@alis-build/common-es 1.0.3

package/google/iam/credentials/v1/common_pb.d.ts

@@ -0,0 +1,319 @@
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// @generated by protoc-gen-es v2.11.0 with parameter "target=js+dts"
+// @generated from file google/iam/credentials/v1/common.proto (package google.iam.credentials.v1, syntax proto3)
+/* eslint-disable */
+
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+import type { Duration } from "../../../protobuf/duration_pb";
+import type { Timestamp } from "../../../protobuf/timestamp_pb";
+
+/**
+ * Describes the file google/iam/credentials/v1/common.proto.
+ */
+export declare const file_google_iam_credentials_v1_common: GenFile;
+
+/**
+ * @generated from message google.iam.credentials.v1.GenerateAccessTokenRequest
+ */
+export declare type GenerateAccessTokenRequest = Message<"google.iam.credentials.v1.GenerateAccessTokenRequest"> & {
+  /**
+   * Required. The resource name of the service account for which the credentials
+   * are requested, in the following format:
+   * `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
+   * character is required; replacing it with a project ID is invalid.
+   *
+   * @generated from field: string name = 1;
+   */
+  name: string;
+
+  /**
+   * The sequence of service accounts in a delegation chain. Each service
+   * account must be granted the `roles/iam.serviceAccountTokenCreator` role
+   * on its next service account in the chain. The last service account in the
+   * chain must be granted the `roles/iam.serviceAccountTokenCreator` role
+   * on the service account that is specified in the `name` field of the
+   * request.
+   *
+   * The delegates must have the following format:
+   * `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
+   * character is required; replacing it with a project ID is invalid.
+   *
+   * @generated from field: repeated string delegates = 2;
+   */
+  delegates: string[];
+
+  /**
+   * Required. Code to identify the scopes to be included in the OAuth 2.0 access token.
+   * See https://developers.google.com/identity/protocols/googlescopes for more
+   * information.
+   * At least one value required.
+   *
+   * @generated from field: repeated string scope = 4;
+   */
+  scope: string[];
+
+  /**
+   * The desired lifetime duration of the access token in seconds.
+   * Must be set to a value less than or equal to 3600 (1 hour). If a value is
+   * not specified, the token's lifetime will be set to a default value of one
+   * hour.
+   *
+   * @generated from field: google.protobuf.Duration lifetime = 7;
+   */
+  lifetime?: Duration;
+};
+
+/**
+ * Describes the message google.iam.credentials.v1.GenerateAccessTokenRequest.
+ * Use `create(GenerateAccessTokenRequestSchema)` to create a new message.
+ */
+export declare const GenerateAccessTokenRequestSchema: GenMessage<GenerateAccessTokenRequest>;
+
+/**
+ * @generated from message google.iam.credentials.v1.GenerateAccessTokenResponse
+ */
+export declare type GenerateAccessTokenResponse = Message<"google.iam.credentials.v1.GenerateAccessTokenResponse"> & {
+  /**
+   * The OAuth 2.0 access token.
+   *
+   * @generated from field: string access_token = 1;
+   */
+  accessToken: string;
+
+  /**
+   * Token expiration time.
+   * The expiration time is always set.
+   *
+   * @generated from field: google.protobuf.Timestamp expire_time = 3;
+   */
+  expireTime?: Timestamp;
+};
+
+/**
+ * Describes the message google.iam.credentials.v1.GenerateAccessTokenResponse.
+ * Use `create(GenerateAccessTokenResponseSchema)` to create a new message.
+ */
+export declare const GenerateAccessTokenResponseSchema: GenMessage<GenerateAccessTokenResponse>;
+
+/**
+ * @generated from message google.iam.credentials.v1.SignBlobRequest
+ */
+export declare type SignBlobRequest = Message<"google.iam.credentials.v1.SignBlobRequest"> & {
+  /**
+   * Required. The resource name of the service account for which the credentials
+   * are requested, in the following format:
+   * `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
+   * character is required; replacing it with a project ID is invalid.
+   *
+   * @generated from field: string name = 1;
+   */
+  name: string;
+
+  /**
+   * The sequence of service accounts in a delegation chain. Each service
+   * account must be granted the `roles/iam.serviceAccountTokenCreator` role
+   * on its next service account in the chain. The last service account in the
+   * chain must be granted the `roles/iam.serviceAccountTokenCreator` role
+   * on the service account that is specified in the `name` field of the
+   * request.
+   *
+   * The delegates must have the following format:
+   * `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
+   * character is required; replacing it with a project ID is invalid.
+   *
+   * @generated from field: repeated string delegates = 3;
+   */
+  delegates: string[];
+
+  /**
+   * Required. The bytes to sign.
+   *
+   * @generated from field: bytes payload = 5;
+   */
+  payload: Uint8Array;
+};
+
+/**
+ * Describes the message google.iam.credentials.v1.SignBlobRequest.
+ * Use `create(SignBlobRequestSchema)` to create a new message.
+ */
+export declare const SignBlobRequestSchema: GenMessage<SignBlobRequest>;
+
+/**
+ * @generated from message google.iam.credentials.v1.SignBlobResponse
+ */
+export declare type SignBlobResponse = Message<"google.iam.credentials.v1.SignBlobResponse"> & {
+  /**
+   * The ID of the key used to sign the blob.
+   *
+   * @generated from field: string key_id = 1;
+   */
+  keyId: string;
+
+  /**
+   * The signed blob.
+   *
+   * @generated from field: bytes signed_blob = 4;
+   */
+  signedBlob: Uint8Array;
+};
+
+/**
+ * Describes the message google.iam.credentials.v1.SignBlobResponse.
+ * Use `create(SignBlobResponseSchema)` to create a new message.
+ */
+export declare const SignBlobResponseSchema: GenMessage<SignBlobResponse>;
+
+/**
+ * @generated from message google.iam.credentials.v1.SignJwtRequest
+ */
+export declare type SignJwtRequest = Message<"google.iam.credentials.v1.SignJwtRequest"> & {
+  /**
+   * Required. The resource name of the service account for which the credentials
+   * are requested, in the following format:
+   * `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
+   * character is required; replacing it with a project ID is invalid.
+   *
+   * @generated from field: string name = 1;
+   */
+  name: string;
+
+  /**
+   * The sequence of service accounts in a delegation chain. Each service
+   * account must be granted the `roles/iam.serviceAccountTokenCreator` role
+   * on its next service account in the chain. The last service account in the
+   * chain must be granted the `roles/iam.serviceAccountTokenCreator` role
+   * on the service account that is specified in the `name` field of the
+   * request.
+   *
+   * The delegates must have the following format:
+   * `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
+   * character is required; replacing it with a project ID is invalid.
+   *
+   * @generated from field: repeated string delegates = 3;
+   */
+  delegates: string[];
+
+  /**
+   * Required. The JWT payload to sign: a JSON object that contains a JWT Claims Set.
+   *
+   * @generated from field: string payload = 5;
+   */
+  payload: string;
+};
+
+/**
+ * Describes the message google.iam.credentials.v1.SignJwtRequest.
+ * Use `create(SignJwtRequestSchema)` to create a new message.
+ */
+export declare const SignJwtRequestSchema: GenMessage<SignJwtRequest>;
+
+/**
+ * @generated from message google.iam.credentials.v1.SignJwtResponse
+ */
+export declare type SignJwtResponse = Message<"google.iam.credentials.v1.SignJwtResponse"> & {
+  /**
+   * The ID of the key used to sign the JWT.
+   *
+   * @generated from field: string key_id = 1;
+   */
+  keyId: string;
+
+  /**
+   * The signed JWT.
+   *
+   * @generated from field: string signed_jwt = 2;
+   */
+  signedJwt: string;
+};
+
+/**
+ * Describes the message google.iam.credentials.v1.SignJwtResponse.
+ * Use `create(SignJwtResponseSchema)` to create a new message.
+ */
+export declare const SignJwtResponseSchema: GenMessage<SignJwtResponse>;
+
+/**
+ * @generated from message google.iam.credentials.v1.GenerateIdTokenRequest
+ */
+export declare type GenerateIdTokenRequest = Message<"google.iam.credentials.v1.GenerateIdTokenRequest"> & {
+  /**
+   * Required. The resource name of the service account for which the credentials
+   * are requested, in the following format:
+   * `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
+   * character is required; replacing it with a project ID is invalid.
+   *
+   * @generated from field: string name = 1;
+   */
+  name: string;
+
+  /**
+   * The sequence of service accounts in a delegation chain. Each service
+   * account must be granted the `roles/iam.serviceAccountTokenCreator` role
+   * on its next service account in the chain. The last service account in the
+   * chain must be granted the `roles/iam.serviceAccountTokenCreator` role
+   * on the service account that is specified in the `name` field of the
+   * request.
+   *
+   * The delegates must have the following format:
+   * `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
+   * character is required; replacing it with a project ID is invalid.
+   *
+   * @generated from field: repeated string delegates = 2;
+   */
+  delegates: string[];
+
+  /**
+   * Required. The audience for the token, such as the API or account that this token
+   * grants access to.
+   *
+   * @generated from field: string audience = 3;
+   */
+  audience: string;
+
+  /**
+   * Include the service account email in the token. If set to `true`, the
+   * token will contain `email` and `email_verified` claims.
+   *
+   * @generated from field: bool include_email = 4;
+   */
+  includeEmail: boolean;
+};
+
+/**
+ * Describes the message google.iam.credentials.v1.GenerateIdTokenRequest.
+ * Use `create(GenerateIdTokenRequestSchema)` to create a new message.
+ */
+export declare const GenerateIdTokenRequestSchema: GenMessage<GenerateIdTokenRequest>;
+
+/**
+ * @generated from message google.iam.credentials.v1.GenerateIdTokenResponse
+ */
+export declare type GenerateIdTokenResponse = Message<"google.iam.credentials.v1.GenerateIdTokenResponse"> & {
+  /**
+   * The OpenId Connect ID token.
+   *
+   * @generated from field: string token = 1;
+   */
+  token: string;
+};
+
+/**
+ * Describes the message google.iam.credentials.v1.GenerateIdTokenResponse.
+ * Use `create(GenerateIdTokenResponseSchema)` to create a new message.
+ */
+export declare const GenerateIdTokenResponseSchema: GenMessage<GenerateIdTokenResponse>;

package/google/iam/credentials/v1/common_pb.js

@@ -0,0 +1,85 @@
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// @generated by protoc-gen-es v2.11.0 with parameter "target=js+dts"
+// @generated from file google/iam/credentials/v1/common.proto (package google.iam.credentials.v1, syntax proto3)
+/* eslint-disable */
+
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_google_api_field_behavior } from "../../../api/field_behavior_pb";
+import { file_google_api_resource } from "../../../api/resource_pb";
+import { file_google_protobuf_duration } from "../../../protobuf/duration_pb";
+import { file_google_protobuf_timestamp } from "../../../protobuf/timestamp_pb";
+
+/**
+ * Describes the file google/iam/credentials/v1/common.proto.
+ */
+export const file_google_iam_credentials_v1_common = /*@__PURE__*/
+  fileDesc("CiZnb29nbGUvaWFtL2NyZWRlbnRpYWxzL3YxL2NvbW1vbi5wcm90bxIZZ29vZ2xlLmlhbS5jcmVkZW50aWFscy52MSKrAQoaR2VuZXJhdGVBY2Nlc3NUb2tlblJlcXVlc3QSOAoEbmFtZRgBIAEoCUIq4kEBAvpBIwohaWFtLmdvb2dsZWFwaXMuY29tL1NlcnZpY2VBY2NvdW50EhEKCWRlbGVnYXRlcxgCIAMoCRITCgVzY29wZRgEIAMoCUIE4kEBAhIrCghsaWZldGltZRgHIAEoCzIZLmdvb2dsZS5wcm90b2J1Zi5EdXJhdGlvbiJkChtHZW5lcmF0ZUFjY2Vzc1Rva2VuUmVzcG9uc2USFAoMYWNjZXNzX3Rva2VuGAEgASgJEi8KC2V4cGlyZV90aW1lGAMgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcCJ1Cg9TaWduQmxvYlJlcXVlc3QSOAoEbmFtZRgBIAEoCUIq4kEBAvpBIwohaWFtLmdvb2dsZWFwaXMuY29tL1NlcnZpY2VBY2NvdW50EhEKCWRlbGVnYXRlcxgDIAMoCRIVCgdwYXlsb2FkGAUgASgMQgTiQQECIjcKEFNpZ25CbG9iUmVzcG9uc2USDgoGa2V5X2lkGAEgASgJEhMKC3NpZ25lZF9ibG9iGAQgASgMInQKDlNpZ25Kd3RSZXF1ZXN0EjgKBG5hbWUYASABKAlCKuJBAQL6QSMKIWlhbS5nb29nbGVhcGlzLmNvbS9TZXJ2aWNlQWNjb3VudBIRCglkZWxlZ2F0ZXMYAyADKAkSFQoHcGF5bG9hZBgFIAEoCUIE4kEBAiI1Cg9TaWduSnd0UmVzcG9uc2USDgoGa2V5X2lkGAEgASgJEhIKCnNpZ25lZF9qd3QYAiABKAkilAEKFkdlbmVyYXRlSWRUb2tlblJlcXVlc3QSOAoEbmFtZRgBIAEoCUIq4kEBAvpBIwohaWFtLmdvb2dsZWFwaXMuY29tL1NlcnZpY2VBY2NvdW50EhEKCWRlbGVnYXRlcxgCIAMoCRIWCghhdWRpZW5jZRgDIAEoCUIE4kEBAhIVCg1pbmNsdWRlX2VtYWlsGAQgASgIIigKF0dlbmVyYXRlSWRUb2tlblJlc3BvbnNlEg0KBXRva2VuGAEgASgJQqsCCiNjb20uZ29vZ2xlLmNsb3VkLmlhbS5jcmVkZW50aWFscy52MUIZSUFNQ3JlZGVudGlhbHNDb21tb25Qcm90b1ABWkRnb29nbGUuZ29sYW5nLm9yZy9nZW5wcm90by9nb29nbGVhcGlzL2lhbS9jcmVkZW50aWFscy92MTtjcmVkZW50aWFsc/gBAaoCH0dvb2dsZS5DbG91ZC5JYW0uQ3JlZGVudGlhbHMuVjHKAh9Hb29nbGVcQ2xvdWRcSWFtXENyZWRlbnRpYWxzXFYx6kFZCiFpYW0uZ29vZ2xlYXBpcy5jb20vU2VydmljZUFjY291bnQSNHByb2plY3RzL3twcm9qZWN0fS9zZXJ2aWNlQWNjb3VudHMve3NlcnZpY2VfYWNjb3VudH1iBnByb3RvMw", [file_google_api_field_behavior, file_google_api_resource, file_google_protobuf_duration, file_google_protobuf_timestamp]);
+
+/**
+ * Describes the message google.iam.credentials.v1.GenerateAccessTokenRequest.
+ * Use `create(GenerateAccessTokenRequestSchema)` to create a new message.
+ */
+export const GenerateAccessTokenRequestSchema = /*@__PURE__*/
+  messageDesc(file_google_iam_credentials_v1_common, 0);
+
+/**
+ * Describes the message google.iam.credentials.v1.GenerateAccessTokenResponse.
+ * Use `create(GenerateAccessTokenResponseSchema)` to create a new message.
+ */
+export const GenerateAccessTokenResponseSchema = /*@__PURE__*/
+  messageDesc(file_google_iam_credentials_v1_common, 1);
+
+/**
+ * Describes the message google.iam.credentials.v1.SignBlobRequest.
+ * Use `create(SignBlobRequestSchema)` to create a new message.
+ */
+export const SignBlobRequestSchema = /*@__PURE__*/
+  messageDesc(file_google_iam_credentials_v1_common, 2);
+
+/**
+ * Describes the message google.iam.credentials.v1.SignBlobResponse.
+ * Use `create(SignBlobResponseSchema)` to create a new message.
+ */
+export const SignBlobResponseSchema = /*@__PURE__*/
+  messageDesc(file_google_iam_credentials_v1_common, 3);
+
+/**
+ * Describes the message google.iam.credentials.v1.SignJwtRequest.
+ * Use `create(SignJwtRequestSchema)` to create a new message.
+ */
+export const SignJwtRequestSchema = /*@__PURE__*/
+  messageDesc(file_google_iam_credentials_v1_common, 4);
+
+/**
+ * Describes the message google.iam.credentials.v1.SignJwtResponse.
+ * Use `create(SignJwtResponseSchema)` to create a new message.
+ */
+export const SignJwtResponseSchema = /*@__PURE__*/
+  messageDesc(file_google_iam_credentials_v1_common, 5);
+
+/**
+ * Describes the message google.iam.credentials.v1.GenerateIdTokenRequest.
+ * Use `create(GenerateIdTokenRequestSchema)` to create a new message.
+ */
+export const GenerateIdTokenRequestSchema = /*@__PURE__*/
+  messageDesc(file_google_iam_credentials_v1_common, 6);
+
+/**
+ * Describes the message google.iam.credentials.v1.GenerateIdTokenResponse.
+ * Use `create(GenerateIdTokenResponseSchema)` to create a new message.
+ */
+export const GenerateIdTokenResponseSchema = /*@__PURE__*/
+  messageDesc(file_google_iam_credentials_v1_common, 7);

package/google/iam/credentials/v1/iamcredentials_connect.d.ts

@@ -0,0 +1,84 @@
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// @generated by protoc-gen-connect-es v1.7.0 with parameter "target=js+dts"
+// @generated from file google/iam/credentials/v1/iamcredentials.proto (package google.iam.credentials.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+
+import { GenerateAccessTokenRequest, GenerateAccessTokenResponse, GenerateIdTokenRequest, GenerateIdTokenResponse, SignBlobRequest, SignBlobResponse, SignJwtRequest, SignJwtResponse } from "./common_pb.js";
+import { MethodKind } from "@bufbuild/protobuf";
+
+/**
+ * A service account is a special type of Google account that belongs to your
+ * application or a virtual machine (VM), instead of to an individual end user.
+ * Your application assumes the identity of the service account to call Google
+ * APIs, so that the users aren't directly involved.
+ *
+ * Service account credentials are used to temporarily assume the identity
+ * of the service account. Supported credential types include OAuth 2.0 access
+ * tokens, OpenID Connect ID tokens, self-signed JSON Web Tokens (JWTs), and
+ * more.
+ *
+ * @generated from service google.iam.credentials.v1.IAMCredentials
+ */
+export declare const IAMCredentials: {
+  readonly typeName: "google.iam.credentials.v1.IAMCredentials",
+  readonly methods: {
+    /**
+     * Generates an OAuth 2.0 access token for a service account.
+     *
+     * @generated from rpc google.iam.credentials.v1.IAMCredentials.GenerateAccessToken
+     */
+    readonly generateAccessToken: {
+      readonly name: "GenerateAccessToken",
+      readonly I: typeof GenerateAccessTokenRequest,
+      readonly O: typeof GenerateAccessTokenResponse,
+      readonly kind: MethodKind.Unary,
+    },
+    /**
+     * Generates an OpenID Connect ID token for a service account.
+     *
+     * @generated from rpc google.iam.credentials.v1.IAMCredentials.GenerateIdToken
+     */
+    readonly generateIdToken: {
+      readonly name: "GenerateIdToken",
+      readonly I: typeof GenerateIdTokenRequest,
+      readonly O: typeof GenerateIdTokenResponse,
+      readonly kind: MethodKind.Unary,
+    },
+    /**
+     * Signs a blob using a service account's system-managed private key.
+     *
+     * @generated from rpc google.iam.credentials.v1.IAMCredentials.SignBlob
+     */
+    readonly signBlob: {
+      readonly name: "SignBlob",
+      readonly I: typeof SignBlobRequest,
+      readonly O: typeof SignBlobResponse,
+      readonly kind: MethodKind.Unary,
+    },
+    /**
+     * Signs a JWT using a service account's system-managed private key.
+     *
+     * @generated from rpc google.iam.credentials.v1.IAMCredentials.SignJwt
+     */
+    readonly signJwt: {
+      readonly name: "SignJwt",
+      readonly I: typeof SignJwtRequest,
+      readonly O: typeof SignJwtResponse,
+      readonly kind: MethodKind.Unary,
+    },
+  }
+};

package/google/iam/credentials/v1/iamcredentials_connect.js

@@ -0,0 +1,84 @@
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// @generated by protoc-gen-connect-es v1.7.0 with parameter "target=js+dts"
+// @generated from file google/iam/credentials/v1/iamcredentials.proto (package google.iam.credentials.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+
+import { GenerateAccessTokenRequest, GenerateAccessTokenResponse, GenerateIdTokenRequest, GenerateIdTokenResponse, SignBlobRequest, SignBlobResponse, SignJwtRequest, SignJwtResponse } from "./common_pb.js";
+import { MethodKind } from "@bufbuild/protobuf";
+
+/**
+ * A service account is a special type of Google account that belongs to your
+ * application or a virtual machine (VM), instead of to an individual end user.
+ * Your application assumes the identity of the service account to call Google
+ * APIs, so that the users aren't directly involved.
+ *
+ * Service account credentials are used to temporarily assume the identity
+ * of the service account. Supported credential types include OAuth 2.0 access
+ * tokens, OpenID Connect ID tokens, self-signed JSON Web Tokens (JWTs), and
+ * more.
+ *
+ * @generated from service google.iam.credentials.v1.IAMCredentials
+ */
+export const IAMCredentials = {
+  typeName: "google.iam.credentials.v1.IAMCredentials",
+  methods: {
+    /**
+     * Generates an OAuth 2.0 access token for a service account.
+     *
+     * @generated from rpc google.iam.credentials.v1.IAMCredentials.GenerateAccessToken
+     */
+    generateAccessToken: {
+      name: "GenerateAccessToken",
+      I: GenerateAccessTokenRequest,
+      O: GenerateAccessTokenResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Generates an OpenID Connect ID token for a service account.
+     *
+     * @generated from rpc google.iam.credentials.v1.IAMCredentials.GenerateIdToken
+     */
+    generateIdToken: {
+      name: "GenerateIdToken",
+      I: GenerateIdTokenRequest,
+      O: GenerateIdTokenResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Signs a blob using a service account's system-managed private key.
+     *
+     * @generated from rpc google.iam.credentials.v1.IAMCredentials.SignBlob
+     */
+    signBlob: {
+      name: "SignBlob",
+      I: SignBlobRequest,
+      O: SignBlobResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Signs a JWT using a service account's system-managed private key.
+     *
+     * @generated from rpc google.iam.credentials.v1.IAMCredentials.SignJwt
+     */
+    signJwt: {
+      name: "SignJwt",
+      I: SignJwtRequest,
+      O: SignJwtResponse,
+      kind: MethodKind.Unary,
+    },
+  }
+};

package/google/iam/credentials/v1/iamcredentials_pb.d.ts

@@ -0,0 +1,81 @@
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// @generated by protoc-gen-es v2.11.0 with parameter "target=js+dts"
+// @generated from file google/iam/credentials/v1/iamcredentials.proto (package google.iam.credentials.v1, syntax proto3)
+/* eslint-disable */
+
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { GenerateAccessTokenRequestSchema, GenerateAccessTokenResponseSchema, GenerateIdTokenRequestSchema, GenerateIdTokenResponseSchema, SignBlobRequestSchema, SignBlobResponseSchema, SignJwtRequestSchema, SignJwtResponseSchema } from "./common_pb";
+
+/**
+ * Describes the file google/iam/credentials/v1/iamcredentials.proto.
+ */
+export declare const file_google_iam_credentials_v1_iamcredentials: GenFile;
+
+/**
+ * A service account is a special type of Google account that belongs to your
+ * application or a virtual machine (VM), instead of to an individual end user.
+ * Your application assumes the identity of the service account to call Google
+ * APIs, so that the users aren't directly involved.
+ *
+ * Service account credentials are used to temporarily assume the identity
+ * of the service account. Supported credential types include OAuth 2.0 access
+ * tokens, OpenID Connect ID tokens, self-signed JSON Web Tokens (JWTs), and
+ * more.
+ *
+ * @generated from service google.iam.credentials.v1.IAMCredentials
+ */
+export declare const IAMCredentials: GenService<{
+  /**
+   * Generates an OAuth 2.0 access token for a service account.
+   *
+   * @generated from rpc google.iam.credentials.v1.IAMCredentials.GenerateAccessToken
+   */
+  generateAccessToken: {
+    methodKind: "unary";
+    input: typeof GenerateAccessTokenRequestSchema;
+    output: typeof GenerateAccessTokenResponseSchema;
+  },
+  /**
+   * Generates an OpenID Connect ID token for a service account.
+   *
+   * @generated from rpc google.iam.credentials.v1.IAMCredentials.GenerateIdToken
+   */
+  generateIdToken: {
+    methodKind: "unary";
+    input: typeof GenerateIdTokenRequestSchema;
+    output: typeof GenerateIdTokenResponseSchema;
+  },
+  /**
+   * Signs a blob using a service account's system-managed private key.
+   *
+   * @generated from rpc google.iam.credentials.v1.IAMCredentials.SignBlob
+   */
+  signBlob: {
+    methodKind: "unary";
+    input: typeof SignBlobRequestSchema;
+    output: typeof SignBlobResponseSchema;
+  },
+  /**
+   * Signs a JWT using a service account's system-managed private key.
+   *
+   * @generated from rpc google.iam.credentials.v1.IAMCredentials.SignJwt
+   */
+  signJwt: {
+    methodKind: "unary";
+    input: typeof SignJwtRequestSchema;
+    output: typeof SignJwtResponseSchema;
+  },
+}>;