google-auth-library-python-oauthlib icon indicating copy to clipboard operation
google-auth-library-python-oauthlib copied to clipboard

Ability to read client secrets from an external source like google secret manager

Open kshitij-enable opened this issue 2 years ago • 1 comments

Flow for the client credentials can be instantiated with either 2 methods.

  1. from_client_secrets_file
  2. from_client_config

However, we intend to persist client credentials in an external vault like google secret manager and would like to have an instantiation mechanism by passing the secrets as arguments rather than local file or config.

kshitij-enable avatar Jul 14 '23 07:07 kshitij-enable

Thank you for your request. IIUC, you would like to

  • store client secret in a vault/secret manager
  • have your own code to fetch the secret at run time and provide as parameter
  • provide clientid, type of client, token_uri and any other info held by client_config as parameters

Is there a reason you cannot create a json yourself with all the info and pass it in to from_client_config?

sai-sunder-s avatar Jul 18 '23 17:07 sai-sunder-s