Development Status
- 5 - Production/Stable
Intended Audience
- Developers
License
- OSI Approved :: MIT License
Operating System
- OS Independent
Programming Language
- Python :: 3
- Python :: 3.10
- Python :: 3.11
- Python :: 3.12
- Python :: 3.13
- Python :: 3.14
Topic
- Internet
This is a shared codebase for gcloud-aio-auth and gcloud-rest-auth
This library implements an IamClient class, which can be used to interact with GCP public keys and URL sign blobs.
It also implements an IapToken class which is used for authorizing against an Identity-Aware Proxy (IAP) secured GCP service. IAP uses identity tokens which are specific to the target service and allows administrators to configure a list of identities (ex. service accounts, users, or groups) that may access the service. Therefore each IapToken instance corresponds to an ID token which may be used to authorize against a single IAP service.
It additionally implements a Token class, which is used for authorizing against Google Cloud. The other gcloud-aio-* package components accept a Token instance as an argument; you can define a single token for all of these components or define one for each. Each component corresponds to a given Google Cloud service and each service requires various “scopes”.
The library supports multiple authentication methods: - Service account credentials - Authorized user credentials - GCE metadata credentials - Impersonated service account credentials - External account credentials (for workload identity federation)
Installation
$ pip install --upgrade gcloud-{aio,rest}-authUsage
See our docs.
Contributing
Please see our contributing guide.
Wheel compatibility matrix
Files in release
aiohttp
(<4.0.0,>=3.9.2)
chardet
(<8.0,>=2.0)
cryptography
(<52.0.0,>=2.0.0)
pyjwt
(<3.0.0,>=1.5.3)
tenacity
(<10.0.0,>=8.2.0)