module documentation
Exchange federated credentials for renewable access tokens.
FederatedCredentialsBearer combines a federated-credentials reader
or requester with exchangeable and renewable bearers. It supplies short-lived
access tokens.
The class accepts one of several inputs for federated_credentials:
- a
nebius.base.service_account.federated_credentials.FederatedCredentialsBearer(a reader-like object),
- a
nebius.base.service_account.federated_credentials.FederatedCredentialsTokenRequester(an object that can construct exchange requests), or
- a string path pointing to a file understood by
nebius.base.service_account.federated_credentials.FileFederatedCredentials.
The resulting bearer uses nebius.aio.token.exchangeable.Bearer for
the token exchange. It uses nebius.aio.token.renewable.Bearer for
background refresh. For file credentials, a
nebius.aio.token.token.NamedBearer supplies a stable diagnostic name.
Example
Using a file path:
from nebius.aio.token.federated_credentials import FederatedCredentialsBearer
bearer = FederatedCredentialsBearer(
"/path/to/fed-credentials.json",
service_account_id="sa-123",
)
token = await bearer.receiver().fetch()
Using an existing reader/token requester:
reader = SomeReader(...) bearer = FederatedCredentialsBearer(reader, service_account_id="sa-123")
| Class | |
Bearer that exchanges federated credentials for access tokens. |