Exchanges an actor credential for an access token that acts as a service account.
The source bearer supplies the actor token. The actor must have permission to
impersonate serviceAccountId. This low-level bearer does not cache the
impersonated token.
Returns a JSON-safe value for logs.
Creates an impersonation exchange.
sdk can be a ready SDK, an SDK promise, or null. Calling
ImpersonatedBearer.receiver while no SDK is set throws.
Optionallogger: LoggerOptionalmetrics: AuthMetricsInputReadonly$typeContains the fully qualified runtime type name.
Returns the positive actor budget plus five seconds for token exchange.
Returns undefined when the actor has no positive finite budget.
Addition saturates at the largest safe integer number of milliseconds.
Returns the provider name for authorization metrics.
Returns the credential name.
Returns the wrapped bearer.
Returns a JSON-safe value for logs.
Stops owned background work and closes the wrapped bearer.
OptionalgraceMs: numberCreates a token receiver.
Exchanges an actor credential for an access token that acts as a service account.
The source bearer supplies the actor token. The actor must have permission to impersonate
serviceAccountId. This low-level bearer does not cache the impersonated token.