Struct GoogleIdentity 

pub struct GoogleIdentity { /* private fields */ }

A Google Cloud workload uses its attached service account; there is no per-instance secret. The metadata endpoint is fixed, never supplied by an untrusted URL or header.

Implementations

impl GoogleIdentity

pub fn new(audience: impl Into<String>) -> Result<Arc<Self>, StoreError>

A provider of Google-signed identity tokens for audience, fetched from the fixed metadata endpoint and cached for 60 seconds. The server verifies expiry, issuer, audience and subject on every call.

Errors

StoreError when audience is empty or the metadata client cannot be built.

Trait Implementations

impl BearerProvider for GoogleIdentity

fn token<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<BearerToken, StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

The credential to send on the next control-plane call. Called once per request, inside that request’s deadline.