docs(iam-samples): extract json_key_file from privatedata (GoogleCloudPlatform#6697)

Sita04 · web-flow · commit 542d8502c8ae · 2022-01-31T15:04:38.000+05:30
* docs(compute-samples): lint fix

* docs(iam-samples): fixed Service Account Key creation test
diff --git a/iam/api-client/src/main/java/iam/snippets/CreateServiceAccountKey.java b/iam/api-client/src/main/java/iam/snippets/CreateServiceAccountKey.java
@@ -1,4 +1,4 @@
-/* Copyright 2019 Google LLC
+/* Copyright 2022 Google LLC
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -16,6 +16,7 @@
 package iam.snippets;
 
 // [START iam_create_key]
+
 import com.google.api.client.googleapis.javanet.GoogleNetHttpTransport;
 import com.google.api.client.json.jackson2.JacksonFactory;
 import com.google.api.services.iam.v1.Iam;
@@ -26,21 +27,22 @@
 import com.google.auth.oauth2.GoogleCredentials;
 import java.io.IOException;
 import java.security.GeneralSecurityException;
+import java.util.Base64;
 import java.util.Collections;
 
 public class CreateServiceAccountKey {
 
   // Creates a key for a service account.
-  public static void createKey(String projectId, String serviceAccountName) {
+  public static String createKey(String projectId, String serviceAccountName) {
     // String projectId = "my-project-id";
     // String serviceAccountName = "my-service-account-name";
 
     Iam service = null;
     try {
       service = initService();
     } catch (IOException | GeneralSecurityException e) {
-      System.out.println("Unable to initialize service: \n" + e.toString());
-      return;
+      System.out.println("Unable to initialize service: \n" + e);
+      return null;
     }
 
     String serviceAccountEmail = serviceAccountName + "@" + projectId + ".iam.gserviceaccount.com";
@@ -55,9 +57,18 @@ public static void createKey(String projectId, String serviceAccountName) {
                   new CreateServiceAccountKeyRequest())
               .execute();
 
-      System.out.println("Created key: " + key.getName());
+      // The privateKeyData field contains the base64-encoded service account key
+      // in JSON format.
+      // TODO(Developer): Save the below key (jsonKeyFile) to a secure location.
+      //  You cannot download it later.
+      String jsonKeyFile = new String(Base64.getDecoder().decode(key.getPrivateKeyData()));
+
+      System.out.println("Key created successfully");
+      String keyName = key.getName();
+      return keyName.substring(keyName.lastIndexOf("/") + 1).trim();
     } catch (IOException e) {
-      System.out.println("Unable to create service account key: \n" + e.toString());
+      System.out.println("Unable to create service account key: \n" + e);
+      return null;
     }
   }
 
@@ -70,9 +81,9 @@ private static Iam initService() throws GeneralSecurityException, IOException {
     // Initialize the IAM service, which can be used to send requests to the IAM API.
     Iam service =
         new Iam.Builder(
-                GoogleNetHttpTransport.newTrustedTransport(),
-                JacksonFactory.getDefaultInstance(),
-                new HttpCredentialsAdapter(credential))
+            GoogleNetHttpTransport.newTrustedTransport(),
+            JacksonFactory.getDefaultInstance(),
+            new HttpCredentialsAdapter(credential))
             .setApplicationName("service-account-keys")
             .build();
     return service;
diff --git a/iam/api-client/src/test/java/iam/snippets/ServiceAccountTests.java b/iam/api-client/src/test/java/iam/snippets/ServiceAccountTests.java
@@ -88,12 +88,10 @@ public void stage2_testServiceAccountRename() {
 
   @Test
   public void stage2_testServiceAccountKeyCreate() {
-    CreateServiceAccountKey.createKey(PROJECT_ID, SERVICE_ACCOUNT);
+    SERVICE_ACCOUNT_KEY = CreateServiceAccountKey.createKey(PROJECT_ID, SERVICE_ACCOUNT);
     String got = bout.toString();
-    assertThat(got, containsString("Created key:"));
-    String serviceAccountKeyPath = got.substring(got.lastIndexOf(":") + 1);
-    SERVICE_ACCOUNT_KEY = serviceAccountKeyPath
-        .substring(serviceAccountKeyPath.lastIndexOf("/") + 1).trim();
+    assertNotNull(SERVICE_ACCOUNT_KEY);
+    assertThat(got, containsString("Key created successfully"));
   }
 
   @Test
