google-cloud-service_management-v1 0.1.1 → 0.3.3

data/lib/google/api/servicemanagement/v1/servicemanager_services_pb.rb

@@ -24,7 +24,7 @@ module Google
     module ServiceManagement
       module V1
         module ServiceManager
-          # [Google Service Management API](/service-management/overview)
+          # [Google Service Management API](https://cloud.google.com/service-management/overview)
           class Service
 
             include GRPC::GenericService

data/lib/google/cloud/service_management/v1/service_manager.rb

@@ -31,7 +31,7 @@ module Google
     module ServiceManagement
       module V1
         ##
-        # [Google Service Management API](/service-management/overview)
+        # [Google Service Management API](https://cloud.google.com/service-management/overview)
         #
         # To load this service and instantiate a client:
         #

data/lib/google/cloud/service_management/v1/service_manager/client.rb

@@ -27,7 +27,7 @@ module Google
           ##
           # Client for the ServiceManager service.
           #
-          # [Google Service Management API](/service-management/overview)
+          # [Google Service Management API](https://cloud.google.com/service-management/overview)
           #
           class Client
             # @private
@@ -58,7 +58,7 @@ module Google
                 parent_config = while namespace.any?
                                   parent_name = namespace.join "::"
                                   parent_const = const_get parent_name
-                                  break parent_const.configure if parent_const&.respond_to? :configure
+                                  break parent_const.configure if parent_const.respond_to? :configure
                                   namespace.pop
                                 end
                 default_config = Client::Configuration.new parent_config
@@ -124,8 +124,14 @@ module Google
 
               # Create credentials
               credentials = @config.credentials
-              credentials ||= Credentials.default scope: @config.scope
-              if credentials.is_a?(String) || credentials.is_a?(Hash)
+              # Use self-signed JWT if the scope and endpoint are unchanged from default,
+              # but only if the default endpoint does not have a region prefix.
+              enable_self_signed_jwt = @config.scope == Client.configure.scope &&
+                                       @config.endpoint == Client.configure.endpoint &&
+                                       !@config.endpoint.split(".").first.include?("-")
+              credentials ||= Credentials.default scope: @config.scope,
+                                                  enable_self_signed_jwt: enable_self_signed_jwt
+              if credentials.is_a?(::String) || credentials.is_a?(::Hash)
                 credentials = Credentials.new credentials, scope: @config.scope
               end
               @quota_project_id = @config.quota_project
@@ -391,7 +397,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service.  See the [overview](/service-management/overview)
+            #     Required. The name of the service.  See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements.  For example: `example.googleapis.com`.
             #
             # @yield [response, operation] Access the result along with the RPC operation
@@ -464,7 +470,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service. See the [overview](/service-management/overview)
+            #     Required. The name of the service. See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements. For example: `example.googleapis.com`.
             #
             # @yield [response, operation] Access the result along with the RPC operation
@@ -533,7 +539,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service.  See the [overview](/service-management/overview)
+            #     Required. The name of the service.  See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements.  For example: `example.googleapis.com`.
             #   @param page_token [::String]
             #     The token of the page to retrieve.
@@ -606,7 +612,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service.  See the [overview](/service-management/overview)
+            #     Required. The name of the service.  See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements.  For example: `example.googleapis.com`.
             #   @param config_id [::String]
             #     Required. The id of the service configuration resource.
@@ -644,7 +650,7 @@ module Google
 
               header_params = {
                 "service_name" => request.service_name,
-                "config_id"    => request.config_id
+                "config_id" => request.config_id
               }
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
@@ -689,7 +695,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service.  See the [overview](/service-management/overview)
+            #     Required. The name of the service.  See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements.  For example: `example.googleapis.com`.
             #   @param service_config [::Google::Api::Service, ::Hash]
             #     Required. The service configuration resource.
@@ -770,7 +776,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service.  See the [overview](/service-management/overview)
+            #     Required. The name of the service.  See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements.  For example: `example.googleapis.com`.
             #   @param config_source [::Google::Cloud::ServiceManagement::V1::ConfigSource, ::Hash]
             #     Required. The source configuration for the service.
@@ -845,7 +851,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service.  See the [overview](/service-management/overview)
+            #     Required. The name of the service.  See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements.  For example: `example.googleapis.com`.
             #   @param page_token [::String]
             #     The token of the page to retrieve.
@@ -856,10 +862,10 @@ module Google
             #     Required. Use `filter` to return subset of rollouts.
             #     The following filters are supported:
             #       -- To limit the results to only those in
-            #          [status](google.api.servicemanagement.v1.RolloutStatus) 'SUCCESS',
+            #          status (google.api.servicemanagement.v1.RolloutStatus) 'SUCCESS',
             #          use filter='status=SUCCESS'
             #       -- To limit the results to those in
-            #          [status](google.api.servicemanagement.v1.RolloutStatus) 'CANCELLED'
+            #          status (google.api.servicemanagement.v1.RolloutStatus) 'CANCELLED'
             #          or 'FAILED', use filter='status=CANCELLED OR status=FAILED'
             #
             # @yield [response, operation] Access the result along with the RPC operation
@@ -927,7 +933,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service.  See the [overview](/service-management/overview)
+            #     Required. The name of the service.  See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements.  For example: `example.googleapis.com`.
             #   @param rollout_id [::String]
             #     Required. The id of the rollout resource.
@@ -959,7 +965,7 @@ module Google
 
               header_params = {
                 "service_name" => request.service_name,
-                "rollout_id"   => request.rollout_id
+                "rollout_id" => request.rollout_id
               }
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
@@ -1010,7 +1016,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param service_name [::String]
-            #     Required. The name of the service.  See the [overview](/service-management/overview)
+            #     Required. The name of the service.  See the [overview](https://cloud.google.com/service-management/overview)
             #     for naming requirements.  For example: `example.googleapis.com`.
             #   @param rollout [::Google::Cloud::ServiceManagement::V1::Rollout, ::Hash]
             #     Required. The rollout resource. The `service_name` field is output only.
@@ -1398,7 +1404,7 @@ module Google
               config_attr :scope,         nil, ::String, ::Array, nil
               config_attr :lib_name,      nil, ::String, nil
               config_attr :lib_version,   nil, ::String, nil
-              config_attr(:channel_args,  { "grpc.service_config_disable_resolution"=>1 }, ::Hash, nil)
+              config_attr(:channel_args,  { "grpc.service_config_disable_resolution" => 1 }, ::Hash, nil)
               config_attr :interceptors,  nil, ::Array, nil
               config_attr :timeout,       nil, ::Numeric, nil
               config_attr :metadata,      nil, ::Hash, nil
@@ -1419,7 +1425,7 @@ module Google
               def rpcs
                 @rpcs ||= begin
                   parent_rpcs = nil
-                  parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
+                  parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config.respond_to?(:rpcs)
                   Rpcs.new parent_rpcs
                 end
               end
@@ -1520,35 +1526,35 @@ module Google
 
                 # @private
                 def initialize parent_rpcs = nil
-                  list_services_config = parent_rpcs&.list_services if parent_rpcs&.respond_to? :list_services
+                  list_services_config = parent_rpcs.list_services if parent_rpcs.respond_to? :list_services
                   @list_services = ::Gapic::Config::Method.new list_services_config
-                  get_service_config = parent_rpcs&.get_service if parent_rpcs&.respond_to? :get_service
+                  get_service_config = parent_rpcs.get_service if parent_rpcs.respond_to? :get_service
                   @get_service = ::Gapic::Config::Method.new get_service_config
-                  create_service_config = parent_rpcs&.create_service if parent_rpcs&.respond_to? :create_service
+                  create_service_config = parent_rpcs.create_service if parent_rpcs.respond_to? :create_service
                   @create_service = ::Gapic::Config::Method.new create_service_config
-                  delete_service_config = parent_rpcs&.delete_service if parent_rpcs&.respond_to? :delete_service
+                  delete_service_config = parent_rpcs.delete_service if parent_rpcs.respond_to? :delete_service
                   @delete_service = ::Gapic::Config::Method.new delete_service_config
-                  undelete_service_config = parent_rpcs&.undelete_service if parent_rpcs&.respond_to? :undelete_service
+                  undelete_service_config = parent_rpcs.undelete_service if parent_rpcs.respond_to? :undelete_service
                   @undelete_service = ::Gapic::Config::Method.new undelete_service_config
-                  list_service_configs_config = parent_rpcs&.list_service_configs if parent_rpcs&.respond_to? :list_service_configs
+                  list_service_configs_config = parent_rpcs.list_service_configs if parent_rpcs.respond_to? :list_service_configs
                   @list_service_configs = ::Gapic::Config::Method.new list_service_configs_config
-                  get_service_config_config = parent_rpcs&.get_service_config if parent_rpcs&.respond_to? :get_service_config
+                  get_service_config_config = parent_rpcs.get_service_config if parent_rpcs.respond_to? :get_service_config
                   @get_service_config = ::Gapic::Config::Method.new get_service_config_config
-                  create_service_config_config = parent_rpcs&.create_service_config if parent_rpcs&.respond_to? :create_service_config
+                  create_service_config_config = parent_rpcs.create_service_config if parent_rpcs.respond_to? :create_service_config
                   @create_service_config = ::Gapic::Config::Method.new create_service_config_config
-                  submit_config_source_config = parent_rpcs&.submit_config_source if parent_rpcs&.respond_to? :submit_config_source
+                  submit_config_source_config = parent_rpcs.submit_config_source if parent_rpcs.respond_to? :submit_config_source
                   @submit_config_source = ::Gapic::Config::Method.new submit_config_source_config
-                  list_service_rollouts_config = parent_rpcs&.list_service_rollouts if parent_rpcs&.respond_to? :list_service_rollouts
+                  list_service_rollouts_config = parent_rpcs.list_service_rollouts if parent_rpcs.respond_to? :list_service_rollouts
                   @list_service_rollouts = ::Gapic::Config::Method.new list_service_rollouts_config
-                  get_service_rollout_config = parent_rpcs&.get_service_rollout if parent_rpcs&.respond_to? :get_service_rollout
+                  get_service_rollout_config = parent_rpcs.get_service_rollout if parent_rpcs.respond_to? :get_service_rollout
                   @get_service_rollout = ::Gapic::Config::Method.new get_service_rollout_config
-                  create_service_rollout_config = parent_rpcs&.create_service_rollout if parent_rpcs&.respond_to? :create_service_rollout
+                  create_service_rollout_config = parent_rpcs.create_service_rollout if parent_rpcs.respond_to? :create_service_rollout
                   @create_service_rollout = ::Gapic::Config::Method.new create_service_rollout_config
-                  generate_config_report_config = parent_rpcs&.generate_config_report if parent_rpcs&.respond_to? :generate_config_report
+                  generate_config_report_config = parent_rpcs.generate_config_report if parent_rpcs.respond_to? :generate_config_report
                   @generate_config_report = ::Gapic::Config::Method.new generate_config_report_config
-                  enable_service_config = parent_rpcs&.enable_service if parent_rpcs&.respond_to? :enable_service
+                  enable_service_config = parent_rpcs.enable_service if parent_rpcs.respond_to? :enable_service
                   @enable_service = ::Gapic::Config::Method.new enable_service_config
-                  disable_service_config = parent_rpcs&.disable_service if parent_rpcs&.respond_to? :disable_service
+                  disable_service_config = parent_rpcs.disable_service if parent_rpcs.respond_to? :disable_service
                   @disable_service = ::Gapic::Config::Method.new disable_service_config
 
                   yield self if block_given?

data/lib/google/cloud/service_management/v1/service_manager/operations.rb

@@ -82,7 +82,7 @@ module Google
               # Create credentials
               credentials = @config.credentials
               credentials ||= Credentials.default scope: @config.scope
-              if credentials.is_a?(String) || credentials.is_a?(Hash)
+              if credentials.is_a?(::String) || credentials.is_a?(::Hash)
                 credentials = Credentials.new credentials, scope: @config.scope
               end
               @quota_project_id = @config.quota_project
@@ -103,8 +103,13 @@ module Google
             # Lists operations that match the specified filter in the request. If the
             # server doesn't support this method, it returns `UNIMPLEMENTED`.
             #
-            # NOTE: the `name` binding below allows API services to override the binding
-            # to use different resource name schemes, such as `users/*/operations`.
+            # NOTE: the `name` binding allows API services to override the binding
+            # to use different resource name schemes, such as `users/*/operations`. To
+            # override the binding, API services can add a binding such as
+            # `"/v1/{name=users/*}/operations"` to their service configuration.
+            # For backwards compatibility, the default name includes the operations
+            # collection id, however overriding users must ensure the name binding
+            # is the parent resource, without the operations collection id.
             #
             # @overload list_operations(request, options = nil)
             #   Pass arguments to `list_operations` via a request object, either of type
@@ -122,7 +127,7 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param name [::String]
-            #     The name of the operation collection.
+            #     The name of the operation's parent resource.
             #   @param filter [::String]
             #     The standard list filter.
             #   @param page_size [::Integer]
@@ -390,6 +395,79 @@ module Google
               raise ::Google::Cloud::Error.from_error(e)
             end
 
+            ##
+            # Waits until the specified long-running operation is done or reaches at most
+            # a specified timeout, returning the latest state.  If the operation is
+            # already done, the latest state is immediately returned.  If the timeout
+            # specified is greater than the default HTTP/RPC timeout, the HTTP/RPC
+            # timeout is used.  If the server does not support this method, it returns
+            # `google.rpc.Code.UNIMPLEMENTED`.
+            # Note that this method is on a best-effort basis.  It may return the latest
+            # state before the specified timeout (including immediately), meaning even an
+            # immediate response is no guarantee that the operation is done.
+            #
+            # @overload wait_operation(request, options = nil)
+            #   Pass arguments to `wait_operation` via a request object, either of type
+            #   {::Google::Longrunning::WaitOperationRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Longrunning::WaitOperationRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload wait_operation(name: nil, timeout: nil)
+            #   Pass arguments to `wait_operation` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param name [::String]
+            #     The name of the operation resource to wait on.
+            #   @param timeout [::Google::Protobuf::Duration, ::Hash]
+            #     The maximum duration to wait before timing out. If left blank, the wait
+            #     will be at most the time permitted by the underlying HTTP/RPC protocol.
+            #     If RPC context deadline is also specified, the shorter one will be used.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Gapic::Operation]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Gapic::Operation]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            def wait_operation request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Longrunning::WaitOperationRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.wait_operation.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::ServiceManagement::V1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              options.apply_defaults timeout:      @config.rpcs.wait_operation.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.wait_operation.retry_policy
+              options.apply_defaults metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @operations_stub.call_rpc :wait_operation, request, options: options do |response, operation|
+                response = ::Gapic::Operation.new response, @operations_client, options: options
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
             ##
             # Configuration class for the Operations API.
             #
@@ -482,7 +560,7 @@ module Google
               config_attr :scope,         nil, ::String, ::Array, nil
               config_attr :lib_name,      nil, ::String, nil
               config_attr :lib_version,   nil, ::String, nil
-              config_attr(:channel_args,  { "grpc.service_config_disable_resolution"=>1 }, ::Hash, nil)
+              config_attr(:channel_args,  { "grpc.service_config_disable_resolution" => 1 }, ::Hash, nil)
               config_attr :interceptors,  nil, ::Array, nil
               config_attr :timeout,       nil, ::Numeric, nil
               config_attr :metadata,      nil, ::Hash, nil
@@ -503,7 +581,7 @@ module Google
               def rpcs
                 @rpcs ||= begin
                   parent_rpcs = nil
-                  parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
+                  parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config.respond_to?(:rpcs)
                   Rpcs.new parent_rpcs
                 end
               end
@@ -546,17 +624,24 @@ module Google
                 # @return [::Gapic::Config::Method]
                 #
                 attr_reader :cancel_operation
+                ##
+                # RPC-specific configuration for `wait_operation`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :wait_operation
 
                 # @private
                 def initialize parent_rpcs = nil
-                  list_operations_config = parent_rpcs&.list_operations if parent_rpcs&.respond_to? :list_operations
+                  list_operations_config = parent_rpcs.list_operations if parent_rpcs.respond_to? :list_operations
                   @list_operations = ::Gapic::Config::Method.new list_operations_config
-                  get_operation_config = parent_rpcs&.get_operation if parent_rpcs&.respond_to? :get_operation
+                  get_operation_config = parent_rpcs.get_operation if parent_rpcs.respond_to? :get_operation
                   @get_operation = ::Gapic::Config::Method.new get_operation_config
-                  delete_operation_config = parent_rpcs&.delete_operation if parent_rpcs&.respond_to? :delete_operation
+                  delete_operation_config = parent_rpcs.delete_operation if parent_rpcs.respond_to? :delete_operation
                   @delete_operation = ::Gapic::Config::Method.new delete_operation_config
-                  cancel_operation_config = parent_rpcs&.cancel_operation if parent_rpcs&.respond_to? :cancel_operation
+                  cancel_operation_config = parent_rpcs.cancel_operation if parent_rpcs.respond_to? :cancel_operation
                   @cancel_operation = ::Gapic::Config::Method.new cancel_operation_config
+                  wait_operation_config = parent_rpcs.wait_operation if parent_rpcs.respond_to? :wait_operation
+                  @wait_operation = ::Gapic::Config::Method.new wait_operation_config
 
                   yield self if block_given?
                 end

data/lib/google/cloud/service_management/v1/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module ServiceManagement
       module V1
-        VERSION = "0.1.1"
+        VERSION = "0.3.3"
       end
     end
   end

data/proto_docs/google/api/auth.rb

@@ -19,9 +19,10 @@
 
 module Google
   module Api
-    # `Authentication` defines the authentication configuration for an API.
+    # `Authentication` defines the authentication configuration for API methods
+    # provided by an API service.
     #
-    # Example for an API targeted for external use:
+    # Example:
     #
     #     name: calendar.googleapis.com
     #     authentication:
@@ -33,6 +34,9 @@ module Google
     #       - selector: "*"
     #         requirements:
     #           provider_id: google_calendar_auth
+    #       - selector: google.calendar.Delegate
+    #         oauth:
+    #           canonical_scopes: https://www.googleapis.com/auth/calendar.read
     # @!attribute [rw] rules
     #   @return [::Array<::Google::Api::AuthenticationRule>]
     #     A list of authentication rules that apply to individual API methods.
@@ -66,6 +70,7 @@ module Google
     # @!attribute [rw] allow_without_credential
     #   @return [::Boolean]
     #     If true, the service accepts API keys without any other credential.
+    #     This flag only applies to HTTP and gRPC requests.
     # @!attribute [rw] requirements
     #   @return [::Array<::Google::Api::AuthRequirement>]
     #     Requirements for additional authentication providers.
@@ -74,8 +79,31 @@ module Google
       extend ::Google::Protobuf::MessageExts::ClassMethods
     end
 
-    # Configuration for an anthentication provider, including support for
-    # [JSON Web Token (JWT)](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32).
+    # Specifies a location to extract JWT from an API request.
+    # @!attribute [rw] header
+    #   @return [::String]
+    #     Specifies HTTP header name to extract JWT token.
+    # @!attribute [rw] query
+    #   @return [::String]
+    #     Specifies URL query parameter name to extract JWT token.
+    # @!attribute [rw] value_prefix
+    #   @return [::String]
+    #     The value prefix. The value format is "value_prefix\\{token}"
+    #     Only applies to "in" header type. Must be empty for "in" query type.
+    #     If not empty, the header value has to match (case sensitive) this prefix.
+    #     If not matched, JWT will not be extracted. If matched, JWT will be
+    #     extracted after the prefix is removed.
+    #
+    #     For example, for "Authorization: Bearer \\{JWT}",
+    #     value_prefix="Bearer " with a space at the end.
+    class JwtLocation
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # Configuration for an authentication provider, including support for
+    # [JSON Web Token
+    # (JWT)](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32).
     # @!attribute [rw] id
     #   @return [::String]
     #     The unique identifier of the auth provider. It will be referred to by
@@ -93,12 +121,15 @@ module Google
     # @!attribute [rw] jwks_uri
     #   @return [::String]
     #     URL of the provider's public key set to validate signature of the JWT. See
-    #     [OpenID Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata).
+    #     [OpenID
+    #     Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata).
     #     Optional if the key set document:
     #      - can be retrieved from
-    #        [OpenID Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html
+    #        [OpenID
+    #        Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html)
     #        of the issuer.
-    #      - can be inferred from the email domain of the issuer (e.g. a Google service account).
+    #      - can be inferred from the email domain of the issuer (e.g. a Google
+    #      service account).
     #
     #     Example: https://www.googleapis.com/oauth2/v1/certs
     # @!attribute [rw] audiences
@@ -106,11 +137,15 @@ module Google
     #     The list of JWT
     #     [audiences](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32#section-4.1.3).
     #     that are allowed to access. A JWT containing any of these audiences will
-    #     be accepted. When this setting is absent, only JWTs with audience
-    #     "https://{::Google::Api::Service#name Service_name}/{::Google::Protobuf::Api#name API_name}"
-    #     will be accepted. For example, if no audiences are in the setting,
-    #     LibraryService API will only accept JWTs with the following audience
-    #     "https://library-example.googleapis.com/google.example.library.v1.LibraryService".
+    #     be accepted. When this setting is absent, JWTs with audiences:
+    #       - "https://[service.name]/[google.protobuf.Api.name]"
+    #       - "https://[service.name]/"
+    #     will be accepted.
+    #     For example, if no audiences are in the setting, LibraryService API will
+    #     accept JWTs with the following audiences:
+    #       -
+    #       https://library-example.googleapis.com/google.example.library.v1.LibraryService
+    #       - https://library-example.googleapis.com/
     #
     #     Example:
     #
@@ -118,8 +153,27 @@ module Google
     #                    bookstore_web.apps.googleusercontent.com
     # @!attribute [rw] authorization_url
     #   @return [::String]
-    #     Redirect URL if JWT token is required but no present or is expired.
+    #     Redirect URL if JWT token is required but not present or is expired.
     #     Implement authorizationUrl of securityDefinitions in OpenAPI spec.
+    # @!attribute [rw] jwt_locations
+    #   @return [::Array<::Google::Api::JwtLocation>]
+    #     Defines the locations to extract the JWT.
+    #
+    #     JWT locations can be either from HTTP headers or URL query parameters.
+    #     The rule is that the first match wins. The checking order is: checking
+    #     all headers first, then URL query parameters.
+    #
+    #     If not specified,  default to use following 3 locations:
+    #        1) Authorization: Bearer
+    #        2) x-goog-iap-jwt-assertion
+    #        3) access_token query parameter
+    #
+    #     Default locations can be specified as followings:
+    #        jwt_locations:
+    #        - header: Authorization
+    #          value_prefix: "Bearer "
+    #        - header: x-goog-iap-jwt-assertion
+    #        - query: access_token
     class AuthProvider
       include ::Google::Protobuf::MessageExts
       extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -158,7 +212,8 @@ module Google
     end
 
     # User-defined authentication requirements, including support for
-    # [JSON Web Token (JWT)](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32).
+    # [JSON Web Token
+    # (JWT)](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32).
     # @!attribute [rw] provider_id
     #   @return [::String]
     #     {::Google::Api::AuthProvider#id id} from authentication provider.