| Interface | Description |
|---|---|
| IdTokenProvider |
Interface for an Google OIDC token provider.
|
| JwtProvider |
Interface for creating custom JWT tokens
|
| OAuth2Credentials.CredentialsChangedListener |
Listener for changes to credentials.
|
| OAuth2CredentialsWithRefresh.OAuth2RefreshHandler |
Interface for the refresh handler.
|
| PKCEProvider | |
| QuotaProjectIdProvider |
Interface for
GoogleCredentials that return a quota project ID. |
| TokenStore |
Interface for long term storage of tokens
|
| Class | Description |
|---|---|
| AccessToken |
Represents a temporary OAuth2 access token and its expiration information.
|
| AccessToken.Builder | |
| AwsCredentials |
AWS credentials representing a third-party identity for calling Google APIs.
|
| AwsCredentials.Builder | |
| ClientId |
An OAuth2 user authorization Client ID and associated information.
|
| ClientId.Builder | |
| CloudShellCredentials |
OAuth2 credentials representing the built-in service account for Google Cloud Shell.
|
| CloudShellCredentials.Builder | |
| ComputeEngineCredentials |
OAuth2 credentials representing the built-in service account for a Google Compute Engine VM.
|
| ComputeEngineCredentials.Builder | |
| CredentialAccessBoundary |
Defines an upper bound of permissions available for a GCP credential via
CredentialAccessBoundary.AccessBoundaryRules. |
| CredentialAccessBoundary.AccessBoundaryRule |
Defines an upper bound of permissions on a particular resource.
|
| CredentialAccessBoundary.AccessBoundaryRule.AvailabilityCondition |
An optional condition that can be used as part of a
CredentialAccessBoundary.AccessBoundaryRule to further
restrict permissions. |
| CredentialAccessBoundary.AccessBoundaryRule.AvailabilityCondition.Builder | |
| CredentialAccessBoundary.AccessBoundaryRule.Builder | |
| CredentialAccessBoundary.Builder | |
| DefaultPKCEProvider |
Implements PKCE using only the Java standard library.
|
| DownscopedCredentials |
DownscopedCredentials enables the ability to downscope, or restrict, the Identity and Access
Management (IAM) permissions that a short-lived credential can use for Cloud Storage.
|
| DownscopedCredentials.Builder | |
| ExternalAccountAuthorizedUserCredentials |
OAuth2 credentials sourced using external identities through Workforce Identity Federation.
|
| ExternalAccountAuthorizedUserCredentials.Builder |
Builder for
ExternalAccountAuthorizedUserCredentials. |
| ExternalAccountCredentials |
Base external account credentials class.
|
| ExternalAccountCredentials.Builder |
Base builder for external account credentials.
|
| GdchCredentials | |
| GdchCredentials.Builder | |
| GoogleAuthUtils |
This public class provides shared utilities for common OAuth2 utils or ADC.
|
| GoogleCredentials |
Base type for credentials for authorizing calls to Google APIs using OAuth2.
|
| GoogleCredentials.Builder | |
| IdentityPoolCredentials |
Url-sourced and file-sourced external account credentials.
|
| IdentityPoolCredentials.Builder | |
| IdToken |
Represents a temporary IdToken and its JsonWebSignature object
|
| IdTokenCredentials |
IdTokenCredentials provides a Google Issued OpenIdConnect token.
|
| IdTokenCredentials.Builder | |
| ImpersonatedCredentials |
ImpersonatedCredentials allowing credentials issued to a user or service account to impersonate
another.
|
| ImpersonatedCredentials.Builder | |
| JwtClaims |
Value class representing the set of fields used as the payload of a JWT token.
|
| JwtClaims.Builder | |
| JwtCredentials |
Credentials class for calling Google APIs using a JWT with custom claims.
|
| JwtCredentials.Builder | |
| MemoryTokensStorage |
Represents an in-memory storage of tokens.
|
| OAuth2Credentials |
Base type for Credentials using OAuth2.
|
| OAuth2Credentials.Builder | |
| OAuth2CredentialsWithRefresh |
A refreshable alternative to
OAuth2Credentials. |
| OAuth2CredentialsWithRefresh.Builder | |
| PluggableAuthCredentials |
PluggableAuthCredentials enables the exchange of workload identity pool external credentials for
Google access tokens by retrieving 3rd party tokens through a user supplied executable.
|
| PluggableAuthCredentials.Builder | |
| ServiceAccountCredentials |
OAuth2 credentials representing a Service Account for calling Google APIs.
|
| ServiceAccountCredentials.Builder | |
| ServiceAccountJwtAccessCredentials |
Service Account credentials for calling Google APIs using a JWT directly for access.
|
| ServiceAccountJwtAccessCredentials.Builder | |
| TokenVerifier |
Handle verification of Google-signed JWT tokens.
|
| TokenVerifier.Builder | |
| UserAuthorizer |
Handles an interactive 3-Legged-OAuth2 (3LO) user consent authorization.
|
| UserAuthorizer.Builder | |
| UserCredentials |
OAuth2 Credentials representing a user's identity and consent.
|
| UserCredentials.Builder |
| Enum | Description |
|---|---|
| IdTokenProvider.Option |
Enum of various credential-specific options to apply to the token.
|
| Exception | Description |
|---|---|
| TokenVerifier.VerificationException |
Custom exception for wrapping all verification errors.
|
Copyright © 2023 Google. All rights reserved.