google-apis-sts_v1beta 0.8.0 → 0.12.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +18 -0
- data/OVERVIEW.md +2 -2
- data/lib/google/apis/sts_v1beta/classes.rb +379 -17
- data/lib/google/apis/sts_v1beta/gem_version.rb +3 -3
- data/lib/google/apis/sts_v1beta/representations.rb +124 -0
- metadata +7 -7
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: b4475add2dcdcef983334d9c017614082e3e8ac5126789459d54127cbeed523c
|
4
|
+
data.tar.gz: 4fcc4d9ff4a23ef7aca2284aa97fa905ccd3720ddc80b42c83efe79be9cfd43f
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: b47222bcdca034038aa37463b5ad04c8630c450f67923d58f3098cf41584419e7a8c980b8e30cc5d94127cf6e94da8bc699ba028e35bbd2c05213dc2f66c33cd
|
7
|
+
data.tar.gz: 8679da944edab4c656993133d3e7a3b3ae61b8a76470aafd9991ced4be7f30c3b3f1c743664b2420826d536ce500354aff966d363dca6796596bd1c9974b99a2
|
data/CHANGELOG.md
CHANGED
@@ -1,5 +1,23 @@
|
|
1
1
|
# Release history for google-apis-sts_v1beta
|
2
2
|
|
3
|
+
### v0.12.0 (2021-10-23)
|
4
|
+
|
5
|
+
* Regenerated from discovery document revision 20211015
|
6
|
+
* Unspecified changes
|
7
|
+
|
8
|
+
### v0.11.0 (2021-08-28)
|
9
|
+
|
10
|
+
* Regenerated from discovery document revision 20210822
|
11
|
+
|
12
|
+
### v0.10.0 (2021-07-31)
|
13
|
+
|
14
|
+
* Regenerated from discovery document revision 20210723
|
15
|
+
|
16
|
+
### v0.9.0 (2021-07-03)
|
17
|
+
|
18
|
+
* Regenerated from discovery document revision 20210625
|
19
|
+
* Regenerated using generator version 0.4.0
|
20
|
+
|
3
21
|
### v0.8.0 (2021-06-24)
|
4
22
|
|
5
23
|
* Regenerated using generator version 0.3.0
|
data/OVERVIEW.md
CHANGED
@@ -60,8 +60,8 @@ See the class reference docs for information on the methods you can call from a
|
|
60
60
|
|
61
61
|
More detailed descriptions of the Google simple REST clients are available in two documents.
|
62
62
|
|
63
|
-
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
64
|
-
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
63
|
+
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
|
64
|
+
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
|
65
65
|
|
66
66
|
(Note: the above documents are written for the simple REST clients in general, and their examples may not reflect the Sts service in particular.)
|
67
67
|
|
@@ -22,13 +22,278 @@ module Google
|
|
22
22
|
module Apis
|
23
23
|
module StsV1beta
|
24
24
|
|
25
|
+
# Associates `members`, or principals, with a `role`.
|
26
|
+
class GoogleIamV1Binding
|
27
|
+
include Google::Apis::Core::Hashable
|
28
|
+
|
29
|
+
# Represents a textual expression in the Common Expression Language (CEL) syntax.
|
30
|
+
# CEL is a C-like expression language. The syntax and semantics of CEL are
|
31
|
+
# documented at https://github.com/google/cel-spec. Example (Comparison): title:
|
32
|
+
# "Summary size limit" description: "Determines if a summary is less than 100
|
33
|
+
# chars" expression: "document.summary.size() < 100" Example (Equality): title: "
|
34
|
+
# Requestor is owner" description: "Determines if requestor is the document
|
35
|
+
# owner" expression: "document.owner == request.auth.claims.email" Example (
|
36
|
+
# Logic): title: "Public documents" description: "Determine whether the document
|
37
|
+
# should be publicly visible" expression: "document.type != 'private' &&
|
38
|
+
# document.type != 'internal'" Example (Data Manipulation): title: "Notification
|
39
|
+
# string" description: "Create a notification string with a timestamp."
|
40
|
+
# expression: "'New message received at ' + string(document.create_time)" The
|
41
|
+
# exact variables and functions that may be referenced within an expression are
|
42
|
+
# determined by the service that evaluates it. See the service documentation for
|
43
|
+
# additional information.
|
44
|
+
# Corresponds to the JSON property `condition`
|
45
|
+
# @return [Google::Apis::StsV1beta::GoogleTypeExpr]
|
46
|
+
attr_accessor :condition
|
47
|
+
|
48
|
+
# Specifies the principals requesting access for a Cloud Platform resource. `
|
49
|
+
# members` can have the following values: * `allUsers`: A special identifier
|
50
|
+
# that represents anyone who is on the internet; with or without a Google
|
51
|
+
# account. * `allAuthenticatedUsers`: A special identifier that represents
|
52
|
+
# anyone who is authenticated with a Google account or a service account. * `
|
53
|
+
# user:`emailid``: An email address that represents a specific Google account.
|
54
|
+
# For example, `alice@example.com` . * `serviceAccount:`emailid``: An email
|
55
|
+
# address that represents a service account. For example, `my-other-app@appspot.
|
56
|
+
# gserviceaccount.com`. * `group:`emailid``: An email address that represents a
|
57
|
+
# Google group. For example, `admins@example.com`. * `deleted:user:`emailid`?uid=
|
58
|
+
# `uniqueid``: An email address (plus unique identifier) representing a user
|
59
|
+
# that has been recently deleted. For example, `alice@example.com?uid=
|
60
|
+
# 123456789012345678901`. If the user is recovered, this value reverts to `user:`
|
61
|
+
# emailid`` and the recovered user retains the role in the binding. * `deleted:
|
62
|
+
# serviceAccount:`emailid`?uid=`uniqueid``: An email address (plus unique
|
63
|
+
# identifier) representing a service account that has been recently deleted. For
|
64
|
+
# example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
|
65
|
+
# If the service account is undeleted, this value reverts to `serviceAccount:`
|
66
|
+
# emailid`` and the undeleted service account retains the role in the binding. *
|
67
|
+
# `deleted:group:`emailid`?uid=`uniqueid``: An email address (plus unique
|
68
|
+
# identifier) representing a Google group that has been recently deleted. For
|
69
|
+
# example, `admins@example.com?uid=123456789012345678901`. If the group is
|
70
|
+
# recovered, this value reverts to `group:`emailid`` and the recovered group
|
71
|
+
# retains the role in the binding. * `domain:`domain``: The G Suite domain (
|
72
|
+
# primary) that represents all the users of that domain. For example, `google.
|
73
|
+
# com` or `example.com`.
|
74
|
+
# Corresponds to the JSON property `members`
|
75
|
+
# @return [Array<String>]
|
76
|
+
attr_accessor :members
|
77
|
+
|
78
|
+
# Role that is assigned to the list of `members`, or principals. For example, `
|
79
|
+
# roles/viewer`, `roles/editor`, or `roles/owner`.
|
80
|
+
# Corresponds to the JSON property `role`
|
81
|
+
# @return [String]
|
82
|
+
attr_accessor :role
|
83
|
+
|
84
|
+
def initialize(**args)
|
85
|
+
update!(**args)
|
86
|
+
end
|
87
|
+
|
88
|
+
# Update properties of this object
|
89
|
+
def update!(**args)
|
90
|
+
@condition = args[:condition] if args.key?(:condition)
|
91
|
+
@members = args[:members] if args.key?(:members)
|
92
|
+
@role = args[:role] if args.key?(:role)
|
93
|
+
end
|
94
|
+
end
|
95
|
+
|
96
|
+
# An access boundary defines the upper bound of what a principal may access. It
|
97
|
+
# includes a list of access boundary rules that each defines the resource that
|
98
|
+
# may be allowed as well as permissions that may be used on those resources.
|
99
|
+
class GoogleIdentityStsV1AccessBoundary
|
100
|
+
include Google::Apis::Core::Hashable
|
101
|
+
|
102
|
+
# A list of access boundary rules which defines the upper bound of the
|
103
|
+
# permission a principal may carry. If multiple rules are specified, the
|
104
|
+
# effective access boundary is the union of all the access boundary rules
|
105
|
+
# attached. One access boundary can contain at most 10 rules.
|
106
|
+
# Corresponds to the JSON property `accessBoundaryRules`
|
107
|
+
# @return [Array<Google::Apis::StsV1beta::GoogleIdentityStsV1AccessBoundaryRule>]
|
108
|
+
attr_accessor :access_boundary_rules
|
109
|
+
|
110
|
+
def initialize(**args)
|
111
|
+
update!(**args)
|
112
|
+
end
|
113
|
+
|
114
|
+
# Update properties of this object
|
115
|
+
def update!(**args)
|
116
|
+
@access_boundary_rules = args[:access_boundary_rules] if args.key?(:access_boundary_rules)
|
117
|
+
end
|
118
|
+
end
|
119
|
+
|
120
|
+
# An access boundary rule defines an upper bound of IAM permissions on a single
|
121
|
+
# resource.
|
122
|
+
class GoogleIdentityStsV1AccessBoundaryRule
|
123
|
+
include Google::Apis::Core::Hashable
|
124
|
+
|
125
|
+
# Represents a textual expression in the Common Expression Language (CEL) syntax.
|
126
|
+
# CEL is a C-like expression language. The syntax and semantics of CEL are
|
127
|
+
# documented at https://github.com/google/cel-spec. Example (Comparison): title:
|
128
|
+
# "Summary size limit" description: "Determines if a summary is less than 100
|
129
|
+
# chars" expression: "document.summary.size() < 100" Example (Equality): title: "
|
130
|
+
# Requestor is owner" description: "Determines if requestor is the document
|
131
|
+
# owner" expression: "document.owner == request.auth.claims.email" Example (
|
132
|
+
# Logic): title: "Public documents" description: "Determine whether the document
|
133
|
+
# should be publicly visible" expression: "document.type != 'private' &&
|
134
|
+
# document.type != 'internal'" Example (Data Manipulation): title: "Notification
|
135
|
+
# string" description: "Create a notification string with a timestamp."
|
136
|
+
# expression: "'New message received at ' + string(document.create_time)" The
|
137
|
+
# exact variables and functions that may be referenced within an expression are
|
138
|
+
# determined by the service that evaluates it. See the service documentation for
|
139
|
+
# additional information.
|
140
|
+
# Corresponds to the JSON property `availabilityCondition`
|
141
|
+
# @return [Google::Apis::StsV1beta::GoogleTypeExpr]
|
142
|
+
attr_accessor :availability_condition
|
143
|
+
|
144
|
+
# A list of permissions that may be allowed for use on the specified resource.
|
145
|
+
# The only supported values in the list are IAM roles, following the format of
|
146
|
+
# google.iam.v1.Binding.role. Example value: `inRole:roles/logging.viewer` for
|
147
|
+
# predefined roles and `inRole:organizations/`ORGANIZATION_ID`/roles/logging.
|
148
|
+
# viewer` for custom roles.
|
149
|
+
# Corresponds to the JSON property `availablePermissions`
|
150
|
+
# @return [Array<String>]
|
151
|
+
attr_accessor :available_permissions
|
152
|
+
|
153
|
+
# The full resource name of a Google Cloud resource entity. The format
|
154
|
+
# definition is at https://cloud.google.com/apis/design/resource_names. Example
|
155
|
+
# value: `//cloudresourcemanager.googleapis.com/projects/my-project`.
|
156
|
+
# Corresponds to the JSON property `availableResource`
|
157
|
+
# @return [String]
|
158
|
+
attr_accessor :available_resource
|
159
|
+
|
160
|
+
def initialize(**args)
|
161
|
+
update!(**args)
|
162
|
+
end
|
163
|
+
|
164
|
+
# Update properties of this object
|
165
|
+
def update!(**args)
|
166
|
+
@availability_condition = args[:availability_condition] if args.key?(:availability_condition)
|
167
|
+
@available_permissions = args[:available_permissions] if args.key?(:available_permissions)
|
168
|
+
@available_resource = args[:available_resource] if args.key?(:available_resource)
|
169
|
+
end
|
170
|
+
end
|
171
|
+
|
172
|
+
# An `Options` object configures features that the Security Token Service
|
173
|
+
# supports, but that are not supported by standard OAuth 2.0 token exchange
|
174
|
+
# endpoints, as defined in https://tools.ietf.org/html/rfc8693.
|
175
|
+
class GoogleIdentityStsV1Options
|
176
|
+
include Google::Apis::Core::Hashable
|
177
|
+
|
178
|
+
# An access boundary defines the upper bound of what a principal may access. It
|
179
|
+
# includes a list of access boundary rules that each defines the resource that
|
180
|
+
# may be allowed as well as permissions that may be used on those resources.
|
181
|
+
# Corresponds to the JSON property `accessBoundary`
|
182
|
+
# @return [Google::Apis::StsV1beta::GoogleIdentityStsV1AccessBoundary]
|
183
|
+
attr_accessor :access_boundary
|
184
|
+
|
185
|
+
# The intended audience(s) of the credential. The audience value(s) should be
|
186
|
+
# the name(s) of services intended to receive the credential. Example: `["https:/
|
187
|
+
# /pubsub.googleapis.com/", "https://storage.googleapis.com/"]`. A maximum of 5
|
188
|
+
# audiences can be included. For each provided audience, the maximum length is
|
189
|
+
# 262 characters.
|
190
|
+
# Corresponds to the JSON property `audiences`
|
191
|
+
# @return [Array<String>]
|
192
|
+
attr_accessor :audiences
|
193
|
+
|
194
|
+
# A Google project used for quota and billing purposes when the credential is
|
195
|
+
# used to access Google APIs. The provided project overrides the project bound
|
196
|
+
# to the credential. The value must be a project number or a project ID. Example:
|
197
|
+
# `my-sample-project-191923`. The maximum length is 32 characters.
|
198
|
+
# Corresponds to the JSON property `userProject`
|
199
|
+
# @return [String]
|
200
|
+
attr_accessor :user_project
|
201
|
+
|
202
|
+
def initialize(**args)
|
203
|
+
update!(**args)
|
204
|
+
end
|
205
|
+
|
206
|
+
# Update properties of this object
|
207
|
+
def update!(**args)
|
208
|
+
@access_boundary = args[:access_boundary] if args.key?(:access_boundary)
|
209
|
+
@audiences = args[:audiences] if args.key?(:audiences)
|
210
|
+
@user_project = args[:user_project] if args.key?(:user_project)
|
211
|
+
end
|
212
|
+
end
|
213
|
+
|
214
|
+
# An access boundary defines the upper bound of what a principal may access. It
|
215
|
+
# includes a list of access boundary rules that each defines the resource that
|
216
|
+
# may be allowed as well as permissions that may be used on those resources.
|
217
|
+
class GoogleIdentityStsV1betaAccessBoundary
|
218
|
+
include Google::Apis::Core::Hashable
|
219
|
+
|
220
|
+
# A list of access boundary rules which defines the upper bound of the
|
221
|
+
# permission a principal may carry. If multiple rules are specified, the
|
222
|
+
# effective access boundary is the union of all the access boundary rules
|
223
|
+
# attached. One access boundary can contain at most 10 rules.
|
224
|
+
# Corresponds to the JSON property `accessBoundaryRules`
|
225
|
+
# @return [Array<Google::Apis::StsV1beta::GoogleIdentityStsV1betaAccessBoundaryRule>]
|
226
|
+
attr_accessor :access_boundary_rules
|
227
|
+
|
228
|
+
def initialize(**args)
|
229
|
+
update!(**args)
|
230
|
+
end
|
231
|
+
|
232
|
+
# Update properties of this object
|
233
|
+
def update!(**args)
|
234
|
+
@access_boundary_rules = args[:access_boundary_rules] if args.key?(:access_boundary_rules)
|
235
|
+
end
|
236
|
+
end
|
237
|
+
|
238
|
+
# An access boundary rule defines an upper bound of IAM permissions on a single
|
239
|
+
# resource.
|
240
|
+
class GoogleIdentityStsV1betaAccessBoundaryRule
|
241
|
+
include Google::Apis::Core::Hashable
|
242
|
+
|
243
|
+
# Represents a textual expression in the Common Expression Language (CEL) syntax.
|
244
|
+
# CEL is a C-like expression language. The syntax and semantics of CEL are
|
245
|
+
# documented at https://github.com/google/cel-spec. Example (Comparison): title:
|
246
|
+
# "Summary size limit" description: "Determines if a summary is less than 100
|
247
|
+
# chars" expression: "document.summary.size() < 100" Example (Equality): title: "
|
248
|
+
# Requestor is owner" description: "Determines if requestor is the document
|
249
|
+
# owner" expression: "document.owner == request.auth.claims.email" Example (
|
250
|
+
# Logic): title: "Public documents" description: "Determine whether the document
|
251
|
+
# should be publicly visible" expression: "document.type != 'private' &&
|
252
|
+
# document.type != 'internal'" Example (Data Manipulation): title: "Notification
|
253
|
+
# string" description: "Create a notification string with a timestamp."
|
254
|
+
# expression: "'New message received at ' + string(document.create_time)" The
|
255
|
+
# exact variables and functions that may be referenced within an expression are
|
256
|
+
# determined by the service that evaluates it. See the service documentation for
|
257
|
+
# additional information.
|
258
|
+
# Corresponds to the JSON property `availabilityCondition`
|
259
|
+
# @return [Google::Apis::StsV1beta::GoogleTypeExpr]
|
260
|
+
attr_accessor :availability_condition
|
261
|
+
|
262
|
+
# A list of permissions that may be allowed for use on the specified resource.
|
263
|
+
# The only supported values in the list are IAM roles, following the format of
|
264
|
+
# google.iam.v1.Binding.role. Example value: `inRole:roles/logging.viewer` for
|
265
|
+
# predefined roles and `inRole:organizations/`ORGANIZATION_ID`/roles/logging.
|
266
|
+
# viewer` for custom roles.
|
267
|
+
# Corresponds to the JSON property `availablePermissions`
|
268
|
+
# @return [Array<String>]
|
269
|
+
attr_accessor :available_permissions
|
270
|
+
|
271
|
+
# The full resource name of a Google Cloud resource entity. The format
|
272
|
+
# definition is at https://cloud.google.com/apis/design/resource_names. Example
|
273
|
+
# value: `//cloudresourcemanager.googleapis.com/projects/my-project`.
|
274
|
+
# Corresponds to the JSON property `availableResource`
|
275
|
+
# @return [String]
|
276
|
+
attr_accessor :available_resource
|
277
|
+
|
278
|
+
def initialize(**args)
|
279
|
+
update!(**args)
|
280
|
+
end
|
281
|
+
|
282
|
+
# Update properties of this object
|
283
|
+
def update!(**args)
|
284
|
+
@availability_condition = args[:availability_condition] if args.key?(:availability_condition)
|
285
|
+
@available_permissions = args[:available_permissions] if args.key?(:available_permissions)
|
286
|
+
@available_resource = args[:available_resource] if args.key?(:available_resource)
|
287
|
+
end
|
288
|
+
end
|
289
|
+
|
25
290
|
# Request message for ExchangeToken.
|
26
291
|
class GoogleIdentityStsV1betaExchangeTokenRequest
|
27
292
|
include Google::Apis::Core::Hashable
|
28
293
|
|
29
294
|
# The full resource name of the identity provider. For example, `//iam.
|
30
|
-
# googleapis.com/projects//workloadIdentityPools//providers/`.
|
31
|
-
# exchanging an external credential for a Google access token.
|
295
|
+
# googleapis.com/projects//locations/global/workloadIdentityPools//providers/`.
|
296
|
+
# Required when exchanging an external credential for a Google access token.
|
32
297
|
# Corresponds to the JSON property `audience`
|
33
298
|
# @return [String]
|
34
299
|
attr_accessor :audience
|
@@ -63,15 +328,16 @@ module Google
|
|
63
328
|
# by a workload identity pool provider, or a short-lived access token issued by
|
64
329
|
# Google. If the token is an OIDC JWT, it must use the JWT format defined in [
|
65
330
|
# RFC 7523](https://tools.ietf.org/html/rfc7523), and the `subject_token_type`
|
66
|
-
# must be `urn:ietf:params:oauth:token-type:jwt
|
67
|
-
#
|
68
|
-
#
|
69
|
-
#
|
70
|
-
# Section 3](https://
|
71
|
-
#
|
72
|
-
#
|
73
|
-
#
|
74
|
-
# specification](
|
331
|
+
# must be either `urn:ietf:params:oauth:token-type:jwt` or `urn:ietf:params:
|
332
|
+
# oauth:token-type:id_token`. The following headers are required: - `kid`: The
|
333
|
+
# identifier of the signing key securing the JWT. - `alg`: The cryptographic
|
334
|
+
# algorithm securing the JWT. Must be `RS256` or `ES256`. The following payload
|
335
|
+
# fields are required. For more information, see [RFC 7523, Section 3](https://
|
336
|
+
# tools.ietf.org/html/rfc7523#section-3): - `iss`: The issuer of the token. The
|
337
|
+
# issuer must provide a discovery document at the URL `/.well-known/openid-
|
338
|
+
# configuration`, where `` is the value of this field. The document must be
|
339
|
+
# formatted according to section 4.2 of the [OIDC 1.0 Discovery specification](
|
340
|
+
# https://openid.net/specs/openid-connect-discovery-1_0.html#
|
75
341
|
# ProviderConfigurationResponse). - `iat`: The issue time, in seconds, since the
|
76
342
|
# Unix epoch. Must be in the past. - `exp`: The expiration time, in seconds,
|
77
343
|
# since the Unix epoch. Must be less than 48 hours after `iat`. Shorter
|
@@ -106,8 +372,8 @@ module Google
|
|
106
372
|
# The full, canonical resource name of the workload identity pool provider, with
|
107
373
|
# or without an `https:` prefix. To help ensure data integrity, we recommend
|
108
374
|
# including this header in the `SignedHeaders` field of the signed request. For
|
109
|
-
# example: //iam.googleapis.com/projects//locations
|
110
|
-
# providers/ https://iam.googleapis.com/projects//locations
|
375
|
+
# example: //iam.googleapis.com/projects//locations/global/workloadIdentityPools/
|
376
|
+
# /providers/ https://iam.googleapis.com/projects//locations/global/
|
111
377
|
# workloadIdentityPools//providers/ If you are using temporary security
|
112
378
|
# credentials provided by AWS, you must also include the header `x-amz-security-
|
113
379
|
# token`, with the value set to the session token. The following example shows a
|
@@ -115,8 +381,8 @@ module Google
|
|
115
381
|
# 20200815T015049Z"`, `"key": "Authorization", "value": "AWS4-HMAC-SHA256+
|
116
382
|
# Credential=$credential,+SignedHeaders=host;x-amz-date;x-goog-cloud-target-
|
117
383
|
# resource,+Signature=$signature"`, `"key": "x-goog-cloud-target-resource", "
|
118
|
-
# value": "//iam.googleapis.com/projects//locations
|
119
|
-
# providers/"`, `"key": "host", "value": "sts.amazonaws.com"` . ], "method": "
|
384
|
+
# value": "//iam.googleapis.com/projects//locations/global/workloadIdentityPools/
|
385
|
+
# /providers/"`, `"key": "host", "value": "sts.amazonaws.com"` . ], "method": "
|
120
386
|
# POST", "url": "https://sts.amazonaws.com?Action=GetCallerIdentity&Version=2011-
|
121
387
|
# 06-15" ` ``` You can also use a Google-issued OAuth 2.0 access token with this
|
122
388
|
# field to obtain an access token with new security attributes applied, such as
|
@@ -129,8 +395,8 @@ module Google
|
|
129
395
|
|
130
396
|
# Required. An identifier that indicates the type of the security token in the `
|
131
397
|
# subject_token` parameter. Supported values are `urn:ietf:params:oauth:token-
|
132
|
-
# type:jwt`, `urn:ietf:params:
|
133
|
-
# oauth:token-type:access_token`.
|
398
|
+
# type:jwt`, `urn:ietf:params:oauth:token-type:id_token`, `urn:ietf:params:aws:
|
399
|
+
# token-type:aws4_request`, and `urn:ietf:params:oauth:token-type:access_token`.
|
134
400
|
# Corresponds to the JSON property `subjectTokenType`
|
135
401
|
# @return [String]
|
136
402
|
attr_accessor :subject_token_type
|
@@ -195,6 +461,102 @@ module Google
|
|
195
461
|
@token_type = args[:token_type] if args.key?(:token_type)
|
196
462
|
end
|
197
463
|
end
|
464
|
+
|
465
|
+
# An `Options` object configures features that the Security Token Service
|
466
|
+
# supports, but that are not supported by standard OAuth 2.0 token exchange
|
467
|
+
# endpoints, as defined in https://tools.ietf.org/html/rfc8693.
|
468
|
+
class GoogleIdentityStsV1betaOptions
|
469
|
+
include Google::Apis::Core::Hashable
|
470
|
+
|
471
|
+
# An access boundary defines the upper bound of what a principal may access. It
|
472
|
+
# includes a list of access boundary rules that each defines the resource that
|
473
|
+
# may be allowed as well as permissions that may be used on those resources.
|
474
|
+
# Corresponds to the JSON property `accessBoundary`
|
475
|
+
# @return [Google::Apis::StsV1beta::GoogleIdentityStsV1betaAccessBoundary]
|
476
|
+
attr_accessor :access_boundary
|
477
|
+
|
478
|
+
# The intended audience(s) of the credential. The audience value(s) should be
|
479
|
+
# the name(s) of services intended to receive the credential. Example: `["https:/
|
480
|
+
# /pubsub.googleapis.com/", "https://storage.googleapis.com/"]`. A maximum of 5
|
481
|
+
# audiences can be included. For each provided audience, the maximum length is
|
482
|
+
# 262 characters.
|
483
|
+
# Corresponds to the JSON property `audiences`
|
484
|
+
# @return [Array<String>]
|
485
|
+
attr_accessor :audiences
|
486
|
+
|
487
|
+
# A Google project used for quota and billing purposes when the credential is
|
488
|
+
# used to access Google APIs. The provided project overrides the project bound
|
489
|
+
# to the credential. The value must be a project number or a project ID. Example:
|
490
|
+
# `my-sample-project-191923`. The maximum length is 32 characters.
|
491
|
+
# Corresponds to the JSON property `userProject`
|
492
|
+
# @return [String]
|
493
|
+
attr_accessor :user_project
|
494
|
+
|
495
|
+
def initialize(**args)
|
496
|
+
update!(**args)
|
497
|
+
end
|
498
|
+
|
499
|
+
# Update properties of this object
|
500
|
+
def update!(**args)
|
501
|
+
@access_boundary = args[:access_boundary] if args.key?(:access_boundary)
|
502
|
+
@audiences = args[:audiences] if args.key?(:audiences)
|
503
|
+
@user_project = args[:user_project] if args.key?(:user_project)
|
504
|
+
end
|
505
|
+
end
|
506
|
+
|
507
|
+
# Represents a textual expression in the Common Expression Language (CEL) syntax.
|
508
|
+
# CEL is a C-like expression language. The syntax and semantics of CEL are
|
509
|
+
# documented at https://github.com/google/cel-spec. Example (Comparison): title:
|
510
|
+
# "Summary size limit" description: "Determines if a summary is less than 100
|
511
|
+
# chars" expression: "document.summary.size() < 100" Example (Equality): title: "
|
512
|
+
# Requestor is owner" description: "Determines if requestor is the document
|
513
|
+
# owner" expression: "document.owner == request.auth.claims.email" Example (
|
514
|
+
# Logic): title: "Public documents" description: "Determine whether the document
|
515
|
+
# should be publicly visible" expression: "document.type != 'private' &&
|
516
|
+
# document.type != 'internal'" Example (Data Manipulation): title: "Notification
|
517
|
+
# string" description: "Create a notification string with a timestamp."
|
518
|
+
# expression: "'New message received at ' + string(document.create_time)" The
|
519
|
+
# exact variables and functions that may be referenced within an expression are
|
520
|
+
# determined by the service that evaluates it. See the service documentation for
|
521
|
+
# additional information.
|
522
|
+
class GoogleTypeExpr
|
523
|
+
include Google::Apis::Core::Hashable
|
524
|
+
|
525
|
+
# Optional. Description of the expression. This is a longer text which describes
|
526
|
+
# the expression, e.g. when hovered over it in a UI.
|
527
|
+
# Corresponds to the JSON property `description`
|
528
|
+
# @return [String]
|
529
|
+
attr_accessor :description
|
530
|
+
|
531
|
+
# Textual representation of an expression in Common Expression Language syntax.
|
532
|
+
# Corresponds to the JSON property `expression`
|
533
|
+
# @return [String]
|
534
|
+
attr_accessor :expression
|
535
|
+
|
536
|
+
# Optional. String indicating the location of the expression for error reporting,
|
537
|
+
# e.g. a file name and a position in the file.
|
538
|
+
# Corresponds to the JSON property `location`
|
539
|
+
# @return [String]
|
540
|
+
attr_accessor :location
|
541
|
+
|
542
|
+
# Optional. Title for the expression, i.e. a short string describing its purpose.
|
543
|
+
# This can be used e.g. in UIs which allow to enter the expression.
|
544
|
+
# Corresponds to the JSON property `title`
|
545
|
+
# @return [String]
|
546
|
+
attr_accessor :title
|
547
|
+
|
548
|
+
def initialize(**args)
|
549
|
+
update!(**args)
|
550
|
+
end
|
551
|
+
|
552
|
+
# Update properties of this object
|
553
|
+
def update!(**args)
|
554
|
+
@description = args[:description] if args.key?(:description)
|
555
|
+
@expression = args[:expression] if args.key?(:expression)
|
556
|
+
@location = args[:location] if args.key?(:location)
|
557
|
+
@title = args[:title] if args.key?(:title)
|
558
|
+
end
|
559
|
+
end
|
198
560
|
end
|
199
561
|
end
|
200
562
|
end
|
@@ -16,13 +16,13 @@ module Google
|
|
16
16
|
module Apis
|
17
17
|
module StsV1beta
|
18
18
|
# Version of the google-apis-sts_v1beta gem
|
19
|
-
GEM_VERSION = "0.
|
19
|
+
GEM_VERSION = "0.12.0"
|
20
20
|
|
21
21
|
# Version of the code generator used to generate this client
|
22
|
-
GENERATOR_VERSION = "0.
|
22
|
+
GENERATOR_VERSION = "0.4.0"
|
23
23
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
25
|
-
REVISION = "
|
25
|
+
REVISION = "20211015"
|
26
26
|
end
|
27
27
|
end
|
28
28
|
end
|
@@ -22,6 +22,42 @@ module Google
|
|
22
22
|
module Apis
|
23
23
|
module StsV1beta
|
24
24
|
|
25
|
+
class GoogleIamV1Binding
|
26
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
27
|
+
|
28
|
+
include Google::Apis::Core::JsonObjectSupport
|
29
|
+
end
|
30
|
+
|
31
|
+
class GoogleIdentityStsV1AccessBoundary
|
32
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
33
|
+
|
34
|
+
include Google::Apis::Core::JsonObjectSupport
|
35
|
+
end
|
36
|
+
|
37
|
+
class GoogleIdentityStsV1AccessBoundaryRule
|
38
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
39
|
+
|
40
|
+
include Google::Apis::Core::JsonObjectSupport
|
41
|
+
end
|
42
|
+
|
43
|
+
class GoogleIdentityStsV1Options
|
44
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
45
|
+
|
46
|
+
include Google::Apis::Core::JsonObjectSupport
|
47
|
+
end
|
48
|
+
|
49
|
+
class GoogleIdentityStsV1betaAccessBoundary
|
50
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
51
|
+
|
52
|
+
include Google::Apis::Core::JsonObjectSupport
|
53
|
+
end
|
54
|
+
|
55
|
+
class GoogleIdentityStsV1betaAccessBoundaryRule
|
56
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
57
|
+
|
58
|
+
include Google::Apis::Core::JsonObjectSupport
|
59
|
+
end
|
60
|
+
|
25
61
|
class GoogleIdentityStsV1betaExchangeTokenRequest
|
26
62
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
27
63
|
|
@@ -34,6 +70,74 @@ module Google
|
|
34
70
|
include Google::Apis::Core::JsonObjectSupport
|
35
71
|
end
|
36
72
|
|
73
|
+
class GoogleIdentityStsV1betaOptions
|
74
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
75
|
+
|
76
|
+
include Google::Apis::Core::JsonObjectSupport
|
77
|
+
end
|
78
|
+
|
79
|
+
class GoogleTypeExpr
|
80
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
81
|
+
|
82
|
+
include Google::Apis::Core::JsonObjectSupport
|
83
|
+
end
|
84
|
+
|
85
|
+
class GoogleIamV1Binding
|
86
|
+
# @private
|
87
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
88
|
+
property :condition, as: 'condition', class: Google::Apis::StsV1beta::GoogleTypeExpr, decorator: Google::Apis::StsV1beta::GoogleTypeExpr::Representation
|
89
|
+
|
90
|
+
collection :members, as: 'members'
|
91
|
+
property :role, as: 'role'
|
92
|
+
end
|
93
|
+
end
|
94
|
+
|
95
|
+
class GoogleIdentityStsV1AccessBoundary
|
96
|
+
# @private
|
97
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
98
|
+
collection :access_boundary_rules, as: 'accessBoundaryRules', class: Google::Apis::StsV1beta::GoogleIdentityStsV1AccessBoundaryRule, decorator: Google::Apis::StsV1beta::GoogleIdentityStsV1AccessBoundaryRule::Representation
|
99
|
+
|
100
|
+
end
|
101
|
+
end
|
102
|
+
|
103
|
+
class GoogleIdentityStsV1AccessBoundaryRule
|
104
|
+
# @private
|
105
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
106
|
+
property :availability_condition, as: 'availabilityCondition', class: Google::Apis::StsV1beta::GoogleTypeExpr, decorator: Google::Apis::StsV1beta::GoogleTypeExpr::Representation
|
107
|
+
|
108
|
+
collection :available_permissions, as: 'availablePermissions'
|
109
|
+
property :available_resource, as: 'availableResource'
|
110
|
+
end
|
111
|
+
end
|
112
|
+
|
113
|
+
class GoogleIdentityStsV1Options
|
114
|
+
# @private
|
115
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
116
|
+
property :access_boundary, as: 'accessBoundary', class: Google::Apis::StsV1beta::GoogleIdentityStsV1AccessBoundary, decorator: Google::Apis::StsV1beta::GoogleIdentityStsV1AccessBoundary::Representation
|
117
|
+
|
118
|
+
collection :audiences, as: 'audiences'
|
119
|
+
property :user_project, as: 'userProject'
|
120
|
+
end
|
121
|
+
end
|
122
|
+
|
123
|
+
class GoogleIdentityStsV1betaAccessBoundary
|
124
|
+
# @private
|
125
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
126
|
+
collection :access_boundary_rules, as: 'accessBoundaryRules', class: Google::Apis::StsV1beta::GoogleIdentityStsV1betaAccessBoundaryRule, decorator: Google::Apis::StsV1beta::GoogleIdentityStsV1betaAccessBoundaryRule::Representation
|
127
|
+
|
128
|
+
end
|
129
|
+
end
|
130
|
+
|
131
|
+
class GoogleIdentityStsV1betaAccessBoundaryRule
|
132
|
+
# @private
|
133
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
134
|
+
property :availability_condition, as: 'availabilityCondition', class: Google::Apis::StsV1beta::GoogleTypeExpr, decorator: Google::Apis::StsV1beta::GoogleTypeExpr::Representation
|
135
|
+
|
136
|
+
collection :available_permissions, as: 'availablePermissions'
|
137
|
+
property :available_resource, as: 'availableResource'
|
138
|
+
end
|
139
|
+
end
|
140
|
+
|
37
141
|
class GoogleIdentityStsV1betaExchangeTokenRequest
|
38
142
|
# @private
|
39
143
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -56,6 +160,26 @@ module Google
|
|
56
160
|
property :token_type, as: 'token_type'
|
57
161
|
end
|
58
162
|
end
|
163
|
+
|
164
|
+
class GoogleIdentityStsV1betaOptions
|
165
|
+
# @private
|
166
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
167
|
+
property :access_boundary, as: 'accessBoundary', class: Google::Apis::StsV1beta::GoogleIdentityStsV1betaAccessBoundary, decorator: Google::Apis::StsV1beta::GoogleIdentityStsV1betaAccessBoundary::Representation
|
168
|
+
|
169
|
+
collection :audiences, as: 'audiences'
|
170
|
+
property :user_project, as: 'userProject'
|
171
|
+
end
|
172
|
+
end
|
173
|
+
|
174
|
+
class GoogleTypeExpr
|
175
|
+
# @private
|
176
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
177
|
+
property :description, as: 'description'
|
178
|
+
property :expression, as: 'expression'
|
179
|
+
property :location, as: 'location'
|
180
|
+
property :title, as: 'title'
|
181
|
+
end
|
182
|
+
end
|
59
183
|
end
|
60
184
|
end
|
61
185
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-apis-sts_v1beta
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.12.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-
|
11
|
+
date: 2021-10-27 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: google-apis-core
|
@@ -16,7 +16,7 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - ">="
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: '0.
|
19
|
+
version: '0.4'
|
20
20
|
- - "<"
|
21
21
|
- !ruby/object:Gem::Version
|
22
22
|
version: 2.a
|
@@ -26,7 +26,7 @@ dependencies:
|
|
26
26
|
requirements:
|
27
27
|
- - ">="
|
28
28
|
- !ruby/object:Gem::Version
|
29
|
-
version: '0.
|
29
|
+
version: '0.4'
|
30
30
|
- - "<"
|
31
31
|
- !ruby/object:Gem::Version
|
32
32
|
version: 2.a
|
@@ -57,9 +57,9 @@ licenses:
|
|
57
57
|
- Apache-2.0
|
58
58
|
metadata:
|
59
59
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
60
|
-
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/
|
61
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1beta/v0.
|
62
|
-
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/
|
60
|
+
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-sts_v1beta/CHANGELOG.md
|
61
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-sts_v1beta/v0.12.0
|
62
|
+
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-sts_v1beta
|
63
63
|
post_install_message:
|
64
64
|
rdoc_options: []
|
65
65
|
require_paths:
|