Skip to content

fix: add validation for the token URL and service account impersonation URL for Workload Identity Federation#717

Merged
lsirac merged 4 commits intogoogleapis:masterfrom
lsirac:validate
Aug 17, 2021
Merged

fix: add validation for the token URL and service account impersonation URL for Workload Identity Federation#717
lsirac merged 4 commits intogoogleapis:masterfrom
lsirac:validate

Conversation

@lsirac
Copy link
Copy Markdown
Contributor

@lsirac lsirac commented Aug 11, 2021

Matches the token URLs host to:

  • *.sts.googleapis.com
  • sts.googleapis.com
  • sts.*.googleapis.com
  • *-sts.googleapis.com

Matches the service account impersonation URLs host to:

  • *.iamcredentials.googleapis.com
  • iamcredentials.googleapis.com
  • iamcredentials.*.googleapis.com
  • *-iamcredentials.googleapis.com

Scheme must be HTTPS.

@lsirac lsirac requested a review from a team August 11, 2021 01:33
@google-cla google-cla bot added the cla: yes This human has signed the Contributor License Agreement. label Aug 11, 2021
@lsirac lsirac requested a review from TimurSadykov August 11, 2021 01:33
Copy link
Copy Markdown

@TimurSadykov TimurSadykov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, some minor suggestions on test cases

@lsirac lsirac requested a review from Neenu1995 August 12, 2021 17:38
@lsirac lsirac requested a review from lesv August 12, 2021 20:44
@lsirac lsirac merged commit 23cb8ef into googleapis:master Aug 17, 2021
gcf-merge-on-green bot pushed a commit that referenced this pull request Aug 18, 2021
🤖 I have created a release \*beep\* \*boop\*
---
## [1.1.0](https://www.github.com/googleapis/google-auth-library-java/compare/v1.0.0...v1.1.0) (2021-08-17)


### Features

* downscoping with credential access boundaries ([#702](https://www.github.com/googleapis/google-auth-library-java/issues/702)) ([aa7ede1](https://www.github.com/googleapis/google-auth-library-java/commit/aa7ede1d1c688ba437798f4204820c0506d5d969))


### Bug Fixes

* add validation for the token URL and service account impersonation URL for Workload Identity Federation ([#717](https://www.github.com/googleapis/google-auth-library-java/issues/717)) ([23cb8ef](https://www.github.com/googleapis/google-auth-library-java/commit/23cb8ef778d012bbd452c1dfdac5f096d1af6c95))


### Documentation

* updates README for downscoping with CAB ([#716](https://www.github.com/googleapis/google-auth-library-java/issues/716)) ([68bceba](https://www.github.com/googleapis/google-auth-library-java/commit/68bceba21c05870f6eb616cc057ddf0521c581b8))
---


This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla: yes This human has signed the Contributor License Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants