# GCP - ClientAuthConfig Privesc

{{#include ../../../banners/hacktricks-training.md}}

### OAuth ブランドとクライアントの作成

[**According to the docs**](https://cloud.google.com/iap/docs/programmatic-oauth-clients)、これらが必要な権限です：

- `clientauthconfig.brands.list`
- `clientauthconfig.brands.create`
- `clientauthconfig.brands.get`
- `clientauthconfig.clients.create`
- `clientauthconfig.clients.listWithSecrets`
- `clientauthconfig.clients.getWithSecret`
- `clientauthconfig.clients.delete`
- `clientauthconfig.clients.update`

<details><summary>OAuth ブランドとクライアントを作成</summary>
```bash
# Create a brand
gcloud iap oauth-brands list
gcloud iap oauth-brands create --application_title=APPLICATION_TITLE --support_email=SUPPORT_EMAIL
# Create a client of the brand
gcloud iap oauth-clients create projects/PROJECT_NUMBER/brands/BRAND-ID --display_name=NAME
```
</details>

{{#include ../../../banners/hacktricks-training.md}}
