Uh oh!
There was an error while loading. Please reload this page.
Adding auth doc explaining all the ways to mint credentials. - #805
Adding auth doc explaining all the ways to mint credentials.#805dhermes wants to merge 1 commit into
Conversation
This comment was marked as spam.
This comment was marked as spam.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
coveralls
commented
Apr 7, 2015
Changes Unknown when pulling 06918f1 on dhermes:add-gcloud-auth-docs into * on GoogleCloudPlatform:master*. |
tseaver
commented
Apr 7, 2015
LGTM |
dhermes
commented
Apr 7, 2015
This comment was marked as spam.
This comment was marked as spam.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
This comment was marked as spam.
This comment was marked as spam.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
06918f1 to
f6bba7bComparecoveralls
commented
Apr 7, 2015
Changes Unknown when pulling f6bba7b on dhermes:add-gcloud-auth-docs into * on GoogleCloudPlatform:master*. |
dhermes
commented
Apr 9, 2015
@jgeewax PTAL |
jgeewax
commented
Apr 15, 2015
OK, I was just attempting to explain to someone how this might work, and realized that, when coming from a totally fresh spot, it was much less helpful than I'd hoped. It feels a bit like "here is a page of formulas organized by complexity of the code you have to write" rather than "here's the tasks you might want to do and how you get them done". Are there any objections to making this more "use-case" oriented? The way I'd picture it is: Ways to authenticateUse the 'default credentials'If you're running in any of the following environments, we can detect both your credentials and the project ID (and dataset ID for Cloud Datastore) automatically:
This means that in those environments, the following will 'just work': fromgcloudimportdatastoredatastore.get(...)Specify a particular set of credentialsIf you want to be explicit about the credentials, do that by using [insert detail here]: # Note: I still think this is too long...fromgcloudimportcredentialsfromgcloudimportdatastorecreds=credentials.get_for_service_account_json('/path/to/key.json')
datastore.set_default_connection(datastore.Connection(credentials=creds))... |
tmatsuo
commented
Apr 15, 2015
JFYI, I wrote a doc about usable auth recently: I also feel that we should advertise the simplest case (and most importantly, you can have the portable code which runs everywhere) first. |
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
…ented (#805) Co-authored-by: Mariatta Wijaya <Mariatta@users.noreply.github.com>
For downscoping CAB flow, the STS endpoint may not return the expiration field for certain source credentials. The generated downscoped token should always have the same expiration time as the source credentials. When no `expires_in` field is returned in the response, we can just get the expiration time from the source credentials. Co-authored-by: arithmetic1728 <58957152+arithmetic1728@users.noreply.github.com>
* chore: release 2.3.10 Release-As: 2.3.10 * mark 2.13.9 as taken
Fixes#633.
Follow along changes in:
www.googledrive.com/host/0B8el7dRo8mVOekRaUm1wWnFLeUE
/cc @jgeewax