Skip to content

Commit 9dd6b57

Browse files
gcf-owl-bot[bot]gcf-owl-bot[bot]
authored
docs: add warning against accepting untrusted credentials (#8037)
PiperOrigin-RevId: 719330114 Source-Link: googleapis/googleapis@9e0f143 Source-Link: googleapis/googleapis-gen@9612bdf Copy-Tag: eyJwIjoiQWNjZXNzQXBwcm92YWwvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQWNjZXNzQ29udGV4dE1hbmFnZXIvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQWRzQWRNYW5hZ2VyLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQWRzTWFya2V0aW5nUGxhdGZvcm1BZG1pbi8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQWR2aXNvcnlOb3RpZmljYXRpb25zLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQWlQbGF0Zm9ybS8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQWxsb3lEYi8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQW5hbHl0aWNzQWRtaW4vLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQW5hbHl0aWNzRGF0YS8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQXBpR2F0ZXdheS8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQXBpSHViLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQXBpS2V5cy8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQXBpZ2VlQ29ubmVjdC8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQXBpZ2VlUmVnaXN0cnkvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQXBwRW5naW5lQWRtaW4vLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQXBwSHViLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQXBwc0NoYXQvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQXBwc0V2ZW50c1N1YnNjcmlwdGlvbnMvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQXBwc01lZXQvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQXJ0aWZhY3RSZWdpc3RyeS8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9
1 parent 0592fbe commit 9dd6b57

83 files changed

Lines changed: 498 additions & 0 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎AccessApproval/src/V1/Client/AccessApprovalClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -371,6 +371,12 @@ public static function parseName(string $formattedName, ?string $template = null
371371
* {@see \Google\Auth\FetchAuthTokenInterface} object or
372372
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
373373
* objects are provided, any settings in $credentialsConfig will be ignored.
374+
* *Important*: If you accept a credential configuration (credential
375+
* JSON/File/Stream) from an external source for authentication to Google Cloud
376+
* Platform, you must validate it before providing it to any Google API or library.
377+
* Providing an unvalidated credential configuration to Google APIs can compromise
378+
* the security of your systems and data. For more information {@see
379+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
374380
* @type array $credentialsConfig
375381
* Options used to configure credentials, including auth token caching, for the
376382
* client. For a full list of supporting configuration options, see

‎AccessContextManager/src/V1/Client/AccessContextManagerClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -345,6 +345,12 @@ public static function parseName(string $formattedName, ?string $template = null
345345
* {@see \Google\Auth\FetchAuthTokenInterface} object or
346346
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
347347
* objects are provided, any settings in $credentialsConfig will be ignored.
348+
* *Important*: If you accept a credential configuration (credential
349+
* JSON/File/Stream) from an external source for authentication to Google Cloud
350+
* Platform, you must validate it before providing it to any Google API or library.
351+
* Providing an unvalidated credential configuration to Google APIs can compromise
352+
* the security of your systems and data. For more information {@see
353+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
348354
* @type array $credentialsConfig
349355
* Options used to configure credentials, including auth token caching, for the
350356
* client. For a full list of supporting configuration options, see

‎AdsAdManager/src/V1/Client/AdUnitServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -187,6 +187,12 @@ public static function parseName(string $formattedName, ?string $template = null
187187
* {@see \Google\Auth\FetchAuthTokenInterface} object or
188188
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
189189
* objects are provided, any settings in $credentialsConfig will be ignored.
190+
* *Important*: If you accept a credential configuration (credential
191+
* JSON/File/Stream) from an external source for authentication to Google Cloud
192+
* Platform, you must validate it before providing it to any Google API or library.
193+
* Providing an unvalidated credential configuration to Google APIs can compromise
194+
* the security of your systems and data. For more information {@see
195+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
190196
* @type array $credentialsConfig
191197
* Options used to configure credentials, including auth token caching, for the
192198
* client. For a full list of supporting configuration options, see

‎AdsAdManager/src/V1/Client/CompanyServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -185,6 +185,12 @@ public static function parseName(string $formattedName, ?string $template = null
185185
* {@see \Google\Auth\FetchAuthTokenInterface} object or
186186
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
187187
* objects are provided, any settings in $credentialsConfig will be ignored.
188+
* *Important*: If you accept a credential configuration (credential
189+
* JSON/File/Stream) from an external source for authentication to Google Cloud
190+
* Platform, you must validate it before providing it to any Google API or library.
191+
* Providing an unvalidated credential configuration to Google APIs can compromise
192+
* the security of your systems and data. For more information {@see
193+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
188194
* @type array $credentialsConfig
189195
* Options used to configure credentials, including auth token caching, for the
190196
* client. For a full list of supporting configuration options, see

‎AdsAdManager/src/V1/Client/CustomFieldServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -185,6 +185,12 @@ public static function parseName(string $formattedName, ?string $template = null
185185
* {@see \Google\Auth\FetchAuthTokenInterface} object or
186186
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
187187
* objects are provided, any settings in $credentialsConfig will be ignored.
188+
* *Important*: If you accept a credential configuration (credential
189+
* JSON/File/Stream) from an external source for authentication to Google Cloud
190+
* Platform, you must validate it before providing it to any Google API or library.
191+
* Providing an unvalidated credential configuration to Google APIs can compromise
192+
* the security of your systems and data. For more information {@see
193+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
188194
* @type array $credentialsConfig
189195
* Options used to configure credentials, including auth token caching, for the
190196
* client. For a full list of supporting configuration options, see

‎AdsAdManager/src/V1/Client/CustomTargetingKeyServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -186,6 +186,12 @@ public static function parseName(string $formattedName, ?string $template = null
186186
* {@see \Google\Auth\FetchAuthTokenInterface} object or
187187
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
188188
* objects are provided, any settings in $credentialsConfig will be ignored.
189+
* *Important*: If you accept a credential configuration (credential
190+
* JSON/File/Stream) from an external source for authentication to Google Cloud
191+
* Platform, you must validate it before providing it to any Google API or library.
192+
* Providing an unvalidated credential configuration to Google APIs can compromise
193+
* the security of your systems and data. For more information {@see
194+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
189195
* @type array $credentialsConfig
190196
* Options used to configure credentials, including auth token caching, for the
191197
* client. For a full list of supporting configuration options, see

‎AdsAdManager/src/V1/Client/CustomTargetingValueServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -193,6 +193,12 @@ public static function parseName(string $formattedName, ?string $template = null
193193
* {@see \Google\Auth\FetchAuthTokenInterface} object or
194194
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
195195
* objects are provided, any settings in $credentialsConfig will be ignored.
196+
* *Important*: If you accept a credential configuration (credential
197+
* JSON/File/Stream) from an external source for authentication to Google Cloud
198+
* Platform, you must validate it before providing it to any Google API or library.
199+
* Providing an unvalidated credential configuration to Google APIs can compromise
200+
* the security of your systems and data. For more information {@see
201+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
196202
* @type array $credentialsConfig
197203
* Options used to configure credentials, including auth token caching, for the
198204
* client. For a full list of supporting configuration options, see

‎AdsAdManager/src/V1/Client/EntitySignalsMappingServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -196,6 +196,12 @@ public static function parseName(string $formattedName, ?string $template = null
196196
* {@see \Google\Auth\FetchAuthTokenInterface} object or
197197
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
198198
* objects are provided, any settings in $credentialsConfig will be ignored.
199+
* *Important*: If you accept a credential configuration (credential
200+
* JSON/File/Stream) from an external source for authentication to Google Cloud
201+
* Platform, you must validate it before providing it to any Google API or library.
202+
* Providing an unvalidated credential configuration to Google APIs can compromise
203+
* the security of your systems and data. For more information {@see
204+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
199205
* @type array $credentialsConfig
200206
* Options used to configure credentials, including auth token caching, for the
201207
* client. For a full list of supporting configuration options, see

‎AdsAdManager/src/V1/Client/NetworkServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -167,6 +167,12 @@ public static function parseName(string $formattedName, ?string $template = null
167167
* {@see \Google\Auth\FetchAuthTokenInterface} object or
168168
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
169169
* objects are provided, any settings in $credentialsConfig will be ignored.
170+
* *Important*: If you accept a credential configuration (credential
171+
* JSON/File/Stream) from an external source for authentication to Google Cloud
172+
* Platform, you must validate it before providing it to any Google API or library.
173+
* Providing an unvalidated credential configuration to Google APIs can compromise
174+
* the security of your systems and data. For more information {@see
175+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
170176
* @type array $credentialsConfig
171177
* Options used to configure credentials, including auth token caching, for the
172178
* client. For a full list of supporting configuration options, see

‎AdsAdManager/src/V1/Client/OrderServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -185,6 +185,12 @@ public static function parseName(string $formattedName, ?string $template = null
185185
* {@see \Google\Auth\FetchAuthTokenInterface} object or
186186
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
187187
* objects are provided, any settings in $credentialsConfig will be ignored.
188+
* *Important*: If you accept a credential configuration (credential
189+
* JSON/File/Stream) from an external source for authentication to Google Cloud
190+
* Platform, you must validate it before providing it to any Google API or library.
191+
* Providing an unvalidated credential configuration to Google APIs can compromise
192+
* the security of your systems and data. For more information {@see
193+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
188194
* @type array $credentialsConfig
189195
* Options used to configure credentials, including auth token caching, for the
190196
* client. For a full list of supporting configuration options, see

0 commit comments

Comments
 (0)