in app/com/gu/memsub/auth/common/MemSub.scala [26:39]
def googleGroupCheckerFor(config: Config): GoogleGroupChecker = {
val request = new GetObjectRequest("membership-private", "google-auth-service-account-certificate.json")
AwsS3.fetchObject(AwsS3.client, request).map { stream =>
val googleServiceAccountCredential = ServiceAccountCredentials.fromStream(stream)
stream.close()
val impersonatedUser = config.getString("google.oauth.impersonatedUser")
new GoogleGroupChecker(
impersonatedUser,
googleServiceAccountCredential
)
}.get // created on startup
}