google-apis-sts_v1beta 0.1.0 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/lib/google/apis/sts_v1beta/classes.rb +36 -31
- data/lib/google/apis/sts_v1beta/gem_version.rb +3 -3
- metadata +4 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 729af7748c224b99e21b2f3a6268bb22fd1614a5450ad0ea028e9084de5bbe5a
|
4
|
+
data.tar.gz: 3ad96951679567c4efa00987c178a041b6100597b485b9738ffcfc98173cb8d8
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 54cd21f8bb0c4a06e1f9c2bcbfc1b3e580385544d6ef0c9463249f24f9f18689b8f62beeb3adea7e95533b0158af18da781d7b7d8bbee2ca1ad46220e7261db9
|
7
|
+
data.tar.gz: fc46eb34c85d8cdda03632a157976ed2965c4404c7f18f0ed3ffcaeefd4208437179014f73fce8f41dc62a5650ec1251a3f1f263cc76efeae03dd2b440b7b7c8
|
data/CHANGELOG.md
CHANGED
@@ -82,46 +82,51 @@ module Google
|
|
82
82
|
# ` ``` Example payload: ``` ` "iss": "https://accounts.google.com", "iat":
|
83
83
|
# 1517963104, "exp": 1517966704, "aud": "113475438248934895348", "sub": "
|
84
84
|
# 113475438248934895348", "my_claims": ` "additional_claim": "value" ` ` ``` If `
|
85
|
-
# subject_token` is
|
86
|
-
#
|
87
|
-
#
|
88
|
-
#
|
89
|
-
#
|
90
|
-
#
|
91
|
-
#
|
92
|
-
#
|
85
|
+
# subject_token` is for AWS, it must be a serialized `GetCallerIdentity` token.
|
86
|
+
# This token contains the same information as a request to the AWS [`
|
87
|
+
# GetCallerIdentity()`](https://docs.aws.amazon.com/STS/latest/APIReference/
|
88
|
+
# API_GetCallerIdentity) method, as well as the AWS [signature](https://docs.aws.
|
89
|
+
# amazon.com/general/latest/gr/signing_aws_api_requests.html) for the request
|
90
|
+
# information. Use Signature Version 4. Format the request as URL-encoded JSON,
|
91
|
+
# and set the `subject_token_type` parameter to `urn:ietf:params:aws:token-type:
|
92
|
+
# aws4_request`. The following parameters are required: - `url`: The URL of the
|
93
|
+
# AWS STS endpoint for `GetCallerIdentity()`, such as `https://sts.amazonaws.com?
|
94
|
+
# Action=GetCallerIdentity&Version=2011-06-15`. Regional endpoints are also
|
93
95
|
# supported. - `method`: The HTTP request method: `POST`. - `headers`: The HTTP
|
94
96
|
# request headers, which must include: - `Authorization`: The request signature.
|
95
97
|
# - `x-amz-date`: The time you will send the request, formatted as an [ISO8601
|
96
98
|
# Basic](https://docs.aws.amazon.com/general/latest/gr/sigv4_elements.html#
|
97
|
-
# sigv4_elements_date) string. This is typically set to the current time
|
98
|
-
# used to prevent replay attacks. - `host`: The hostname of the `url`
|
99
|
-
# example, `sts.amazonaws.com`. - `x-goog-cloud-target-resource`:
|
100
|
-
# canonical resource name of the workload identity pool provider, with
|
101
|
-
# without an `https:` prefix. To help ensure data integrity, we recommend
|
99
|
+
# sigv4_elements_date) string. This value is typically set to the current time
|
100
|
+
# and is used to help prevent replay attacks. - `host`: The hostname of the `url`
|
101
|
+
# field; for example, `sts.amazonaws.com`. - `x-goog-cloud-target-resource`:
|
102
|
+
# The full, canonical resource name of the workload identity pool provider, with
|
103
|
+
# or without an `https:` prefix. To help ensure data integrity, we recommend
|
102
104
|
# including this header in the `SignedHeaders` field of the signed request. For
|
103
105
|
# example: //iam.googleapis.com/projects//locations//workloadIdentityPools//
|
104
106
|
# providers/ https://iam.googleapis.com/projects//locations//
|
105
107
|
# workloadIdentityPools//providers/ If you are using temporary security
|
106
108
|
# credentials provided by AWS, you must also include the header `x-amz-security-
|
107
|
-
# token`, with the value
|
108
|
-
#
|
109
|
-
# `"key": "Authorization", "value": "AWS4-HMAC-SHA256+
|
110
|
-
# SignedHeaders=host;x-amz-date;x-goog-cloud-target-
|
111
|
-
# signature"`, `"key": "x-goog-cloud-target-resource", "
|
112
|
-
# googleapis.com/projects//locations//workloadIdentityPools//
|
113
|
-
# : "host", "value": "sts.amazonaws.com"` . ], "method":
|
114
|
-
# sts.amazonaws.com?Action=GetCallerIdentity&Version=2011-
|
115
|
-
# also use a Google-issued OAuth 2.0 access token with this
|
116
|
-
# access token with new security attributes applied, such as
|
117
|
-
# Boundary. In this case, set `subject_token_type` to `urn:
|
118
|
-
# token-type:access_token`. If an access token already
|
119
|
-
# attributes, you cannot apply additional security attributes.
|
109
|
+
# token`, with the value set to the session token. The following example shows a
|
110
|
+
# `GetCallerIdentity` token: ``` ` "headers": [ `"key": "x-amz-date", "value": "
|
111
|
+
# 20200815T015049Z"`, `"key": "Authorization", "value": "AWS4-HMAC-SHA256+
|
112
|
+
# Credential=$credential,+SignedHeaders=host;x-amz-date;x-goog-cloud-target-
|
113
|
+
# resource,+Signature=$signature"`, `"key": "x-goog-cloud-target-resource", "
|
114
|
+
# value": "//iam.googleapis.com/projects//locations//workloadIdentityPools//
|
115
|
+
# providers/"`, `"key": "host", "value": "sts.amazonaws.com"` . ], "method": "
|
116
|
+
# POST", "url": "https://sts.amazonaws.com?Action=GetCallerIdentity&Version=2011-
|
117
|
+
# 06-15" ` ``` You can also use a Google-issued OAuth 2.0 access token with this
|
118
|
+
# field to obtain an access token with new security attributes applied, such as
|
119
|
+
# a Credential Access Boundary. In this case, set `subject_token_type` to `urn:
|
120
|
+
# ietf:params:oauth:token-type:access_token`. If an access token already
|
121
|
+
# contains security attributes, you cannot apply additional security attributes.
|
120
122
|
# Corresponds to the JSON property `subjectToken`
|
121
123
|
# @return [String]
|
122
124
|
attr_accessor :subject_token
|
123
125
|
|
124
|
-
# Required. `
|
126
|
+
# Required. An identifier that indicates the type of the security token in the `
|
127
|
+
# subject_token` parameter. Supported values are `urn:ietf:params:oauth:token-
|
128
|
+
# type:jwt`, `urn:ietf:params:aws:token-type:aws4_request`, and `urn:ietf:params:
|
129
|
+
# oauth:token-type:access_token`.
|
125
130
|
# Corresponds to the JSON property `subjectTokenType`
|
126
131
|
# @return [String]
|
127
132
|
attr_accessor :subject_token_type
|
@@ -154,10 +159,10 @@ module Google
|
|
154
159
|
# @return [String]
|
155
160
|
attr_accessor :access_token
|
156
161
|
|
157
|
-
# The amount of time, in seconds, between the time when the
|
158
|
-
# issued and the time when the
|
162
|
+
# The amount of time, in seconds, between the time when the access token was
|
163
|
+
# issued and the time when the access token will expire. This field is absent
|
159
164
|
# when the `subject_token` in the request is a Google-issued, short-lived access
|
160
|
-
# token. In this case, the
|
165
|
+
# token. In this case, the access token has the same expiration time as the `
|
161
166
|
# subject_token`.
|
162
167
|
# Corresponds to the JSON property `expires_in`
|
163
168
|
# @return [Fixnum]
|
@@ -169,7 +174,7 @@ module Google
|
|
169
174
|
# @return [String]
|
170
175
|
attr_accessor :issued_token_type
|
171
176
|
|
172
|
-
# The type of
|
177
|
+
# The type of access token. Always has the value `Bearer`.
|
173
178
|
# Corresponds to the JSON property `token_type`
|
174
179
|
# @return [String]
|
175
180
|
attr_accessor :token_type
|
@@ -16,13 +16,13 @@ module Google
|
|
16
16
|
module Apis
|
17
17
|
module StsV1beta
|
18
18
|
# Version of the google-apis-sts_v1beta gem
|
19
|
-
GEM_VERSION = "0.
|
19
|
+
GEM_VERSION = "0.2.0"
|
20
20
|
|
21
21
|
# Version of the code generator used to generate this client
|
22
|
-
GENERATOR_VERSION = "0.1.
|
22
|
+
GENERATOR_VERSION = "0.1.2"
|
23
23
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
25
|
-
REVISION = "
|
25
|
+
REVISION = "20210116"
|
26
26
|
end
|
27
27
|
end
|
28
28
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-apis-sts_v1beta
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.2.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-
|
11
|
+
date: 2021-02-08 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: google-apis-core
|
@@ -52,7 +52,7 @@ licenses:
|
|
52
52
|
metadata:
|
53
53
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
54
54
|
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-sts_v1beta/CHANGELOG.md
|
55
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1beta/v0.
|
55
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1beta/v0.2.0
|
56
56
|
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-sts_v1beta
|
57
57
|
post_install_message:
|
58
58
|
rdoc_options: []
|
@@ -69,7 +69,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
69
69
|
- !ruby/object:Gem::Version
|
70
70
|
version: '0'
|
71
71
|
requirements: []
|
72
|
-
rubygems_version: 3.
|
72
|
+
rubygems_version: 3.2.6
|
73
73
|
signing_key:
|
74
74
|
specification_version: 4
|
75
75
|
summary: Simple REST client for Security Token Service API V1beta
|