google-cloud-rust icon indicating copy to clipboard operation
google-cloud-rust copied to clipboard

Customizable Request Client for URL Sourced Credentials

Open sai-sunder-s opened this issue 7 months ago • 3 comments

We have a customer interested in using URL-sourced credentials, but they must have the capability to modify the reqwest client to append kerberos headers.

sai-sunder-s avatar May 21 '25 19:05 sai-sunder-s

I think this is a dup of #2194 . Do you mind checking and if not, explaining the difference?

coryan avatar May 21 '25 20:05 coryan

I believe the customer needed two things:

  • A way to pass the kerberos header in the subject token request. They mentioned they do this in other languages they use through the configurable requests exposed by the library.
  • Use openssl instead of rustls. #2194 covers this.

I do not believe supporting openssl alone is sufficient for them to use kerberos. We would have to check with them to understand their requirement/scenario better.

sai-sunder-s avatar May 21 '25 20:05 sai-sunder-s

Ack, thanks.

coryan avatar May 21 '25 20:05 coryan

Supported through Programmatic Sourced Credentials implemented in #2541

sai-sunder-s avatar Jul 01 '25 19:07 sai-sunder-s