```
$ go run web-identity.go -cid 204367807228-ok7601k6gj1pgge7m09h7d79co8p35xx.apps.googleusercontent.com -csec XsT_PgPdT1nO9DD45rMLJw7G
2018/12/26 17:49:36 listening on http://localhost:8080/
```

> NOTE: for a reasonable test outcome, make sure the assumed user has at least permission/policy to list all buckets. That policy would look like below:

```
{

	// StateShutdown is the state when the server has been shut down.
	// This will not be used under normal operation.
	StateShutdown

	// MaxDeadline is the maximum deadline allowed,
	// Approx 49 days.
	MaxDeadline = time.Duration(math.MaxUint32) * time.Millisecond
)

// ContextDialer is a dialer that can be used to dial a remote.

IfNotPresent imagePullSecrets: [] # - name: "image-pull-secret" ## Set default image, imageTag, and imagePullPolicy for the `mc` (the minio ## client used to create a default bucket). ## mcImage: repository: quay.io/minio/mc tag: RELEASE.2024-01-11T05-49-32Z pullPolicy: IfNotPresent ## minio mode, i.e. standalone or distributed mode: distributed ## other supported values are "standalone" ## Additional labels to include with deployment or statefulset additionalLabels: {} ## Additional annotations to...

	{String: "ceb8853ddc5086cc4ab9e149f8f09c88-1", ETag: ETag{206, 184, 133, 61, 220, 80, 134, 204, 74, 185, 225, 73, 248, 240, 156, 136, 45, 49}},   // 3
	{String: `"ceb8853ddc5086cc4ab9e149f8f09c88-2"`, ETag: ETag{206, 184, 133, 61, 220, 80, 134, 204, 74, 185, 225, 73, 248, 240, 156, 136, 45, 50}}, // 4
	{ // 5

	_ = x[ErrRemoteTargetNotFoundError-45]
	_ = x[ErrReplicationRemoteConnectionError-46]
	_ = x[ErrReplicationBandwidthLimitError-47]
	_ = x[ErrBucketRemoteIdenticalToSource-48]
	_ = x[ErrBucketRemoteAlreadyExists-49]
	_ = x[ErrBucketRemoteLabelInUse-50]
	_ = x[ErrBucketRemoteArnTypeInvalid-51]
	_ = x[ErrBucketRemoteArnInvalid-52]
	_ = x[ErrBucketRemoteRemoveDisallowed-53]
	_ = x[ErrRemoteTargetNotVersionedError-54]