Class GoogleAccountProperty

java.lang.Object
hudson.model.UserProperty
io.jenkins.plugins.googlegroupsoauth.GoogleAccountProperty
All Implemented Interfaces:
ExtensionPoint, Describable<UserProperty>, ReconfigurableDescribable<UserProperty>

@Restricted(org.kohsuke.accmod.restrictions.NoExternalUse.class) public class GoogleAccountProperty extends UserProperty
Binds a Jenkins user record to the Google account that signs in with its email, and records when that account last signed in. Maintained only by GoogleGroupsSecurityRealm; there is no UI.
  • getSubject() is the ID token sub claim, Google's stable account id. User ids are emails, and Google can reassign an email to a different account (deleted user, reused address). Without this binding the new account would inherit the old record's API tokens, user-scoped credentials and user: grants.
  • getLastLoginMillis() bounds how long group authorities recorded at login are trusted for API-token requests (see GoogleGroupsSecurityRealm.getGroupAuthorityMaxAgeDays()).
  • Constructor Details

    • GoogleAccountProperty

      public GoogleAccountProperty(@NonNull String subject, long lastLoginMillis)
  • Method Details