reqsign-google

Google Cloud Platform signing implementation for reqsign.

This crate signs Google Cloud requests with OAuth 2.0 access tokens or service account credentials. Its default Application Default Credentials chain checks GOOGLE_APPLICATION_CREDENTIALS, the well-known gcloud credentials file, and the Compute Engine metadata service.

Quick Start

use reqsign_core::{Context, OsEnv, Signer};
use reqsign_file_read_tokio::TokioFileRead;
use reqsign_google::{DefaultCredentialProvider, RequestSigner};
use reqsign_http_send_reqwest::ReqwestHttpSend;

let context = Context::new()
    .with_file_read(TokioFileRead)
    .with_http_send(ReqwestHttpSend::default())
    .with_env(OsEnv);

let signer = Signer::new(
    context,
    DefaultCredentialProvider::new(),
    RequestSigner::new("storage"),
);

The crate also supports server-side Cloud Storage Credential Access Boundary downscoping. Enable the credential-access-boundary-client-side feature for local client-side token generation.

Examples

• Credential-chain logging
• Custom credential chain

License

Licensed under Apache License, Version 2.0.