#google #cloud #auth #gcloud #gcp

gouth

This library provides auto-renewed tokens for GCP service authentication

5 releases

0.2.1 Apr 19, 2021
0.2.0 Feb 12, 2021
0.1.2 Jun 28, 2020
0.1.1 May 11, 2020
0.1.0 May 4, 2020

#13 in Authentication

Download history 1912/week @ 2021-04-09 2115/week @ 2021-04-16 2083/week @ 2021-04-23 3270/week @ 2021-04-30 2209/week @ 2021-05-07 2285/week @ 2021-05-14 1966/week @ 2021-05-21 1557/week @ 2021-05-28 2156/week @ 2021-06-04 2396/week @ 2021-06-11 2240/week @ 2021-06-18 2026/week @ 2021-06-25 1848/week @ 2021-07-02 1897/week @ 2021-07-09 1722/week @ 2021-07-16 1348/week @ 2021-07-23

4,684 downloads per month
Used in 4 crates (3 directly)

MIT license

27KB
698 lines

gouth

ci Rust Documentation Latest Version

This library provides auto-renewed tokens for GCP service authentication.

Notes

Authentication flow Status
API key Not supported / No plans to support
OAuth 2.0 client Supported
Environment-provided service account Supported
Service account key Supported

Example

Default

  • Scope is https://www.googleapis.com/auth/cloud-platform
  • Looks for credentials in the following places, preferring the first location found:
    • A JSON file whose path is specified by the GOOGLE_APPLICATION_CREDENTIALS environment variable.
    • A JSON file in a location known to the gcloud command-line tool.
    • On Google Compute Engine, it fetches credentials from the metadata server.
// simple:
// gouth = { version = "x.x.x" }
let token = gouth::Token::new().unwrap();
println!("authorization: {}", token.header_value().unwrap());

// with tonic:
// gouth = { path = "x.x.x", features = ["tonic-intercept"] }
let mut service = PublisherClient::with_interceptor(channel, gouth::tonic::interceptor());
service.list_topics(...);

Custom

scope:

use gouth::Builder;

let token = Builder::new()
	.scopes(&["https://www.googleapis.com/auth/bigquery"])
	.build()
	.unwrap();
println!("authorization: {}", token.header_value().unwrap());

json:

use gouth::Builder;

let token = Builder::new().json("credentials-data").build().unwrap();
println!("authorization: {}", token.header_value().unwrap());

file:

use gouth::Builder;

let token = Builder::new().file("credentials-path").build().unwrap();
println!("authorization: {}", token.header_value().unwrap());

License

Licensed under MIT license.

Dependencies

~12–15MB
~386K SLoC