Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
Cache	[ DIR ]	drwxr-sr-x	2026-03-18 20:03
CredentialSource	[ DIR ]	drwxr-sr-x	2026-03-18 20:03
Credentials	[ DIR ]	drwxr-sr-x	2026-03-18 20:03
ExecutableHandler	[ DIR ]	drwxr-sr-x	2026-03-18 20:03
HttpHandler	[ DIR ]	drwxr-sr-x	2026-03-18 20:03
Logging	[ DIR ]	drwxr-sr-x	2026-03-18 20:03
Middleware	[ DIR ]	drwxr-sr-x	2026-03-18 20:03
AccessToken.php	17.08 KB	-rw-r--r--	2026-03-18 20:03
ApplicationDefaultCredentials.php	15.04 KB	-rw-r--r--	2026-03-18 20:03
CacheTrait.php	2.56 KB	-rw-r--r--	2026-03-18 20:03
CredentialsLoader.php	10.87 KB	-rw-r--r--	2026-03-18 20:03
ExternalAccountCredentialSourceInterface.php	804 B	-rw-r--r--	2026-03-18 20:03
FetchAuthTokenCache.php	10.59 KB	-rw-r--r--	2026-03-18 20:03
FetchAuthTokenInterface.php	1.63 KB	-rw-r--r--	2026-03-18 20:03
GCECache.php	2.31 KB	-rw-r--r--	2026-03-18 20:03
GetQuotaProjectInterface.php	947 B	-rw-r--r--	2026-03-18 20:03
GetUniverseDomainInterface.php	1.06 KB	-rw-r--r--	2026-03-18 20:03
Iam.php	5.03 KB	-rw-r--r--	2026-03-18 20:03
IamSignerTrait.php	2.4 KB	-rw-r--r--	2026-03-18 20:03
MetricsTrait.php	3.9 KB	-rw-r--r--	2026-03-18 20:03
OAuth2.php	48.56 KB	-rw-r--r--	2026-03-18 20:03
ProjectIdProviderInterface.php	968 B	-rw-r--r--	2026-03-18 20:03
ServiceAccountSignerTrait.php	1.81 KB	-rw-r--r--	2026-03-18 20:03
SignBlobInterface.php	1.5 KB	-rw-r--r--	2026-03-18 20:03
UpdateMetadataInterface.php	1.22 KB	-rw-r--r--	2026-03-18 20:03
UpdateMetadataTrait.php	2.39 KB	-rw-r--r--	2026-03-18 20:03

Rename

<?php

/*
 * Copyright 2022 Google Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

namespace Google\Auth;

use Exception;
use Google\Auth\HttpHandler\HttpClientCache;
use Google\Auth\HttpHandler\HttpHandlerFactory;

trait IamSignerTrait
{
    /**
     * @var Iam|null
     */
    private $iam;

/**
     * Sign a string using the default service account private key.
     *
     * This implementation uses IAM's signBlob API.
     *
     * @see https://cloud.google.com/iam/credentials/reference/rest/v1/projects.serviceAccounts/signBlob SignBlob
     *
     * @param string $stringToSign The string to sign.
     * @param bool $forceOpenSsl [optional] Does not apply to this credentials
     *        type.
     * @param string $accessToken The access token to use to sign the blob. If
     *        provided, saves a call to the metadata server for a new access
     *        token. **Defaults to** `null`.
     * @return string
     * @throws Exception
     */
    public function signBlob($stringToSign, $forceOpenSsl = false, $accessToken = null)
    {
        $httpHandler = HttpHandlerFactory::build(HttpClientCache::getHttpClient());

// Providing a signer is useful for testing, but it's undocumented
        // because it's not something a user would generally need to do.
        $signer = $this->iam;
        if (!$signer) {
            $signer = $this instanceof GetUniverseDomainInterface
                ? new Iam($httpHandler, $this->getUniverseDomain())
                : new Iam($httpHandler);
        }

$email = $this->getClientName($httpHandler);

if (is_null($accessToken)) {
            $previousToken = $this->getLastReceivedToken();
            $accessToken = $previousToken
                ? $previousToken['access_token']
                : $this->fetchAuthToken($httpHandler)['access_token'];
        }

return $signer->signBlob($email, $accessToken, $stringToSign);
    }
}