package google.rpc.context
Get desktop application:
View/edit binary Protocol Buffers messages
message
attribute_context.proto:45This message defines the standard attribute vocabulary for Google APIs. An attribute is a piece of metadata that describes an activity on a network service. For example, the size of an HTTP request, or the status code of an HTTP response. Each attribute has a type and a name, which is logically defined as a proto message field in `AttributeContext`. The field type becomes the attribute type, and the field path becomes the attribute name. For example, the attribute `source.ip` maps to field `AttributeContext.source.ip`. This message definition is guaranteed not to have any wire breaking change. So you can use it directly for passing attributes across different systems. NOTE: Different system may generate different subset of attributes. Please verify the system specification before relying on an attribute generated a system.
optional origin = 7
The origin of a network activity. In a multi hop network activity, the origin represents the sender of the first hop. For the first hop, the `source` and the `origin` must have the same content.
optional source = 1
The source of a network activity, such as starting a TCP connection. In a multi hop network activity, the source represents the sender of the last hop.
optional destination = 2
The destination of a network activity, such as accepting a TCP connection. In a multi hop network activity, the destination represents the receiver of the last hop.
optional request = 3
Represents a network request, such as an HTTP request.
optional response = 4
Represents a network response, such as an HTTP response.
optional resource = 5
Represents a target resource that is involved with a network activity. If multiple resources are involved with an activity, this must be the primary one.
optional api = 6
Represents an API operation that is involved to a network activity.
message
attribute_context.proto:74This message defines attributes associated with API operations, such as a network API request. The terminology is based on the conventions used by Google APIs, Istio, and OpenAPI.
Used in:
string service = 1
The API service name. It is a logical identifier for a networked API, such as "pubsub.googleapis.com". The naming syntax depends on the API management system being used for handling the request.
string operation = 2
The API operation name. For gRPC requests, it is the fully qualified API method name, such as "google.pubsub.v1.Publisher.Publish". For OpenAPI requests, it is the `operationId`, such as "getPet".
string protocol = 3
The API protocol used for sending the request, such as "http", "https", "grpc", or "internal".
string version = 4
The API version associated with the API operation above, such as "v1" or "v1alpha1".
message
attribute_context.proto:97This message defines request authentication attributes. Terminology is based on the JSON Web Token (JWT) standard, but the terms also correlate to concepts in other standards.
Used in:
string principal = 1
The authenticated principal. Reflects the issuer (`iss`) and subject (`sub`) claims within a JWT. The issuer and subject should be `/` delimited, with `/` percent-encoded within the subject fragment. For Google accounts, the principal format is: "https://accounts.google.com/{id}"
repeated string audiences = 2
The intended audience(s) for this authentication information. Reflects the audience (`aud`) claim within a JWT. The audience value(s) depends on the `issuer`, but typically include one or more of the following pieces of information: * The services intended to receive the credential such as ["pubsub.googleapis.com", "storage.googleapis.com"] * A set of service-based scopes. For example, ["https://www.googleapis.com/auth/cloud-platform"] * The client id of an app, such as the Firebase project id for JWTs from Firebase Auth. Consult the documentation for the credential issuer to determine the information provided.
string presenter = 3
The authorized presenter of the credential. Reflects the optional Authorized Presenter (`azp`) claim within a JWT or the OAuth client id. For example, a Google Cloud Platform client id looks as follows: "123456789012.apps.googleusercontent.com".
optional claims = 4
Structured claims presented with the credential. JWTs include `{key: value}` pairs for standard and private claims. The following is a subset of the standard required and optional claims that would typically be presented for a Google-based JWT: {'iss': 'accounts.google.com', 'sub': '113289723416554971153', 'aud': ['123456789012', 'pubsub.googleapis.com'], 'azp': '123456789012.apps.googleusercontent.com', 'email': 'jsmith@example.com', 'iat': 1353601026, 'exp': 1353604926} SAML assertions are similarly specified, but with an identity provider dependent structure.
repeated string access_levels = 5
A list of access level resource names that allow resources to be accessed by authenticated requester. It is part of Secure GCP processing for the incoming request. An access level string has the format: "//{api_service_name}/accessPolicies/{policy_id}/accessLevels/{short_name}" Example: "//accesscontextmanager.googleapis.com/accessPolicies/MY_POLICY_ID/accessLevels/MY_LEVEL"
message
attribute_context.proto:50This message defines attributes for a node that handles a network request. The node can be either a service or an application that sends, forwards, or receives the request. Service peers should fill in `principal` and `labels` as appropriate.
Used in: ,
string ip = 1
The IP address of the peer.
int64 port = 2
The network port of the peer.
map<string, string> labels = 6
The labels associated with the peer.
string principal = 7
The identity of this peer. Similar to `Request.auth.principal`, but relative to the peer instead of the request. For example, the idenity associated with a load balancer that forwared the request.
string region_code = 8
The CLDR country/region code associated with the above IP address. If the IP address is private, the `region_code` should reflect the physical location where this peer is running.
message
attribute_context.proto:157This message defines attributes for an HTTP request. If the actual request is not an HTTP request, the runtime system should try to map the actual request to an equivalent HTTP request.
Used in: ,
string id = 1
The unique ID for a request, which can be propagated to downstream systems. The ID should have low probability of collision within a single day for a specific service.
string method = 2
The HTTP request method, such as `GET`, `POST`.
map<string, string> headers = 3
The HTTP request headers. If multiple headers share the same key, they must be merged according to the HTTP spec. All header keys must be lowercased, because HTTP header keys are case-insensitive.
string path = 4
The HTTP URL path.
string host = 5
The HTTP request `Host` header value.
string scheme = 6
The HTTP URL scheme, such as `http` and `https`.
string query = 7
The HTTP URL query in the format of `name1=value1&name2=value2`, as it appears in the first line of the HTTP request. No decoding is performed.
optional time = 9
The timestamp when the `destination` service receives the first byte of the request.
int64 size = 10
The HTTP request size in bytes. If unknown, it must be -1.
string protocol = 11
The network protocol used with the request, such as "http/1.1", "spdy/3", "h2", "h2c", "webrtc", "tcp", "udp", "quic". See https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml#alpn-protocol-ids for details.
string reason = 12
A special parameter for request reason. It is used by security systems to associate auditing information with a request.
optional auth = 13
The request authentication. May be absent for unauthenticated requests. Derived from the HTTP request `Authorization` header or equivalent.
message
attribute_context.proto:228This message defines core attributes for a resource. A resource is an addressable (named) entity provided by the destination service. For example, a file stored on a network storage service.
Used in: ,
string service = 1
The name of the service that this resource belongs to, such as `pubsub.googleapis.com`. The service may be different from the DNS hostname that actually serves the request.
string name = 2
The stable identifier (name) of a resource on the `service`. A resource can be logically identified as "//{resource.service}/{resource.name}". The differences between a resource name and a URI are: * Resource name is a logical identifier, independent of network protocol and API version. For example, `//pubsub.googleapis.com/projects/123/topics/news-feed`. * URI often includes protocol and version information, so it can be used directly by applications. For example, `https://pubsub.googleapis.com/v1/projects/123/topics/news-feed`. See https://cloud.google.com/apis/design/resource_names for details.
string type = 3
The type of the resource. The syntax is platform-specific because different platforms define their resources differently. For Google APIs, the type format must be "{service}/{kind}".
map<string, string> labels = 4
The labels or tags on the resource, such as AWS resource tags and Kubernetes resource labels.
message
attribute_context.proto:208This message defines attributes for a typical network response. It generally models semantics of an HTTP response.
Used in:
int64 code = 1
The HTTP response status code, such as `200` and `404`.
int64 size = 2
The HTTP response size in bytes. If unknown, it must be -1.
map<string, string> headers = 3
The HTTP response headers. If multiple headers share the same key, they must be merged according to HTTP spec. All header keys must be lowercased, because HTTP header keys are case-insensitive.
optional time = 4
The timestamp when the `destination` service generates the first byte of the response.