First off, I'll admit that I'm not even sure I'm going down the right path with the right questions. I've been thrown into the deep end as my company moves into GCP and am learning on the fly.
The situation I've got is a developer was able to use a token from another user to perform some work. What is really bad is the owner of the token left the company awhile ago. In admin.google.com I verified the user is suspended which shows me that our AD integration is working.
My assumption is the old user was issued a token somewhere with a very long and unacceptable time to live. Which leads me to two questions. The first is there a way I can find any and all tokens issued to this user? The second is if I'm going to be going down this rabbit hole, is there a way I can search for all long lived tokens?
I'm hoping for a gcloud solution that I can script out for formatting and any parsing I might need to do to get useable/human readable formatting without lots of extra inforamtion.
6 Related questions 5 Google Cloud Bearer Token Expiry 1 How to get a valid token to use GCP Data Loss Prevention API on a local machine were SDK is installed? 0 GCP service Account Authentication Related questions 5 Google Cloud Bearer Token Expiry 1 How to get a valid token to use GCP Data Loss Prevention API on a local machine were SDK is installed? 0 GCP service Account Authentication 4 Longer lasting user credentials with gcloud auth? Prevent expiration? 0 How to set custom expiry to service-to-service authentication token in GCP 1 Refresh Token GCP 2 Google cloud: Expiration of Bearer token 0 How to generate permanent access token for GCP APIs? 0 Is a GCP access token valid for as long as the corresponding service account is? 2 How to authenticate with gcloud using just access token? Load 7 more related questions Show fewer related questions Reset to default
