gcp_auth

gcp_auth copied to clipboard

Support audience

2

When invoking Cloud Run endpoints, token needs to have audience of the endpoint url.

aviramha

This triggers a background refresh of the token once the token has less than 60 seconds left before it expires. In addition, it re-works the refresh lock to be either...

superfell

background token refresh

2

We're seeing that refreshing tokens from outside of a GCP env is slow, often around 1 second for us. Because of this we'd like to get the refresh done in...

superfell

Internal improvements (builds on #77)

2

Mostly improving some optional parameters in the key formats The last commit makes some internal improvements. Feel free to accept or reject any individual commit.

msdrigg

Supporting impersonated service count (builds on #76)

1

This PR adds service account impersonation. It uses a generic `Box` to get the source token and then uses that token to refresh the impersonated account from the `service_account_impersonation_url`.

msdrigg

Supporting service account key format OR user credential formats

8

This PR supports parsing both formats in either the `GOOGLE_APPLICATION_CREDENTIALS` env variable or the `~/.config/gcloud/application_default_credentials.json` file. This is part 1 of the PRs addressing #56 For context see https://github.com/hrvolapeter/gcp_auth/pull/75#issuecomment-1683894661

msdrigg

Using GOOGLE_APPLICATION_CREDENTIALS to specify an authorized_user or impersonated_service_account JSON key file giving "missing field `private_key`" error

22

Hi there, thanks for creating this nice package. Does it support all kinds of different key jsons. I tried to use the the json generated via `gcloud auth application-default login`...

liufuyang

Add TokenProvider::email() method

1

Because `TokenProvider` is a trait (and not sealed), this is technically a breaking change. Since there's just been a breaking change a month ago, not sure if we want a...

djc

Adding WASM support

1

First off, thanks djc for your work maintaining not only this crate but throughout the Rust HTTP/TLS ecosystem - your name comes up a lot and it's very much noticed...

sxlijin

Allow overriding the project id for a given TokenProvider

3

In my company's application, we have created different GCP resources in different GCP projects, to allow us to more easily isolate what applications can access which services. We then wish...

MJDSys