print-iap-oidc-token
v1.0.2
Published
Obtaining an OIDC token for the service account against the GCP Cloud IAP.
Downloads
17
Readme
README
Obtaining an OIDC token for the service account against the GCP Cloud IAP.
- https://cloud.google.com/iap/docs/authentication-howto?hl=ja#obtaining_an_oidc_token_for_the_default_service_account
- https://github.com/googleapis/google-auth-library-nodejs/blob/main/samples/idTokenFromServiceAccount.js
Usage
npx print-iap-oidc-token \
--target_audience IAP_CLIENT_ID.apps.googleusercontent.com \
--json_credentials_path ~/.gcp/your_credentials.json
# id token printed
# or
GOOGLE_APPLICATION_CREDENTIALS=~/.gcp/your_credentials.json npx print-iap-oidc-token \
--target_audience IAP_CLIENT_ID.apps.googleusercontent.com
Advanced
curl https://some.iap.url -H "Proxy-Authorization: Bearer $(npx -y print-iap-oidc-token --target_audience IAP_CLIENT_ID.apps.googleusercontent.com --json_credentials_path ~/.gcp/your_credentials.json)"
License
This project is licensed under the MIT license. See the LICENSE file for more info.