google-apis-sts_v1 0.6.0 → 0.7.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/lib/google/apis/sts_v1/classes.rb +41 -42
- data/lib/google/apis/sts_v1/gem_version.rb +2 -2
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f700bd301750dcd980d291a558f5fc8daa7c3c7943ae74d4799608c45c8d7994
|
|
4
|
+
data.tar.gz: 817f5bfa83addd48afcaeb49e0a9cb6ee384359cfa596e08864af107309a81aa
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 1276f68c158b1d755438ff73a204c35e053af2ee3e35b71c1f12f13ff5483d25528fbb49ee01b74a7acab5d4673966069a10333680314557bac87fe64ddb48a9
|
|
7
|
+
data.tar.gz: 0ffd3a004ad9b95141a39ed5211375b6edccf458670f10bf838a225548404153ce4757bc0c1ed895b56370c7a5f42d69f43c525ac248bff2cb1633d5094df9c7
|
data/CHANGELOG.md
CHANGED
|
@@ -59,48 +59,47 @@ module Google
|
|
|
59
59
|
# @return [String]
|
|
60
60
|
attr_accessor :scope
|
|
61
61
|
|
|
62
|
-
# Required. The input token. This token is
|
|
63
|
-
#
|
|
64
|
-
#
|
|
65
|
-
#
|
|
66
|
-
#
|
|
67
|
-
#
|
|
68
|
-
#
|
|
69
|
-
#
|
|
70
|
-
#
|
|
71
|
-
#
|
|
72
|
-
#
|
|
73
|
-
#
|
|
74
|
-
#
|
|
75
|
-
#
|
|
76
|
-
#
|
|
77
|
-
#
|
|
78
|
-
#
|
|
79
|
-
#
|
|
80
|
-
#
|
|
81
|
-
#
|
|
82
|
-
#
|
|
83
|
-
#
|
|
84
|
-
#
|
|
85
|
-
#
|
|
86
|
-
#
|
|
87
|
-
#
|
|
88
|
-
#
|
|
89
|
-
#
|
|
90
|
-
#
|
|
91
|
-
#
|
|
92
|
-
#
|
|
93
|
-
#
|
|
94
|
-
#
|
|
95
|
-
#
|
|
96
|
-
#
|
|
97
|
-
#
|
|
98
|
-
#
|
|
99
|
-
#
|
|
100
|
-
#
|
|
101
|
-
#
|
|
102
|
-
#
|
|
103
|
-
# https://docs.aws.amazon.com/general/latest/gr/sigv4_elements.html#
|
|
62
|
+
# Required. The input token. This token is either an external credential issued
|
|
63
|
+
# by a workload identity pool provider, or a short-lived access token issued by
|
|
64
|
+
# Google. If the token is an OIDC JWT, it must use the JWT format defined in [
|
|
65
|
+
# RFC 7523](https://tools.ietf.org/html/rfc7523), and the `subject_token_type`
|
|
66
|
+
# must be `urn:ietf:params:oauth:token-type:jwt`. The following headers are
|
|
67
|
+
# required: - `kid`: The identifier of the signing key securing the JWT. - `alg`:
|
|
68
|
+
# The cryptographic algorithm securing the JWT. Must be `RS256` or `ES256`. The
|
|
69
|
+
# following payload fields are required. For more information, see [RFC 7523,
|
|
70
|
+
# Section 3](https://tools.ietf.org/html/rfc7523#section-3): - `iss`: The issuer
|
|
71
|
+
# of the token. The issuer must provide a discovery document at the URL `/.well-
|
|
72
|
+
# known/openid-configuration`, where `` is the value of this field. The document
|
|
73
|
+
# must be formatted according to section 4.2 of the [OIDC 1.0 Discovery
|
|
74
|
+
# specification](https://openid.net/specs/openid-connect-discovery-1_0.html#
|
|
75
|
+
# ProviderConfigurationResponse). - `iat`: The issue time, in seconds, since the
|
|
76
|
+
# Unix epoch. Must be in the past. - `exp`: The expiration time, in seconds,
|
|
77
|
+
# since the Unix epoch. Must be less than 48 hours after `iat`. Shorter
|
|
78
|
+
# expiration times are more secure. If possible, we recommend setting an
|
|
79
|
+
# expiration time less than 6 hours. - `sub`: The identity asserted in the JWT. -
|
|
80
|
+
# `aud`: For workload identity pools, this must be a value specified in the
|
|
81
|
+
# allowed audiences for the workload identity pool provider, or one of the
|
|
82
|
+
# audiences allowed by default if no audiences were specified. See https://cloud.
|
|
83
|
+
# google.com/iam/docs/reference/rest/v1/projects.locations.workloadIdentityPools.
|
|
84
|
+
# providers#oidc Example header: ``` ` "alg": "RS256", "kid": "us-east-11" ` ```
|
|
85
|
+
# Example payload: ``` ` "iss": "https://accounts.google.com", "iat": 1517963104,
|
|
86
|
+
# "exp": 1517966704, "aud": "//iam.googleapis.com/projects/1234567890123/
|
|
87
|
+
# locations/global/workloadIdentityPools/my-pool/providers/my-provider", "sub": "
|
|
88
|
+
# 113475438248934895348", "my_claims": ` "additional_claim": "value" ` ` ``` If `
|
|
89
|
+
# subject_token` is for AWS, it must be a serialized `GetCallerIdentity` token.
|
|
90
|
+
# This token contains the same information as a request to the AWS [`
|
|
91
|
+
# GetCallerIdentity()`](https://docs.aws.amazon.com/STS/latest/APIReference/
|
|
92
|
+
# API_GetCallerIdentity) method, as well as the AWS [signature](https://docs.aws.
|
|
93
|
+
# amazon.com/general/latest/gr/signing_aws_api_requests.html) for the request
|
|
94
|
+
# information. Use Signature Version 4. Format the request as URL-encoded JSON,
|
|
95
|
+
# and set the `subject_token_type` parameter to `urn:ietf:params:aws:token-type:
|
|
96
|
+
# aws4_request`. The following parameters are required: - `url`: The URL of the
|
|
97
|
+
# AWS STS endpoint for `GetCallerIdentity()`, such as `https://sts.amazonaws.com?
|
|
98
|
+
# Action=GetCallerIdentity&Version=2011-06-15`. Regional endpoints are also
|
|
99
|
+
# supported. - `method`: The HTTP request method: `POST`. - `headers`: The HTTP
|
|
100
|
+
# request headers, which must include: - `Authorization`: The request signature.
|
|
101
|
+
# - `x-amz-date`: The time you will send the request, formatted as an [ISO8601
|
|
102
|
+
# Basic](https://docs.aws.amazon.com/general/latest/gr/sigv4_elements.html#
|
|
104
103
|
# sigv4_elements_date) string. This value is typically set to the current time
|
|
105
104
|
# and is used to help prevent replay attacks. - `host`: The hostname of the `url`
|
|
106
105
|
# field; for example, `sts.amazonaws.com`. - `x-goog-cloud-target-resource`:
|
|
@@ -16,13 +16,13 @@ module Google
|
|
|
16
16
|
module Apis
|
|
17
17
|
module StsV1
|
|
18
18
|
# Version of the google-apis-sts_v1 gem
|
|
19
|
-
GEM_VERSION = "0.
|
|
19
|
+
GEM_VERSION = "0.7.0"
|
|
20
20
|
|
|
21
21
|
# Version of the code generator used to generate this client
|
|
22
22
|
GENERATOR_VERSION = "0.2.0"
|
|
23
23
|
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
|
25
|
-
REVISION = "
|
|
25
|
+
REVISION = "20210517"
|
|
26
26
|
end
|
|
27
27
|
end
|
|
28
28
|
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-apis-sts_v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.7.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2021-05-
|
|
11
|
+
date: 2021-05-31 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: google-apis-core
|
|
@@ -52,7 +52,7 @@ licenses:
|
|
|
52
52
|
metadata:
|
|
53
53
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
|
54
54
|
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-sts_v1/CHANGELOG.md
|
|
55
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1/v0.
|
|
55
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1/v0.7.0
|
|
56
56
|
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-sts_v1
|
|
57
57
|
post_install_message:
|
|
58
58
|
rdoc_options: []
|