googleapis / googleapis/google-cloud-java

[google-auth-library-java] Generating ID token with ImpersonatedCredentials does not support overriding quota project

未关闭
#12,604 2 条评论 0 个 reaction 已指派 1 人 已指派给 @TimurSadykov 在 GitHub 查看
help wanted priority: p3 type: feature request
主要语言
Java
星标
2.1k
派生
1.2k
平均合并
1 天 23 小时
30 天内合并 PR
154

描述

**Is your feature request related to a problem? Please describe.**
`ImpersonatedCredentials` accepts a quota project in its builder, and the quota project is properly overridden when generating an access token. However, when generating id token with the `idTokenWithAudience()` method, it won't perform such override. The impact is that if a service does impersonate many IdTokens on its own quota - it exceeds a default limit of 60k.

**Describe the solution you'd like**
It seems to me that providing the quota project in the `additionalFields` argument when invoking the `IamUtils.getIdToken()` method would work

**Describe alternatives you've considered**
There doesn't seem to be good alternatives.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。