signer

This package is EXPERIMENTAL.

Underlying signing method

credential/impersonate	yes	no
service_account	Credentials API	Sign by JSON key
authorized_user	Credentials API	Not Supported
external_account	Credentials API	Credentials API as itself
compute_metadata	Credentials API	Credentials API as itself
App Engine 1st gen(only if WithExperimentalAppEngineSigner(true))	Credentials API	appengine.SignBytes()

• "Credentials API" is Service Account Credentials API (projects.serviceAccounts.signBlob, projects.serviceAccounts.signJwt)
  • Need Service Account Token Creator role(roles/iam.serviceAccountTokenCreator)