FR to provide an API to create and verify google OIDC tokens.

These id_tokens are based on service account type flows (service_ccount.json, compute engine, impersonatec credentials) and can be used to invoke user services behind Cloud Run, Cloud Functions and behind IAP

GCP services like nodejs and google-auth-python currently support an API to generate these tokens if given a serivce account credential or on compute engine.

if it helps, here are mostly raw imementations:

• golang
• python
• java
• nodejs

Suggested interface would be

• Create .getGoogleIdToken(audience)

• Verify .verifyIdToken(token, audience, cert_url)