Module credentials 

Credentials: where the access token each call is sent with comes from.

Structs

AccessToken

An access token, sent as it is. It is not renewed: a service account’s lives five minutes.

CliSession

The session the origin CLI stored at its last login, renewed from its refresh token when its access token has expired. The renewed session stays in memory: the CLI’s file is never written.

InstanceMetadata

The credential of the service account the instance runs as, from the instance’s metadata service: a session is opened for six hours, and each access token, which lives five minutes, requested with it a minute before the last one expires. The requests never go through a proxy, which the metadata service refuses, and one it can’t answer right now (503) is sent again twice.

ServiceAccount

A service account’s client ID and secret, exchanged for access tokens with the client credentials grant as they expire.

Constants

METADATA_ENDPOINT

The instance metadata service, which software on an instance reaches at this link-local address.

TOKEN_URL

The identity provider’s token endpoint, where service account credentials and the CLI’s session are exchanged for access tokens.

Traits

Credentials

Credentials supply the access token each call is sent with.

Functions

default_credentials

The first credentials found, in this order:

Type Aliases

TokenFuture

What Credentials::token returns.