google-apis-sts_v1 0.48.0 → 0.49.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d5cab0645526bf19f73a23ce7ef72a2a080bb42b074cc1d2d245e50773a05326
-  data.tar.gz: f1310b4415c401113775e142c4c4d4d0406c3adb94747187ddb4487bed710b8a
+  metadata.gz: 8505439a8e5a14f7e145d4adadafcced26bd44a320c9595b4b1ea6abd248e597
+  data.tar.gz: 67122c1ae1d01e630b52f01e3559eb2d2f57e79116c726e0b7b017dbfd738846
 SHA512:
-  metadata.gz: 2ad780f85981ea472c3aaa469f08252100f78538a914bd8ce07836f6d7ecc2c4ec37de5eb5cefbc67db9768dea61244818d6b7fa16559fcb49ea4065977d75bd
-  data.tar.gz: fbd4e9bcdf422c48a95567ad39bb4440b60d5a753f3573b1aa2e02c8810511bae4e43a99cac5000c6ef5e8c715c3b8069574344c5b75661fce56010b37d3e784
+  metadata.gz: 3b92cf06414ed747982fc707fbcd17ea4113e9724835eb41a8338ea2e54a5168addee8cb49f63728f57d43a00d4a77c1d57653f5db1e725f799029ded8a54484
+  data.tar.gz: fa8cad6196330503a55ddef90a5f0b65d78f58eafd62580e006fa2502a2da3bebdbe906f3dcc681a2fd1bfd625dd208e1b3d92968087b7f315668ff8a031a5e4

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Release history for google-apis-sts_v1
 
+### v0.49.0 (2026-06-28)
+
+* Regenerated from discovery document revision 20260618
+
 ### v0.48.0 (2026-06-14)
 
 * Regenerated using generator version 0.19.0

data/lib/google/apis/sts_v1/classes.rb

@@ -412,6 +412,134 @@ module Google
         end
       end
       
+      # A JSON web key set (JWK) See also https://datatracker.ietf.org/doc/html/
+      # rfc7517 and https://github.com/spiffe/spiffe/blob/main/standards/JWT-SVID.md#6-
+      # representation-in-the-spiffe-bundle
+      class GoogleIdentityStsV1Jwk
+        include Google::Apis::Core::Hashable
+      
+        # Exponent value for kty="RSA".
+        # Corresponds to the JSON property `e`
+        # @return [String]
+        attr_accessor :e
+      
+        # Key ID.
+        # Corresponds to the JSON property `kid`
+        # @return [String]
+        attr_accessor :kid
+      
+        # Key type. Currently "RSA".
+        # Corresponds to the JSON property `kty`
+        # @return [String]
+        attr_accessor :kty
+      
+        # Modulus value for kty="RSA".
+        # Corresponds to the JSON property `n`
+        # @return [String]
+        attr_accessor :n
+      
+        # Public key use. Currently "jwt-svid".
+        # Corresponds to the JSON property `use`
+        # @return [String]
+        attr_accessor :use
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @e = args[:e] if args.key?(:e)
+          @kid = args[:kid] if args.key?(:kid)
+          @kty = args[:kty] if args.key?(:kty)
+          @n = args[:n] if args.key?(:n)
+          @use = args[:use] if args.key?(:use)
+        end
+      end
+      
+      # Response message for GetJwks.
+      class GoogleIdentityStsV1Jwks
+        include Google::Apis::Core::Hashable
+      
+        # The JWKS for this OP.
+        # Corresponds to the JSON property `keys`
+        # @return [Array<Google::Apis::StsV1::GoogleIdentityStsV1Jwk>]
+        attr_accessor :keys
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @keys = args[:keys] if args.key?(:keys)
+        end
+      end
+      
+      # Response message for GetOpenIdProviderConfig. Message fields are defined in
+      # https://openid.net/specs/openid-connect-discovery-1_0.html#
+      # ProviderConfigurationResponse
+      class GoogleIdentityStsV1OpenIdProviderConfig
+        include Google::Apis::Core::Hashable
+      
+        # URL pointing to an authorization endpoint under this issuer. Note: Currently
+        # this endpoint returns a 404.
+        # Corresponds to the JSON property `authorization_endpoint`
+        # @return [String]
+        attr_accessor :authorization_endpoint
+      
+        # JSON array containing a list of the JWS signing algorithms (alg values)
+        # supported by the OP for the ID token to encode the claims in a JWT [JWT]. Note:
+        # Currently always "["RS256"]".
+        # Corresponds to the JSON property `id_token_signing_alg_values_supported`
+        # @return [Array<String>]
+        attr_accessor :id_token_signing_alg_values_supported
+      
+        # URL using the https scheme with no query or fragment components that the OP
+        # asserts as its issuer identifier.
+        # Corresponds to the JSON property `issuer`
+        # @return [String]
+        attr_accessor :issuer
+      
+        # URL of the OP's JWK Set [JWK] document, which MUST use the https scheme.
+        # Corresponds to the JSON property `jwks_uri`
+        # @return [String]
+        attr_accessor :jwks_uri
+      
+        # JSON array containing a list of the OAuth 2.0 response_type values that this
+        # OP supports. Note: Currently always "["id_token"]".
+        # Corresponds to the JSON property `response_types_supported`
+        # @return [Array<String>]
+        attr_accessor :response_types_supported
+      
+        # JSON array containing a list of the subject identifier types that this OP
+        # supports. Note: Currently always "["public"]".
+        # Corresponds to the JSON property `subject_types_supported`
+        # @return [Array<String>]
+        attr_accessor :subject_types_supported
+      
+        # URL pointing to a token endpoint under this issuer. Note: Currently this
+        # endpoint returns a 404.
+        # Corresponds to the JSON property `token_endpoint`
+        # @return [String]
+        attr_accessor :token_endpoint
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @authorization_endpoint = args[:authorization_endpoint] if args.key?(:authorization_endpoint)
+          @id_token_signing_alg_values_supported = args[:id_token_signing_alg_values_supported] if args.key?(:id_token_signing_alg_values_supported)
+          @issuer = args[:issuer] if args.key?(:issuer)
+          @jwks_uri = args[:jwks_uri] if args.key?(:jwks_uri)
+          @response_types_supported = args[:response_types_supported] if args.key?(:response_types_supported)
+          @subject_types_supported = args[:subject_types_supported] if args.key?(:subject_types_supported)
+          @token_endpoint = args[:token_endpoint] if args.key?(:token_endpoint)
+        end
+      end
+      
       # An `Options` object configures features that the Security Token Service
       # supports, but that are not supported by standard OAuth 2.0 token exchange
       # endpoints, as defined in https://tools.ietf.org/html/rfc8693.

data/lib/google/apis/sts_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module StsV1
       # Version of the google-apis-sts_v1 gem
-      GEM_VERSION = "0.48.0"
+      GEM_VERSION = "0.49.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.19.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20260318"
+      REVISION = "20260618"
     end
   end
 end

data/lib/google/apis/sts_v1/representations.rb

@@ -52,6 +52,24 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GoogleIdentityStsV1Jwk
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityStsV1Jwks
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityStsV1OpenIdProviderConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class GoogleIdentityStsV1Options
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -134,6 +152,38 @@ module Google
         end
       end
       
+      class GoogleIdentityStsV1Jwk
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :e, as: 'e'
+          property :kid, as: 'kid'
+          property :kty, as: 'kty'
+          property :n, as: 'n'
+          property :use, as: 'use'
+        end
+      end
+      
+      class GoogleIdentityStsV1Jwks
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :keys, as: 'keys', class: Google::Apis::StsV1::GoogleIdentityStsV1Jwk, decorator: Google::Apis::StsV1::GoogleIdentityStsV1Jwk::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityStsV1OpenIdProviderConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :authorization_endpoint, as: 'authorization_endpoint'
+          collection :id_token_signing_alg_values_supported, as: 'id_token_signing_alg_values_supported'
+          property :issuer, as: 'issuer'
+          property :jwks_uri, as: 'jwks_uri'
+          collection :response_types_supported, as: 'response_types_supported'
+          collection :subject_types_supported, as: 'subject_types_supported'
+          property :token_endpoint, as: 'token_endpoint'
+        end
+      end
+      
       class GoogleIdentityStsV1Options
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/sts_v1/service.rb

@@ -52,6 +52,160 @@ module Google
           @batch_path = 'batch'
         end
         
+        # Fetches the signing keys for an agentic or managed workload identity pool and
+        # returns them in JWKs format, defined in [RFC 7517](https://tools.ietf.org/html/
+        # rfc7517). For now, only agentic system pools are supported.
+        # @param [String] name
+        #   Required. The name of the pool whose JWKS needs to be retrieved. Format: '
+        #   organizations/`ORGANIZATION_NUMBER`/locations/global/workloadIdentityPools/`
+        #   POOL_ID`' 'projects/`PROJECT_NUMBER`/locations/global/workloadIdentityPools/`
+        #   POOL_ID`' Example(s): 'organizations/1234/locations/global/
+        #   workloadIdentityPools/agents.global.org-1234.system.id.goog' 'projects/
+        #   12345678/locations/global/workloadIdentityPools/agents.global.proj-12345678.
+        #   system.id.goog'
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::StsV1::GoogleIdentityStsV1Jwks] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::StsV1::GoogleIdentityStsV1Jwks]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_organization_location_workload_identity_pool_openid_jwks(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}/openid/jwks', options)
+          command.response_representation = Google::Apis::StsV1::GoogleIdentityStsV1Jwks::Representation
+          command.response_class = Google::Apis::StsV1::GoogleIdentityStsV1Jwks
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the OIDC provider configuration for an agentic or managed workload
+        # identity pool following [the OIDC 1.0 discovery specification](https://openid.
+        # net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationResponse).
+        # For now, only agentic system pools are supported.
+        # @param [String] name
+        #   Required. The name of the pool whose OpenID provider configuration to retrieve.
+        #   Format: 'organizations/`ORGANIZATION_NUMBER`/locations/global/
+        #   workloadIdentityPools/`POOL_ID`' 'projects/`PROJECT_NUMBER`/locations/global/
+        #   workloadIdentityPools/`POOL_ID`' Example: 'organizations/1234/locations/global/
+        #   workloadIdentityPools/agents.global.org-1234.system.id.goog' 'projects/
+        #   12345678/locations/global/workloadIdentityPools/agents.global.proj-12345678.
+        #   system.id.goog'
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::StsV1::GoogleIdentityStsV1OpenIdProviderConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::StsV1::GoogleIdentityStsV1OpenIdProviderConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_organization_location_workload_identity_pool_well_known_openid_configuration(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}/.well-known/openid-configuration', options)
+          command.response_representation = Google::Apis::StsV1::GoogleIdentityStsV1OpenIdProviderConfig::Representation
+          command.response_class = Google::Apis::StsV1::GoogleIdentityStsV1OpenIdProviderConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Fetches the signing keys for an agentic or managed workload identity pool and
+        # returns them in JWKs format, defined in [RFC 7517](https://tools.ietf.org/html/
+        # rfc7517). For now, only agentic system pools are supported.
+        # @param [String] name
+        #   Required. The name of the pool whose JWKS needs to be retrieved. Format: '
+        #   organizations/`ORGANIZATION_NUMBER`/locations/global/workloadIdentityPools/`
+        #   POOL_ID`' 'projects/`PROJECT_NUMBER`/locations/global/workloadIdentityPools/`
+        #   POOL_ID`' Example(s): 'organizations/1234/locations/global/
+        #   workloadIdentityPools/agents.global.org-1234.system.id.goog' 'projects/
+        #   12345678/locations/global/workloadIdentityPools/agents.global.proj-12345678.
+        #   system.id.goog'
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::StsV1::GoogleIdentityStsV1Jwks] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::StsV1::GoogleIdentityStsV1Jwks]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool_openid_jwks(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}/openid/jwks', options)
+          command.response_representation = Google::Apis::StsV1::GoogleIdentityStsV1Jwks::Representation
+          command.response_class = Google::Apis::StsV1::GoogleIdentityStsV1Jwks
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the OIDC provider configuration for an agentic or managed workload
+        # identity pool following [the OIDC 1.0 discovery specification](https://openid.
+        # net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationResponse).
+        # For now, only agentic system pools are supported.
+        # @param [String] name
+        #   Required. The name of the pool whose OpenID provider configuration to retrieve.
+        #   Format: 'organizations/`ORGANIZATION_NUMBER`/locations/global/
+        #   workloadIdentityPools/`POOL_ID`' 'projects/`PROJECT_NUMBER`/locations/global/
+        #   workloadIdentityPools/`POOL_ID`' Example: 'organizations/1234/locations/global/
+        #   workloadIdentityPools/agents.global.org-1234.system.id.goog' 'projects/
+        #   12345678/locations/global/workloadIdentityPools/agents.global.proj-12345678.
+        #   system.id.goog'
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::StsV1::GoogleIdentityStsV1OpenIdProviderConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::StsV1::GoogleIdentityStsV1OpenIdProviderConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool_well_known_openid_configuration(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}/.well-known/openid-configuration', options)
+          command.response_representation = Google::Apis::StsV1::GoogleIdentityStsV1OpenIdProviderConfig::Representation
+          command.response_class = Google::Apis::StsV1::GoogleIdentityStsV1OpenIdProviderConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Exchanges a credential for a Google OAuth 2.0 access token. The token asserts
         # an external identity within an identity pool, or it applies a Credential
         # Access Boundary to a Google access token. Note that workforce pools do not

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-sts_v1
 version: !ruby/object:Gem::Version
-  version: 0.48.0
+  version: 0.49.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-sts_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1/v0.48.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1/v0.49.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-sts_v1
 rdoc_options: []
 require_paths: