@@ -44,7 +44,7 @@ maxTokenLifetime = 3600
4444-- | Obtain an 'OAuthToken' from the local instace metadata
4545-- using the specific 'ServiceId'.
4646--
47−-- For example: @http:\/\/169.254.169.254\/instance\/service-accounts\/default\/token@
47+-- For example: @http:\/\/metadata.google.internal\/computeMetadata\/v1\/instance\/service-accounts\/default\/token@
4848-- will be retrieved if the given 'ServiceId' is @\"default\"@.
4949metadataToken :: (MonadIO m, MonadCatch m)
5050 => ServiceId
@@ -53,7 +53,7 @@ metadataToken :: (MonadIO m, MonadCatch m)
5353 -> m (OAuthToken s)
5454metadataToken s = refreshRequest $
5555 metadataRequest
56− { Client.path = "instance/service-accounts/"
56+ { Client.path = "/computeMetadata/v1/instance/service-accounts/"
5757 <> Text.encodeUtf8 (toQueryParam s)
5858 <> "/token"
5959 }
@@ -76,7 +76,6 @@ authorizedUserToken u r = refreshRequest $
7676 <> "&refresh_token=" <> toQueryParam (fromMaybe (_userRefresh u) r)
7777 }
7878
79−
8079-- | Obtain an 'OAuthToken' from @https://accounts.google.com/o/oauth2/token@
8180-- by signing and sending a JSON Web Token (JWT) using the supplied 'ServiceAccount'.
8281serviceAccountToken :: (MonadIO m, MonadCatch m, AllowScopes s)