从 GoogleCredentials 获取 applicationDefault

Question

我正在做一个 java spring 项目，需要我向 Google Pub/Sub 发布消息。我需要在 post 请求中将访问令牌作为授权 header 发送。我尝试使用 GoogleCredentials.getApplicationDefault() 但它需要在环境变量中设置 GOOGLE_APPLICATION_CREDENTIALS。

这是我试过的

Map<String, String> env = System.getenv();
Field field = env.getClass().getDeclaredField("m");
field.setAccessible(true);

((Map<String, String>) field.get(env)).put("GOOGLE_APPLICATION_CREDENTIALS", "/etc/gcp/sa_credentials.json");

GoogleCredentials credentials = GoogleCredentials.getApplicationDefault();
credentials.refreshIfExpired();

String accessToken = credentials.getAccessToken().toString();

当我尝试运行这个时，我得到这个错误 - java.io.IOException: Scopes not configured for service account. Scoped should be specified by calling createScoped or passing scopes to constructor

我不确定如何为服务帐户添加范围。有什么我遗漏的吗？

Answer 1

像这样创建一个范围内的凭据

GoogleCredentials credentials = GoogleCredentials.getApplicationDefault().createScoped(Arrays.asList("https://www.googleapis.com/auth/cloud-platform"));

从 GoogleCredentials 获取 applicationDefault

Fetching applicationDefault from GoogleCredentials

java

spring

google-authentication

google-cloud-platform