gcloud alpha iam oauth-clients create - create an OAuth client

gcloud alpha iam oauth-clients create(OAUTH_CLIENT :--location=LOCATION)--allowed-grant-types=[ALLOWED_GRANT_TYPES,…]--allowed-redirect-uris=[ALLOWED_REDIRECT_URIS,…]--allowed-scopes=[ALLOWED_SCOPES,…]--client-type=CLIENT_TYPE[--description=DESCRIPTION][--disabled][--display-name=DISPLAY_NAME][GCLOUD_WIDE_FLAG …]

Oauth client resource - The OAuth client to create. The arguments in this groupcan be used to specify the attributes of this resource. (NOTE) Some attributesare not given arguments in this group but can be set in other ways.

To set theproject attribute:

• provide the argumentoauth_client on the command line with a fullyspecified name;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

OAUTH_CLIENT

ID of the oauth client or fully qualified identifier for the oauth client.

To set theoauth_client attribute:

• provide the argumentoauth_client on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--location=LOCATION

The location name.

To set thelocation attribute:

• provide the argumentoauth_client on the command line with a fullyspecified name;
• provide the argument--location on the command line.

--allowed-grant-types=[ALLOWED_GRANT_TYPES,…]

A list of OAuth grant types that are allowed for the OAuth client.

The following grant types are currently supported:

• authorization-code-grant

• refresh-token-grant

--allowed-redirect-uris=[ALLOWED_REDIRECT_URIS,…]

A list of redirect uris that is allowed for redirecting when the authorizationis completed.

--allowed-scopes=[ALLOWED_SCOPES,…]

A list of scopes that the OAuth client is allowed to request during OAuth flows.

The following scopes are currently supported:

• https://www.googleapis.com/auth/cloud-platform: View, edit,configure, and delete your Google Cloud data, and view the email address foryour Google Account.

• openid: Associate you with your personal info on Google Cloud.

• email: The OAuth client can read a federated identity's emailaddress.

• groups: The OAuth client can read a federated identity's groups.

--client-type=CLIENT_TYPE

The type of OAuth client.CLIENT_TYPE must be one of:confidential-client,public-client.

--description=DESCRIPTION

A description of the OAuth client. Cannot exceed 256 characters.

--disabled

Disables the OAuth client. You cannot use a disabled OAuth client for login.Include--no-disabled to enable a disabled OAuth client.

--display-name=DISPLAY_NAME

A display name for the OAuth client. Cannot exceed 32 characters.

Run$gcloud help for details.