google-auth-library-php
google-auth-library-php copied to clipboard
Verify Sign Blob works outside GDU
signBlob is implemented in two different places:
- In the
ServiceAccountSignerTrait- the signing key is used to sign the blob directly. No network call is made - In the
IamSignerTrait- The Iam helper class is used to make an API call to the IAM API in order to sign the blob.
In the case of (1), no network call is made (it's already Universe Domain agnostic). In the case of (2), the IAM object is created with the configured universe domain. Because the universe domain is already supported in Iam::signBlob, this is supported.