public final class AuthProvider extends com.google.protobuf.GeneratedMessageV3 implements AuthProviderOrBuilder
Configuration for an authentication provider, including support for [JSON Web Token (JWT)](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32).Protobuf type
google.api.AuthProvider| Modifier and Type | Class and Description |
|---|---|
static class |
AuthProvider.Builder
Configuration for an authentication provider, including support for
[JSON Web Token
(JWT)](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32).
|
com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage,BuilderType extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType,BuilderType>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable, com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter| Modifier and Type | Field and Description |
|---|---|
static int |
AUDIENCES_FIELD_NUMBER |
static int |
AUTHORIZATION_URL_FIELD_NUMBER |
static int |
ID_FIELD_NUMBER |
static int |
ISSUER_FIELD_NUMBER |
static int |
JWKS_URI_FIELD_NUMBER |
static int |
JWT_LOCATIONS_FIELD_NUMBER |
| Modifier and Type | Method and Description |
|---|---|
boolean |
equals(Object obj) |
String |
getAudiences()
The list of JWT
[audiences](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32#section-4.1.3).
|
com.google.protobuf.ByteString |
getAudiencesBytes()
The list of JWT
[audiences](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32#section-4.1.3).
|
String |
getAuthorizationUrl()
Redirect URL if JWT token is required but not present or is expired.
|
com.google.protobuf.ByteString |
getAuthorizationUrlBytes()
Redirect URL if JWT token is required but not present or is expired.
|
static AuthProvider |
getDefaultInstance() |
AuthProvider |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
String |
getId()
The unique identifier of the auth provider.
|
com.google.protobuf.ByteString |
getIdBytes()
The unique identifier of the auth provider.
|
String |
getIssuer()
Identifies the principal that issued the JWT.
|
com.google.protobuf.ByteString |
getIssuerBytes()
Identifies the principal that issued the JWT.
|
String |
getJwksUri()
URL of the provider's public key set to validate signature of the JWT.
|
com.google.protobuf.ByteString |
getJwksUriBytes()
URL of the provider's public key set to validate signature of the JWT.
|
JwtLocation |
getJwtLocations(int index)
Defines the locations to extract the JWT.
|
int |
getJwtLocationsCount()
Defines the locations to extract the JWT.
|
List<JwtLocation> |
getJwtLocationsList()
Defines the locations to extract the JWT.
|
JwtLocationOrBuilder |
getJwtLocationsOrBuilder(int index)
Defines the locations to extract the JWT.
|
List<? extends JwtLocationOrBuilder> |
getJwtLocationsOrBuilderList()
Defines the locations to extract the JWT.
|
com.google.protobuf.Parser<AuthProvider> |
getParserForType() |
int |
getSerializedSize() |
com.google.protobuf.UnknownFieldSet |
getUnknownFields() |
int |
hashCode() |
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
static AuthProvider.Builder |
newBuilder() |
static AuthProvider.Builder |
newBuilder(AuthProvider prototype) |
AuthProvider.Builder |
newBuilderForType() |
protected AuthProvider.Builder |
newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) |
protected Object |
newInstance(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused) |
static AuthProvider |
parseDelimitedFrom(InputStream input) |
static AuthProvider |
parseDelimitedFrom(InputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static AuthProvider |
parseFrom(byte[] data) |
static AuthProvider |
parseFrom(byte[] data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static AuthProvider |
parseFrom(ByteBuffer data) |
static AuthProvider |
parseFrom(ByteBuffer data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static AuthProvider |
parseFrom(com.google.protobuf.ByteString data) |
static AuthProvider |
parseFrom(com.google.protobuf.ByteString data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static AuthProvider |
parseFrom(com.google.protobuf.CodedInputStream input) |
static AuthProvider |
parseFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static AuthProvider |
parseFrom(InputStream input) |
static AuthProvider |
parseFrom(InputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static com.google.protobuf.Parser<AuthProvider> |
parser() |
AuthProvider.Builder |
toBuilder() |
void |
writeTo(com.google.protobuf.CodedOutputStream output) |
canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, internalGetMapField, makeExtensionsImmutable, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTagfindInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toStringaddAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeToclone, finalize, getClass, notify, notifyAll, wait, wait, waitpublic static final int ID_FIELD_NUMBER
public static final int ISSUER_FIELD_NUMBER
public static final int JWKS_URI_FIELD_NUMBER
public static final int AUDIENCES_FIELD_NUMBER
public static final int AUTHORIZATION_URL_FIELD_NUMBER
public static final int JWT_LOCATIONS_FIELD_NUMBER
protected Object newInstance(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused)
newInstance in class com.google.protobuf.GeneratedMessageV3public final com.google.protobuf.UnknownFieldSet getUnknownFields()
getUnknownFields in interface com.google.protobuf.MessageOrBuildergetUnknownFields in class com.google.protobuf.GeneratedMessageV3public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3public String getId()
The unique identifier of the auth provider. It will be referred to by `AuthRequirement.provider_id`. Example: "bookstore_auth".
string id = 1;getId in interface AuthProviderOrBuilderpublic com.google.protobuf.ByteString getIdBytes()
The unique identifier of the auth provider. It will be referred to by `AuthRequirement.provider_id`. Example: "bookstore_auth".
string id = 1;getIdBytes in interface AuthProviderOrBuilderpublic String getIssuer()
Identifies the principal that issued the JWT. See https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32#section-4.1.1 Usually a URL or an email address. Example: https://securetoken.google.com Example: 1234567-compute@developer.gserviceaccount.com
string issuer = 2;getIssuer in interface AuthProviderOrBuilderpublic com.google.protobuf.ByteString getIssuerBytes()
Identifies the principal that issued the JWT. See https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32#section-4.1.1 Usually a URL or an email address. Example: https://securetoken.google.com Example: 1234567-compute@developer.gserviceaccount.com
string issuer = 2;getIssuerBytes in interface AuthProviderOrBuilderpublic String getJwksUri()
URL of the provider's public key set to validate signature of the JWT. See
[OpenID
Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata).
Optional if the key set document:
- can be retrieved from
[OpenID
Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html of
the issuer.
- can be inferred from the email domain of the issuer (e.g. a Google
service account).
Example: https://www.googleapis.com/oauth2/v1/certs
string jwks_uri = 3;getJwksUri in interface AuthProviderOrBuilderpublic com.google.protobuf.ByteString getJwksUriBytes()
URL of the provider's public key set to validate signature of the JWT. See
[OpenID
Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata).
Optional if the key set document:
- can be retrieved from
[OpenID
Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html of
the issuer.
- can be inferred from the email domain of the issuer (e.g. a Google
service account).
Example: https://www.googleapis.com/oauth2/v1/certs
string jwks_uri = 3;getJwksUriBytes in interface AuthProviderOrBuilderpublic String getAudiences()
The list of JWT
[audiences](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32#section-4.1.3).
that are allowed to access. A JWT containing any of these audiences will
be accepted. When this setting is absent, only JWTs with audience
"https://[Service_name][google.api.Service.name]/[API_name][google.protobuf.Api.name]"
will be accepted. For example, if no audiences are in the setting,
LibraryService API will only accept JWTs with the following audience
"https://library-example.googleapis.com/google.example.library.v1.LibraryService".
Example:
audiences: bookstore_android.apps.googleusercontent.com,
bookstore_web.apps.googleusercontent.com
string audiences = 4;getAudiences in interface AuthProviderOrBuilderpublic com.google.protobuf.ByteString getAudiencesBytes()
The list of JWT
[audiences](https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32#section-4.1.3).
that are allowed to access. A JWT containing any of these audiences will
be accepted. When this setting is absent, only JWTs with audience
"https://[Service_name][google.api.Service.name]/[API_name][google.protobuf.Api.name]"
will be accepted. For example, if no audiences are in the setting,
LibraryService API will only accept JWTs with the following audience
"https://library-example.googleapis.com/google.example.library.v1.LibraryService".
Example:
audiences: bookstore_android.apps.googleusercontent.com,
bookstore_web.apps.googleusercontent.com
string audiences = 4;getAudiencesBytes in interface AuthProviderOrBuilderpublic String getAuthorizationUrl()
Redirect URL if JWT token is required but not present or is expired. Implement authorizationUrl of securityDefinitions in OpenAPI spec.
string authorization_url = 5;getAuthorizationUrl in interface AuthProviderOrBuilderpublic com.google.protobuf.ByteString getAuthorizationUrlBytes()
Redirect URL if JWT token is required but not present or is expired. Implement authorizationUrl of securityDefinitions in OpenAPI spec.
string authorization_url = 5;getAuthorizationUrlBytes in interface AuthProviderOrBuilderpublic List<JwtLocation> getJwtLocationsList()
Defines the locations to extract the JWT.
JWT locations can be either from HTTP headers or URL query parameters.
The rule is that the first match wins. The checking order is: checking
all headers first, then URL query parameters.
If not specified, default to use following 3 locations:
1) Authorization: Bearer
2) x-goog-iap-jwt-assertion
3) access_token query parameter
Default locations can be specified as followings:
jwt_locations:
- header: Authorization
value_prefix: "Bearer "
- header: x-goog-iap-jwt-assertion
- query: access_token
repeated .google.api.JwtLocation jwt_locations = 6;getJwtLocationsList in interface AuthProviderOrBuilderpublic List<? extends JwtLocationOrBuilder> getJwtLocationsOrBuilderList()
Defines the locations to extract the JWT.
JWT locations can be either from HTTP headers or URL query parameters.
The rule is that the first match wins. The checking order is: checking
all headers first, then URL query parameters.
If not specified, default to use following 3 locations:
1) Authorization: Bearer
2) x-goog-iap-jwt-assertion
3) access_token query parameter
Default locations can be specified as followings:
jwt_locations:
- header: Authorization
value_prefix: "Bearer "
- header: x-goog-iap-jwt-assertion
- query: access_token
repeated .google.api.JwtLocation jwt_locations = 6;getJwtLocationsOrBuilderList in interface AuthProviderOrBuilderpublic int getJwtLocationsCount()
Defines the locations to extract the JWT.
JWT locations can be either from HTTP headers or URL query parameters.
The rule is that the first match wins. The checking order is: checking
all headers first, then URL query parameters.
If not specified, default to use following 3 locations:
1) Authorization: Bearer
2) x-goog-iap-jwt-assertion
3) access_token query parameter
Default locations can be specified as followings:
jwt_locations:
- header: Authorization
value_prefix: "Bearer "
- header: x-goog-iap-jwt-assertion
- query: access_token
repeated .google.api.JwtLocation jwt_locations = 6;getJwtLocationsCount in interface AuthProviderOrBuilderpublic JwtLocation getJwtLocations(int index)
Defines the locations to extract the JWT.
JWT locations can be either from HTTP headers or URL query parameters.
The rule is that the first match wins. The checking order is: checking
all headers first, then URL query parameters.
If not specified, default to use following 3 locations:
1) Authorization: Bearer
2) x-goog-iap-jwt-assertion
3) access_token query parameter
Default locations can be specified as followings:
jwt_locations:
- header: Authorization
value_prefix: "Bearer "
- header: x-goog-iap-jwt-assertion
- query: access_token
repeated .google.api.JwtLocation jwt_locations = 6;getJwtLocations in interface AuthProviderOrBuilderpublic JwtLocationOrBuilder getJwtLocationsOrBuilder(int index)
Defines the locations to extract the JWT.
JWT locations can be either from HTTP headers or URL query parameters.
The rule is that the first match wins. The checking order is: checking
all headers first, then URL query parameters.
If not specified, default to use following 3 locations:
1) Authorization: Bearer
2) x-goog-iap-jwt-assertion
3) access_token query parameter
Default locations can be specified as followings:
jwt_locations:
- header: Authorization
value_prefix: "Bearer "
- header: x-goog-iap-jwt-assertion
- query: access_token
repeated .google.api.JwtLocation jwt_locations = 6;getJwtLocationsOrBuilder in interface AuthProviderOrBuilderpublic final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3public void writeTo(com.google.protobuf.CodedOutputStream output)
throws IOException
writeTo in interface com.google.protobuf.MessageLitewriteTo in class com.google.protobuf.GeneratedMessageV3IOExceptionpublic int getSerializedSize()
getSerializedSize in interface com.google.protobuf.MessageLitegetSerializedSize in class com.google.protobuf.GeneratedMessageV3public boolean equals(Object obj)
equals in interface com.google.protobuf.Messageequals in class com.google.protobuf.AbstractMessagepublic int hashCode()
hashCode in interface com.google.protobuf.MessagehashCode in class com.google.protobuf.AbstractMessagepublic static AuthProvider parseFrom(ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static AuthProvider parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static AuthProvider parseFrom(com.google.protobuf.ByteString data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static AuthProvider parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static AuthProvider parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static AuthProvider parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static AuthProvider parseFrom(InputStream input) throws IOException
IOExceptionpublic static AuthProvider parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic static AuthProvider parseDelimitedFrom(InputStream input) throws IOException
IOExceptionpublic static AuthProvider parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic static AuthProvider parseFrom(com.google.protobuf.CodedInputStream input) throws IOException
IOExceptionpublic static AuthProvider parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic AuthProvider.Builder newBuilderForType()
newBuilderForType in interface com.google.protobuf.MessagenewBuilderForType in interface com.google.protobuf.MessageLitepublic static AuthProvider.Builder newBuilder()
public static AuthProvider.Builder newBuilder(AuthProvider prototype)
public AuthProvider.Builder toBuilder()
toBuilder in interface com.google.protobuf.MessagetoBuilder in interface com.google.protobuf.MessageLiteprotected AuthProvider.Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)
newBuilderForType in class com.google.protobuf.GeneratedMessageV3public static AuthProvider getDefaultInstance()
public static com.google.protobuf.Parser<AuthProvider> parser()
public com.google.protobuf.Parser<AuthProvider> getParserForType()
getParserForType in interface com.google.protobuf.MessagegetParserForType in interface com.google.protobuf.MessageLitegetParserForType in class com.google.protobuf.GeneratedMessageV3public AuthProvider getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderCopyright © 2020 Google LLC. All rights reserved.