chore: Update discovery artifacts (#1291)
* chore: update docs/dyn/index.md
* chore(abusiveexperiencereport): update the api
* chore(acceleratedmobilepageurl): update the api
* chore(accessapproval): update the api
* chore(accesscontextmanager): update the api
* chore(adexchangebuyer2): update the api
* chore(adexperiencereport): update the api
* chore(admob): update the api
* chore(analytics): update the api
* chore(analyticsreporting): update the api
* chore(androiddeviceprovisioning): update the api
* chore(androidenterprise): update the api
* chore(androidpublisher): update the api
* chore(apigateway): update the api
* chore(artifactregistry): update the api
* chore(bigqueryconnection): update the api
* chore(bigquerydatatransfer): update the api
* chore(billingbudgets): update the api
* chore(binaryauthorization): update the api
* chore(blogger): update the api
* chore(books): update the api
* chore(calendar): update the api
* chore(chat): update the api
* chore(chromeuxreport): update the api
* chore(civicinfo): update the api
* chore(classroom): update the api
* chore(cloudbilling): update the api
* chore(cloudbuild): update the api
* chore(clouddebugger): update the api
* chore(clouderrorreporting): update the api
* chore(cloudfunctions): update the api
* chore(cloudidentity): update the api
* chore(cloudiot): update the api
* chore(cloudkms): update the api
* chore(cloudprofiler): update the api
* chore(cloudresourcemanager): update the api
* chore(cloudscheduler): update the api
* chore(cloudshell): update the api
* chore(cloudtasks): update the api
* chore(cloudtrace): update the api
* chore(composer): update the api
* chore(containeranalysis): update the api
* chore(content): update the api
* chore(customsearch): update the api
* chore(datacatalog): update the api
* chore(datafusion): update the api
* chore(datamigration): update the api
* chore(datastore): update the api
* chore(deploymentmanager): update the api
* chore(digitalassetlinks): update the api
* chore(displayvideo): update the api
* chore(dlp): update the api
* chore(dns): update the api
* chore(docs): update the api
* chore(domains): update the api
* chore(domainsrdap): update the api
* chore(doubleclickbidmanager): update the api
* chore(doubleclicksearch): update the api
* chore(drive): update the api
* chore(driveactivity): update the api
* chore(eventarc): update the api
* chore(factchecktools): update the api
* chore(fcm): update the api
* chore(file): update the api
* chore(firebase): update the api
* chore(firebasedatabase): update the api
* chore(firebasedynamiclinks): update the api
* chore(firebasehosting): update the api
* chore(firebaseml): update the api
* chore(firebaserules): update the api
* chore(firestore): update the api
* chore(fitness): update the api
* chore(gamesConfiguration): update the api
* chore(gamesManagement): update the api
* chore(gameservices): update the api
* chore(genomics): update the api
* chore(gmail): update the api
* chore(gmailpostmastertools): update the api
* chore(groupsmigration): update the api
* chore(groupssettings): update the api
* chore(healthcare): update the api
* chore(iam): update the api
* chore(iamcredentials): update the api
* chore(iap): update the api
* chore(identitytoolkit): update the api
* chore(indexing): update the api
* chore(jobs): update the api
* chore(kgsearch): update the api
* chore(language): update the api
* chore(libraryagent): update the api
* chore(licensing): update the api
* chore(lifesciences): update the api
* chore(logging): update the api
* chore(managedidentities): update the api
* chore(manufacturers): update the api
* chore(memcache): update the api
* chore(ml): update the api
* chore(monitoring): update the api
* chore(networkmanagement): update the api
* chore(osconfig): update the api
* chore(pagespeedonline): update the api
* chore(playablelocations): update the api
* chore(playcustomapp): update the api
* chore(policytroubleshooter): update the api
* chore(poly): update the api
* chore(privateca): update the api
* chore(prod_tt_sasportal): update the api
* chore(pubsub): update the api
* chore(pubsublite): update the api
* chore(realtimebidding): update the api
* chore(recommendationengine): update the api
* chore(recommender): update the api
* chore(redis): update the api
* chore(remotebuildexecution): update the api
* chore(reseller): update the api
* chore(runtimeconfig): update the api
* chore(safebrowsing): update the api
* chore(sasportal): update the api
* chore(script): update the api
* chore(searchconsole): update the api
* chore(secretmanager): update the api
* chore(servicecontrol): update the api
* chore(servicedirectory): update the api
* chore(siteVerification): update the api
* chore(slides): update the api
* chore(smartdevicemanagement): update the api
* chore(sourcerepo): update the api
* chore(sqladmin): update the api
* chore(storage): update the api
* chore(storagetransfer): update the api
* chore(streetviewpublish): update the api
* chore(sts): update the api
* chore(tagmanager): update the api
* chore(tasks): update the api
* chore(testing): update the api
* chore(texttospeech): update the api
* chore(toolresults): update the api
* chore(trafficdirector): update the api
* chore(transcoder): update the api
* chore(translate): update the api
* chore(vault): update the api
* chore(vectortile): update the api
* chore(verifiedaccess): update the api
* chore(videointelligence): update the api
* chore(vision): update the api
* chore(webfonts): update the api
* chore(webmasters): update the api
* chore(websecurityscanner): update the api
* chore(workflowexecutions): update the api
* chore(workflows): update the api
* chore(youtubeAnalytics): update the api
* chore(youtubereporting): update the api
* chore(docs): Add new discovery artifacts and reference documents
diff --git a/googleapiclient/discovery_cache/documents/iamcredentials.v1.json b/googleapiclient/discovery_cache/documents/iamcredentials.v1.json
index b1be5a7..be5cf40 100644
--- a/googleapiclient/discovery_cache/documents/iamcredentials.v1.json
+++ b/googleapiclient/discovery_cache/documents/iamcredentials.v1.json
@@ -1,164 +1,53 @@
{
- "version_module": true,
- "batchPath": "batch",
- "resources": {
- "projects": {
- "resources": {
- "serviceAccounts": {
- "methods": {
- "signBlob": {
- "httpMethod": "POST",
- "response": {
- "$ref": "SignBlobResponse"
- },
- "parameters": {
- "name": {
- "type": "string",
- "location": "path",
- "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
- "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
- "required": true
- }
- },
- "description": "Signs a blob using a service account's system-managed private key.",
- "scopes": [
- "https://www.googleapis.com/auth/cloud-platform"
- ],
- "id": "iamcredentials.projects.serviceAccounts.signBlob",
- "parameterOrder": [
- "name"
- ],
- "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:signBlob",
- "request": {
- "$ref": "SignBlobRequest"
- },
- "path": "v1/{+name}:signBlob"
- },
- "generateAccessToken": {
- "parameters": {
- "name": {
- "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
- "type": "string",
- "location": "path",
- "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
- "required": true
- }
- },
- "path": "v1/{+name}:generateAccessToken",
- "httpMethod": "POST",
- "id": "iamcredentials.projects.serviceAccounts.generateAccessToken",
- "response": {
- "$ref": "GenerateAccessTokenResponse"
- },
- "parameterOrder": [
- "name"
- ],
- "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:generateAccessToken",
- "description": "Generates an OAuth 2.0 access token for a service account.",
- "request": {
- "$ref": "GenerateAccessTokenRequest"
- },
- "scopes": [
- "https://www.googleapis.com/auth/cloud-platform"
- ]
- },
- "generateIdToken": {
- "parameters": {
- "name": {
- "location": "path",
- "required": true,
- "type": "string",
- "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
- "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$"
- }
- },
- "path": "v1/{+name}:generateIdToken",
- "response": {
- "$ref": "GenerateIdTokenResponse"
- },
- "id": "iamcredentials.projects.serviceAccounts.generateIdToken",
- "httpMethod": "POST",
- "request": {
- "$ref": "GenerateIdTokenRequest"
- },
- "description": "Generates an OpenID Connect ID token for a service account.",
- "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:generateIdToken",
- "parameterOrder": [
- "name"
- ],
- "scopes": [
- "https://www.googleapis.com/auth/cloud-platform"
- ]
- },
- "signJwt": {
- "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:signJwt",
- "httpMethod": "POST",
- "request": {
- "$ref": "SignJwtRequest"
- },
- "path": "v1/{+name}:signJwt",
- "parameters": {
- "name": {
- "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
- "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
- "type": "string",
- "required": true,
- "location": "path"
- }
- },
- "response": {
- "$ref": "SignJwtResponse"
- },
- "description": "Signs a JWT using a service account's system-managed private key.",
- "id": "iamcredentials.projects.serviceAccounts.signJwt",
- "scopes": [
- "https://www.googleapis.com/auth/cloud-platform"
- ],
- "parameterOrder": [
- "name"
- ]
- }
- }
+ "auth": {
+ "oauth2": {
+ "scopes": {
+ "https://www.googleapis.com/auth/cloud-platform": {
+ "description": "See, edit, configure, and delete your Google Cloud Platform data"
}
}
}
},
- "ownerName": "Google",
- "kind": "discovery#restDescription",
- "baseUrl": "https://iamcredentials.googleapis.com/",
- "name": "iamcredentials",
"basePath": "",
- "fullyEncodeReservedExpansion": true,
+ "baseUrl": "https://iamcredentials.googleapis.com/",
+ "batchPath": "batch",
+ "canonicalName": "IAM Credentials",
"description": "Creates short-lived credentials for impersonating IAM service accounts. To enable this API, you must enable the IAM API (iam.googleapis.com). ",
- "icons": {
- "x32": "http://www.google.com/images/icons/product/search-32.gif",
- "x16": "http://www.google.com/images/icons/product/search-16.gif"
- },
+ "discoveryVersion": "v1",
"documentationLink": "https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials",
- "protocol": "rest",
- "title": "IAM Service Account Credentials API",
- "revision": "20201022",
+ "fullyEncodeReservedExpansion": true,
+ "icons": {
+ "x16": "http://www.google.com/images/icons/product/search-16.gif",
+ "x32": "http://www.google.com/images/icons/product/search-32.gif"
+ },
+ "id": "iamcredentials:v1",
+ "kind": "discovery#restDescription",
"mtlsRootUrl": "https://iamcredentials.mtls.googleapis.com/",
- "servicePath": "",
+ "name": "iamcredentials",
"ownerDomain": "google.com",
+ "ownerName": "Google",
"parameters": {
+ "$.xgafv": {
+ "description": "V1 error format.",
+ "enum": [
+ "1",
+ "2"
+ ],
+ "enumDescriptions": [
+ "v1 error format",
+ "v2 error format"
+ ],
+ "location": "query",
+ "type": "string"
+ },
"access_token": {
"description": "OAuth access token.",
- "type": "string",
- "location": "query"
- },
- "upload_protocol": {
- "location": "query",
- "type": "string",
- "description": "Upload protocol for media (e.g. \"raw\", \"multipart\")."
- },
- "fields": {
- "description": "Selector specifying which fields to include in a partial response.",
"location": "query",
"type": "string"
},
"alt": {
"default": "json",
+ "description": "Data format for response.",
"enum": [
"json",
"media",
@@ -169,79 +58,257 @@
"Media download with context-dependent Content-Type",
"Responses with Content-Type of application/x-protobuf"
],
- "description": "Data format for response.",
- "type": "string",
- "location": "query"
- },
- "uploadType": {
- "description": "Legacy upload protocol for media (e.g. \"media\", \"multipart\").",
"location": "query",
"type": "string"
},
- "prettyPrint": {
- "type": "boolean",
+ "callback": {
+ "description": "JSONP",
"location": "query",
- "default": "true",
- "description": "Returns response with indentations and line breaks."
+ "type": "string"
+ },
+ "fields": {
+ "description": "Selector specifying which fields to include in a partial response.",
+ "location": "query",
+ "type": "string"
},
"key": {
+ "description": "API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token.",
"location": "query",
- "type": "string",
- "description": "API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token."
- },
- "$.xgafv": {
- "location": "query",
- "enumDescriptions": [
- "v1 error format",
- "v2 error format"
- ],
- "type": "string",
- "description": "V1 error format.",
- "enum": [
- "1",
- "2"
- ]
+ "type": "string"
},
"oauth_token": {
"description": "OAuth 2.0 token for the current user.",
"location": "query",
"type": "string"
},
- "callback": {
- "type": "string",
+ "prettyPrint": {
+ "default": "true",
+ "description": "Returns response with indentations and line breaks.",
"location": "query",
- "description": "JSONP"
+ "type": "boolean"
},
"quotaUser": {
+ "description": "Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters.",
"location": "query",
- "type": "string",
- "description": "Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters."
+ "type": "string"
+ },
+ "uploadType": {
+ "description": "Legacy upload protocol for media (e.g. \"media\", \"multipart\").",
+ "location": "query",
+ "type": "string"
+ },
+ "upload_protocol": {
+ "description": "Upload protocol for media (e.g. \"raw\", \"multipart\").",
+ "location": "query",
+ "type": "string"
}
},
- "id": "iamcredentials:v1",
- "auth": {
- "oauth2": {
- "scopes": {
- "https://www.googleapis.com/auth/cloud-platform": {
- "description": "View and manage your data across Google Cloud Platform services"
+ "protocol": "rest",
+ "resources": {
+ "projects": {
+ "resources": {
+ "serviceAccounts": {
+ "methods": {
+ "generateAccessToken": {
+ "description": "Generates an OAuth 2.0 access token for a service account.",
+ "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:generateAccessToken",
+ "httpMethod": "POST",
+ "id": "iamcredentials.projects.serviceAccounts.generateAccessToken",
+ "parameterOrder": [
+ "name"
+ ],
+ "parameters": {
+ "name": {
+ "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
+ "location": "path",
+ "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
+ "required": true,
+ "type": "string"
+ }
+ },
+ "path": "v1/{+name}:generateAccessToken",
+ "request": {
+ "$ref": "GenerateAccessTokenRequest"
+ },
+ "response": {
+ "$ref": "GenerateAccessTokenResponse"
+ },
+ "scopes": [
+ "https://www.googleapis.com/auth/cloud-platform"
+ ]
+ },
+ "generateIdToken": {
+ "description": "Generates an OpenID Connect ID token for a service account.",
+ "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:generateIdToken",
+ "httpMethod": "POST",
+ "id": "iamcredentials.projects.serviceAccounts.generateIdToken",
+ "parameterOrder": [
+ "name"
+ ],
+ "parameters": {
+ "name": {
+ "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
+ "location": "path",
+ "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
+ "required": true,
+ "type": "string"
+ }
+ },
+ "path": "v1/{+name}:generateIdToken",
+ "request": {
+ "$ref": "GenerateIdTokenRequest"
+ },
+ "response": {
+ "$ref": "GenerateIdTokenResponse"
+ },
+ "scopes": [
+ "https://www.googleapis.com/auth/cloud-platform"
+ ]
+ },
+ "signBlob": {
+ "description": "Signs a blob using a service account's system-managed private key.",
+ "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:signBlob",
+ "httpMethod": "POST",
+ "id": "iamcredentials.projects.serviceAccounts.signBlob",
+ "parameterOrder": [
+ "name"
+ ],
+ "parameters": {
+ "name": {
+ "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
+ "location": "path",
+ "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
+ "required": true,
+ "type": "string"
+ }
+ },
+ "path": "v1/{+name}:signBlob",
+ "request": {
+ "$ref": "SignBlobRequest"
+ },
+ "response": {
+ "$ref": "SignBlobResponse"
+ },
+ "scopes": [
+ "https://www.googleapis.com/auth/cloud-platform"
+ ]
+ },
+ "signJwt": {
+ "description": "Signs a JWT using a service account's system-managed private key.",
+ "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:signJwt",
+ "httpMethod": "POST",
+ "id": "iamcredentials.projects.serviceAccounts.signJwt",
+ "parameterOrder": [
+ "name"
+ ],
+ "parameters": {
+ "name": {
+ "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
+ "location": "path",
+ "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
+ "required": true,
+ "type": "string"
+ }
+ },
+ "path": "v1/{+name}:signJwt",
+ "request": {
+ "$ref": "SignJwtRequest"
+ },
+ "response": {
+ "$ref": "SignJwtResponse"
+ },
+ "scopes": [
+ "https://www.googleapis.com/auth/cloud-platform"
+ ]
+ }
+ }
}
}
}
},
- "discoveryVersion": "v1",
- "canonicalName": "IAM Credentials",
+ "revision": "20210402",
"rootUrl": "https://iamcredentials.googleapis.com/",
- "version": "v1",
"schemas": {
- "SignBlobRequest": {
- "type": "object",
+ "GenerateAccessTokenRequest": {
+ "id": "GenerateAccessTokenRequest",
"properties": {
"delegates": {
- "type": "array",
"description": "The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
"items": {
"type": "string"
- }
+ },
+ "type": "array"
+ },
+ "lifetime": {
+ "description": "The desired lifetime duration of the access token in seconds. By default, the maximum allowed value is 1 hour. To set a lifetime of up to 12 hours, you can add the service account as an allowed value in an Organization Policy that enforces the `constraints/iam.allowServiceAccountCredentialLifetimeExtension` constraint. See detailed instructions at https://cloud.google.com/iam/help/credentials/lifetime If a value is not specified, the token's lifetime will be set to a default value of 1 hour.",
+ "format": "google-duration",
+ "type": "string"
+ },
+ "scope": {
+ "description": "Required. Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.",
+ "items": {
+ "type": "string"
+ },
+ "type": "array"
+ }
+ },
+ "type": "object"
+ },
+ "GenerateAccessTokenResponse": {
+ "id": "GenerateAccessTokenResponse",
+ "properties": {
+ "accessToken": {
+ "description": "The OAuth 2.0 access token.",
+ "type": "string"
+ },
+ "expireTime": {
+ "description": "Token expiration time. The expiration time is always set.",
+ "format": "google-datetime",
+ "type": "string"
+ }
+ },
+ "type": "object"
+ },
+ "GenerateIdTokenRequest": {
+ "id": "GenerateIdTokenRequest",
+ "properties": {
+ "audience": {
+ "description": "Required. The audience for the token, such as the API or account that this token grants access to.",
+ "type": "string"
+ },
+ "delegates": {
+ "description": "The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
+ "items": {
+ "type": "string"
+ },
+ "type": "array"
+ },
+ "includeEmail": {
+ "description": "Include the service account email in the token. If set to `true`, the token will contain `email` and `email_verified` claims.",
+ "type": "boolean"
+ }
+ },
+ "type": "object"
+ },
+ "GenerateIdTokenResponse": {
+ "id": "GenerateIdTokenResponse",
+ "properties": {
+ "token": {
+ "description": "The OpenId Connect ID token.",
+ "type": "string"
+ }
+ },
+ "type": "object"
+ },
+ "SignBlobRequest": {
+ "id": "SignBlobRequest",
+ "properties": {
+ "delegates": {
+ "description": "The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
+ "items": {
+ "type": "string"
+ },
+ "type": "array"
},
"payload": {
"description": "Required. The bytes to sign.",
@@ -249,95 +316,42 @@
"type": "string"
}
},
- "id": "SignBlobRequest"
- },
- "GenerateAccessTokenRequest": {
- "properties": {
- "scope": {
- "type": "array",
- "items": {
- "type": "string"
- },
- "description": "Required. Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required."
- },
- "delegates": {
- "items": {
- "type": "string"
- },
- "type": "array",
- "description": "The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid."
- },
- "lifetime": {
- "format": "google-duration",
- "type": "string",
- "description": "The desired lifetime duration of the access token in seconds. By default, the maximum allowed value is 1 hour. To set a lifetime of up to 12 hours, you can add the service account as an allowed value in an Organization Policy that enforces the `constraints/iam.allowServiceAccountCredentialLifetimeExtension` constraint. See detailed instructions at https://cloud.google.com/iam/help/credentials/lifetime If a value is not specified, the token's lifetime will be set to a default value of 1 hour."
- }
- },
- "type": "object",
- "id": "GenerateAccessTokenRequest"
- },
- "GenerateIdTokenResponse": {
- "properties": {
- "token": {
- "description": "The OpenId Connect ID token.",
- "type": "string"
- }
- },
- "type": "object",
- "id": "GenerateIdTokenResponse"
- },
- "GenerateAccessTokenResponse": {
- "type": "object",
- "properties": {
- "expireTime": {
- "type": "string",
- "description": "Token expiration time. The expiration time is always set.",
- "format": "google-datetime"
- },
- "accessToken": {
- "description": "The OAuth 2.0 access token.",
- "type": "string"
- }
- },
- "id": "GenerateAccessTokenResponse"
- },
- "GenerateIdTokenRequest": {
- "id": "GenerateIdTokenRequest",
- "properties": {
- "includeEmail": {
- "description": "Include the service account email in the token. If set to `true`, the token will contain `email` and `email_verified` claims.",
- "type": "boolean"
- },
- "audience": {
- "description": "Required. The audience for the token, such as the API or account that this token grants access to.",
- "type": "string"
- },
- "delegates": {
- "type": "array",
- "description": "The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
- "items": {
- "type": "string"
- }
- }
- },
"type": "object"
},
"SignBlobResponse": {
+ "id": "SignBlobResponse",
"properties": {
- "signedBlob": {
- "type": "string",
- "format": "byte",
- "description": "The signature for the blob. Does not include the original blob. After the key pair referenced by the `key_id` response field expires, Google no longer exposes the public key that can be used to verify the blob. As a result, the receiver can no longer verify the signature."
- },
"keyId": {
- "type": "string",
- "description": "The ID of the key used to sign the blob. The key used for signing will remain valid for at least 12 hours after the blob is signed. To verify the signature, you can retrieve the public key in several formats from the following endpoints: - RSA public key wrapped in an X.509 v3 certificate: `https://www.googleapis.com/service_accounts/v1/metadata/x509/{ACCOUNT_EMAIL}` - Raw key in JSON format: `https://www.googleapis.com/service_accounts/v1/metadata/raw/{ACCOUNT_EMAIL}` - JSON Web Key (JWK): `https://www.googleapis.com/service_accounts/v1/metadata/jwk/{ACCOUNT_EMAIL}`"
+ "description": "The ID of the key used to sign the blob. The key used for signing will remain valid for at least 12 hours after the blob is signed. To verify the signature, you can retrieve the public key in several formats from the following endpoints: - RSA public key wrapped in an X.509 v3 certificate: `https://www.googleapis.com/service_accounts/v1/metadata/x509/{ACCOUNT_EMAIL}` - Raw key in JSON format: `https://www.googleapis.com/service_accounts/v1/metadata/raw/{ACCOUNT_EMAIL}` - JSON Web Key (JWK): `https://www.googleapis.com/service_accounts/v1/metadata/jwk/{ACCOUNT_EMAIL}`",
+ "type": "string"
+ },
+ "signedBlob": {
+ "description": "The signature for the blob. Does not include the original blob. After the key pair referenced by the `key_id` response field expires, Google no longer exposes the public key that can be used to verify the blob. As a result, the receiver can no longer verify the signature.",
+ "format": "byte",
+ "type": "string"
}
},
- "id": "SignBlobResponse",
+ "type": "object"
+ },
+ "SignJwtRequest": {
+ "id": "SignJwtRequest",
+ "properties": {
+ "delegates": {
+ "description": "The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
+ "items": {
+ "type": "string"
+ },
+ "type": "array"
+ },
+ "payload": {
+ "description": "Required. The JWT payload to sign. Must be a serialized JSON object that contains a JWT Claims Set. For example: `{\"sub\": \"user@example.com\", \"iat\": 313435}` If the JWT Claims Set contains an expiration time (`exp`) claim, it must be an integer timestamp that is not in the past and no more than 12 hours in the future.",
+ "type": "string"
+ }
+ },
"type": "object"
},
"SignJwtResponse": {
+ "id": "SignJwtResponse",
"properties": {
"keyId": {
"description": "The ID of the key used to sign the JWT. The key used for signing will remain valid for at least 12 hours after the JWT is signed. To verify the signature, you can retrieve the public key in several formats from the following endpoints: - RSA public key wrapped in an X.509 v3 certificate: `https://www.googleapis.com/service_accounts/v1/metadata/x509/{ACCOUNT_EMAIL}` - Raw key in JSON format: `https://www.googleapis.com/service_accounts/v1/metadata/raw/{ACCOUNT_EMAIL}` - JSON Web Key (JWK): `https://www.googleapis.com/service_accounts/v1/metadata/jwk/{ACCOUNT_EMAIL}`",
@@ -348,25 +362,11 @@
"type": "string"
}
},
- "id": "SignJwtResponse",
"type": "object"
- },
- "SignJwtRequest": {
- "properties": {
- "payload": {
- "description": "Required. The JWT payload to sign. Must be a serialized JSON object that contains a JWT Claims Set. For example: `{\"sub\": \"user@example.com\", \"iat\": 313435}` If the JWT Claims Set contains an expiration time (`exp`) claim, it must be an integer timestamp that is not in the past and no more than 12 hours in the future.",
- "type": "string"
- },
- "delegates": {
- "type": "array",
- "description": "The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
- "items": {
- "type": "string"
- }
- }
- },
- "type": "object",
- "id": "SignJwtRequest"
}
- }
-}
+ },
+ "servicePath": "",
+ "title": "IAM Service Account Credentials API",
+ "version": "v1",
+ "version_module": true
+}
\ No newline at end of file