googleapis / googleapis/google-cloud-java

[auth]: Switch to mTLS endpoint for IAM and STS when MTLSUtils.isEnabled returns true.

Open
#13,461 0 comments 0 reactions 0 assignees View on GitHub
priority: p3 type: feature request
Dominant language
Java
Stars
2.1k
Forks
1.2k
Avg merge
1d 23h
Merged PRs (30d)
154

Description

Presently, we target the RAB mtls endpoint when we discover that mTLS can be enabled.

However, we still create a new HttpAdapter to call IAM and STS as opposed to using the mTLS transport and mTLS endpoint.

Investigate the viability of this:

1. If it is possible to call mtls STS/IAM endpoints.

2. based on 1., decide whether to switch the Credential's transport to mTLS and the STS/IAM endpoint to mTLS as well.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.