funcAddAuthorizationMiddleware(client*http.Client,creds*auth.Credentials)error

funcNewClient(opts*Options)(*http.Client,error)

funcSetAuthHeader(token*auth.Token,req*http.Request)

typeClientCertProvider=func(*tls.CertificateRequestInfo)(*tls.Certificate,error)

typeInternalOptionsstruct{// EnableJWTWithScope specifies if scope can be used with self-signed JWT.EnableJWTWithScopebool// DefaultAudience specifies a default audience to be used as the audience// field ("aud") for the JWT token authentication.DefaultAudiencestring// DefaultEndpointTemplate combined with UniverseDomain specifies the// default endpoint.DefaultEndpointTemplatestring// DefaultMTLSEndpoint specifies the default mTLS endpoint.DefaultMTLSEndpointstring// DefaultScopes specifies the default OAuth2 scopes to be used for a// service.DefaultScopes[]string// SkipValidation bypasses validation on Options. It should only be used// internally for clients that need more control over their transport.SkipValidationbool// SkipUniverseDomainValidation skips the verification that the universe// domain configured for the client matches the universe domain configured// for the credentials. It should only be used internally for clients that// need more control over their transport. The default is false.SkipUniverseDomainValidationbool}

typeOptionsstruct{// DisableTelemetry disables default telemetry (OpenTelemetry). An example// reason to do so would be to bind custom telemetry that overrides the// defaults.DisableTelemetrybool// DisableAuthentication specifies that no authentication should be used. It// is suitable only for testing and for accessing public resources, like// public Google Cloud Storage buckets.DisableAuthenticationbool// Headers are extra HTTP headers that will be appended to every outgoing// request.Headershttp.Header// BaseRoundTripper overrides the base transport used for serving requests.// If specified ClientCertProvider is ignored.BaseRoundTripperhttp.RoundTripper// Endpoint overrides the default endpoint to be used for a service.Endpointstring// APIKey specifies an API key to be used as the basis for authentication.// If set DetectOpts are ignored.APIKeystring// Credentials used to add Authorization header to all requests. If set// DetectOpts are ignored.Credentials*auth.Credentials// ClientCertProvider is a function that returns a TLS client certificate to// be used when opening TLS connections. It follows the same semantics as// crypto/tls.Config.GetClientCertificate.ClientCertProviderClientCertProvider// DetectOpts configures settings for detect Application Default// Credentials.DetectOpts*detect.DetectOptions// UniverseDomain is the default service domain for a given Cloud universe.// The default value is "googleapis.com". This is the universe domain// configured for the client, which will be compared to the universe domain// that is separately configured for the credentials.UniverseDomainstring// Logger is used for debug logging. If provided, logging will be enabled// at the loggers configured level. By default logging is disabled unless// enabled by setting GOOGLE_SDK_GO_LOGGING_LEVEL in which case a default// logger will be used. Optional.Logger*slog.Logger// InternalOptions are NOT meant to be set directly by consumers of this// package, they should only be set by generated client code.InternalOptions*InternalOptions}