googleapis / googleapis/google-cloud-java

[google-auth-library-java] Generating ID token with ImpersonatedCredentials does not support overriding quota project

Ouverte
#12,604 2 commentaires 0 réactions 1 personne assignée Assignée à @TimurSadykov Voir sur GitHub
help wanted priority: p3 type: feature request
Langage dominant
Java
Étoiles
2.1k
Forks
1.2k
Merge moyen
1 j 23 h
PR mergées (30 j)
154

Description

**Is your feature request related to a problem? Please describe.**
`ImpersonatedCredentials` accepts a quota project in its builder, and the quota project is properly overridden when generating an access token. However, when generating id token with the `idTokenWithAudience()` method, it won't perform such override. The impact is that if a service does impersonate many IdTokens on its own quota - it exceeds a default limit of 60k.

**Describe the solution you'd like**
It seems to me that providing the quota project in the `additionalFields` argument when invoking the `IamUtils.getIdToken()` method would work

**Describe alternatives you've considered**
There doesn't seem to be good alternatives.

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.