2022-01-07 11:42:02 +01:00
// Copyright 2022 Google LLC.
2021-10-11 20:51:32 +02:00
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.
// Code generated file. DO NOT EDIT.
// Package iamcredentials provides access to the IAM Service Account Credentials API.
//
// For product documentation, see: https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials
//
// Creating a client
//
// Usage example:
//
// import "google.golang.org/api/iamcredentials/v1"
// ...
// ctx := context.Background()
// iamcredentialsService, err := iamcredentials.NewService(ctx)
//
// In this example, Google Application Default Credentials are used for authentication.
//
// For information on how to create and obtain Application Default Credentials, see https://developers.google.com/identity/protocols/application-default-credentials.
//
// Other authentication options
//
// To use an API key for authentication (note: some APIs do not support API keys), use option.WithAPIKey:
//
// iamcredentialsService, err := iamcredentials.NewService(ctx, option.WithAPIKey("AIza..."))
//
// To use an OAuth token (e.g., a user token obtained via a three-legged OAuth flow), use option.WithTokenSource:
//
// config := &oauth2.Config{...}
// // ...
// token, err := config.Exchange(ctx, ...)
// iamcredentialsService, err := iamcredentials.NewService(ctx, option.WithTokenSource(config.TokenSource(ctx, token)))
//
// See https://godoc.org/google.golang.org/api/option/ for details on options.
package iamcredentials // import "google.golang.org/api/iamcredentials/v1"
import (
"bytes"
"context"
"encoding/json"
"errors"
"fmt"
"io"
"net/http"
"net/url"
"strconv"
"strings"
googleapi "google.golang.org/api/googleapi"
gensupport "google.golang.org/api/internal/gensupport"
option "google.golang.org/api/option"
internaloption "google.golang.org/api/option/internaloption"
htransport "google.golang.org/api/transport/http"
)
// Always reference these packages, just in case the auto-generated code
// below doesn't.
var _ = bytes . NewBuffer
var _ = strconv . Itoa
var _ = fmt . Sprintf
var _ = json . NewDecoder
var _ = io . Copy
var _ = url . Parse
var _ = gensupport . MarshalJSON
var _ = googleapi . Version
var _ = errors . New
var _ = strings . Replace
var _ = context . Canceled
var _ = internaloption . WithDefaultEndpoint
const apiId = "iamcredentials:v1"
const apiName = "iamcredentials"
const apiVersion = "v1"
const basePath = "https://iamcredentials.googleapis.com/"
const mtlsBasePath = "https://iamcredentials.mtls.googleapis.com/"
// OAuth2 scopes used by this API.
const (
// See, edit, configure, and delete your Google Cloud data and see the
// email address for your Google Account.
CloudPlatformScope = "https://www.googleapis.com/auth/cloud-platform"
)
// NewService creates a new Service.
func NewService ( ctx context . Context , opts ... option . ClientOption ) ( * Service , error ) {
scopesOption := option . WithScopes (
"https://www.googleapis.com/auth/cloud-platform" ,
)
// NOTE: prepend, so we don't override user-specified scopes.
opts = append ( [ ] option . ClientOption { scopesOption } , opts ... )
opts = append ( opts , internaloption . WithDefaultEndpoint ( basePath ) )
opts = append ( opts , internaloption . WithDefaultMTLSEndpoint ( mtlsBasePath ) )
client , endpoint , err := htransport . NewClient ( ctx , opts ... )
if err != nil {
return nil , err
}
s , err := New ( client )
if err != nil {
return nil , err
}
if endpoint != "" {
s . BasePath = endpoint
}
return s , nil
}
// New creates a new Service. It uses the provided http.Client for requests.
//
// Deprecated: please use NewService instead.
// To provide a custom HTTP client, use option.WithHTTPClient.
// If you are using google.golang.org/api/googleapis/transport.APIKey, use option.WithAPIKey with NewService instead.
func New ( client * http . Client ) ( * Service , error ) {
if client == nil {
return nil , errors . New ( "client is nil" )
}
s := & Service { client : client , BasePath : basePath }
s . Projects = NewProjectsService ( s )
return s , nil
}
type Service struct {
client * http . Client
BasePath string // API endpoint base URL
UserAgent string // optional additional User-Agent fragment
Projects * ProjectsService
}
func ( s * Service ) userAgent ( ) string {
if s . UserAgent == "" {
return googleapi . UserAgent
}
return googleapi . UserAgent + " " + s . UserAgent
}
func NewProjectsService ( s * Service ) * ProjectsService {
rs := & ProjectsService { s : s }
rs . ServiceAccounts = NewProjectsServiceAccountsService ( s )
return rs
}
type ProjectsService struct {
s * Service
ServiceAccounts * ProjectsServiceAccountsService
}
func NewProjectsServiceAccountsService ( s * Service ) * ProjectsServiceAccountsService {
rs := & ProjectsServiceAccountsService { s : s }
return rs
}
type ProjectsServiceAccountsService struct {
s * Service
}
type GenerateAccessTokenRequest struct {
// Delegates: The sequence of service accounts in a delegation chain.
2021-12-20 11:06:52 +01:00
// This field is required for delegated requests
// (https://cloud.google.com/iam/help/credentials/delegated-request).
// For direct requests
// (https://cloud.google.com/iam/help/credentials/direct-request), which
// are more common, do not specify this field. Each service account must
// be granted the `roles/iam.serviceAccountTokenCreator` role on its
// next service account in the chain. The last service account in the
// chain must be granted the `roles/iam.serviceAccountTokenCreator` role
// on the service account that is specified in the `name` field of the
// request. The delegates must have the following format:
2021-10-11 20:51:32 +02:00
// `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-`
// wildcard character is required; replacing it with a project ID is
// invalid.
Delegates [ ] string ` json:"delegates,omitempty" `
// Lifetime: The desired lifetime duration of the access token in
// seconds. By default, the maximum allowed value is 1 hour. To set a
// lifetime of up to 12 hours, you can add the service account as an
// allowed value in an Organization Policy that enforces the
// `constraints/iam.allowServiceAccountCredentialLifetimeExtension`
// constraint. See detailed instructions at
// https://cloud.google.com/iam/help/credentials/lifetime If a value is
// not specified, the token's lifetime will be set to a default value of
// 1 hour.
Lifetime string ` json:"lifetime,omitempty" `
// Scope: Required. Code to identify the scopes to be included in the
// OAuth 2.0 access token. See
// https://developers.google.com/identity/protocols/googlescopes for
// more information. At least one value required.
Scope [ ] string ` json:"scope,omitempty" `
// ForceSendFields is a list of field names (e.g. "Delegates") to
// unconditionally include in API requests. By default, fields with
// empty or default values are omitted from API requests. However, any
// non-pointer, non-interface field appearing in ForceSendFields will be
// sent to the server regardless of whether the field is empty or not.
// This may be used to include empty fields in Patch requests.
ForceSendFields [ ] string ` json:"-" `
// NullFields is a list of field names (e.g. "Delegates") to include in
// API requests with the JSON null value. By default, fields with empty
// values are omitted from API requests. However, any field with an
// empty value appearing in NullFields will be sent to the server as
// null. It is an error if a field in this list has a non-empty value.
// This may be used to include null fields in Patch requests.
NullFields [ ] string ` json:"-" `
}
func ( s * GenerateAccessTokenRequest ) MarshalJSON ( ) ( [ ] byte , error ) {
type NoMethod GenerateAccessTokenRequest
raw := NoMethod ( * s )
return gensupport . MarshalJSON ( raw , s . ForceSendFields , s . NullFields )
}
type GenerateAccessTokenResponse struct {
// AccessToken: The OAuth 2.0 access token.
AccessToken string ` json:"accessToken,omitempty" `
// ExpireTime: Token expiration time. The expiration time is always set.
ExpireTime string ` json:"expireTime,omitempty" `
// ServerResponse contains the HTTP response code and headers from the
// server.
googleapi . ServerResponse ` json:"-" `
// ForceSendFields is a list of field names (e.g. "AccessToken") to
// unconditionally include in API requests. By default, fields with
// empty or default values are omitted from API requests. However, any
// non-pointer, non-interface field appearing in ForceSendFields will be
// sent to the server regardless of whether the field is empty or not.
// This may be used to include empty fields in Patch requests.
ForceSendFields [ ] string ` json:"-" `
// NullFields is a list of field names (e.g. "AccessToken") to include
// in API requests with the JSON null value. By default, fields with
// empty values are omitted from API requests. However, any field with
// an empty value appearing in NullFields will be sent to the server as
// null. It is an error if a field in this list has a non-empty value.
// This may be used to include null fields in Patch requests.
NullFields [ ] string ` json:"-" `
}
func ( s * GenerateAccessTokenResponse ) MarshalJSON ( ) ( [ ] byte , error ) {
type NoMethod GenerateAccessTokenResponse
raw := NoMethod ( * s )
return gensupport . MarshalJSON ( raw , s . ForceSendFields , s . NullFields )
}
type GenerateIdTokenRequest struct {
// Audience: Required. The audience for the token, such as the API or
// account that this token grants access to.
Audience string ` json:"audience,omitempty" `
// Delegates: The sequence of service accounts in a delegation chain.
// Each service account must be granted the
// `roles/iam.serviceAccountTokenCreator` role on its next service
// account in the chain. The last service account in the chain must be
// granted the `roles/iam.serviceAccountTokenCreator` role on the
// service account that is specified in the `name` field of the request.
// The delegates must have the following format:
// `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-`
// wildcard character is required; replacing it with a project ID is
// invalid.
Delegates [ ] string ` json:"delegates,omitempty" `
// IncludeEmail: Include the service account email in the token. If set
// to `true`, the token will contain `email` and `email_verified`
// claims.
IncludeEmail bool ` json:"includeEmail,omitempty" `
// ForceSendFields is a list of field names (e.g. "Audience") to
// unconditionally include in API requests. By default, fields with
// empty or default values are omitted from API requests. However, any
// non-pointer, non-interface field appearing in ForceSendFields will be
// sent to the server regardless of whether the field is empty or not.
// This may be used to include empty fields in Patch requests.
ForceSendFields [ ] string ` json:"-" `
// NullFields is a list of field names (e.g. "Audience") to include in
// API requests with the JSON null value. By default, fields with empty
// values are omitted from API requests. However, any field with an
// empty value appearing in NullFields will be sent to the server as
// null. It is an error if a field in this list has a non-empty value.
// This may be used to include null fields in Patch requests.
NullFields [ ] string ` json:"-" `
}
func ( s * GenerateIdTokenRequest ) MarshalJSON ( ) ( [ ] byte , error ) {
type NoMethod GenerateIdTokenRequest
raw := NoMethod ( * s )
return gensupport . MarshalJSON ( raw , s . ForceSendFields , s . NullFields )
}
type GenerateIdTokenResponse struct {
// Token: The OpenId Connect ID token.
Token string ` json:"token,omitempty" `
// ServerResponse contains the HTTP response code and headers from the
// server.
googleapi . ServerResponse ` json:"-" `
// ForceSendFields is a list of field names (e.g. "Token") to
// unconditionally include in API requests. By default, fields with
// empty or default values are omitted from API requests. However, any
// non-pointer, non-interface field appearing in ForceSendFields will be
// sent to the server regardless of whether the field is empty or not.
// This may be used to include empty fields in Patch requests.
ForceSendFields [ ] string ` json:"-" `
// NullFields is a list of field names (e.g. "Token") to include in API
// requests with the JSON null value. By default, fields with empty
// values are omitted from API requests. However, any field with an
// empty value appearing in NullFields will be sent to the server as
// null. It is an error if a field in this list has a non-empty value.
// This may be used to include null fields in Patch requests.
NullFields [ ] string ` json:"-" `
}
func ( s * GenerateIdTokenResponse ) MarshalJSON ( ) ( [ ] byte , error ) {
type NoMethod GenerateIdTokenResponse
raw := NoMethod ( * s )
return gensupport . MarshalJSON ( raw , s . ForceSendFields , s . NullFields )
}
type SignBlobRequest struct {
// Delegates: The sequence of service accounts in a delegation chain.
// Each service account must be granted the
// `roles/iam.serviceAccountTokenCreator` role on its next service
// account in the chain. The last service account in the chain must be
// granted the `roles/iam.serviceAccountTokenCreator` role on the
// service account that is specified in the `name` field of the request.
// The delegates must have the following format:
// `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-`
// wildcard character is required; replacing it with a project ID is
// invalid.
Delegates [ ] string ` json:"delegates,omitempty" `
// Payload: Required. The bytes to sign.
Payload string ` json:"payload,omitempty" `
// ForceSendFields is a list of field names (e.g. "Delegates") to
// unconditionally include in API requests. By default, fields with
// empty or default values are omitted from API requests. However, any
// non-pointer, non-interface field appearing in ForceSendFields will be
// sent to the server regardless of whether the field is empty or not.
// This may be used to include empty fields in Patch requests.
ForceSendFields [ ] string ` json:"-" `
// NullFields is a list of field names (e.g. "Delegates") to include in
// API requests with the JSON null value. By default, fields with empty
// values are omitted from API requests. However, any field with an
// empty value appearing in NullFields will be sent to the server as
// null. It is an error if a field in this list has a non-empty value.
// This may be used to include null fields in Patch requests.
NullFields [ ] string ` json:"-" `
}
func ( s * SignBlobRequest ) MarshalJSON ( ) ( [ ] byte , error ) {
type NoMethod SignBlobRequest
raw := NoMethod ( * s )
return gensupport . MarshalJSON ( raw , s . ForceSendFields , s . NullFields )
}
type SignBlobResponse struct {
// KeyId: The ID of the key used to sign the blob. The key used for
// signing will remain valid for at least 12 hours after the blob is
// signed. To verify the signature, you can retrieve the public key in
// several formats from the following endpoints: - RSA public key
// wrapped in an X.509 v3 certificate:
// `https://www.googleapis.com/service_accounts/v1/metadata/x509/{ACCOUNT
// _EMAIL}` - Raw key in JSON format:
// `https://www.googleapis.com/service_accounts/v1/metadata/raw/{ACCOUNT_
// EMAIL}` - JSON Web Key (JWK):
// `https://www.googleapis.com/service_accounts/v1/metadata/jwk/{ACCOUNT_
// EMAIL}`
KeyId string ` json:"keyId,omitempty" `
// SignedBlob: The signature for the blob. Does not include the original
// blob. After the key pair referenced by the `key_id` response field
// expires, Google no longer exposes the public key that can be used to
// verify the blob. As a result, the receiver can no longer verify the
// signature.
SignedBlob string ` json:"signedBlob,omitempty" `
// ServerResponse contains the HTTP response code and headers from the
// server.
googleapi . ServerResponse ` json:"-" `
// ForceSendFields is a list of field names (e.g. "KeyId") to
// unconditionally include in API requests. By default, fields with
// empty or default values are omitted from API requests. However, any
// non-pointer, non-interface field appearing in ForceSendFields will be
// sent to the server regardless of whether the field is empty or not.
// This may be used to include empty fields in Patch requests.
ForceSendFields [ ] string ` json:"-" `
// NullFields is a list of field names (e.g. "KeyId") to include in API
// requests with the JSON null value. By default, fields with empty
// values are omitted from API requests. However, any field with an
// empty value appearing in NullFields will be sent to the server as
// null. It is an error if a field in this list has a non-empty value.
// This may be used to include null fields in Patch requests.
NullFields [ ] string ` json:"-" `
}
func ( s * SignBlobResponse ) MarshalJSON ( ) ( [ ] byte , error ) {
type NoMethod SignBlobResponse
raw := NoMethod ( * s )
return gensupport . MarshalJSON ( raw , s . ForceSendFields , s . NullFields )
}
type SignJwtRequest struct {
// Delegates: The sequence of service accounts in a delegation chain.
// Each service account must be granted the
// `roles/iam.serviceAccountTokenCreator` role on its next service
// account in the chain. The last service account in the chain must be
// granted the `roles/iam.serviceAccountTokenCreator` role on the
// service account that is specified in the `name` field of the request.
// The delegates must have the following format:
// `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-`
// wildcard character is required; replacing it with a project ID is
// invalid.
Delegates [ ] string ` json:"delegates,omitempty" `
// Payload: Required. The JWT payload to sign. Must be a serialized JSON
// object that contains a JWT Claims Set. For example: `{"sub":
// "user@example.com", "iat": 313435}` If the JWT Claims Set contains an
// expiration time (`exp`) claim, it must be an integer timestamp that
// is not in the past and no more than 12 hours in the future.
Payload string ` json:"payload,omitempty" `
// ForceSendFields is a list of field names (e.g. "Delegates") to
// unconditionally include in API requests. By default, fields with
// empty or default values are omitted from API requests. However, any
// non-pointer, non-interface field appearing in ForceSendFields will be
// sent to the server regardless of whether the field is empty or not.
// This may be used to include empty fields in Patch requests.
ForceSendFields [ ] string ` json:"-" `
// NullFields is a list of field names (e.g. "Delegates") to include in
// API requests with the JSON null value. By default, fields with empty
// values are omitted from API requests. However, any field with an
// empty value appearing in NullFields will be sent to the server as
// null. It is an error if a field in this list has a non-empty value.
// This may be used to include null fields in Patch requests.
NullFields [ ] string ` json:"-" `
}
func ( s * SignJwtRequest ) MarshalJSON ( ) ( [ ] byte , error ) {
type NoMethod SignJwtRequest
raw := NoMethod ( * s )
return gensupport . MarshalJSON ( raw , s . ForceSendFields , s . NullFields )
}
type SignJwtResponse struct {
// KeyId: The ID of the key used to sign the JWT. The key used for
// signing will remain valid for at least 12 hours after the JWT is
// signed. To verify the signature, you can retrieve the public key in
// several formats from the following endpoints: - RSA public key
// wrapped in an X.509 v3 certificate:
// `https://www.googleapis.com/service_accounts/v1/metadata/x509/{ACCOUNT
// _EMAIL}` - Raw key in JSON format:
// `https://www.googleapis.com/service_accounts/v1/metadata/raw/{ACCOUNT_
// EMAIL}` - JSON Web Key (JWK):
// `https://www.googleapis.com/service_accounts/v1/metadata/jwk/{ACCOUNT_
// EMAIL}`
KeyId string ` json:"keyId,omitempty" `
// SignedJwt: The signed JWT. Contains the automatically generated
// header; the client-supplied payload; and the signature, which is
// generated using the key referenced by the `kid` field in the header.
// After the key pair referenced by the `key_id` response field expires,
// Google no longer exposes the public key that can be used to verify
// the JWT. As a result, the receiver can no longer verify the
// signature.
SignedJwt string ` json:"signedJwt,omitempty" `
// ServerResponse contains the HTTP response code and headers from the
// server.
googleapi . ServerResponse ` json:"-" `
// ForceSendFields is a list of field names (e.g. "KeyId") to
// unconditionally include in API requests. By default, fields with
// empty or default values are omitted from API requests. However, any
// non-pointer, non-interface field appearing in ForceSendFields will be
// sent to the server regardless of whether the field is empty or not.
// This may be used to include empty fields in Patch requests.
ForceSendFields [ ] string ` json:"-" `
// NullFields is a list of field names (e.g. "KeyId") to include in API
// requests with the JSON null value. By default, fields with empty
// values are omitted from API requests. However, any field with an
// empty value appearing in NullFields will be sent to the server as
// null. It is an error if a field in this list has a non-empty value.
// This may be used to include null fields in Patch requests.
NullFields [ ] string ` json:"-" `
}
func ( s * SignJwtResponse ) MarshalJSON ( ) ( [ ] byte , error ) {
type NoMethod SignJwtResponse
raw := NoMethod ( * s )
return gensupport . MarshalJSON ( raw , s . ForceSendFields , s . NullFields )
}
// method id "iamcredentials.projects.serviceAccounts.generateAccessToken":
type ProjectsServiceAccountsGenerateAccessTokenCall struct {
s * Service
name string
generateaccesstokenrequest * GenerateAccessTokenRequest
urlParams_ gensupport . URLParams
ctx_ context . Context
header_ http . Header
}
// GenerateAccessToken: Generates an OAuth 2.0 access token for a
// service account.
//
// - name: The resource name of the service account for which the
// credentials are requested, in the following format:
// `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-`
// wildcard character is required; replacing it with a project ID is
// invalid.
func ( r * ProjectsServiceAccountsService ) GenerateAccessToken ( name string , generateaccesstokenrequest * GenerateAccessTokenRequest ) * ProjectsServiceAccountsGenerateAccessTokenCall {
c := & ProjectsServiceAccountsGenerateAccessTokenCall { s : r . s , urlParams_ : make ( gensupport . URLParams ) }
c . name = name
c . generateaccesstokenrequest = generateaccesstokenrequest
return c
}
// Fields allows partial responses to be retrieved. See
// https://developers.google.com/gdata/docs/2.0/basics#PartialResponse
// for more information.
func ( c * ProjectsServiceAccountsGenerateAccessTokenCall ) Fields ( s ... googleapi . Field ) * ProjectsServiceAccountsGenerateAccessTokenCall {
c . urlParams_ . Set ( "fields" , googleapi . CombineFields ( s ) )
return c
}
// Context sets the context to be used in this call's Do method. Any
// pending HTTP request will be aborted if the provided context is
// canceled.
func ( c * ProjectsServiceAccountsGenerateAccessTokenCall ) Context ( ctx context . Context ) * ProjectsServiceAccountsGenerateAccessTokenCall {
c . ctx_ = ctx
return c
}
// Header returns an http.Header that can be modified by the caller to
// add HTTP headers to the request.
func ( c * ProjectsServiceAccountsGenerateAccessTokenCall ) Header ( ) http . Header {
if c . header_ == nil {
c . header_ = make ( http . Header )
}
return c . header_
}
func ( c * ProjectsServiceAccountsGenerateAccessTokenCall ) doRequest ( alt string ) ( * http . Response , error ) {
reqHeaders := make ( http . Header )
2022-01-31 11:46:17 +01:00
reqHeaders . Set ( "x-goog-api-client" , "gl-go/" + gensupport . GoVersion ( ) + " gdcl/20220122" )
2021-10-11 20:51:32 +02:00
for k , v := range c . header_ {
reqHeaders [ k ] = v
}
reqHeaders . Set ( "User-Agent" , c . s . userAgent ( ) )
var body io . Reader = nil
body , err := googleapi . WithoutDataWrapper . JSONReader ( c . generateaccesstokenrequest )
if err != nil {
return nil , err
}
reqHeaders . Set ( "Content-Type" , "application/json" )
c . urlParams_ . Set ( "alt" , alt )
c . urlParams_ . Set ( "prettyPrint" , "false" )
urls := googleapi . ResolveRelative ( c . s . BasePath , "v1/{+name}:generateAccessToken" )
urls += "?" + c . urlParams_ . Encode ( )
req , err := http . NewRequest ( "POST" , urls , body )
if err != nil {
return nil , err
}
req . Header = reqHeaders
googleapi . Expand ( req . URL , map [ string ] string {
"name" : c . name ,
} )
return gensupport . SendRequest ( c . ctx_ , c . s . client , req )
}
// Do executes the "iamcredentials.projects.serviceAccounts.generateAccessToken" call.
// Exactly one of *GenerateAccessTokenResponse or error will be non-nil.
// Any non-2xx status code is an error. Response headers are in either
// *GenerateAccessTokenResponse.ServerResponse.Header or (if a response
// was returned at all) in error.(*googleapi.Error).Header. Use
// googleapi.IsNotModified to check whether the returned error was
// because http.StatusNotModified was returned.
func ( c * ProjectsServiceAccountsGenerateAccessTokenCall ) Do ( opts ... googleapi . CallOption ) ( * GenerateAccessTokenResponse , error ) {
gensupport . SetOptions ( c . urlParams_ , opts ... )
res , err := c . doRequest ( "json" )
if res != nil && res . StatusCode == http . StatusNotModified {
if res . Body != nil {
res . Body . Close ( )
}
return nil , & googleapi . Error {
Code : res . StatusCode ,
Header : res . Header ,
}
}
if err != nil {
return nil , err
}
defer googleapi . CloseBody ( res )
if err := googleapi . CheckResponse ( res ) ; err != nil {
return nil , err
}
ret := & GenerateAccessTokenResponse {
ServerResponse : googleapi . ServerResponse {
Header : res . Header ,
HTTPStatusCode : res . StatusCode ,
} ,
}
target := & ret
if err := gensupport . DecodeResponse ( target , res ) ; err != nil {
return nil , err
}
return ret , nil
// {
// "description": "Generates an OAuth 2.0 access token for a service account.",
// "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:generateAccessToken",
// "httpMethod": "POST",
// "id": "iamcredentials.projects.serviceAccounts.generateAccessToken",
// "parameterOrder": [
// "name"
// ],
// "parameters": {
// "name": {
// "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
// "location": "path",
// "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
// "required": true,
// "type": "string"
// }
// },
// "path": "v1/{+name}:generateAccessToken",
// "request": {
// "$ref": "GenerateAccessTokenRequest"
// },
// "response": {
// "$ref": "GenerateAccessTokenResponse"
// },
// "scopes": [
// "https://www.googleapis.com/auth/cloud-platform"
// ]
// }
}
// method id "iamcredentials.projects.serviceAccounts.generateIdToken":
type ProjectsServiceAccountsGenerateIdTokenCall struct {
s * Service
name string
generateidtokenrequest * GenerateIdTokenRequest
urlParams_ gensupport . URLParams
ctx_ context . Context
header_ http . Header
}
// GenerateIdToken: Generates an OpenID Connect ID token for a service
// account.
//
// - name: The resource name of the service account for which the
// credentials are requested, in the following format:
// `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-`
// wildcard character is required; replacing it with a project ID is
// invalid.
func ( r * ProjectsServiceAccountsService ) GenerateIdToken ( name string , generateidtokenrequest * GenerateIdTokenRequest ) * ProjectsServiceAccountsGenerateIdTokenCall {
c := & ProjectsServiceAccountsGenerateIdTokenCall { s : r . s , urlParams_ : make ( gensupport . URLParams ) }
c . name = name
c . generateidtokenrequest = generateidtokenrequest
return c
}
// Fields allows partial responses to be retrieved. See
// https://developers.google.com/gdata/docs/2.0/basics#PartialResponse
// for more information.
func ( c * ProjectsServiceAccountsGenerateIdTokenCall ) Fields ( s ... googleapi . Field ) * ProjectsServiceAccountsGenerateIdTokenCall {
c . urlParams_ . Set ( "fields" , googleapi . CombineFields ( s ) )
return c
}
// Context sets the context to be used in this call's Do method. Any
// pending HTTP request will be aborted if the provided context is
// canceled.
func ( c * ProjectsServiceAccountsGenerateIdTokenCall ) Context ( ctx context . Context ) * ProjectsServiceAccountsGenerateIdTokenCall {
c . ctx_ = ctx
return c
}
// Header returns an http.Header that can be modified by the caller to
// add HTTP headers to the request.
func ( c * ProjectsServiceAccountsGenerateIdTokenCall ) Header ( ) http . Header {
if c . header_ == nil {
c . header_ = make ( http . Header )
}
return c . header_
}
func ( c * ProjectsServiceAccountsGenerateIdTokenCall ) doRequest ( alt string ) ( * http . Response , error ) {
reqHeaders := make ( http . Header )
2022-01-31 11:46:17 +01:00
reqHeaders . Set ( "x-goog-api-client" , "gl-go/" + gensupport . GoVersion ( ) + " gdcl/20220122" )
2021-10-11 20:51:32 +02:00
for k , v := range c . header_ {
reqHeaders [ k ] = v
}
reqHeaders . Set ( "User-Agent" , c . s . userAgent ( ) )
var body io . Reader = nil
body , err := googleapi . WithoutDataWrapper . JSONReader ( c . generateidtokenrequest )
if err != nil {
return nil , err
}
reqHeaders . Set ( "Content-Type" , "application/json" )
c . urlParams_ . Set ( "alt" , alt )
c . urlParams_ . Set ( "prettyPrint" , "false" )
urls := googleapi . ResolveRelative ( c . s . BasePath , "v1/{+name}:generateIdToken" )
urls += "?" + c . urlParams_ . Encode ( )
req , err := http . NewRequest ( "POST" , urls , body )
if err != nil {
return nil , err
}
req . Header = reqHeaders
googleapi . Expand ( req . URL , map [ string ] string {
"name" : c . name ,
} )
return gensupport . SendRequest ( c . ctx_ , c . s . client , req )
}
// Do executes the "iamcredentials.projects.serviceAccounts.generateIdToken" call.
// Exactly one of *GenerateIdTokenResponse or error will be non-nil. Any
// non-2xx status code is an error. Response headers are in either
// *GenerateIdTokenResponse.ServerResponse.Header or (if a response was
// returned at all) in error.(*googleapi.Error).Header. Use
// googleapi.IsNotModified to check whether the returned error was
// because http.StatusNotModified was returned.
func ( c * ProjectsServiceAccountsGenerateIdTokenCall ) Do ( opts ... googleapi . CallOption ) ( * GenerateIdTokenResponse , error ) {
gensupport . SetOptions ( c . urlParams_ , opts ... )
res , err := c . doRequest ( "json" )
if res != nil && res . StatusCode == http . StatusNotModified {
if res . Body != nil {
res . Body . Close ( )
}
return nil , & googleapi . Error {
Code : res . StatusCode ,
Header : res . Header ,
}
}
if err != nil {
return nil , err
}
defer googleapi . CloseBody ( res )
if err := googleapi . CheckResponse ( res ) ; err != nil {
return nil , err
}
ret := & GenerateIdTokenResponse {
ServerResponse : googleapi . ServerResponse {
Header : res . Header ,
HTTPStatusCode : res . StatusCode ,
} ,
}
target := & ret
if err := gensupport . DecodeResponse ( target , res ) ; err != nil {
return nil , err
}
return ret , nil
// {
// "description": "Generates an OpenID Connect ID token for a service account.",
// "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:generateIdToken",
// "httpMethod": "POST",
// "id": "iamcredentials.projects.serviceAccounts.generateIdToken",
// "parameterOrder": [
// "name"
// ],
// "parameters": {
// "name": {
// "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
// "location": "path",
// "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
// "required": true,
// "type": "string"
// }
// },
// "path": "v1/{+name}:generateIdToken",
// "request": {
// "$ref": "GenerateIdTokenRequest"
// },
// "response": {
// "$ref": "GenerateIdTokenResponse"
// },
// "scopes": [
// "https://www.googleapis.com/auth/cloud-platform"
// ]
// }
}
// method id "iamcredentials.projects.serviceAccounts.signBlob":
type ProjectsServiceAccountsSignBlobCall struct {
s * Service
name string
signblobrequest * SignBlobRequest
urlParams_ gensupport . URLParams
ctx_ context . Context
header_ http . Header
}
// SignBlob: Signs a blob using a service account's system-managed
// private key.
//
// - name: The resource name of the service account for which the
// credentials are requested, in the following format:
// `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-`
// wildcard character is required; replacing it with a project ID is
// invalid.
func ( r * ProjectsServiceAccountsService ) SignBlob ( name string , signblobrequest * SignBlobRequest ) * ProjectsServiceAccountsSignBlobCall {
c := & ProjectsServiceAccountsSignBlobCall { s : r . s , urlParams_ : make ( gensupport . URLParams ) }
c . name = name
c . signblobrequest = signblobrequest
return c
}
// Fields allows partial responses to be retrieved. See
// https://developers.google.com/gdata/docs/2.0/basics#PartialResponse
// for more information.
func ( c * ProjectsServiceAccountsSignBlobCall ) Fields ( s ... googleapi . Field ) * ProjectsServiceAccountsSignBlobCall {
c . urlParams_ . Set ( "fields" , googleapi . CombineFields ( s ) )
return c
}
// Context sets the context to be used in this call's Do method. Any
// pending HTTP request will be aborted if the provided context is
// canceled.
func ( c * ProjectsServiceAccountsSignBlobCall ) Context ( ctx context . Context ) * ProjectsServiceAccountsSignBlobCall {
c . ctx_ = ctx
return c
}
// Header returns an http.Header that can be modified by the caller to
// add HTTP headers to the request.
func ( c * ProjectsServiceAccountsSignBlobCall ) Header ( ) http . Header {
if c . header_ == nil {
c . header_ = make ( http . Header )
}
return c . header_
}
func ( c * ProjectsServiceAccountsSignBlobCall ) doRequest ( alt string ) ( * http . Response , error ) {
reqHeaders := make ( http . Header )
2022-01-31 11:46:17 +01:00
reqHeaders . Set ( "x-goog-api-client" , "gl-go/" + gensupport . GoVersion ( ) + " gdcl/20220122" )
2021-10-11 20:51:32 +02:00
for k , v := range c . header_ {
reqHeaders [ k ] = v
}
reqHeaders . Set ( "User-Agent" , c . s . userAgent ( ) )
var body io . Reader = nil
body , err := googleapi . WithoutDataWrapper . JSONReader ( c . signblobrequest )
if err != nil {
return nil , err
}
reqHeaders . Set ( "Content-Type" , "application/json" )
c . urlParams_ . Set ( "alt" , alt )
c . urlParams_ . Set ( "prettyPrint" , "false" )
urls := googleapi . ResolveRelative ( c . s . BasePath , "v1/{+name}:signBlob" )
urls += "?" + c . urlParams_ . Encode ( )
req , err := http . NewRequest ( "POST" , urls , body )
if err != nil {
return nil , err
}
req . Header = reqHeaders
googleapi . Expand ( req . URL , map [ string ] string {
"name" : c . name ,
} )
return gensupport . SendRequest ( c . ctx_ , c . s . client , req )
}
// Do executes the "iamcredentials.projects.serviceAccounts.signBlob" call.
// Exactly one of *SignBlobResponse or error will be non-nil. Any
// non-2xx status code is an error. Response headers are in either
// *SignBlobResponse.ServerResponse.Header or (if a response was
// returned at all) in error.(*googleapi.Error).Header. Use
// googleapi.IsNotModified to check whether the returned error was
// because http.StatusNotModified was returned.
func ( c * ProjectsServiceAccountsSignBlobCall ) Do ( opts ... googleapi . CallOption ) ( * SignBlobResponse , error ) {
gensupport . SetOptions ( c . urlParams_ , opts ... )
res , err := c . doRequest ( "json" )
if res != nil && res . StatusCode == http . StatusNotModified {
if res . Body != nil {
res . Body . Close ( )
}
return nil , & googleapi . Error {
Code : res . StatusCode ,
Header : res . Header ,
}
}
if err != nil {
return nil , err
}
defer googleapi . CloseBody ( res )
if err := googleapi . CheckResponse ( res ) ; err != nil {
return nil , err
}
ret := & SignBlobResponse {
ServerResponse : googleapi . ServerResponse {
Header : res . Header ,
HTTPStatusCode : res . StatusCode ,
} ,
}
target := & ret
if err := gensupport . DecodeResponse ( target , res ) ; err != nil {
return nil , err
}
return ret , nil
// {
// "description": "Signs a blob using a service account's system-managed private key.",
// "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:signBlob",
// "httpMethod": "POST",
// "id": "iamcredentials.projects.serviceAccounts.signBlob",
// "parameterOrder": [
// "name"
// ],
// "parameters": {
// "name": {
// "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
// "location": "path",
// "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
// "required": true,
// "type": "string"
// }
// },
// "path": "v1/{+name}:signBlob",
// "request": {
// "$ref": "SignBlobRequest"
// },
// "response": {
// "$ref": "SignBlobResponse"
// },
// "scopes": [
// "https://www.googleapis.com/auth/cloud-platform"
// ]
// }
}
// method id "iamcredentials.projects.serviceAccounts.signJwt":
type ProjectsServiceAccountsSignJwtCall struct {
s * Service
name string
signjwtrequest * SignJwtRequest
urlParams_ gensupport . URLParams
ctx_ context . Context
header_ http . Header
}
// SignJwt: Signs a JWT using a service account's system-managed private
// key.
//
// - name: The resource name of the service account for which the
// credentials are requested, in the following format:
// `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-`
// wildcard character is required; replacing it with a project ID is
// invalid.
func ( r * ProjectsServiceAccountsService ) SignJwt ( name string , signjwtrequest * SignJwtRequest ) * ProjectsServiceAccountsSignJwtCall {
c := & ProjectsServiceAccountsSignJwtCall { s : r . s , urlParams_ : make ( gensupport . URLParams ) }
c . name = name
c . signjwtrequest = signjwtrequest
return c
}
// Fields allows partial responses to be retrieved. See
// https://developers.google.com/gdata/docs/2.0/basics#PartialResponse
// for more information.
func ( c * ProjectsServiceAccountsSignJwtCall ) Fields ( s ... googleapi . Field ) * ProjectsServiceAccountsSignJwtCall {
c . urlParams_ . Set ( "fields" , googleapi . CombineFields ( s ) )
return c
}
// Context sets the context to be used in this call's Do method. Any
// pending HTTP request will be aborted if the provided context is
// canceled.
func ( c * ProjectsServiceAccountsSignJwtCall ) Context ( ctx context . Context ) * ProjectsServiceAccountsSignJwtCall {
c . ctx_ = ctx
return c
}
// Header returns an http.Header that can be modified by the caller to
// add HTTP headers to the request.
func ( c * ProjectsServiceAccountsSignJwtCall ) Header ( ) http . Header {
if c . header_ == nil {
c . header_ = make ( http . Header )
}
return c . header_
}
func ( c * ProjectsServiceAccountsSignJwtCall ) doRequest ( alt string ) ( * http . Response , error ) {
reqHeaders := make ( http . Header )
2022-01-31 11:46:17 +01:00
reqHeaders . Set ( "x-goog-api-client" , "gl-go/" + gensupport . GoVersion ( ) + " gdcl/20220122" )
2021-10-11 20:51:32 +02:00
for k , v := range c . header_ {
reqHeaders [ k ] = v
}
reqHeaders . Set ( "User-Agent" , c . s . userAgent ( ) )
var body io . Reader = nil
body , err := googleapi . WithoutDataWrapper . JSONReader ( c . signjwtrequest )
if err != nil {
return nil , err
}
reqHeaders . Set ( "Content-Type" , "application/json" )
c . urlParams_ . Set ( "alt" , alt )
c . urlParams_ . Set ( "prettyPrint" , "false" )
urls := googleapi . ResolveRelative ( c . s . BasePath , "v1/{+name}:signJwt" )
urls += "?" + c . urlParams_ . Encode ( )
req , err := http . NewRequest ( "POST" , urls , body )
if err != nil {
return nil , err
}
req . Header = reqHeaders
googleapi . Expand ( req . URL , map [ string ] string {
"name" : c . name ,
} )
return gensupport . SendRequest ( c . ctx_ , c . s . client , req )
}
// Do executes the "iamcredentials.projects.serviceAccounts.signJwt" call.
// Exactly one of *SignJwtResponse or error will be non-nil. Any non-2xx
// status code is an error. Response headers are in either
// *SignJwtResponse.ServerResponse.Header or (if a response was returned
// at all) in error.(*googleapi.Error).Header. Use
// googleapi.IsNotModified to check whether the returned error was
// because http.StatusNotModified was returned.
func ( c * ProjectsServiceAccountsSignJwtCall ) Do ( opts ... googleapi . CallOption ) ( * SignJwtResponse , error ) {
gensupport . SetOptions ( c . urlParams_ , opts ... )
res , err := c . doRequest ( "json" )
if res != nil && res . StatusCode == http . StatusNotModified {
if res . Body != nil {
res . Body . Close ( )
}
return nil , & googleapi . Error {
Code : res . StatusCode ,
Header : res . Header ,
}
}
if err != nil {
return nil , err
}
defer googleapi . CloseBody ( res )
if err := googleapi . CheckResponse ( res ) ; err != nil {
return nil , err
}
ret := & SignJwtResponse {
ServerResponse : googleapi . ServerResponse {
Header : res . Header ,
HTTPStatusCode : res . StatusCode ,
} ,
}
target := & ret
if err := gensupport . DecodeResponse ( target , res ) ; err != nil {
return nil , err
}
return ret , nil
// {
// "description": "Signs a JWT using a service account's system-managed private key.",
// "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:signJwt",
// "httpMethod": "POST",
// "id": "iamcredentials.projects.serviceAccounts.signJwt",
// "parameterOrder": [
// "name"
// ],
// "parameters": {
// "name": {
// "description": "Required. The resource name of the service account for which the credentials are requested, in the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.",
// "location": "path",
// "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
// "required": true,
// "type": "string"
// }
// },
// "path": "v1/{+name}:signJwt",
// "request": {
// "$ref": "SignJwtRequest"
// },
// "response": {
// "$ref": "SignJwtResponse"
// },
// "scopes": [
// "https://www.googleapis.com/auth/cloud-platform"
// ]
// }
}