FM / auth

/opt/canhelp/node_modules/google-auth-library/build/src/auth/

/opt/canhelp/node_modules/google-auth-library/build/src/auth

Name	Size	Mode	Actions
authclient.d.ts	10764	0644	edit dl rm
authclient.js	11247	0644	edit dl rm
awsclient.d.ts	5315	0644	edit dl rm
awsclient.js	7556	0644	edit dl rm
awsrequestsigner.d.ts	1626	0644	edit dl rm
awsrequestsigner.js	9442	0644	edit dl rm
baseexternalclient.d.ts	13020	0644	edit dl rm
baseexternalclient.js	20857	0644	edit dl rm
certificatesubjecttokensupplier.d.ts	2202	0644	edit dl rm
certificatesubjecttokensupplier.js	10619	0644	edit dl rm
computeclient.d.ts	1359	0644	edit dl rm
computeclient.js	4497	0644	edit dl rm
credentials.d.ts	2359	0644	edit dl rm
credentials.js	704	0644	edit dl rm
defaultawssecuritycredentialssupplier.d.ts	3795	0644	edit dl rm
defaultawssecuritycredentialssupplier.js	9330	0644	edit dl rm
downscopedclient.d.ts	6693	0644	edit dl rm
downscopedclient.js	12353	0644	edit dl rm
envDetect.d.ts	363	0644	edit dl rm
envDetect.js	2831	0644	edit dl rm
executable-response.d.ts	4489	0644	edit dl rm
executable-response.js	7519	0644	edit dl rm
externalAccountAuthorizedUserClient.d.ts	3173	0644	edit dl rm
externalAccountAuthorizedUserClient.js	10005	0644	edit dl rm
externalclient.d.ts	1528	0644	edit dl rm
externalclient.js	3048	0644	edit dl rm
filesubjecttokensupplier.d.ts	1608	0644	edit dl rm
filesubjecttokensupplier.js	3515	0644	edit dl rm
googleauth.d.ts	23574	0644	edit dl rm
googleauth.js	36374	0644	edit dl rm
iam.d.ts	623	0644	edit dl rm
iam.js	1373	0644	edit dl rm
identitypoolclient.d.ts	5626	0644	edit dl rm
identitypoolclient.js	6775	0644	edit dl rm
idtokenclient.d.ts	938	0644	edit dl rm
idtokenclient.js	2106	0644	edit dl rm
impersonated.d.ts	5687	0644	edit dl rm
impersonated.js	8654	0644	edit dl rm
jwtaccess.d.ts	2336	0644	edit dl rm
jwtaccess.js	7213	0644	edit dl rm
jwtclient.d.ts	5122	0644	edit dl rm
jwtclient.js	11256	0644	edit dl rm
loginticket.d.ts	5367	0644	edit dl rm
loginticket.js	1795	0644	edit dl rm
oauth2client.d.ts	25326	0644	edit dl rm
oauth2client.js	33662	0644	edit dl rm
oauth2common.d.ts	4094	0644	edit dl rm
oauth2common.js	8080	0644	edit dl rm
passthrough.d.ts	1097	0644	edit dl rm
passthrough.js	1842	0644	edit dl rm
pluggable-auth-client.d.ts	5485	0644	edit dl rm
pluggable-auth-client.js	10002	0644	edit dl rm
pluggable-auth-handler.d.ts	2109	0644	edit dl rm
pluggable-auth-handler.js	7260	0644	edit dl rm
refreshclient.d.ts	3436	0644	edit dl rm
refreshclient.js	6650	0644	edit dl rm
stscredentials.d.ts	5261	0644	edit dl rm
stscredentials.js	4738	0644	edit dl rm
urlsubjecttokensupplier.d.ts	2186	0644	edit dl rm
urlsubjecttokensupplier.js	2859	0644	edit dl rm

Edit: /opt/canhelp/node_modules/google-auth-library/build/src/auth/pluggable-auth-client.d.ts (5485B)

import { BaseExternalAccountClient, BaseExternalAccountClientOptions } from './baseexternalclient';
export { ExecutableError } from './pluggable-auth-handler';
/**
 * Defines the credential source portion of the configuration for PluggableAuthClient.
 *
 * Command is the only required field. If timeout_millis is not specified, the library will
 * default to a 30-second timeout.
 *
 * <pre>
 * Sample credential source for Pluggable Auth Client:
 * {
 * ...
 * "credential_source": {
 * "executable": {
 * "command": "/path/to/get/credentials.sh --arg1=value1 --arg2=value2",
 * "timeout_millis": 5000,
 * "output_file": "/path/to/generated/cached/credentials"
 * }
 * }
 * }
 * </pre>
 */
export interface PluggableAuthClientOptions extends BaseExternalAccountClientOptions {
 credential_source: {
 executable: {
 /**
 * The command used to retrieve the 3rd party token.
 */
 command: string;
 /**
 * The timeout for executable to run in milliseconds. If none is provided it
 * will be set to the default timeout of 30 seconds.
 */
 timeout_millis?: number;
 /**
 * An optional output file location that will be checked for a cached response
 * from a previous run of the executable.
 */
 output_file?: string;
 };
 };
}
/**
 * PluggableAuthClient enables the exchange of workload identity pool external credentials for
 * Google access tokens by retrieving 3rd party tokens through a user supplied executable. These
 * scripts/executables are completely independent of the Google Cloud Auth libraries. These
 * credentials plug into ADC and will call the specified executable to retrieve the 3rd party token
 * to be exchanged for a Google access token.
 *
 * To use these credentials, the GOOGLE_EXTERNAL_ACCOUNT_ALLOW_EXECUTABLES environment variable
 * must be set to '1'. This is for security reasons.
 *
 * Both OIDC and SAML are supported. The executable must adhere to a specific response format
 * defined below.
 *
 * The executable must print out the 3rd party token to STDOUT in JSON format. When an
 * output_file is specified in the credential configuration, the executable must also handle writing the
 * JSON response to this file.
 *
 * <pre>
 * OIDC response sample:
 * {
 * "version": 1,
 * "success": true,
 * "token_type": "urn:ietf:params:oauth:token-type:id_token",
 * "id_token": "HEADER.PAYLOAD.SIGNATURE",
 * "expiration_time": 1620433341
 * }
 *
 * SAML2 response sample:
 * {
 * "version": 1,
 * "success": true,
 * "token_type": "urn:ietf:params:oauth:token-type:saml2",
 * "saml_response": "...",
 * "expiration_time": 1620433341
 * }
 *
 * Error response sample:
 * {
 * "version": 1,
 * "success": false,
 * "code": "401",
 * "message": "Error message."
 * }
 * </pre>
 *
 * The "expiration_time" field in the JSON response is only required for successful
 * responses when an output file was specified in the credential configuration
 *
 * The auth libraries will populate certain environment variables that will be accessible by the
 * executable, such as: GOOGLE_EXTERNAL_ACCOUNT_AUDIENCE, GOOGLE_EXTERNAL_ACCOUNT_TOKEN_TYPE,
 * GOOGLE_EXTERNAL_ACCOUNT_INTERACTIVE, GOOGLE_EXTERNAL_ACCOUNT_IMPERSONATED_EMAIL, and
 * GOOGLE_EXTERNAL_ACCOUNT_OUTPUT_FILE.
 *
 * Please see this repositories README for a complete executable request/response specification.
 */
export declare class PluggableAuthClient extends BaseExternalAccountClient {
 /**
 * The command used to retrieve the third party token.
 */
 private readonly command;
 /**
 * The timeout in milliseconds for running executable,
 * set to default if none provided.
 */
 private readonly timeoutMillis;
 /**
 * The path to file to check for cached executable response.
 */
 private readonly outputFile?;
 /**
 * Executable and output file handler.
 */
 private readonly handler;
 /**
 * Instantiates a PluggableAuthClient instance using the provided JSON
 * object loaded from an external account credentials file.
 * An error is thrown if the credential is not a valid pluggable auth credential.
 * @param options The external account options object typically loaded from
 * the external account JSON credential file.
 */
 constructor(options: PluggableAuthClientOptions);
 /**
 * Triggered when an external subject token is needed to be exchanged for a
 * GCP access token via GCP STS endpoint.
 * This uses the `options.credential_source` object to figure out how
 * to retrieve the token using the current environment. In this case,
 * this calls a user provided executable which returns the subject token.
 * The logic is summarized as:
 * 1. Validated that the executable is allowed to run. The
 * GOOGLE_EXTERNAL_ACCOUNT_ALLOW_EXECUTABLES environment must be set to
 * 1 for security reasons.
 * 2. If an output file is specified by the user, check the file location
 * for a response. If the file exists and contains a valid response,
 * return the subject token from the file.
 * 3. Call the provided executable and return response.
 * @return A promise that resolves with the external subject token.
 */
 retrieveSubjectToken(): Promise<string>;
}

cmd: