googleapis / googleapis/google-cloud-java

[google-auth-library-java] Implement .createDelegated() for ComputeCredential and ImpersonatedCredentials

未关闭
#12,614 2 条评论 5 个 reaction 已指派 0 人 在 GitHub 查看
type: feature request
主要语言
Java
星标
2.1k
派生
1.2k
平均合并
1 天 23 小时
30 天内合并 PR
157

描述

FR to implement [createDelegated()]](https://googleapis.dev/java/google-auth-library/latest/com/google/auth/oauth2/ServiceAccountCredentials.html#createDelegated-java.lang.String-) mechansm for other credential types.

Currently, only `ServiceAccount` credentials implements that api that allows domain-wide delegation.

This FR is to allow the other credentials to also implement it via its `ServiceAccoutnSigner` interface

- `ComputeEngineCredential.createDelegated()`
- `ImpersonatedCredentials.createDelegated()`

As an exmaple implementation, In the following article, i've used the signer interface of these credential types to provide the equivalent `createDelegated()` feature

- [Easy GSuites Domain-Wide Delegation (DwD) in Java](https://blog.salrashid.dev/articles/2020/dwd_java/)

贡献指南

打开贡献指南

调研方向

Start with ServiceAccountCredentials.createDelegated() and the ServiceAccoutnSigner interface, then compare the requested behavior for ComputeEngineCredential and ImpersonatedCredentials. Use the linked domain-wide delegation article for context; done means both credential types provide the equivalent createDelegated() feature.

由索引模型根据 Issue 内容生成。

评估

技术栈
google-cloud, java
领域
authentication, cloud
Issue 类型
功能
难度
3/5
预计耗时
1-2 天
活跃度
冷清
描述清晰度
基本清楚
新手友好度
50/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。