tree 69b237d6d6589ecad66116ed3cc8ee74b5535937
parent 2b01019d6501b6648ced21db7754bbb798faa04c
author Cody Oss <codyoss@google.com> 1584559027 -0600
committer Cody Oss <codyoss@google.com> 1587998838 +0000

idtoken: support using ID Tokens

This commit adds two new features to our apis that support the use
of ID tokens.

1. Users now have functions that fetch ID tokens for them:
  - NewClient
  - NewTokenSource
Both of these are configured to auto-refresh tokens based off of
Application Default Credentials or provided options.

2. Users can now validate ID tokens with the following:
  - Validator.Validate
  - Validate
These methods decode the provided token to figure out what kind of
encrption was used to sign the token. This is then validated
against the user's JWKs that are found at known Google endpoint.
Because of this, these methods can only be used to validate Google
ID tokens at this time. A common use case where a user would want
to validate these tokens is if they are using App Eninge with IAP.

Change-Id: I0877eff081b030eac55759444870c950cd028a14
Reviewed-on: https://code-review.googlesource.com/c/google-api-go-client/+/53510
Reviewed-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Chris Broadfoot <cbro@google.com>
Reviewed-by: Tyler Bui-Palsulich <tbp@google.com>