1. class
  2. Google
  3. \
  4. Auth
  5. \
  6. Iam

Iam

class Iam (View source)

Tools for using the IAM API.

Constants

deprecated IAM_API_ROOT

SIGN_BLOB_PATH

SERVICE_ACCOUNT_NAME

private IAM_API_ROOT_TEMPLATE

Methods

__construct(callable $httpHandler = null, string $universeDomain = GetUniverseDomainInterface::DEFAULT_UNIVERSE_DOMAIN)

No description

string
signBlob(string $email, string $accessToken, string $stringToSign, array $delegates = [])

Sign a string using the IAM signBlob API.

Details

at line 50
__construct(callable $httpHandler = null, string $universeDomain = GetUniverseDomainInterface::DEFAULT_UNIVERSE_DOMAIN)

No description

Parameters

callable $httpHandler

[optional] The HTTP Handler to send requests.
string $universeDomain

at line 74
string signBlob(string $email, string $accessToken, string $stringToSign, array $delegates = [])

Sign a string using the IAM signBlob API.

Note that signing using IAM requires your service account to have the iam.serviceAccounts.signBlob permission, part of the "Service Account Token Creator" IAM role.

Parameters

string $email

The service account email.
string $accessToken

An access token from the service account.
string $stringToSign

The string to be signed.
array $delegates

[optional] A list of service account emails to add to the delegate chain. If omitted, the value of $email will be used.

Return Value

string

The signed string, base64-encoded.