* Add optional account association for Authorized User
credentials.
* Allow custom universe domain for gce creds
* Conditionally import requests only if no request was passed
by the caller.
- update to 2.26.2:
* Read universe_domain for external account authorized user
- update to 2.26.1:
* Ensure that refresh worker is pickle-able.
- update to 2.26.0:
* Add optional non blocking refresh for sync auth code
* Add optional non blocking refresh for sync auth code
* External account user cred universe domain support
* Guard delete statements. Add default fallback for
_use_non_blocking_refresh.
- update to 2.25.2:
* Fix user cred universe domain issue
- update to 2.25.1:
* Fix vm universe_domain bug
- update to 2.25.0:
* Add custom tls signer for ECP Provider.
* Add custom tls signer for ECP Provider.
* Add with_universe_domain
* Fixes issue where Python37DeprecationWarning cannot be
filtered
- update to 2.24.0:
* Add support for Python 3.12
* Add universe domain support for VM cred
* Modify the token refresh window
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=84
- Update to 2.21.0
* Add framework for BYOID metrics headers (#1332)
* Pypy unit test build (#1335)
- from version 2.20.0
* Add public API load_credentials_from_dict (#1326)
* Expiry in compute_engine.IDTokenCredentials (#1327), closes (#1323)
* Expiry in impersonated_credentials.IDTokenCredentials (#1330)
* Invalid `dev` version identifiers in `setup.py` (#1322), closes (#1321)
- from version 2.19.1
* Check id token error response (#1315)
* Fix "AttributeError: 'str' object has no attribute 'get'" (dac7cc3)
* Replacing abc.com with example.com (dac7cc3)
- from version 2.19.0
* Add metrics (part 1) (#1298)
* Add metrics (part 2) (#1303)
* Add metrics (part 3) (#1305)
* Expose `universe_domain` for external account creds (#1296)
* Remove python 2.7 from setup.py and nox tests (#1301)
- from version 2.18.1
* Self signed jwt token should be string type (#1294)
- from version 2.18.0
* Add smbios check to detect GCE residency (#1276)
* Universe domain support for service account (#1286)
- Refresh patches for new version
* python-google-auth-no-mock.patch
OBS-URL: https://build.opensuse.org/request/show/1095583
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=64
- Remove no-python3.patch
- Update to 2.17.3:
* Add useEmailAzp claim for id token iam flow (#1270) (7a9c6f2)
- 2.17.2:
* Do not create new JWT credentials if they make the same claims as
the existing. (#1267) (eebb7b6)
- 2.17.1:
* Print out reauth plugin error and raise if challenge output is
None (#1265) (08d22fe)
- 2.17.0:
* Experimental service account iam endpoint flow for id token
(#1258) (8ff0de5)
* Python: Remove aws url validation (#1254) (20a966b)
- 2.16.3:
* Read both applicationId and relyingPartyId. (#1246) (e125dfe)
- 2.16.2:
* Call gcloud config get project to get project for user cred
(#1243) (c078a13)
* Do not use hardcoded string 'python', when you mean
sys.executable. (#1233) (91ac8e6)
* Don't retry if error or error_description is not string (#1241)
(e2d263a)
* Improve ADC related errors and warnings (#1237) (2dfa213)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=60
- Update to 2.16.1
* Add support for python 3.11 (#1212)
* Remove 3PI config url validation (#1220)
* Update the docs generator interpreter to unblock documentation build (#1218)
- from version 2.16.0
* AwsCredentials should not call metadata server if security creds and region
are retrievable through the environment variables (#1195)
* Wrap all python built-in exceptions into library excpetions (#1191)
* Allow get_project_id to take a request (#1203)
* Make OAUTH2.0 client resistant to string type 'expires_in' responses from
non-compliant services (#1208)
- Drop obsolete patches
* ga_python-executable-name.patch
- Refresh patches for new version
* no-python3.patch
OBS-URL: https://build.opensuse.org/request/show/1068671
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=54
- Update to 2.14.0
* Add token_info_url to external account credentials (#1168)
* Read Quota Project from Environment Variable (#1163)
* Adding more properties to external_account_authorized_user (#1169)
- from version 2.13.0
* Adds new external account authorized user credentials (#1160)
* Implement pluggable auth interactive mode (#1131)
* Introduce the functionality to override token_uri in credentials (#1159)
* Adding one more pattern to relax the regex check for sts and
impersonation url endpoints (#1158)
- Refresh patches for new version
* python-google-auth-no-mock.patch
OBS-URL: https://build.opensuse.org/request/show/1034209
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=45
- Update to 2.11.0
* add integration tests for configurable token lifespan (#1103)
* Async certificate retrieving (#1101)
- from version 2.10.0
* add integration tests for pluggable auth (#1073)
* support for configurable token lifetime (0dc6a9a)
* support for configurable token lifetime (#1079)
* async certificate decoding (#1085)
* Async system tests were not unwrapping async_generators (#1086)
* Fix IDTokenCredentials update bug [#1072)
* make expiration_time optional in response schema (#1091)
* refactor credential subclass parameters (#1095)
- from version 2.9.1
* there was a raise missing for throwing exceptions (#1077)
- from version 2.9.0
* pluggable auth support (#1045)
- from version 2.8.0
* add experimental GDCH support (#1044)
- Refresh patches for new version
* python-google-auth-no-mock.patch
* add experimental enterprise cert support
* add experimental GDCH support
* Pluggable auth support
* validate urls for external accounts
* revert experimental GDCH support
* fix changelog header to consistent size
* silence TypeError during tear down stage
* add additional missing import in _default.py
* fix missing import in _default.py
OBS-URL: https://build.opensuse.org/request/show/1001906
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=41
- Update to 2.6.3
Bug Fixes
* change requests lib import place (#1010)
* clean up HTTP session and pool during tear down phase (#1007)
* pin click version and update sys test creds (#1008)
- from version 2.6.2
Bug Fixes
* Rename aws imdsv2 url field and update token lifetime (#982)
Miscellaneous Chores
* let release-please finish the release (#991)
- from version 2.6.1
Bug Fixes
* Add AWS session token to metadata requests (#958)
- from version 2.6.0
Features
* ADC can load an impersonated service account credentials. (#962)
Bug Fixes
* revert "feat: add api key support (#826)
OBS-URL: https://build.opensuse.org/request/show/967831
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=32
- Update to 2.5.0
* ADC can load an impersonated service account credentials. (#965)
- from version 2.4.1
* fix urrlib3 import (gh#googleapis/google-auth-library-python#953)
- from version 2.4.0
* add 'py.typed' declaration (#919)
* add api key support (#826)
* deps: allow cachetools 5.0 for python 3.7+
(gh#googleapis/google-auth-library-python#937)
* fix the message format for metadata server exception
(gh#googleapis/google-auth-library-python#916)
- from version 2.3.3
* add fetch_id_token_credentials (gh#googleapis/google-auth-library-python#866)
* fix error in sign_bytes (gh#googleapis/google-auth-library-python#905)
* use 'int.to_bytes' and 'int.from_bytes' for py3
(gh#googleapis/google-auth-library-python#904)
- from version 2.3.2
* add clock_skew_in_seconds to verify_token functions
(gh#googleapis/google-auth-library-python#894)
- from version 2.3.1
* add back python 2.7 for gcloud usage only
(gh#googleapis/google-auth-library-python#892)
- from version 2.3.0
* add support for Python 3.10 (#882)
* ADC with impersonated workforce pools
(gh#googleapis/google-auth-library-python#877)
- from version 2.2.1
* disable self signed jwt for domain wide delegation
(gh#googleapis/google-auth-library-python#873)
- from version 2.2.0
* add support for workforce pool credentials (#868)
- from version 2.1.0
* Improve handling of clock skew (#858)
* add SAML challenge to reauth
(gh#googleapis/google-auth-library-python#819)
* disable warning if quota project id provided to auth.default()
(gh#googleapis/google-auth-library-python#856)
* rename CLOCK_SKEW and separate client/server user case
(gh#googleapis/google-auth-library-python#863)
- from version 2.0.2
* use 'int.to_bytes' rather than deprecated crypto wrapper
(gh#googleapis/google-auth-library-python#848)
* use int.from_bytes (gh#googleapis/google-auth-library-python#846)
OBS-URL: https://build.opensuse.org/request/show/949379
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=31
- Update to 2.0.1
* normalize AWS paths correctly on windows (#842)
- from version 2.0.0
* drop support for Python 2.7 (#778)
* service account is able to use a private token endpoint (#835)
* downscoping documentation bugs (#830)
* Fix missing space in error message. (#821)
* update user guide/references for downscoped creds (#827)
- from version 1.34.0
* support refresh callable on google.oauth2.credentials.Credentials (#812)
* do not use the GAE APIs on gen2+ runtimes (#807)
- from version 1.33.1
* fallback to source creds expiration in downscoped tokens (#805)
* revert "feat: service account is able to use a private token endpoint (#784)
- from version 1.33.0
* define `CredentialAccessBoundary` classes (#793)
* define `google.auth.downscoped.Credentials` class (#801)
* service account is able to use a private token endpoint (#784)
* fix fetch_id_token credential lookup order to match adc (#748)
* fix code block formatting in 'user-guide.rst' (#794)
- from version 1.32.1
* avoid leaking sub-session created for '_auth_request' (#789)
- from version 1.32.0
* allow scopes for self signed jwt (#776)
- from version 1.31.0
* define useful properties on `google.auth.external_account.Credentials` (#770)
* avoid deleting items while iterating (#772)
- from version 1.30.2
* **dependencies:** add urllib3 and requests to aiohttp extra (#755)
* enforce constraints during unit tests (#760)
OBS-URL: https://build.opensuse.org/request/show/913294
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=30
- Update to 1.24.0
* add Python 3.9 support, drop Python 3.5 support
(gh#googleapis/google-auth-library-python#654)
* avoid losing the original '_include_email' parameter in impersonated
credentials (gh#googleapis/google-auth-library-python#626)
- from version 1.23.0
* Add custom scopes for access tokens from the metadata service
(gh#googleapis/google-auth-library-python#633)
* remove checks for ancient versions of Cryptography
- from version 1.22.1
* move aiohttp to extra as it is currently internal surface
(gh#googleapis/google-auth-library-python#619)
- from version 1.22.0
* add asyncio based auth flow
(gh#googleapis/google-auth-library-python#612)
- from version 1.21.3
* fix expiry for to_json()
(gh#googleapis/google-auth-library-python#589)
- Skip build for python2 as it is not supported anymore and unit tests
can not be run because of unsatisfiable dependencies (mock >= 3.6)
- Add urllib3 to the build requirements needed for testing and remove
cryptography
OBS-URL: https://build.opensuse.org/request/show/860736
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=28
- Update to 1.21.1
* dummy commit to trigger a auto release (#597)
- from version 1.21.0
* add GOOGLE_API_USE_CLIENT_CERTIFICATE support (#592)
- from version 1.20.1
* reduce refresh clock skew to 10 seconds (#581)
* set Content-Type header in the request to signBlob API
to avoid Invalid JSON payload error (#439)
- from version 1.20.0
* Add debug logging that can help with diagnosing auth lib. path (#473)
* Show the transport exception that happened for GCE Metadata (#474)
* **packaging:** add support for Python 3.8 (#569), closes (#568)
- from version 1.19.2
* Revert "fix: migrate signBlob to iamcredentials.googleapis.com" (#563)
- from version 1.19.1
* don't add empty quota project (#560)
- from version 1.19.0
* add quota project to base credentials class (#546)
* check 'iss' in `verify_oauth2_token` (#500)
* migrate signBlob to iamcredentials.googleapis.com (#553)
* remove 3.4 from supported versions list (#549)
- from version 1.18.0
* make ``load_credentials_from_file`` a public method (#530)
* no warning if quota_project_id is given (#537)
OBS-URL: https://build.opensuse.org/request/show/833479
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=24
* follow rfc 7515 : strip padding from JWS segments #324 (#324)
* Add retry to _metadata.ping() (#323)
* Announce deprecation of Python 2.7 (#311)
* Link all the PRs in CHANGELOG (#307)
* Automatically refresh impersonated credentials (#304)
* Add google.auth.impersonated_credentials (#299)
* Enable static type checking with pytype (#298)
* Make classifiers in setup.py an array. (#280)
- Drop oauth-no-appengine.patch should not be needed
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=12
- Raise a helpful exception when trying to refresh credentials without
a refresh token. (#262)
- Fix links to README and CONTRIBUTING in docs/index.rst. (#260)
- Fix a typo in credentials.py. (#256)
- Use pytest instead of py.test per upstream recommendation,
#dropthedot. (#255)
- Fix typo on exemple of jwt usage (#245)
- Drop Flask from Requires. It is only needed for testing
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=6
- New upstream release (bsc#1088358)
+ Version 1.4.1
- Added a check for the cryptography version before attempting to use it.
+ From version 1.4.0
- Added `cryptography`-based RSA signer and verifier.
- Added `google.oauth2.service_account.IDTokenCredentials`.
- Improved documentation around ID Tokens
+ From version 1.3.0
- Added ``google.oauth2.credentials.Credentials.from_authorized_user_file``.
- Dropped direct pyasn1 dependency in favor of letting ``pyasn1-modules``
specify the right version.
- ``default()`` now checks for the project ID environment var before
warning about missing project ID.
- Fixed the docstrings for ``has_scopes()`` and ``with_scopes()``.
- Fixed example in docstring for ``ReadOnlyScoped``.
- Made ``transport.requests`` use timeouts and retries
to improve reliability.
OBS-URL: https://build.opensuse.org/request/show/605113
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-google-auth?expand=0&rev=3
