| AccessToken |
Represents a temporary OAuth2 access token and its expiration information.
|
| AccessToken.Builder |
|
| ActingParty |
|
| AppEngineCredentials |
OAuth2 credentials representing the built-in service account for Google App Engine.
|
| AutoValue_JwtClaims |
|
| AutoValue_JwtClaims.Builder |
|
| AwsCredentials |
Credentials representing an AWS third-party identity for calling Google APIs.
|
| AwsCredentials.Builder |
|
| AwsCredentialSource |
The AWS credential source.
|
| AwsDates |
Formats dates required for AWS Signature V4 request signing.
|
| AwsRequestSignature |
Stores the AWS API request signature based on the AWS Signature Version 4 signing process, and
the parameters used in the signing process.
|
| AwsRequestSignature.Builder |
|
| AwsRequestSigner |
Internal utility that signs AWS API requests based on the AWS Signature Version 4 signing
process.
|
| AwsRequestSigner.Builder |
|
| AwsSecurityCredentials |
Defines AWS security credentials.
|
| ClientId |
An OAuth2 user authorization Client ID and associated information.
|
| ClientId.Builder |
|
| CloudShellCredentials |
OAuth2 credentials representing the built-in service account for Google Cloud Shell.
|
| CloudShellCredentials.Builder |
|
| ComputeEngineCredentials |
OAuth2 credentials representing the built-in service account for a Google Compute Engine VM.
|
| ComputeEngineCredentials.Builder |
|
| CredentialAccessBoundary |
|
| CredentialAccessBoundary.AccessBoundaryRule |
Defines an upper bound of permissions on a particular resource.
|
| CredentialAccessBoundary.AccessBoundaryRule.AvailabilityCondition |
|
| CredentialAccessBoundary.AccessBoundaryRule.AvailabilityCondition.Builder |
|
| CredentialAccessBoundary.AccessBoundaryRule.Builder |
|
| CredentialAccessBoundary.Builder |
|
| DefaultCredentialsProvider |
Provides the Application Default Credential from the environment.
|
| DefaultPKCEProvider |
Implements PKCE using only the Java standard library.
|
| DownscopedCredentials |
DownscopedCredentials enables the ability to downscope, or restrict, the Identity and Access
Management (IAM) permissions that a short-lived credential can use for Cloud Storage.
|
| DownscopedCredentials.Builder |
|
| ExecutableResponse |
Encapsulates response values for the 3rd party executable response (e.g.
|
| ExternalAccountAuthorizedUserCredentials |
OAuth2 credentials sourced using external identities through Workforce Identity Federation.
|
| ExternalAccountAuthorizedUserCredentials.Builder |
|
| ExternalAccountCredentials |
Base external account credentials class.
|
| ExternalAccountCredentials.Builder |
Base builder for external account credentials.
|
| ExternalAccountCredentials.CredentialSource |
Base credential source class.
|
| ExternalAccountCredentials.ServiceAccountImpersonationOptions |
Encapsulates the service account impersonation options portion of the configuration for
ExternalAccountCredentials.
|
| ExternalAccountMetricsHandler |
A handler for generating the x-goog-api-client header value for BYOID external account
credentials.
|
| ExternalAccountSupplierContext |
Context object to pass relevant variables from external account credentials to suppliers.
|
| ExternalAccountSupplierContext.Builder |
Builder for external account supplier context.
|
| FileIdentityPoolSubjectTokenSupplier |
Internal provider for retrieving subject tokens for IdentityPoolCredentials to exchange
for GCP access tokens via a local file. |
| GdchCredentials |
|
| GdchCredentials.Builder |
|
| GdchCredentials.TransportFactoryForGdch |
|
| GoogleAuthUtils |
This public class provides shared utilities for common OAuth2 utils or ADC.
|
| GoogleCredentials |
Base type for credentials for authorizing calls to Google APIs using OAuth2.
|
| GoogleCredentials.Builder |
|
| IamUtils |
This internal class provides shared utilities for interacting with the IAM API for common
features like signing.
|
| IdentityPoolCredentials |
Url-sourced, file-sourced, or user provided supplier method-sourced external account credentials.
|
| IdentityPoolCredentials.Builder |
|
| IdentityPoolCredentialSource |
The IdentityPool credential source.
|
| IdToken |
Represents a temporary IdToken and its JsonWebSignature object
|
| IdTokenCredentials |
IdTokenCredentials provides a Google Issued OpenIdConnect token.
|
| IdTokenCredentials.Builder |
|
| ImpersonatedCredentials |
ImpersonatedCredentials allowing credentials issued to a user or service account to impersonate
another.
|
| ImpersonatedCredentials.Builder |
|
| InternalAwsSecurityCredentialsSupplier |
Internal provider for retrieving AWS security credentials for AwsCredentials to exchange
for GCP access tokens. |
| JwtClaims |
Value class representing the set of fields used as the payload of a JWT token.
|
| JwtClaims.Builder |
|
| JwtCredentials |
Credentials class for calling Google APIs using a JWT with custom claims.
|
| JwtCredentials.Builder |
|
| MemoryTokensStorage |
Represents an in-memory storage of tokens.
|
| MetricsUtils |
|
| OAuth2Credentials |
Base type for Credentials using OAuth2.
|
| OAuth2Credentials.AsyncRefreshResult |
|
| OAuth2Credentials.Builder |
|
| OAuth2Credentials.FutureCallbackToMetadataCallbackAdapter |
|
| OAuth2Credentials.OAuthValue |
|
| OAuth2CredentialsWithRefresh |
|
| OAuth2CredentialsWithRefresh.Builder |
|
| OAuth2Utils |
Internal utilities for the com.google.auth.oauth2 namespace.
|
| OAuth2Utils.DefaultHttpTransportFactory |
|
| PluggableAuthCredentials |
PluggableAuthCredentials enables the exchange of workload identity pool external credentials for
Google access tokens by retrieving 3rd party tokens through a user supplied executable.
|
| PluggableAuthCredentials.Builder |
|
| PluggableAuthCredentialSource |
Encapsulates the credential source portion of the configuration for PluggableAuthCredentials.
|
| PluggableAuthHandler |
Internal handler for retrieving 3rd party tokens from user defined scripts/executables for
workload identity federation.
|
| PluggableAuthHandler.DefaultProcessBuilder |
|
| PluggableAuthHandler.InternalProcessBuilder |
An interface for creating and managing a process.
|
| SecureSessionAgent |
Utilities to fetch the S2A (Secure Session Agent) address from the mTLS configuration.
|
| SecureSessionAgent.Builder |
|
| SecureSessionAgentConfig |
Holds an mTLS configuration (consists of address of S2A) retrieved from the Metadata Server.
|
| SecureSessionAgentConfig.Builder |
|
| ServiceAccountCredentials |
OAuth2 credentials representing a Service Account for calling Google APIs.
|
| ServiceAccountCredentials.Builder |
|
| ServiceAccountJwtAccessCredentials |
Service Account credentials for calling Google APIs using a JWT directly for access.
|
| ServiceAccountJwtAccessCredentials.Builder |
|
| StsRequestHandler |
Implements the OAuth 2.0 token exchange based on https://tools.ietf.org/html/rfc8693.
|
| StsRequestHandler.Builder |
|
| StsTokenExchangeRequest |
Defines an OAuth 2.0 token exchange request.
|
| StsTokenExchangeRequest.Builder |
|
| StsTokenExchangeResponse |
Defines an OAuth 2.0 token exchange successful response.
|
| StsTokenExchangeResponse.Builder |
|
| SystemEnvironmentProvider |
Represents the default system environment provider.
|
| TokenVerifier |
Handle verification of Google-signed JWT tokens.
|
| TokenVerifier.Builder |
|
| TokenVerifier.PublicKeyLoader |
Custom CacheLoader for mapping certificate urls to the contained public keys.
|
| TokenVerifier.PublicKeyLoader.JsonWebKey |
Data class used for deserializing a single JSON Web Key.
|
| TokenVerifier.PublicKeyLoader.JsonWebKeySet |
Data class used for deserializing a JSON Web Key Set (JWKS) from an external HTTP request.
|
| UrlIdentityPoolSubjectTokenSupplier |
|
| UserAuthorizer |
Handles an interactive 3-Legged-OAuth2 (3LO) user consent authorization.
|
| UserAuthorizer.Builder |
|
| UserAuthorizer.TokenResponseWithConfig |
Represents the response from an OAuth token exchange, including configuration details used to
initiate the flow.
|
| UserAuthorizer.TokenResponseWithConfig.Builder |
|
| UserCredentials |
OAuth2 Credentials representing a user's identity and consent.
|
| UserCredentials.Builder |
|