salrashid123

Allow supplying external crypto.Signer for TLS signature

4

## Summary Allow users to supply a [crypto.Signer](https://pkg.go.dev/crypto#Signer) implementation instead of an actual private key to [dtls.v2.Config](https://godocs.io/github.com/pion/dtls/v2#Config). This would allow an abstration allowing customers to use keys embedded into hardware...

Authenticating to GCP now supports various types of federation from AWS, Azure and generic oidc providers. Basically, a customer can run this fluentd plugin in any of those enviornments without...

Support for deterministic containers

6

I'm evaluating buck2 with the specific intent to generate container images that are deterministic i do know you can do this with bazel and in golang with [ko](https://github.com/ko-build/ko): - https://blog.bazel.build/2015/07/28/docker_build.html...

This is more of a question about why you can set `sensitivedataorigin` while importing an external key `tpm2_import`. pg 63: "8.3.3.5 Bit[5] – sensitiveDataOrigin" [here](https://trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf) AFAIK, you should only be...

Issue with PubSub client using provided JWTAccess

6

`JWTAccess` clients not used with pubsub The following snippet constructs a jwtaccess token client and then tries to apply that as an `authClient` to pubsub ```javascript const {GoogleAuth, JWTAccess, OAuth2Client}...

Allow setting metadata environment variable `GCE_METADATA_HOST` alone

1

If users want to set a custom metadata server endpoint, you have to use *both* [GCE_METADATA_IP](https://github.com/googleapis/google-auth-library-python/blob/main/google/auth/environment_vars.py#L59) and [GCE_METADATA_HOST](https://github.com/googleapis/google-auth-library-python/blob/main/google/auth/environment_vars.py#L47). The IP based env var is used [here](https://github.com/googleapis/google-auth-library-python/blob/main/google/auth/compute_engine/_metadata.py#L129) to ping the address...

Allow google.auth.impersonated_credentials ability to domain-delegate

4

This is a really rare usecase but filing it for the record and api surface parity with golang. in some usecases, i would like to impersonate a service account **AND**...

'encode' error when using secure_authorized_channel with google.auth.transport.requests.Request

1

Manually setting an `secure_authorized_channel` with a `google.auth.transport.requests.Request()` object results in the error shown above. The snippet below attemtps to create a `secure_authorized_channel` as shown in the docs [here](https://google-auth.readthedocs.io/en/master/reference/google.auth.transport.grpc.html#google.auth.transport.grpc.secure_authorized_channel) but when...

Allow StaticCredential for google-auth-python

1

The now deprecated oauth2client library allowed for a static credential source https://oauth2client.readthedocs.io/en/latest/source/oauth2client.client.html with that, i could 'just embed' an `access_token` i may have acquired by any other means (eg downscoped_token,...

PubSub client does not read domain delegated credentials

2

Credentials that are enabled for domain delegation is ignored with google-cloud-Pubsub (and possibly other gRPC based service clients). THis is a relatively rare usecase but consider the snippet below. the...