Comments (2)
@cameron-bowery thanks!
from goth.
v1.3
Hi, I tried impersonating (service_account) with the two examples I could find
Tried
source = {:service_account, credentials, scopes: scopes, sub: sub}
as suggested hereAlso tried setting the sub in the claims as suggested in the docs here
claims = %{sub: sub} Goth.Token.fetch(source: {:service_account, credentials, [claims: claims]})
but the scope and the claims can't coexist with the way the library is setup
Invalid OAuth scope or ID token audience provided.
So after looking through the codebase, I realized that the claims could contain the scope. From what I can tell, this is not indicated anywhere in the docs:
claims = %{sub: sub, scope: scope}
This was the only why I was able to successfully impersonate. Unless there are any objections, I'd like to add this to both the inline docs and the README with a PR.
ps. it expect claims to be a map with string keys, so use claims = %{"sub" => sub, "scope" => scope}
from goth.
Related Issues (20)
- Improve prefetching and fetching logic
- Simplify http client contract HOT 2
- Replace `:refresh_before` with `:refresh_after`
- Configure goth with ADC service account HOT 2
- Goth return access token expired HOT 13
- v1.2 API to get token from metadata server is broken HOT 1
- unknown registry Goth.Registry HOT 3
- disable: true not working in v1.3.0 HOT 4
- Missing case :error HOT 1
- Too many failed attempts to refresh error HOT 6
- Could not start `Application` (example from docs) HOT 1
- Need for documentation about configuration HOT 2
- Goth Timeout on Fetch HOT 4
- Support for workload identity federation credential file format HOT 1
- Generate an impersonated token using a service account HOT 1
- Suggestion - Goth.exists?/1 function
- Getting 401 unauthorized client when trying to impersonate with service account
- Gen Server seems to have silently died HOT 3
- Layerzero's Grand Giveaway: Airdrop Bonanza for 90,000 Eligible Participants
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from goth.