googleapis / google-auth-library-python

Google Auth Python Library
https://googleapis.dev/python/google-auth/latest/
Apache License 2.0
776 stars 306 forks source link

feat: Implement trust boundary lookup and caching for Service Account credentials #1405

Closed BigTailWolf closed 7 months ago

BigTailWolf commented 12 months ago

We are going to implement support for service account credentials trust boundary via a cache value.

Usage of the Value

Whenever we apply a credentials to a request header, after we apply the authorization header with access_token, we are going to check the trust boundary value. If the trust boundary value is not None, we apply a header x-allowed-locations with the trust boundary value.

Update of the Value

There are two ways we can do the update of the value:

clundin25 commented 7 months ago

@BigTailWolf is this PR ready for another round of review?

BigTailWolf commented 7 months ago

Hi @clundin25 and @lsirac , I removed the global lookup flow in the refresh. Now we only do supports on injection.

BigTailWolf commented 7 months ago

Hi @clundin25 , I'm going to close this change as I got an update on the change from backend on their design.