google-auth-library-python icon indicating copy to clipboard operation
google-auth-library-python copied to clipboard

Published 20 hours ago • verified publisher icon googleapis

external_account (Workload Identity) support in _default_async

Open allanlw opened this issue 11 months ago • 1 comments

Currently there is no external_account credentials type support in the load_credentials_from_file function in _default_async.

Attempting to use external_account ADC with _default_async throws a misleading error message:

google.auth.exceptions.DefaultCredentialsError: The file <<REDACTED>> does not have a valid type. Type is external_account, expected one of ('authorized_user', 'service_account', 'external_account', 'external_account_authorized_user', 'impersonated_service_account', 'gdch_service_account').

allanlw avatar Nov 18 '24 09:11 allanlw