googleapis / googleapis/google-cloud-java
[google-auth-library-java] Generating ID token with ImpersonatedCredentials does not support overriding quota project
- Lenguaje dominante
- Java
- Estrellas
- 2.1k
- Forks
- 1.2k
- Merge medio
- 1 d 23 h
- PR fusionados (30 d)
- 154
Descripción
**Is your feature request related to a problem? Please describe.**
`ImpersonatedCredentials` accepts a quota project in its builder, and the quota project is properly overridden when generating an access token. However, when generating id token with the `idTokenWithAudience()` method, it won't perform such override. The impact is that if a service does impersonate many IdTokens on its own quota - it exceeds a default limit of 60k.
**Describe the solution you'd like**
It seems to me that providing the quota project in the `additionalFields` argument when invoking the `IamUtils.getIdToken()` method would work
**Describe alternatives you've considered**
There doesn't seem to be good alternatives.
Guía de contribución
Evaluación
Este issue todavía no se ha evaluado.