How to use

fromPkcs8

method

in

com.google.auth.oauth2.ServiceAccountJwtAccessCredentials

/**
 * Factory using PKCS#8 for the private key.
 *
 * @param clientId Client ID of the service account from the console. May be null.
 * @param clientEmail Client email address of the service account from the console.
 * @param privateKeyPkcs8 RSA private key object for the service account in PKCS#8 format.
 * @param privateKeyId Private key identifier for the service account. May be null.
 * @return New ServiceAccountJwtAcceessCredentials created from a private key.
 * @throws IOException if the credential cannot be created from the private key.
 */
public static ServiceAccountJwtAccessCredentials fromPkcs8(String clientId, String clientEmail, 
  String privateKeyPkcs8, String privateKeyId) throws IOException {
 return fromPkcs8(clientId, clientEmail, privateKeyPkcs8, privateKeyId, null);
}

/**
 * Factory using PKCS#8 for the private key.
 *
 * @param clientId Client ID of the service account from the console. May be null.
 * @param clientEmail Client email address of the service account from the console.
 * @param privateKeyPkcs8 RSA private key object for the service account in PKCS#8 format.
 * @param privateKeyId Private key identifier for the service account. May be null.
 * @return New ServiceAccountJwtAcceessCredentials created from a private key.
 * @throws IOException if the credential cannot be created from the private key.
 */
public static ServiceAccountJwtAccessCredentials fromPkcs8(String clientId, String clientEmail, 
  String privateKeyPkcs8, String privateKeyId) throws IOException {
 return fromPkcs8(clientId, clientEmail, privateKeyPkcs8, privateKeyId, null);
}

/**
 * Returns service account credentials defined by JSON using the format supported by the Google
 * Developers Console.
 *
 * @param json a map from the JSON representing the credentials.
 * @param defaultAudience Audience to use if not provided by transport. May be null.
 * @return the credentials defined by the JSON.
 * @throws IOException if the credential cannot be created from the JSON.
 **/
static ServiceAccountJwtAccessCredentials fromJson(Map<String, Object> json, URI defaultAudience)
  throws IOException {
 String clientId = (String) json.get("client_id");
 String clientEmail = (String) json.get("client_email");
 String privateKeyPkcs8 = (String) json.get("private_key");
 String privateKeyId = (String) json.get("private_key_id");
 if (clientId == null || clientEmail == null
   || privateKeyPkcs8 == null || privateKeyId == null) {
  throw new IOException("Error reading service account credential from JSON, "
    + "expecting  'client_id', 'client_email', 'private_key' and 'private_key_id'.");
 }
 return fromPkcs8(clientId, clientEmail, privateKeyPkcs8, privateKeyId, defaultAudience);
}

/**
 * Returns service account credentials defined by JSON using the format supported by the Google
 * Developers Console.
 *
 * @param json a map from the JSON representing the credentials.
 * @param defaultAudience Audience to use if not provided by transport. May be null.
 * @return the credentials defined by the JSON.
 * @throws IOException if the credential cannot be created from the JSON.
 **/
static ServiceAccountJwtAccessCredentials fromJson(Map<String, Object> json, URI defaultAudience)
  throws IOException {
 String clientId = (String) json.get("client_id");
 String clientEmail = (String) json.get("client_email");
 String privateKeyPkcs8 = (String) json.get("private_key");
 String privateKeyId = (String) json.get("private_key_id");
 if (clientId == null || clientEmail == null
   || privateKeyPkcs8 == null || privateKeyId == null) {
  throw new IOException("Error reading service account credential from JSON, "
    + "expecting  'client_id', 'client_email', 'private_key' and 'private_key_id'.");
 }
 return fromPkcs8(clientId, clientEmail, privateKeyPkcs8, privateKeyId, defaultAudience);
}

@Test
public void getAuthenticationType_returnsJwtAccess() throws IOException {
 Credentials credentials = ServiceAccountJwtAccessCredentials
   .fromPkcs8(SA_CLIENT_ID, SA_CLIENT_EMAIL, SA_PRIVATE_KEY_PKCS8, SA_PRIVATE_KEY_ID);
 assertEquals(credentials.getAuthenticationType(), "JWTAccess");
}

@Test
public void hasRequestMetadata_returnsTrue() throws IOException {
 Credentials credentials = ServiceAccountJwtAccessCredentials
   .fromPkcs8(SA_CLIENT_ID, SA_CLIENT_EMAIL, SA_PRIVATE_KEY_PKCS8, SA_PRIVATE_KEY_ID);
 assertTrue(credentials.hasRequestMetadata());
}

@Test
public void hasRequestMetadataOnly_returnsTrue() throws IOException {
 Credentials credentials = ServiceAccountJwtAccessCredentials
   .fromPkcs8(SA_CLIENT_ID, SA_CLIENT_EMAIL, SA_PRIVATE_KEY_PKCS8, SA_PRIVATE_KEY_ID);
 assertTrue(credentials.hasRequestMetadataOnly());
}