Closed
Description
Steps to reproduce
- Create
ComputeEngineCredentials
on a GCE VM. - Derive
IdTokenCredentials
from the above with#setOptions()
containingIdTokenProvider.Option.LICENSES_TRUE
and optionally the impliedIdTokenProvider.Option.FORMAT_FULL
. - Observe lack of license id claims in payload.
Code example
new String(Base64.getUrlDecoder()
.decode(IdTokenCredentials.newBuilder()
.setIdTokenProvider(ComputeEngineCredentials.create())
.setTargetAudience("https://foo.bar")
.setOptions(Arrays.asList(
IdTokenProvider.Option.FORMAT_FULL,
IdTokenProvider.Option.LICENSES_TRUE))
.build()
.refreshAccessToken()
.getTokenValue()
.split("\\.")[1]),
StandardCharsets.UTF_8)