d4d7f3815e0cea3c9f39a5204a4f001de99568e9 - platform/external/python/google-auth-library-python

commit	d4d7f3815e0cea3c9f39a5204a4f001de99568e9	[log] [tgz]
author	bojeil-google <[email protected]>	Tue Feb 16 12:33:20 2021 -0800
committer	GitHub <[email protected]>	Tue Feb 16 13:33:20 2021 -0700
tree	d43c66f38f316fdea6828701304aa7a4ef8c0143
parent	882d0ff28f71c6a22289a8345a24462665a05147 [diff]

feat: workload identity federation support (#698)

Using workload identity federation, applications can access Google Cloud resources from Amazon Web Services (AWS), Microsoft Azure or any identity provider that supports OpenID Connect (OIDC). Workload identity federation is recommended for non-Google Cloud environments as it avoids the need to download, manage and store service account private keys locally.

This includes a rollforward of the [previous reverted PR](https://github.com/googleapis/google-auth-library-python/pull/686) and the [fix](https://github.com/googleapis/google-auth-library-python/pull/686) to not pass scopes to user credentials from `google.auth.default()`.

docs/index.rst[diff]
docs/reference/google.auth.aws.rst[Added - diff]
docs/reference/google.auth.external_account.rst[Added - diff]
docs/reference/google.auth.identity_pool.rst[Added - diff]
docs/reference/google.auth.rst[diff]
docs/reference/google.oauth2.rst[diff]
docs/reference/google.oauth2.sts.rst[Added - diff]
docs/reference/google.oauth2.utils.rst[Added - diff]
docs/user-guide.rst[diff]
google/auth/_default.py[diff]
google/auth/aws.py[Added - diff]
google/auth/environment_vars.py[diff]
google/auth/exceptions.py[diff]
google/auth/external_account.py[Added - diff]
google/auth/identity_pool.py[Added - diff]
google/auth/impersonated_credentials.py[diff]
google/oauth2/sts.py[Added - diff]
google/oauth2/utils.py[Added - diff]
noxfile.py[diff]
system_tests/system_tests_sync/secrets.tar.enc[Added - diff]
tests/data/external_subject_token.json[Added - diff]
tests/data/external_subject_token.txt[Added - diff]
tests/oauth2/test_sts.py[Added - diff]
tests/oauth2/test_utils.py[Added - diff]
tests/test__default.py[diff]
tests/test_aws.py[Added - diff]
tests/test_external_account.py[Added - diff]
tests/test_identity_pool.py[Added - diff]
tests/test_impersonated_credentials.py[diff]

29 files changed

tree: d43c66f38f316fdea6828701304aa7a4ef8c0143