service · inferred from evidence
Application Default Credentials
Google's authentication mechanism for cloud services using default credentials.
- GCS getSignedUrl fails: Cannot sign data without client_email
The recommended path is service-account impersonation for signing: create a dedicated service account, grant the caller the IAM Service Account Token Creator role on it, and let the SDK sign through the IAM API instead of a local key. Users