Struct IdTokenSource 

pub struct IdTokenSource { /* private fields */ }

Mints Google-signed ID tokens for one audience, for calling services that check them, such as Cloud Run, Cloud Run functions and Identity-Aware Proxy.

Each call to Source::token mints a new token, so wrap the source in a GoogleAuthTokenGenerator with from_source to cache it until shortly before its exp. The token is a SecretValue and is never logged.

Implementations

impl IdTokenSource

pub async fn new( audience: IdTokenAudience, token_source_type: TokenSourceType, ) -> Result<Self>

A source that mints ID tokens with the identity of the credentials token_source_type finds:

• a service account key file signs an assertion and exchanges it at the key’s token endpoint;
• the metadata server mints them for its service account;
• an impersonated_service_account credentials file, such as gcloud auth application-default login --impersonate-service-account writes, and external_account credentials with a service_account_impersonation_url impersonate the service account that URL names.

Fails with ErrorKind::IdTokenNeedsImpersonation for credentials that hold no service account: authorized_user credentials, external_account credentials without impersonation, and TokenSourceType::ExternalSource. Use impersonating for those.

pub async fn impersonating( audience: IdTokenAudience, service_account: ServiceAccountEmail, token_source_type: TokenSourceType, ) -> Result<Self>

A source that mints ID tokens with the identity of service_account, through the IAM Credentials generateIdToken method. The access token that token_source_type yields authorizes the call, so its principal needs the iam.serviceAccounts.getOpenIdToken permission on service_account, which the Service Account OpenID Connect Identity Token Creator role grants.

Trait Implementations

impl Debug for IdTokenSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<IdTokenSource> for BoxSource

fn from(v: IdTokenSource) -> Self

Converts to this type from the input type.

impl Source for IdTokenSource

fn token<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<Token>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,