6 Commits

Author	SHA1	Message	Date
J	61d8030ec9	-get-gcp-jwt: documentation, clearer return faces	2021-02-23 22:53:42 +00:00
J	9f43fef85d	-get-gcp-jwt: returns time of expiry ... Couldn't bring myself to pass in a relative date without a base, so we instead pass now into get-access-token, and return the time of expiry.	2021-02-23 22:40:05 +00:00
J	b0bb659f12	-get-gcp-jwt: @dr expires_in, cleanup ... The expiry field we get from Google is not a timestamp, but a count of seconds after which the token is invalid (hence, 'expires_in'). We represent this as a @dr by multiplying the integer we get from Google by ~1s. (Perhaps it will wind up being easier on the Landscape side to consume the raw integer, but we may as well start off more type-correct.) Also cleans up some names now that I'm less confused about how the token API works, and makes some syntax more vertical.	2021-02-23 22:34:48 +00:00
J	d978e6a551	-get-gcp-jwt: produces an access token ... The correct scope to ask for is not devstorage.editor, but cloud-platform. This will, rather than returning a signed JWT from Google that looks like it works but doesn't, return a JSON object containing an access token and expiration time.	2021-02-23 22:18:59 +00:00
J	860343e3d4	-get-gcp-jwt: clean up references, use +ot ... Moves =, closer to call sites so it's clearer what's coming from where. Also uses +ot, allowing a less horrifying +sign-jwt. This also seems to not jump back and forth between tapes and cords as much, for what that's worth.	2021-02-23 21:14:35 +00:00
Jōshin	ac40b5cf24	-get-gcp-jwt: produce a JWT for use in GCP Storage	2021-02-23 21:13:30 +00:00