Google Cloud Iam Credentials V1 Client - Class IAMCredentialsClient (1.0.6)

use Google\ApiCore\ApiException;
use Google\Cloud\Iam\Credentials\V1\GenerateAccessTokenResponse;
use Google\Cloud\Iam\Credentials\V1\IAMCredentialsClient;

/**
 * @param string $formattedName The resource name of the service account for which the credentials
 *                              are requested, in the following format:
 *                              `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
 *                              character is required; replacing it with a project ID is invalid. Please see
 *                              {@see IAMCredentialsClient::serviceAccountName()} for help formatting this field.
 * @param string $scopeElement  Code to identify the scopes to be included in the OAuth 2.0 access token.
 *                              See https://developers.google.com/identity/protocols/googlescopes for more
 *                              information.
 *                              At least one value required.
 */
function generate_access_token_sample(string $formattedName, string $scopeElement): void
{
    // Create a client.
    $iAMCredentialsClient = new IAMCredentialsClient();

    // Prepare any non-scalar elements to be passed along with the request.
    $scope = [$scopeElement,];

    // Call the API and handle any network failures.
    try {
        /** @var GenerateAccessTokenResponse $response */
        $response = $iAMCredentialsClient->generateAccessToken($formattedName, $scope);
        printf('Response data: %s' . PHP_EOL, $response->serializeToJsonString());
    } catch (ApiException $ex) {
        printf('Call failed with message: %s' . PHP_EOL, $ex->getMessage());
    }
}

/**
 * This sample has been automatically generated and should be regarded as a code
 * template only. It will require modifications to work:
 *  - It may require correct/in-range values for request initialization.
 *  - It may require specifying regional endpoints when creating the service client,
 *    please see the apiEndpoint client configuration option for more details.
 */
function callSample(): void
{
    $formattedName = IAMCredentialsClient::serviceAccountName('[PROJECT]', '[SERVICE_ACCOUNT]');
    $scopeElement = '[SCOPE]';

    generate_access_token_sample($formattedName, $scopeElement);
}

use Google\ApiCore\ApiException;
use Google\Cloud\Iam\Credentials\V1\GenerateIdTokenResponse;
use Google\Cloud\Iam\Credentials\V1\IAMCredentialsClient;

/**
 * @param string $formattedName The resource name of the service account for which the credentials
 *                              are requested, in the following format:
 *                              `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
 *                              character is required; replacing it with a project ID is invalid. Please see
 *                              {@see IAMCredentialsClient::serviceAccountName()} for help formatting this field.
 * @param string $audience      The audience for the token, such as the API or account that this token
 *                              grants access to.
 */
function generate_id_token_sample(string $formattedName, string $audience): void
{
    // Create a client.
    $iAMCredentialsClient = new IAMCredentialsClient();

    // Call the API and handle any network failures.
    try {
        /** @var GenerateIdTokenResponse $response */
        $response = $iAMCredentialsClient->generateIdToken($formattedName, $audience);
        printf('Response data: %s' . PHP_EOL, $response->serializeToJsonString());
    } catch (ApiException $ex) {
        printf('Call failed with message: %s' . PHP_EOL, $ex->getMessage());
    }
}

/**
 * This sample has been automatically generated and should be regarded as a code
 * template only. It will require modifications to work:
 *  - It may require correct/in-range values for request initialization.
 *  - It may require specifying regional endpoints when creating the service client,
 *    please see the apiEndpoint client configuration option for more details.
 */
function callSample(): void
{
    $formattedName = IAMCredentialsClient::serviceAccountName('[PROJECT]', '[SERVICE_ACCOUNT]');
    $audience = '[AUDIENCE]';

    generate_id_token_sample($formattedName, $audience);
}

use Google\ApiCore\ApiException;
use Google\Cloud\Iam\Credentials\V1\IAMCredentialsClient;
use Google\Cloud\Iam\Credentials\V1\SignBlobResponse;

/**
 * @param string $formattedName The resource name of the service account for which the credentials
 *                              are requested, in the following format:
 *                              `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
 *                              character is required; replacing it with a project ID is invalid. Please see
 *                              {@see IAMCredentialsClient::serviceAccountName()} for help formatting this field.
 * @param string $payload       The bytes to sign.
 */
function sign_blob_sample(string $formattedName, string $payload): void
{
    // Create a client.
    $iAMCredentialsClient = new IAMCredentialsClient();

    // Call the API and handle any network failures.
    try {
        /** @var SignBlobResponse $response */
        $response = $iAMCredentialsClient->signBlob($formattedName, $payload);
        printf('Response data: %s' . PHP_EOL, $response->serializeToJsonString());
    } catch (ApiException $ex) {
        printf('Call failed with message: %s' . PHP_EOL, $ex->getMessage());
    }
}

/**
 * This sample has been automatically generated and should be regarded as a code
 * template only. It will require modifications to work:
 *  - It may require correct/in-range values for request initialization.
 *  - It may require specifying regional endpoints when creating the service client,
 *    please see the apiEndpoint client configuration option for more details.
 */
function callSample(): void
{
    $formattedName = IAMCredentialsClient::serviceAccountName('[PROJECT]', '[SERVICE_ACCOUNT]');
    $payload = '...';

    sign_blob_sample($formattedName, $payload);
}

use Google\ApiCore\ApiException;
use Google\Cloud\Iam\Credentials\V1\IAMCredentialsClient;
use Google\Cloud\Iam\Credentials\V1\SignJwtResponse;

/**
 * @param string $formattedName The resource name of the service account for which the credentials
 *                              are requested, in the following format:
 *                              `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard
 *                              character is required; replacing it with a project ID is invalid. Please see
 *                              {@see IAMCredentialsClient::serviceAccountName()} for help formatting this field.
 * @param string $payload       The JWT payload to sign: a JSON object that contains a JWT Claims Set.
 */
function sign_jwt_sample(string $formattedName, string $payload): void
{
    // Create a client.
    $iAMCredentialsClient = new IAMCredentialsClient();

    // Call the API and handle any network failures.
    try {
        /** @var SignJwtResponse $response */
        $response = $iAMCredentialsClient->signJwt($formattedName, $payload);
        printf('Response data: %s' . PHP_EOL, $response->serializeToJsonString());
    } catch (ApiException $ex) {
        printf('Call failed with message: %s' . PHP_EOL, $ex->getMessage());
    }
}

/**
 * This sample has been automatically generated and should be regarded as a code
 * template only. It will require modifications to work:
 *  - It may require correct/in-range values for request initialization.
 *  - It may require specifying regional endpoints when creating the service client,
 *    please see the apiEndpoint client configuration option for more details.
 */
function callSample(): void
{
    $formattedName = IAMCredentialsClient::serviceAccountName('[PROJECT]', '[SERVICE_ACCOUNT]');
    $payload = '[PAYLOAD]';

    sign_jwt_sample($formattedName, $payload);
}