Package com.google.auth.oauth2

Interface Summary

Interface	Description
AwsSecurityCredentialsSupplier	Supplier for retrieving AWS Security credentials for AwsCredentials to exchange for GCP access tokens.
IdentityPoolSubjectTokenSupplier
IdTokenProvider	Interface for an Google OIDC token provider.
JwtProvider	Interface for creating custom JWT tokens
OAuth2Credentials.CredentialsChangedListener	Listener for changes to credentials.
OAuth2CredentialsWithRefresh.OAuth2RefreshHandler	Interface for the refresh handler.
PKCEProvider
QuotaProjectIdProvider	Interface for GoogleCredentials that return a quota project ID.
TokenStore	Interface for long term storage of tokens

Class Summary

Class	Description
AccessToken	Represents a temporary OAuth2 access token and its expiration information.
AccessToken.Builder
AwsCredentials	Credentials representing an AWS third-party identity for calling Google APIs.
AwsCredentials.Builder
AwsCredentialSource	The AWS credential source.
AwsSecurityCredentials	Defines AWS security credentials.
ClientId	An OAuth2 user authorization Client ID and associated information.
ClientId.Builder
CloudShellCredentials	OAuth2 credentials representing the built-in service account for Google Cloud Shell.
CloudShellCredentials.Builder
ComputeEngineCredentials	OAuth2 credentials representing the built-in service account for a Google Compute Engine VM.
ComputeEngineCredentials.Builder
CredentialAccessBoundary	Defines an upper bound of permissions available for a GCP credential via CredentialAccessBoundary.AccessBoundaryRules.
CredentialAccessBoundary.AccessBoundaryRule	Defines an upper bound of permissions on a particular resource.
CredentialAccessBoundary.AccessBoundaryRule.AvailabilityCondition	An optional condition that can be used as part of a CredentialAccessBoundary.AccessBoundaryRule to further restrict permissions.
CredentialAccessBoundary.AccessBoundaryRule.AvailabilityCondition.Builder
CredentialAccessBoundary.AccessBoundaryRule.Builder
CredentialAccessBoundary.Builder
DefaultPKCEProvider	Implements PKCE using only the Java standard library.
DownscopedCredentials	DownscopedCredentials enables the ability to downscope, or restrict, the Identity and Access Management (IAM) permissions that a short-lived credential can use for Cloud Storage.
DownscopedCredentials.Builder
ExternalAccountAuthorizedUserCredentials	OAuth2 credentials sourced using external identities through Workforce Identity Federation.
ExternalAccountAuthorizedUserCredentials.Builder	Builder for ExternalAccountAuthorizedUserCredentials.
ExternalAccountCredentials	Base external account credentials class.
ExternalAccountCredentials.Builder	Base builder for external account credentials.
ExternalAccountSupplierContext	Context object to pass relevant variables from external account credentials to suppliers.
GdchCredentials
GdchCredentials.Builder
GoogleAuthUtils	This public class provides shared utilities for common OAuth2 utils or ADC.
GoogleCredentials	Base type for credentials for authorizing calls to Google APIs using OAuth2.
GoogleCredentials.Builder
IdentityPoolCredentials	Url-sourced, file-sourced, or user provided supplier method-sourced external account credentials.
IdentityPoolCredentials.Builder
IdentityPoolCredentialSource	The IdentityPool credential source.
IdToken	Represents a temporary IdToken and its JsonWebSignature object
IdTokenCredentials	IdTokenCredentials provides a Google Issued OpenIdConnect token.
IdTokenCredentials.Builder
ImpersonatedCredentials	ImpersonatedCredentials allowing credentials issued to a user or service account to impersonate another.
ImpersonatedCredentials.Builder
JwtClaims	Value class representing the set of fields used as the payload of a JWT token.
JwtClaims.Builder
JwtCredentials	Credentials class for calling Google APIs using a JWT with custom claims.
JwtCredentials.Builder
MemoryTokensStorage	Represents an in-memory storage of tokens.
OAuth2Credentials	Base type for Credentials using OAuth2.
OAuth2Credentials.Builder
OAuth2CredentialsWithRefresh	A refreshable alternative to OAuth2Credentials.
OAuth2CredentialsWithRefresh.Builder
PluggableAuthCredentials	PluggableAuthCredentials enables the exchange of workload identity pool external credentials for Google access tokens by retrieving 3rd party tokens through a user supplied executable.
PluggableAuthCredentials.Builder
PluggableAuthCredentialSource	Encapsulates the credential source portion of the configuration for PluggableAuthCredentials.
ServiceAccountCredentials	OAuth2 credentials representing a Service Account for calling Google APIs.
ServiceAccountCredentials.Builder
ServiceAccountJwtAccessCredentials	Service Account credentials for calling Google APIs using a JWT directly for access.
ServiceAccountJwtAccessCredentials.Builder
TokenVerifier	Handle verification of Google-signed JWT tokens.
TokenVerifier.Builder
UserAuthorizer	Handles an interactive 3-Legged-OAuth2 (3LO) user consent authorization.
UserAuthorizer.Builder
UserAuthorizer.TokenResponseWithConfig	Represents the response from an OAuth token exchange, including configuration details used to initiate the flow.
UserCredentials	OAuth2 Credentials representing a user's identity and consent.
UserCredentials.Builder

Enum Summary

Enum	Description
ExternalAccountCredentials.SubjectTokenTypes	Enum specifying values for the subjectTokenType field in ExternalAccountCredentials.
IdTokenProvider.Option	Enum of various credential-specific options to apply to the token.
UserAuthorizer.ClientAuthenticationType	Represents the client authentication types as specified in RFC 7591.

Exception Summary

Exception	Description
TokenVerifier.VerificationException	Custom exception for wrapping all verification errors.