Exchanges an actor credential for an access token that acts as a service account.
The source bearer supplies the actor token. The actor must have permission to
impersonate serviceAccountId. This low-level bearer does not cache the
impersonated token.
Returns a JSON-safe value for logs.
Creates an impersonation exchange.
sdk can be a ready SDK, an SDK promise, or null. Calling
ImpersonatedBearer.receiver while no SDK is set throws.
Optionallogger: LoggerOptionalmetrics: AuthMetricsInputReadonly$typeContains the fully qualified runtime type name.
Returns the provider name for authorization metrics.
Returns the credential name.
Returns the wrapped bearer.
Returns a JSON-safe value for logs.
Stops owned background work and closes the wrapped bearer.
OptionalgraceMs: numberCreates a token receiver.
Exchanges an actor credential for an access token that acts as a service account.
The source bearer supplies the actor token. The actor must have permission to impersonate
serviceAccountId. This low-level bearer does not cache the impersonated token.