GenerateIdTokenRequest(mapping=None, *, ignore_unknown_fields=False, **kwargs)Attributes | |
|---|---|
| Name | Description |
name |
str
Required. The resource name of the service account for which the credentials are requested, in the following format: projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}.
The - wildcard character is required; replacing it with
a project ID is invalid.
|
delegates |
Sequence[str]
The sequence of service accounts in a delegation chain. Each service account must be granted the roles/iam.serviceAccountTokenCreator role on its next
service account in the chain. The last service account in
the chain must be granted the
roles/iam.serviceAccountTokenCreator role on the service
account that is specified in the name field of the
request.
The delegates must have the following format:
projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}.
The - wildcard character is required; replacing it with
a project ID is invalid.
|
audience |
str
Required. The audience for the token, such as the API or account that this token grants access to. |
include_email |
bool
Include the service account email in the token. If set to true, the token will contain email and
email_verified claims.
|