google-auth-library-java

google-auth-library-java copied to clipboard

Add support for mTLS workload authentication

1

There is a new way of authenticating in Workload Identity Federation using mTLS (currently in pre-GA stage), that this library doesn't support. There was a pull request with this feature...

stanczykj

rmehta19

This line in javadoc specifies ImpersonatedCredential can only be SA or User Credentials in this `create()` method, but it is not enforced. https://github.com/googleapis/google-auth-library-java/blob/a8d466f3951686ddf0f6a7ae429cab505b337c54/oauth2_http/java/com/google/auth/oauth2/ImpersonatedCredentials.java#L120 For context: https://github.com/googleapis/google-auth-library-java/pull/1566#discussion_r1882521720

zhumin8

see this comment for context: https://github.com/googleapis/google-auth-library-java/pull/1528#discussion_r1801591146 builders are not created with generic types across this repo e.g. https://github.com/googleapis/google-auth-library-java/blob/f154edb3d8503d29f0020b6904dfa40e034ded93/oauth2_http/java/com/google/auth/oauth2/GoogleCredentials.java#L486 This means to allow customer code to use a fluent builder API...

zhumin8