public static final class AuthConfig.OidcConfig.Builder extends com.google.protobuf.GeneratedMessage.Builder<AuthConfig.OidcConfig.Builder> implements AuthConfig.OidcConfigOrBuilder
Config for user OIDC auth.Protobuf type
google.cloud.aiplatform.v1beta1.AuthConfig.OidcConfig| Modifier and Type | Method and Description |
|---|---|
AuthConfig.OidcConfig |
build() |
AuthConfig.OidcConfig |
buildPartial() |
AuthConfig.OidcConfig.Builder |
clear() |
AuthConfig.OidcConfig.Builder |
clearIdToken()
OpenID Connect formatted ID token for extension endpoint.
|
AuthConfig.OidcConfig.Builder |
clearOidcConfig() |
AuthConfig.OidcConfig.Builder |
clearServiceAccount()
The service account used to generate an OpenID Connect
(OIDC)-compatible JWT token signed by the Google OIDC Provider
(accounts.google.com) for extension endpoint
(https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc)
|
AuthConfig.OidcConfig |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
com.google.protobuf.Descriptors.Descriptor |
getDescriptorForType() |
String |
getIdToken()
OpenID Connect formatted ID token for extension endpoint.
|
com.google.protobuf.ByteString |
getIdTokenBytes()
OpenID Connect formatted ID token for extension endpoint.
|
AuthConfig.OidcConfig.OidcConfigCase |
getOidcConfigCase() |
String |
getServiceAccount()
The service account used to generate an OpenID Connect
(OIDC)-compatible JWT token signed by the Google OIDC Provider
(accounts.google.com) for extension endpoint
(https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc)
|
com.google.protobuf.ByteString |
getServiceAccountBytes()
The service account used to generate an OpenID Connect
(OIDC)-compatible JWT token signed by the Google OIDC Provider
(accounts.google.com) for extension endpoint
(https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc)
|
boolean |
hasIdToken()
OpenID Connect formatted ID token for extension endpoint.
|
boolean |
hasServiceAccount()
The service account used to generate an OpenID Connect
(OIDC)-compatible JWT token signed by the Google OIDC Provider
(accounts.google.com) for extension endpoint
(https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc)
|
protected com.google.protobuf.GeneratedMessage.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
AuthConfig.OidcConfig.Builder |
mergeFrom(AuthConfig.OidcConfig other) |
AuthConfig.OidcConfig.Builder |
mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
AuthConfig.OidcConfig.Builder |
mergeFrom(com.google.protobuf.Message other) |
AuthConfig.OidcConfig.Builder |
setIdToken(String value)
OpenID Connect formatted ID token for extension endpoint.
|
AuthConfig.OidcConfig.Builder |
setIdTokenBytes(com.google.protobuf.ByteString value)
OpenID Connect formatted ID token for extension endpoint.
|
AuthConfig.OidcConfig.Builder |
setServiceAccount(String value)
The service account used to generate an OpenID Connect
(OIDC)-compatible JWT token signed by the Google OIDC Provider
(accounts.google.com) for extension endpoint
(https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc)
|
AuthConfig.OidcConfig.Builder |
setServiceAccountBytes(com.google.protobuf.ByteString value)
The service account used to generate an OpenID Connect
(OIDC)-compatible JWT token signed by the Google OIDC Provider
(accounts.google.com) for extension endpoint
(https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc)
|
addRepeatedField, clearField, clearOneof, clone, getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMapFieldReflection, internalGetMutableMapField, internalGetMutableMapFieldReflection, isClean, markClean, mergeUnknownFields, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setField, setRepeatedField, setUnknownFields, setUnknownFieldSetBuilder, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitfindInitializationErrors, getAllFields, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneofpublic static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessage.Builder<AuthConfig.OidcConfig.Builder>public AuthConfig.OidcConfig.Builder clear()
clear in interface com.google.protobuf.Message.Builderclear in interface com.google.protobuf.MessageLite.Builderclear in class com.google.protobuf.GeneratedMessage.Builder<AuthConfig.OidcConfig.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface com.google.protobuf.Message.BuildergetDescriptorForType in interface com.google.protobuf.MessageOrBuildergetDescriptorForType in class com.google.protobuf.GeneratedMessage.Builder<AuthConfig.OidcConfig.Builder>public AuthConfig.OidcConfig getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderpublic AuthConfig.OidcConfig build()
build in interface com.google.protobuf.Message.Builderbuild in interface com.google.protobuf.MessageLite.Builderpublic AuthConfig.OidcConfig buildPartial()
buildPartial in interface com.google.protobuf.Message.BuilderbuildPartial in interface com.google.protobuf.MessageLite.Builderpublic AuthConfig.OidcConfig.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<AuthConfig.OidcConfig.Builder>public AuthConfig.OidcConfig.Builder mergeFrom(AuthConfig.OidcConfig other)
public final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessage.Builder<AuthConfig.OidcConfig.Builder>public AuthConfig.OidcConfig.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in interface com.google.protobuf.MessageLite.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<AuthConfig.OidcConfig.Builder>IOExceptionpublic AuthConfig.OidcConfig.OidcConfigCase getOidcConfigCase()
getOidcConfigCase in interface AuthConfig.OidcConfigOrBuilderpublic AuthConfig.OidcConfig.Builder clearOidcConfig()
public boolean hasIdToken()
OpenID Connect formatted ID token for extension endpoint. Only used to propagate token from [[ExecuteExtensionRequest.runtime_auth_config]] at request time.
string id_token = 1;hasIdToken in interface AuthConfig.OidcConfigOrBuilderpublic String getIdToken()
OpenID Connect formatted ID token for extension endpoint. Only used to propagate token from [[ExecuteExtensionRequest.runtime_auth_config]] at request time.
string id_token = 1;getIdToken in interface AuthConfig.OidcConfigOrBuilderpublic com.google.protobuf.ByteString getIdTokenBytes()
OpenID Connect formatted ID token for extension endpoint. Only used to propagate token from [[ExecuteExtensionRequest.runtime_auth_config]] at request time.
string id_token = 1;getIdTokenBytes in interface AuthConfig.OidcConfigOrBuilderpublic AuthConfig.OidcConfig.Builder setIdToken(String value)
OpenID Connect formatted ID token for extension endpoint. Only used to propagate token from [[ExecuteExtensionRequest.runtime_auth_config]] at request time.
string id_token = 1;value - The idToken to set.public AuthConfig.OidcConfig.Builder clearIdToken()
OpenID Connect formatted ID token for extension endpoint. Only used to propagate token from [[ExecuteExtensionRequest.runtime_auth_config]] at request time.
string id_token = 1;public AuthConfig.OidcConfig.Builder setIdTokenBytes(com.google.protobuf.ByteString value)
OpenID Connect formatted ID token for extension endpoint. Only used to propagate token from [[ExecuteExtensionRequest.runtime_auth_config]] at request time.
string id_token = 1;value - The bytes for idToken to set.public boolean hasServiceAccount()
The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc). - The audience for the token will be set to the URL in the server url defined in the OpenApi spec. - If the service account is provided, the service account should grant `iam.serviceAccounts.getOpenIdToken` permission to Vertex AI Extension Service Agent (https://cloud.google.com/vertex-ai/docs/general/access-control#service-agents).
string service_account = 2;hasServiceAccount in interface AuthConfig.OidcConfigOrBuilderpublic String getServiceAccount()
The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc). - The audience for the token will be set to the URL in the server url defined in the OpenApi spec. - If the service account is provided, the service account should grant `iam.serviceAccounts.getOpenIdToken` permission to Vertex AI Extension Service Agent (https://cloud.google.com/vertex-ai/docs/general/access-control#service-agents).
string service_account = 2;getServiceAccount in interface AuthConfig.OidcConfigOrBuilderpublic com.google.protobuf.ByteString getServiceAccountBytes()
The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc). - The audience for the token will be set to the URL in the server url defined in the OpenApi spec. - If the service account is provided, the service account should grant `iam.serviceAccounts.getOpenIdToken` permission to Vertex AI Extension Service Agent (https://cloud.google.com/vertex-ai/docs/general/access-control#service-agents).
string service_account = 2;getServiceAccountBytes in interface AuthConfig.OidcConfigOrBuilderpublic AuthConfig.OidcConfig.Builder setServiceAccount(String value)
The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc). - The audience for the token will be set to the URL in the server url defined in the OpenApi spec. - If the service account is provided, the service account should grant `iam.serviceAccounts.getOpenIdToken` permission to Vertex AI Extension Service Agent (https://cloud.google.com/vertex-ai/docs/general/access-control#service-agents).
string service_account = 2;value - The serviceAccount to set.public AuthConfig.OidcConfig.Builder clearServiceAccount()
The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc). - The audience for the token will be set to the URL in the server url defined in the OpenApi spec. - If the service account is provided, the service account should grant `iam.serviceAccounts.getOpenIdToken` permission to Vertex AI Extension Service Agent (https://cloud.google.com/vertex-ai/docs/general/access-control#service-agents).
string service_account = 2;public AuthConfig.OidcConfig.Builder setServiceAccountBytes(com.google.protobuf.ByteString value)
The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#sa-credentials-oidc). - The audience for the token will be set to the URL in the server url defined in the OpenApi spec. - If the service account is provided, the service account should grant `iam.serviceAccounts.getOpenIdToken` permission to Vertex AI Extension Service Agent (https://cloud.google.com/vertex-ai/docs/general/access-control#service-agents).
string service_account = 2;value - The bytes for serviceAccount to set.Copyright © 2026 Google LLC. All rights reserved.