GPP is Android's unofficial release automation Gradle Plugin. It can do anything from building, uploading, and then promoting your App Bundle or APK to publishing app listings and other metadata.
MIT License
4.13k
stars
341
forks
source link
Add scope to default application credentials #1151
This PR added the capability to authenticate with application default credentials.
When the application default credentials are generated using workload identity federation like in a Github action, the generated JSON doesn't contain scopes. As a result, the google-auth-library defaults to a scope of https://www.googleapis.com/auth/cloud-platform, which doesn't include the androidpublisher scope.
SUPERCILEX
commented
1 week ago
This PR added the capability to authenticate with application default credentials.
When the application default credentials are generated using workload identity federation like in a Github action, the generated JSON doesn't contain
scopes. As a result, the google-auth-library defaults to a scope ofhttps://www.googleapis.com/auth/cloud-platform, which doesn't include the androidpublisher scope.To support all forms of application default credentials (including Identity Pool Credentials), we should specify a scope. Some more info about this is also in https://github.com/googleapis/google-auth-library-java/issues/1274.