v1.33.1

Bug Fixes

• fallback to source creds expiration in downscoped tokens (#805) (dfad661)

Reverts

• revert "feat: service account is able to use a private token endpoint (#784)" (#808) (d94e65c)

v1.33.0

Features

• define CredentialAccessBoundary classes (#793) (d883921)
• define google.auth.downscoped.Credentials class (#801) (2f5c3a6)
• service account is able to use a private token endpoint (#784) (0e26409)

Bug Fixes

• fix fetch_id_token credential lookup order to match adc (#748) (c34452e)

Documentation

• fix code block formatting in 'user-guide.rst' (#794) (4fd84bd)

v1.32.1

Bug Fixes

• avoid leaking sub-session created for '_auth_request' (#789) (2079ab5)

v1.32.0

Features

• allow scopes for self signed jwt (#776) (2cfe655)

v1.31.0

Features

• define useful properties on google.auth.external_account.Credentials (#770) (f97499c)

Bug Fixes

• avoid deleting items while iterating (#772) (a5e6b65)

v1.30.2

Bug Fixes

• dependencies: add urllib3 and requests to aiohttp extra (#755) (a923442)
• enforce constraints during unit tests (#760) (1a6496a), closes #759
• session object was never used in aiohttp request (#700) (#701) (09e0389)

v1.30.1

Bug Fixes

• allow user to customize context aware metadata path in _mtls_helper (#754) (e697687)
• fix function name in signing error message (#751) (e9ca25f)

v1.30.0

Features

• add reauth support to async user credentials for gcloud (#738) (9e10823). This internal feature is for gcloud developers only.

v1.29.0

Features

• add reauth feature to user credentials (#727) (82293fe)

Bug Fixes

• Allow multiple audiences for id_token.verify_token (#733) (56c3946)

v1.28.1

Bug Fixes

• support custom alg in jwt header for signing (#729) (0a83706)