google-genai-kotlin/com.google.genai.kotlin.types/AuthConfigOidcConfig

AuthConfigOidcConfig

@Serializable

data class AuthConfigOidcConfig(val idToken: String? = null, val serviceAccount: String? = null)

Config for user OIDC auth. This data type is not supported in Gemini API.

Constructors

constructor(idToken: String? = null, serviceAccount: String? = null)

Properties

idToken

val idToken: String? = null

OpenID Connect formatted ID token for extension endpoint. Only used to propagate token from [ExecuteExtensionRequest.runtime_auth_config] at request time.

serviceAccount

val serviceAccount: String? = null

The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc). - The audience for the token will be set to the URL in the server url defined in the OpenApi spec. - If the service account is provided, the service account should grant iam.serviceAccounts.getOpenIdToken permission to Vertex AI Extension Service Agent (https://cloud.google.com/vertex-ai/docs/general/access-control#service-agents).