Class: Google::Apis::CloudsearchV1::SimpleSecretLabelProto

Inherits:
Object
  • Object
show all
Includes:
Google::Apis::Core::Hashable, Google::Apis::Core::JsonObjectSupport
Defined in:
lib/google/apis/cloudsearch_v1/classes.rb,
lib/google/apis/cloudsearch_v1/representations.rb,
lib/google/apis/cloudsearch_v1/representations.rb

Overview

SimpleSecretProto (in authenticator.proto) and SimpleSecretHolderProto (below) share the notion of a "label", which identifies a particular secret without ( hopefully) revealing the secret. Note that a SimpleSecretLabel only disambiguates between secrets used to get access to some particular object. Two different secrets that apply to two different objects could have the same label. For example, in the common sharing model, each object has no more than one "auth key". Therefore, the label for an auth key simply has type = AUTH_KEY with no additional information. In theory, we could add some sort of resource ID to SimpleSecretLabel to make it more explicit. However, in practice, this is never really needed. A SimpleSecret for one object is never used to authorize a request on some other object, so there is no ambiguity. Also, since SimpleSecrets must obviously be unguessable, there is no risk that a SimpleSecret intended for one object will accidentally grant access to another.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ SimpleSecretLabelProto

Returns a new instance of SimpleSecretLabelProto.



19069
19070
19071
# File 'lib/google/apis/cloudsearch_v1/classes.rb', line 19069

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#capability_idFixnum

**DEPRECATED (3-Oct-2011) ** This field should be deleted when code stops using CAP_TOKEN labels. Used when type = CAP_TOKEN. When a CAP_TOKEN label appears in a SimpleSecretHolder Principal, |capability_id| must be filled in to identify one of the capabilities on the ACL. When a CAP_TOKEN label appears in a SimpleSecret Authenticator, it is NOT necessary to fill in |capability_id| -- ACL Service will find the ID by searching all capabilities on the ACL for one associated with the token given by the SimpleSecret's secret data. If | capability_id| is specified, though, then the Authenticator will only be accepted if it actually matches that particular token ID. Corresponds to the JSON property capabilityId

Returns:

  • (Fixnum)


19051
19052
19053
# File 'lib/google/apis/cloudsearch_v1/classes.rb', line 19051

def capability_id
  @capability_id
end

#generic_labelString

Used when type = GENERIC_SECRET Corresponds to the JSON property genericLabel NOTE: Values are automatically base64 encoded/decoded in the client library.

Returns:

  • (String)


19057
19058
19059
# File 'lib/google/apis/cloudsearch_v1/classes.rb', line 19057

def generic_label
  @generic_label
end

#invite_idFixnum

Used when type == INVITE. Corresponds to the JSON property inviteId

Returns:

  • (Fixnum)


19062
19063
19064
# File 'lib/google/apis/cloudsearch_v1/classes.rb', line 19062

def invite_id
  @invite_id
end

#typeString

This is optional because required enums cannot be extended. Corresponds to the JSON property type

Returns:

  • (String)


19067
19068
19069
# File 'lib/google/apis/cloudsearch_v1/classes.rb', line 19067

def type
  @type
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



19074
19075
19076
19077
19078
19079
# File 'lib/google/apis/cloudsearch_v1/classes.rb', line 19074

def update!(**args)
  @capability_id = args[:capability_id] if args.key?(:capability_id)
  @generic_label = args[:generic_label] if args.key?(:generic_label)
  @invite_id = args[:invite_id] if args.key?(:invite_id)
  @type = args[:type] if args.key?(:type)
end