Version
19
- version: '0.7'
19
+ version: 0.9.0
20
20
  - - "<"
21
21
  - !ruby/object:Gem::Version
22
22
  version: 2.a
@@ -26,7 +26,7 @@ dependencies:
26
26
  requirements:
27
27
  - - ">="
28
28
  - !ruby/object:Gem::Version
29
- version: '0.7'
29
+ version: 0.9.0
30
30
  - - "<"
31
31
  - !ruby/object:Gem::Version
32
32
  version: 2.a
@@ -58,7 +58,7 @@ licenses:
58
58
  metadata:
59
59
  bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
60
60
  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-sts_v1/CHANGELOG.md
61
- documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1/v0.22.0
61
+ documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1/v0.24.0
62
62
  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-sts_v1
63
63
  post_install_message:
64
64
  rdoc_options: []