InspectToken returns information about the delegation token.

NewRulesCache properly initializes RulesCache instance.

NewTokenLogger returns a callback that records info about tokens to BigQuery.

SignToken signs and serializes the delegation subtoken.

Projects is a magical token that can be used in allowed_to_impersonate to indicate that the caller can impersonate "project:*" identities.

Requestor is magical token that may be used in the config and requests as a substitute for caller's ID.

GlobalRulesCache is the process-wide rules cache.

ImportDelegationConfigsRPC implements Admin.ImportDelegationConfigs method.

InspectDelegationTokenRPC implements Admin.InspectDelegationToken RPC method.

MintDelegationTokenRPC implements TokenMinter.MintDelegationToken RPC method.

MintedTokenInfo is passed to LogToken.

Rules is queryable representation of delegation.cfg rules.

RulesCache is a stateful object with parsed delegation.cfg rules.

RulesQuery contains parameters to match against the delegation rules.

TokenLogger records info about the token to BigQuery.