Package com.google.auth.oauth2

Class ExternalAccountSupplierContext

java.lang.Object

com.google.auth.oauth2.ExternalAccountSupplierContext

All Implemented Interfaces:

Serializable

public class ExternalAccountSupplierContext
extends Object
implements Serializable

Context object to pass relevant variables from external account credentials to suppliers. This will be passed on any call made to IdentityPoolSubjectTokenSupplier or AwsSecurityCredentialsSupplier.

See Also:

• Serialized Form

Method Summary

Modifier and Type	Method	Description
String	getAudience()	Returns the credentials' expected audience.
String	getSubjectTokenType()	Returns the credentials' expected Security Token Service subject token type based on the OAuth 2.0 token exchange spec.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

getAudience

public String getAudience()

Returns the credentials' expected audience.

Returns:

the requested audience. For example: "//iam.googleapis.com/locations/global/workforcePools/$WORKFORCE_POOL_ID/providers/$PROVIDER_ID".

getSubjectTokenType

public String getSubjectTokenType()

Returns the credentials' expected Security Token Service subject token type based on the OAuth 2.0 token exchange spec.

Expected values:

"urn:ietf:params:oauth:token-type:jwt" "urn:ietf:params:aws:token-type:aws4_request" "urn:ietf:params:oauth:token-type:saml2" "urn:ietf:params:oauth:token-type:id_token"

Returns:

the requested subject token type. For example: "urn:ietf:params:oauth:token-type:jwt".