Cody Oss

We do plan to support otel in the future, but I don't have a timeline on when this will be. We will need to make sure we don't break existing...

@antoinedeschenes You can kind of due this today with: https://pkg.go.dev/google.golang.org/api/option#WithHTTPClient

Thanks for the feature request!

Are you trying to create an idtoken from an impersonated service account? If so I would recommend this method in the impersonate package: [IDTokenSource](https://pkg.go.dev/google.golang.org/api/impersonate#IDTokenSource).

This should now be supported by the underlying oauth2 package: https://pkg.go.dev/golang.org/x/oauth2/google#hdr-Workload_Identity_Federation

That package should not need to be exported. Methods like [CredentialsFromJSON](https://pkg.go.dev/golang.org/x/oauth2/google#CredentialsFromJSON) will now do the right thing [if the type](https://github.com/golang/oauth2/blob/6f1e6394065a17f7c4e686dad23e06b6843e20e0/google/google.go#L167-L180) is an `"external_account"`.

> CredentialsFromJSON is not flexible because it processes STS subject token only from file path or URL. Could you provide some psudocode for how you would envision working with with...

@zimnx Can you please create an issue for this PR. We like to discuss features on issues before implementing them. Thanks!

@zimnx Thanks!

Also related: #320.