Store, serve and share files in Google Cloud Storage from OutSystems 11, with no Google key to manage.

Upload, download, list, copy, move and delete objects, manage buckets and custom metadata, and create V4 signed URLs, straight from your server actions. Built on the official Google Cloud .NET SDK, open source and covered by automated tests.

Highlights

• Keyless authentication: Workload Identity Federation with your own OIDC identity provider (Entra ID, Okta, Auth0, Keycloak and others), server to server. Service account keys are supported too.
• Safe by default: Google checks every upload's checksum before storing it, a signed URL covers exactly one object, and errors explain what to fix without exposing secrets.
• Built for large buckets: page through results, browse folder by folder, and move big files directly between the browser and Google with signed URLs.
• One credentials record: every action takes the same GCS_Authentication input, so switching method or project changes one record, not your calls.

Features

• Objects: upload, download, list with prefix, folders and paging, check existence, copy, move or rename, delete, and delete a whole folder by prefix.
• Metadata: size, hashes, generation, storage class and timestamps without downloading, plus your own key-value metadata.
• Buckets: create, list, check and delete.
• Signed URLs (V4): download, upload or delete links valid for up to 7 days, optionally locked to one content type.

What's new in 1.7.0

• Hardened keyless access: each caller-supplied token is isolated, expired tokens are rejected up front, and token endpoints must use https and are never followed through redirects.
• Safer operations: Object_Move refuses a move onto itself and guards against concurrent changes; signed URLs require an object name.
• More reliable: accurate "not found" detection, gzip-encoded downloads, and clear network and timeout errors.

A drop-in replacement for 1.6.1, with no changes to actions, inputs or outputs.

Getting started

1. Install the component and add its actions to your module in Manage Dependencies.
2. In Google Cloud, set up Workload Identity Federation (recommended) or a service account with Storage Object Admin.
3. Build one GCS_Authentication record from encrypted Site Properties and pass it to every action.

The full setup guide, with gcloud commands and identity provider examples, is in the Documentation tab and the README on GitHub.

Requirements

• OutSystems 11 (.NET Framework 4.8). Works in Personal Environments.
• A Google Cloud project with Cloud Storage.
• For Workload Identity Federation: an OIDC identity provider that issues signed JWTs, and outbound access from the OutSystems server to your provider, sts.googleapis.com and iamcredentials.googleapis.com.

Source code

Code, tests and changelog are on GitHub: github.com/promonteiro89/google-cloud-storage-connector-o11. Issues and contributions are welcome.