| Age | Commit message (Collapse) | Author |
|---|
|
Change-Id: Ic66772c89fe75b22e4eee05dc6d7c2a1653db8d0
|
|
Change-Id: Ic9060320a958e1a5655b1b426ef36f61b01d7ddd
|
|
5908c1292b am: 9fd4945fa5 am: 2161ba6ce1
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/2221605
Change-Id: I3468b24cb047315a19a0b4eae2758b547751830b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
|
|
5908c1292b am: 9fd4945fa5
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/2221605
Change-Id: If2c13fc0625230f3806f4d6d1929d3ec936e5fca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
|
|
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/2221605
Change-Id: If63c5f35a293daac9ac7a86d74cf57ac10b7a9bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
|
|
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/2221605
Change-Id: I8bb4db3c3de3eb62e9b5cc9e2411f2bdfae1a0f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
|
|
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/2221605
Change-Id: If3b5ec2dad863c446eede8de170dc3ed29eb25a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
|
|
Bug: 245854393
Test: presubmit
Change-Id: I6a19142f5033f21527b1b7d55591da806209cfc0
|
|
Change-Id: Iaf07644a12d953efdad1c143ed5ba7115544fb85
|
|
Change-Id: I150686cf277d650ff35d41dbf932d818ac33c758
|
|
Change-Id: I9608afb8dfdfb6ffad014cce527f0ccc6739c4c0
|
|
am: 2366dfe79e am: 8078aea678 am: 8fca5b1f34 am: 972fa47c70
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/1937917
Change-Id: I012017698b2fa4db73b46e7cde5927c9c46f2a69
|
|
am: 2366dfe79e am: 8078aea678 am: 8fca5b1f34
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/1937917
Change-Id: Id30be00ebc0d658983ddca1d3cb61f7319431e61
|
|
am: 2366dfe79e am: 8078aea678
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/1937917
Change-Id: I80415d0d4ea50f0884b9c554338a13c98774cc80
|
|
am: 2366dfe79e
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/1937917
Change-Id: I0d881c0c2f81cb4d6c20c60b2634ba1aed92f248
|
|
Change-Id: Ib22498f4fa0005214a494711d62af5fa06909850
|
|
Added SPDX-license-identifier-Apache-2.0 to:
Android.bp
Bug: 68860345
Bug: 151177513
Bug: 151953481
Test: m all
Change-Id: Ie7f353530fb8c36a250ffd273837160dce4d51d0
|
|
8c673285f7 am: ca3e33f7be am: 04509f38f6 am: 0cde34acd6
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/1930534
Change-Id: I0b7c50e44564504b0d09e146713e368e7d632dca
|
|
8c673285f7 am: ca3e33f7be am: 04509f38f6
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/1930534
Change-Id: I32d9bcc9474b32fb3c62f16fc754427c2c03709b
|
|
8c673285f7 am: ca3e33f7be
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/1930534
Change-Id: I4efa7e6b9e5e815be712ad6071d94b9b373ab77f
|
|
Original change: https://android-review.googlesource.com/c/platform/external/python/google-auth-library-python/+/1930534
Change-Id: I63201633a4b26c75d30d22e9bc937c3c2ca7a7d5
|
|
Inital commit of google-auth-library-python 2.3.3 with history
Added:
- Android.bp
- MODULE_LICENSE_APACHE2
- NOTICE
- METADATA
Bug: 154879379
Bug: 209653360
Test: None
Change-Id: Id05bf27857ef5ce5ec9010fc0507acc9b994530f
|
|
|
|
:robot: I have created a release \*beep\* \*boop\*
---
### [2.3.3](https://www.github.com/googleapis/google-auth-library-python/compare/v2.3.2...v2.3.3) (2021-11-01)
### Bug Fixes
* add fetch_id_token_credentials ([#866](https://www.github.com/googleapis/google-auth-library-python/issues/866)) ([8f1e9cf](https://www.github.com/googleapis/google-auth-library-python/commit/8f1e9cfd56dbaae0dff64499e1d0cf55abc5b97e))
* fix error in sign_bytes ([#905](https://www.github.com/googleapis/google-auth-library-python/issues/905)) ([ef31284](https://www.github.com/googleapis/google-auth-library-python/commit/ef3128474431b07d1d519209ea61622bc245ce91))
* use 'int.to_bytes' and 'int.from_bytes' for py3 ([#904](https://www.github.com/googleapis/google-auth-library-python/issues/904)) ([bd0ccc5](https://www.github.com/googleapis/google-auth-library-python/commit/bd0ccc5fe77d55f7a19f5278d6b60587c393ee3c))
---
This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
|
|
* fix: fix error in sign_bytes
* fix test
|
|
|
|
|
|
|
|
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
Co-authored-by: Bu Sun Kim <8822365+busunkim96@users.noreply.github.com>
|
|
* chore: update authorized_user.json
* chore: use latest sphinx
* 🦉 Updates from OwlBot
See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md
Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
|
|
Source-Link: https://github.com/googleapis/synthtool/commit/694118b039b09551fb5d445fceb361a7dbb06400
Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-python:latest@sha256:ec49167c606648a063d1222220b48119c912562849a0528f35bfb592a9f72737
Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
|
|
|
|
|
|
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
|
|
* fix: add back python 2.7 for gcloud
* fix: fix setup and tests
* fix: add enum34 for python 2.7
* fix: add app engine app and fix noxfile
* fix: move test_app_engine.py
* fix: fix downscoped
* fix: fix downscoped
* fix: remove py2 from classifiers
|
|
* Clean docs up
* Update google/auth/environment_vars.py
Co-authored-by: arithmetic1728 <58957152+arithmetic1728@users.noreply.github.com>
|
|
* test: list unit test reqs in requirements.txt file
* chore: update authorized_user.json
|
|
|
|
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
|
|
|
|
|
|
* build: use trampoline_v2 for python samples and allow custom dockerfile
Source-Link: https://github.com/googleapis/synthtool/commit/a7ed11ec0863c422ba2e73aafa75eab22c32b33d
Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-python:latest@sha256:6e7328583be8edd3ba8f35311c76a1ecbc823010279ccb6ab46b7a76e25eafcc
* chore: add trampolinerc
Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
Co-authored-by: Bu Sun Kim <busunkim@google.com>
|
|
While service account impersonation is uncommonly used with workforce
pool external credentials, there is a bug where the following commands
raise exceptions when impersonated workforce pools are used:
- `google.auth.default()`
- `google.auth.load_credentials_from_file()`
The issue is due to `google.auth.aws.Credentials` not supporting the
`workforce_pool_user_project` argument in the constructor, unlike
`google.auth.identity_pool.Credentials`.
This was indirectly passed here:
https://github.com/googleapis/google-auth-library-python/blob/a37ff00d7afd6c7aac2d0fab29e05708bbc068be/google/auth/external_account.py#L395
Causing a TypeError to be raised (we only catch ValueError).
Updated the credential determination logic to explicitly check the
subject token type. This is a more reliable indicator instead of a
try/catch.
Increased unit test coverage in tests/test__default.py to cover these
credentials.
|
|
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
Co-authored-by: arithmetic1728 <58957152+arithmetic1728@users.noreply.github.com>
|
|
|
|
|
|
:robot: I have created a release \*beep\* \*boop\*
---
## [2.2.0](https://www.github.com/googleapis/google-auth-library-python/compare/v2.1.0...v2.2.0) (2021-09-21)
### Features
* add support for workforce pool credentials ([#868](https://www.github.com/googleapis/google-auth-library-python/issues/868)) ([993bab2](https://www.github.com/googleapis/google-auth-library-python/commit/993bab2aaacf3034e09d9f0f25d36c0e815d3a29))
---
This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
|
|
|
|
Workforce pools (external account credentials for non-Google users) are
organization-level resources which means that issued workforce pool tokens
will not have any client project ID on token exchange as currently designed.
"To use a Google API, the client must identify the application to the server.
If the API requires authentication, the client must also identify the principal
running the application."
The application here is the client project. The token will identify the user
principal but not the application. This will result in APIs rejecting requests
authenticated with these tokens.
Note that passing a `x-goog-user-project` override header on API request is
still not sufficient. The token is still expected to have a client project.
As a result, we have extended the spec to support an additional
`workforce_pool_user_project` for these credentials (workforce pools) which will
be passed when exchanging an external token for a Google Access token. After the
exchange, the issued access token will use the supplied project as the client
project. The underlying principal must still have `serviceusage.services.use`
IAM permission to use the project for billing/quota.
This field is not needed for flows with basic client authentication (e.g. client
ID is supplied). The client ID is sufficient to determine the client project and
any additionally supplied `workforce_pool_user_project` value will be ignored.
Note that this feature is not usable yet publicly.
The additional field has been added to the abstract external account credentials
`google.auth.external_account.Credentials` and the subclass
`google.auth.identity_pool.Credentials`.
|
|
|
