How to use

newBuilder

method

in

com.google.auth.oauth2.ServiceAccountJwtAccessCredentials

 private static Credentials getJwtToken(ServiceAccountCredentials serviceAccount) {
  return ServiceAccountJwtAccessCredentials.newBuilder()
    .setClientEmail(serviceAccount.getClientEmail())
    .setClientId(serviceAccount.getClientId())
    .setPrivateKey(serviceAccount.getPrivateKey())
    .setPrivateKeyId(serviceAccount.getPrivateKeyId())
    .build();
 }
}

@Test
public void sign_sameAs()
  throws IOException, NoSuchAlgorithmException, InvalidKeyException, SignatureException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 byte[] toSign = {0xD, 0xE, 0xA, 0xD};
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 byte[] signedBytes = credentials.sign(toSign);
 Signature signature = Signature.getInstance(OAuth2Utils.SIGNATURE_ALGORITHM);
 signature.initSign(credentials.getPrivateKey());
 signature.update(toSign);
 assertArrayEquals(signature.sign(), signedBytes);
}

@Test 
public void constructor_noPrivateKeyId_constructs() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .build();  }

@Test 
public void constructor_noClientId_constructs() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();  }

@Test 
public void constructor_noPrivateKey_throws() {
 try {
  ServiceAccountJwtAccessCredentials.newBuilder()
    .setClientId(SA_CLIENT_ID)
    .setClientEmail(SA_CLIENT_EMAIL)
    .setPrivateKeyId(SA_PRIVATE_KEY_ID)
    .build();
  fail("exception expected");
 } catch (NullPointerException e) {
  // Expected
 }
}

@Test 
public void constructor_noEmail_throws() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 try {
  ServiceAccountJwtAccessCredentials.newBuilder()
    .setClientId(SA_CLIENT_ID)
    .setPrivateKey(privateKey)
    .setPrivateKeyId(SA_PRIVATE_KEY_ID)
    .build();      fail("exception expected");
 } catch (NullPointerException e) {
  // Expected
 }
}

@Test
public void getAccount_sameAs() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 assertEquals(SA_CLIENT_EMAIL, credentials.getAccount());
}

@Test
public void toString_containsFields() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .setDefaultAudience(CALL_URI)
   .build();
 String expectedToString = String.format(
   "ServiceAccountJwtAccessCredentials{clientId=%s, clientEmail=%s, privateKeyId=%s, "
     + "defaultAudience=%s}",
   SA_CLIENT_ID,
   SA_CLIENT_EMAIL,
   SA_PRIVATE_KEY_ID,
   CALL_URI);
 assertEquals(expectedToString, credentials.toString());
}

@Test
public void getRequestMetadata_blocking_hasJwtAccess() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 Map<String, List<String>> metadata = credentials.getRequestMetadata(CALL_URI);
 verifyJwtAccess(metadata, SA_CLIENT_EMAIL, CALL_URI, SA_PRIVATE_KEY_ID);
}

@Test
public void getRequestMetadata_blocking_defaultURI_hasJwtAccess() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 Credentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .setDefaultAudience(CALL_URI)
   .build();
 Map<String, List<String>> metadata = credentials.getRequestMetadata();
 verifyJwtAccess(metadata, SA_CLIENT_EMAIL, CALL_URI, SA_PRIVATE_KEY_ID);
}

@Test
public void getRequestMetadata_blocking_noURI_throws() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 try {
  credentials.getRequestMetadata();
  fail("exception expected");
 } catch (IOException e) {
  // Expected
 }
}

@Test
public void getRequestMetadata_blocking_cached() throws IOException {
 TestClock testClock = new TestClock();
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 credentials.clock = testClock;
 Map<String, List<String>> metadata1 = credentials.getRequestMetadata(CALL_URI);
 // Fast forward time a little
 long lifeSpanMs = TimeUnit.SECONDS.toMillis(10);
 testClock.setCurrentTime(lifeSpanMs);
 Map<String, List<String>> metadata2 = credentials.getRequestMetadata(CALL_URI);
 assertEquals(metadata1, metadata2);
}

@Test
public void getRequestMetadata_blocking_cache_expired() throws IOException {
 TestClock testClock = new TestClock();
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 credentials.clock = testClock;
 Map<String, List<String>> metadata1 = credentials.getRequestMetadata(CALL_URI);
 // Fast forward time past the expiration
 long lifeSpanMs = TimeUnit.SECONDS.toMillis(ServiceAccountJwtAccessCredentials.LIFE_SPAN_SECS);
 testClock.setCurrentTime(lifeSpanMs);
 Map<String, List<String>> metadata2 = credentials.getRequestMetadata(CALL_URI);
 assertNotEquals(metadata1, metadata2);
}

@Test
public void hashCode_equals() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .setDefaultAudience(CALL_URI)
   .build();
 ServiceAccountJwtAccessCredentials otherCredentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .setDefaultAudience(CALL_URI)
   .build();
 assertEquals(credentials.hashCode(), otherCredentials.hashCode());
}

@Test
public void equals_false_clientId() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .setDefaultAudience(CALL_URI)
   .build();
 ServiceAccountJwtAccessCredentials otherCredentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId("otherClientId")
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .setDefaultAudience(CALL_URI)
   .build();
 assertFalse(credentials.equals(otherCredentials));
 assertFalse(otherCredentials.equals(credentials));
}

@Test
public void getRequestMetadata_async_noURI_exception() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 MockExecutor executor = new MockExecutor();
 MockRequestMetadataCallback callback = new MockRequestMetadataCallback();
 credentials.getRequestMetadata(null, executor, callback);
 assertEquals(0, executor.numTasks());
 assertNotNull(callback.exception);
}

@Test 
public void constructor_allParameters_constructs() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 
 assertEquals(SA_CLIENT_ID, credentials.getClientId());
 assertEquals(SA_CLIENT_EMAIL, credentials.getClientEmail());
 assertEquals(privateKey, credentials.getPrivateKey());
 assertEquals(SA_PRIVATE_KEY_ID, credentials.getPrivateKeyId());
}

@Test
public void getRequestMetadata_async_hasJwtAccess() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .build();
 MockExecutor executor = new MockExecutor();
 MockRequestMetadataCallback callback = new MockRequestMetadataCallback();
 credentials.getRequestMetadata(CALL_URI, executor, callback);
 assertEquals(0, executor.numTasks());
 assertNotNull(callback.metadata);
 verifyJwtAccess(callback.metadata, SA_CLIENT_EMAIL, CALL_URI, SA_PRIVATE_KEY_ID);
}

@Test
public void getRequestMetadata_async_defaultURI_hasJwtAccess() throws IOException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 Credentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .setDefaultAudience(CALL_URI)
   .build();
 MockExecutor executor = new MockExecutor();
 MockRequestMetadataCallback callback = new MockRequestMetadataCallback();
 credentials.getRequestMetadata(null, executor, callback);
 assertEquals(0, executor.numTasks());
 assertNotNull(callback.metadata);
 verifyJwtAccess(callback.metadata, SA_CLIENT_EMAIL, CALL_URI, SA_PRIVATE_KEY_ID);
}

@Test
public void serialize() throws IOException, ClassNotFoundException {
 PrivateKey privateKey = ServiceAccountCredentials.privateKeyFromPkcs8(SA_PRIVATE_KEY_PKCS8);
 ServiceAccountJwtAccessCredentials credentials = ServiceAccountJwtAccessCredentials.newBuilder()
   .setClientId(SA_CLIENT_ID)
   .setClientEmail(SA_CLIENT_EMAIL)
   .setPrivateKey(privateKey)
   .setPrivateKeyId(SA_PRIVATE_KEY_ID)
   .setDefaultAudience(CALL_URI)
   .build();
 ServiceAccountJwtAccessCredentials deserializedCredentials =
   serializeAndDeserialize(credentials);
 verifyJwtAccess(deserializedCredentials.getRequestMetadata(), SA_CLIENT_EMAIL, CALL_URI, SA_PRIVATE_KEY_ID);
 assertEquals(credentials, deserializedCredentials);
 assertEquals(credentials.hashCode(), deserializedCredentials.hashCode());
 assertEquals(credentials.toString(), deserializedCredentials.toString());
 assertSame(deserializedCredentials.clock, Clock.SYSTEM);
}