从 GoogleCredentials 获取 applicationDefault

Question

我正在开发一个 java spring 项目，该项目要求我将消息发布到 Google Pub/Sub。我需要在发布请求中将访问令牌作为授权标头发送。 我尝试使用 GoogleCredentials.getApplicationDefault() 但它需要在环境变量中设置 GOOGLE_APPLICATION_CREDENTIALS。

这是我尝试过的

Map<String, String> env = System.getenv();
Field field = env.getClass().getDeclaredField("m");
field.setAccessible(true);

((Map<String, String>) field.get(env)).put("GOOGLE_APPLICATION_CREDENTIALS", "/etc/gcp/sa_credentials.json");

GoogleCredentials credentials = GoogleCredentials.getApplicationDefault();
credentials.refreshIfExpired();

String accessToken = credentials.getAccessToken().toString();

当我尝试运行它时，我得到了这个错误 - java.io.IOException: Scopes not configured for service account. Scoped should be specified by calling createScoped or passing scopes to constructor

我不确定如何为服务帐户添加范围。我有什么遗漏吗？

Answer 1

像这样简单地创建一个范围凭证

GoogleCredentials credentials = GoogleCredentials.getApplicationDefault().createScoped(Arrays.asList("https://www.googleapis.com/auth/cloud-platform"));