class Iam (View source)

Tools for using the IAM API.

Constants

IAM_API_ROOT

SIGN_BLOB_PATH

SERVICE_ACCOUNT_NAME

Methods

__construct(callable $httpHandler = null)

No description

string
signBlob(string $email, string $accessToken, string $stringToSign, array $delegates = [])

Sign a string using the IAM signBlob API.

Details

__construct(callable $httpHandler = null)

Parameters

callable $httpHandler [optional] The HTTP Handler to send requests.

string signBlob(string $email, string $accessToken, string $stringToSign, array $delegates = [])

Sign a string using the IAM signBlob API.

Note that signing using IAM requires your service account to have the iam.serviceAccounts.signBlob permission, part of the "Service Account Token Creator" IAM role.

Parameters

string $email The service account email.
string $accessToken An access token from the service account.
string $stringToSign The string to be signed.
array $delegates [optional] A list of service account emails to add to the delegate chain. If omitted, the value of $email will be used.

Return Value

string The signed string, base64-encoded.