You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: clients/google-api-services-sts/v1/2.0.0/com/google/api/services/sts/v1/model/GoogleIdentityStsV1ExchangeTokenRequest.java
+24-6Lines changed: 24 additions & 6 deletions
Original file line number
Diff line number
Diff line change
@@ -144,7 +144,12 @@ public final class GoogleIdentityStsV1ExchangeTokenRequest extends com.google.ap
144
144
* this field to obtain an access token with new security attributes applied, such as a Credential
145
145
* Access Boundary. In this case, set `subject_token_type` to `urn:ietf:params:oauth:token-
146
146
* type:access_token`. If an access token already contains security attributes, you cannot apply
147
-
* additional security attributes.
147
+
* additional security attributes. If the request is for X.509 certificate-based authentication,
148
+
* the `subject_token` must be a JSON-formatted list of X.509 certificates in DER format, as
149
+
* defined in [RFC 7515](https://www.rfc-editor.org/rfc/rfc7515#section-4.1.6).
150
+
* `subject_token_type` must be `urn:ietf:params:oauth:token-type:mtls`. The following example
151
+
* shows a JSON-formatted list of X.509 certificate in DER format: ``` [\"MIIEYDCCA0i...\",
152
+
* \"MCIFFGAGTT0...\"] ```
148
153
* The value may be {@code null}.
149
154
*/
150
155
@com.google.api.client.util.Key
@@ -154,7 +159,8 @@ public final class GoogleIdentityStsV1ExchangeTokenRequest extends com.google.ap
154
159
* Required. An identifier that indicates the type of the security token in the `subject_token`
155
160
* parameter. Supported values are `urn:ietf:params:oauth:token-type:jwt`,
0 commit comments