1c151ff518
- Update to version 2.43.0 * Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#1859) Add public wrapper for check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected. Also, fix check_use_client_cert to return boolean value. Change #1848 added the check_use_client_cert method that helps know if client cert should be used for mTLS connection. However, that was in a private class, thus, created a public wrapper of the same function so that it can be used by python Client Libraries. Also, updated check_use_client_cert to return a boolean value instead of existing string value for better readability and future scope. * Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#1848) The Python SDK will use a hybrid approach for mTLS enablement: * If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set (either true or false), the SDK will respect that setting. This is necessary for test scenarios and users who need to explicitly control mTLS behavior. * If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not set, the SDK will automatically enable mTLS only if it detects Managed Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF) certificate sources. In other cases where the variable is not set, mTLS will remain disabled. ** This change also adds the helper method check_use_client_cert and it's unit test, which will be used for checking the criteria for setting the mTLS to true ** This change is only for Auth-Library, other changes will be created
Markéta Machová2025-11-10 17:02:50 +00:00
2edae15cf3
Accepting request 1315328 from devel:languages:python
Ana Guerrero2025-11-04 17:40:39 +00:00
7f0eb7ddd1
- Update to version 2.42.1 * Catch ValueError for json.loads() (#1842) - from version 2.42.0 * Add trust boundary support for external accounts. (#1809) * Read scopes from ADC json for impersoanted cred (#1820) - Refresh python-google-auth-no-mock.patch
Matej Cepl2025-11-03 14:37:15 +00:00
e21e9d9f67
- Update to version 2.41.1 * Suppress deprecation warning for ADC (#1815) - from version 2.41.0 * Add support for cachetools 6.0 (#1773) * Add trust boundary support for service accounts and impersonation. (#1778) * Deprecating load_credentials_from_dict (58b66ec) * Fix type error in credentials.py for python 3.7 and 3.8 (#1805) * Update user guide to include x509 feature. (#1802) - Refresh patches for new version * python-google-auth-no-mock.patch
John Paul Adrian Glaubitz2025-10-13 08:52:09 +00:00
413d891197
- Update to version 2.40.2 * Remove sync response logs in AuthorizedSession * Update test to consider new error message from cryptography (#1765)
Nico Krapp2025-05-30 07:58:02 +00:00
384672a2f1
Accepting request 1278548 from devel:languages:python
Ana Guerrero2025-05-23 12:27:33 +00:00
42ffe31aeb
Accepting request 1278404 from home:glaubitz:branches:devel:languages:python
Markéta Machová2025-05-20 08:16:44 +00:00
f62a355999
Accepting request 1242604 from devel:languages:python
Ana Guerrero2025-02-04 17:09:46 +00:00
3b28091878
- Update to version 2.38.0 * Adding domain-wide delegation flow in impersonated credential (#1624) (34ee3fe) * Add warnings regarding consuming externally sourced credentials (d049370)
John Paul Adrian Glaubitz2025-02-03 10:03:09 +00:00
aaac06d6f2
Accepting request 1236166 from devel:languages:python
Ana Guerrero2025-01-12 10:10:15 +00:00
26773a3c4f
- Update to version 2.37.0 * Allow users to use jwk keys for verifying ID token (#1641) - from version 2.36.1 * Improve user guide for Impersonation and SA (#1627) - Update BuildRequires and Recommends from setup.py
Markéta Machová2025-01-09 12:17:02 +00:00
4de666e778
Accepting request 1228735 from devel:languages:python
Ana Guerrero2024-12-08 10:36:24 +00:00
fbb0c7ef60
- Update to version 2.36.0 * IAM signblob retries (#1600) * Making IAM endpoint universe-aware (#1604) * Support External Account Authorized User as a Source Credential for impersonated credentials in ADC (#1608) * Adding default parameters to updated interfaces (#1622) * Change universe_domain to universe-domain (#1613) * Remove base class to avoid type conflict (#1619) * Revert templates for iam endpoints (#1614) * Update secret (#1611) * Update secret (#1617) * Update secret (#1621)
Matej Cepl2024-12-06 10:36:02 +00:00
ea96425ea8
Accepting request 1204964 from devel:languages:python
Ana Guerrero2024-10-03 16:00:01 +00:00
38dfc3a89c
- Update to version 2.35.0 * Add cred info to ADC creds (#1587) * Add support for asynchronous AuthorizedSession api (#1577) * Remove token_info call from token refresh path (#1595) - Refresh patches for new version * python-google-auth-no-mock.patch - Updates BuildRequires from setup.py
Markéta Machová2024-10-01 15:50:17 +00:00
1215c29649
Accepting request 1201612 from devel:languages:python
Ana Guerrero2024-09-18 13:26:36 +00:00
95656c2673
- Update to version 2.34.0 * **auth:** Update get_client_ssl_credentials to support X.509 workload certs (#1558) * Retry token request on retryable status code (#1563) - from version 2.33.0 * Implement async StaticCredentials using access tokens (#1559) * Implement base classes for credentials and request sessions (#1551) * **metadata:** Enhance retry logic for metadata server access in _metadata.py (#1545) * Update argument for Credentials initialization (#1557) - Refresh patches for new version * python-google-auth-no-mock.patch
Markéta Machová2024-09-17 12:28:19 +00:00
d1355b60ce
Accepting request 1186602 from devel:languages:python
Ana Guerrero2024-07-11 18:29:24 +00:00
896ff976dd
Accepting request 1186552 from home:glaubitz:branches:devel:languages:python
Matej Cepl2024-07-10 12:31:10 +00:00
95aa5e467f
Accepting request 1186355 from devel:languages:python
Ana Guerrero2024-07-09 18:03:02 +00:00
0735cb4e39
- Obsolete Python 3.6 build for SLE 15 SP4 and openSUSE Leap 15.4 and later
Robert Schweikert2024-03-05 20:47:29 +00:00
c39cbd37f9
- Version update in SLE 15 SP4 and later (jsc#PED-6697)
Robert Schweikert2024-02-26 20:27:52 +00:00
c5c437afa1
Accepting request 1143977 from devel:languages:python
Ana Guerrero2024-02-06 15:32:24 +00:00
5d70b6bf37
- update to 2.27.0: * Add optional account association for Authorized User credentials. * Allow custom universe domain for gce creds * Conditionally import requests only if no request was passed by the caller. - update to 2.26.2: * Read universe_domain for external account authorized user - update to 2.26.1: * Ensure that refresh worker is pickle-able. - update to 2.26.0: * Add optional non blocking refresh for sync auth code * Add optional non blocking refresh for sync auth code * External account user cred universe domain support * Guard delete statements. Add default fallback for _use_non_blocking_refresh. - update to 2.25.2: * Fix user cred universe domain issue - update to 2.25.1: * Fix vm universe_domain bug - update to 2.25.0: * Add custom tls signer for ECP Provider. * Add custom tls signer for ECP Provider. * Add with_universe_domain * Fixes issue where Python37DeprecationWarning cannot be filtered - update to 2.24.0: * Add support for Python 3.12 * Add universe domain support for VM cred * Modify the token refresh window
Dirk Mueller2024-02-04 10:13:52 +00:00
1f08d7742e
Accepting request 1138146 from devel:languages:python
Ana Guerrero2024-01-12 22:44:42 +00:00
0f26e1a684
Accepting request 1138141 from home:glaubitz:branches:devel:languages:python
Markéta Machová2024-01-11 15:12:59 +00:00
06ef50339a
- drop urllib3-2.patch and limit to urllib3 < 2.x as that matches the requires and avoids coinstallability isuses
Dirk Mueller2023-05-27 07:27:00 +00:00
2466116199
- Add urllib3-2.patch to support newer urllib3 -- gh#googleapis/google-auth-library-python#1290 - Remove no-python3.patch - Update to 2.17.3: * Add useEmailAzp claim for id token iam flow (#1270) (7a9c6f2) - 2.17.2: * Do not create new JWT credentials if they make the same claims as the existing. (#1267) (eebb7b6) - 2.17.1: * Print out reauth plugin error and raise if challenge output is None (#1265) (08d22fe) - 2.17.0: * Experimental service account iam endpoint flow for id token (#1258) (8ff0de5) * Python: Remove aws url validation (#1254) (20a966b) - 2.16.3: * Read both applicationId and relyingPartyId. (#1246) (e125dfe) - 2.16.2: * Call gcloud config get project to get project for user cred (#1243) (c078a13) * Do not use hardcoded string 'python', when you mean sys.executable. (#1233) (91ac8e6) * Don't retry if error or error_description is not string (#1241) (e2d263a) * Improve ADC related errors and warnings (#1237) (2dfa213)
Daniel Garcia2023-05-10 07:33:05 +00:00