in users-refresher-lambda/src/index.ts [90:105]
await pinboardSecretPromiseGetter(
`google/${STAGE === "PROD" ? "PROD" : "CODE"}/serviceAccountKey`
)
);
const auth = new googleAuth.JWT({
key: googleServiceAccountDetails.private_key,
scopes: [
"https://www.googleapis.com/auth/directory.readonly",
"https://www.googleapis.com/auth/admin.directory.user.readonly",
"https://www.googleapis.com/auth/admin.directory.group.readonly",
"https://www.googleapis.com/auth/admin.directory.group.member.readonly",
],
email: googleServiceAccountDetails.client_email,
subject: await pinboardSecretPromiseGetter("google/authSubject"),
});