feat: enable self signed jwt for service account credentials - #1553
feat: enable self signed jwt for service account credentials#1553gcf-merge-on-green[bot] merged 1 commit into
Conversation
Sorry, something went wrong.
|
@arithmetic1728 I vaguely remember being told this was only implemented for GAPICs as self-signed JWT isn't guaranteed to work for all the APIs listed in the directory. Is that a non-issue now? |
Sorry, something went wrong.
|
Hi! This breaks (at least) the drive/v3 files list API (server starts throwing 500s). Manually disabling this with build(.... always_use_jwt_access=False) makes it work again. |
Sorry, something went wrong.
|
@vriesk Thank you for bringing it up. I tested with the following sample, it did break. Will investigate more. import googleapiclient.discovery
drive = googleapiclient.discovery.build('drive', 'v3', always_use_jwt_access=True)
result = drive.files().list(corpora="user").execute()
print(result)
|
Sorry, something went wrong.
|
Created PR #1566 to disable self signed jwt. |
Sorry, something went wrong.
|
Thanks for the quick fix. :) |
Sorry, something went wrong.
Enable self signed jwt if google-auth service account credentials are used.
Tested with Storage, Compute and PubSub APIs:
import googleapiclient.discovery project = "<project>" zone = "us-west1-a" compute = googleapiclient.discovery.build('compute', 'v1') result = compute.instances().list(project=project, zone=zone).execute() print(result) storage = googleapiclient.discovery.build('storage', 'v1') result = storage.buckets().list(project=project).execute() print(result) topic = "<topic>" pubsub = googleapiclient.discovery.build('pubsub', 'v1') result = pubsub.projects().topics().get(topic=f"projects/{project}/topics/{topic}").execute() print(result)