@@ -355,6 +355,11 @@ class Auth
355355 # @return [Hash<String,Object>]
356356 attr_accessor :claims
357357
358+ # This message defines attributes associated with OAuth credentials.
359+ # Corresponds to the JSON property `oauth`
360+ # @return [Google::Apis::ServicecontrolV1::Oauth]
361+ attr_accessor :oauth
362+
358363 # The authorized presenter of the credential. Reflects the optional Authorized
359364 # Presenter (`azp`) claim within a JWT or the OAuth client id. For example, a
360365 # Google Cloud Platform client id looks as follows: "123456789012.apps.
@@ -380,6 +385,7 @@ def update!(**args)
380385 @access_levels = args [ :access_levels ] if args . key? ( :access_levels )
381386 @audiences = args [ :audiences ] if args . key? ( :audiences )
382387 @claims = args [ :claims ] if args . key? ( :claims )
388+ @oauth = args [ :oauth ] if args . key? ( :oauth )
383389 @presenter = args [ :presenter ] if args . key? ( :presenter )
384390 @principal = args [ :principal ] if args . key? ( :principal )
385391 end
@@ -395,6 +401,20 @@ class AuthenticationInfo
395401 # @return [String]
396402 attr_accessor :authority_selector
397403
404+ # Converted from "identity_cloudgaia.AuditLoggableShortLivedCredential" proto.
405+ # This message will be used by security, detection and response team. For
406+ # context please refer to go/cg:short-lived-credential-logging. When the JSON
407+ # object represented here has a proto equivalent, the proto name will be
408+ # indicated in the `@type` property.
409+ # Corresponds to the JSON property `loggableShortLivedCredential`
410+ # @return [Hash<String,Object>]
411+ attr_accessor :loggable_short_lived_credential
412+
413+ # OAuth related information about the request.
414+ # Corresponds to the JSON property `oauthInfo`
415+ # @return [Google::Apis::ServicecontrolV1::OAuthInfo]
416+ attr_accessor :oauth_info
417+
398418 # The email address of the authenticated user (or service account on behalf of
399419 # third party principal) making the request. For third party identity callers,
400420 # the `principal_subject` field is populated instead of this field. For privacy
@@ -450,6 +470,8 @@ def initialize(**args)
450470 # Update properties of this object
451471 def update! ( **args )
452472 @authority_selector = args [ :authority_selector ] if args . key? ( :authority_selector )
473+ @loggable_short_lived_credential = args [ :loggable_short_lived_credential ] if args . key? ( :loggable_short_lived_credential )
474+ @oauth_info = args [ :oauth_info ] if args . key? ( :oauth_info )
453475 @principal_email = args [ :principal_email ] if args . key? ( :principal_email )
454476 @principal_subject = args [ :principal_subject ] if args . key? ( :principal_subject )
455477 @service_account_delegation_info = args [ :service_account_delegation_info ] if args . key? ( :service_account_delegation_info )
@@ -569,6 +591,13 @@ class CheckInfo
569591 # @return [Google::Apis::ServicecontrolV1::ConsumerInfo]
570592 attr_accessor :consumer_info
571593
594+ # Whether or not the api key should be ignored in the credential_id during
595+ # reporting.
596+ # Corresponds to the JSON property `ignoreApiKeyUidAsCredentialId`
597+ # @return [Boolean]
598+ attr_accessor :ignore_api_key_uid_as_credential_id
599+ alias_method :ignore_api_key_uid_as_credential_id? , :ignore_api_key_uid_as_credential_id
600+
572601 # A list of fields and label keys that are ignored by the server. The client
573602 # doesn't need to send them for following requests to improve performance and
574603 # allow better aggregation.
@@ -584,6 +613,7 @@ def initialize(**args)
584613 def update! ( **args )
585614 @api_key_uid = args [ :api_key_uid ] if args . key? ( :api_key_uid )
586615 @consumer_info = args [ :consumer_info ] if args . key? ( :consumer_info )
616+ @ignore_api_key_uid_as_credential_id = args [ :ignore_api_key_uid_as_credential_id ] if args . key? ( :ignore_api_key_uid_as_credential_id )
587617 @unused_arguments = args [ :unused_arguments ] if args . key? ( :unused_arguments )
588618 end
589619 end
@@ -1411,6 +1441,47 @@ def update!(**args)
14111441 end
14121442 end
14131443
1444+ # OAuth related information about the request.
1445+ class OAuthInfo
1446+ include Google ::Apis ::Core ::Hashable
1447+
1448+ # The OAuth client ID of the 1P or 3P application acting on behalf of the user.
1449+ # Corresponds to the JSON property `oauthClientId`
1450+ # @return [String]
1451+ attr_accessor :oauth_client_id
1452+
1453+ def initialize ( **args )
1454+ update! ( **args )
1455+ end
1456+
1457+ # Update properties of this object
1458+ def update! ( **args )
1459+ @oauth_client_id = args [ :oauth_client_id ] if args . key? ( :oauth_client_id )
1460+ end
1461+ end
1462+
1463+ # This message defines attributes associated with OAuth credentials.
1464+ class Oauth
1465+ include Google ::Apis ::Core ::Hashable
1466+
1467+ # The optional OAuth client ID. This is the unique public identifier issued by
1468+ # an authorization server to a registered client application. Empty string is
1469+ # equivalent to no oauth client id. WARNING: This is for MCP tools/call and
1470+ # tools/list authorization and not for general use.
1471+ # Corresponds to the JSON property `clientId`
1472+ # @return [String]
1473+ attr_accessor :client_id
1474+
1475+ def initialize ( **args )
1476+ update! ( **args )
1477+ end
1478+
1479+ # Update properties of this object
1480+ def update! ( **args )
1481+ @client_id = args [ :client_id ] if args . key? ( :client_id )
1482+ end
1483+ end
1484+
14141485 # Represents information regarding an operation.
14151486 class Operation
14161487 include Google ::Apis ::Core ::Hashable
0 commit comments