feat(auth): implement regional access boundary support for standalone JWT and async service accounts#17025

Open

nbayati wants to merge 20 commits into

googleapis:mainfrom

nbayati:rab-support-async-sa-jwt

Commits on May 19, 2026

feat: add async support for RAB to ServiceAccountCredentials and implement async refresh manager
nbayati
committed
Add unit tests for the async RAB implementation.
nbayati
committed
fix async unit tests
nbayati
committed
Update unit tests to accept both mtls and standard allowedLocations endpoint.
nbayati
committed
test: verify iam endpoint constant resolution in mTLS environments
nbayati
committed
refactor: introduce _after_refresh hook in Credentials base class to support Regional Access Boundary logic
nbayati
committed
add __setstate__ to the base RAB class for backward compatibility
nbayati
committed
Implement RAB support for jwt credentials
nbayati
committed
fix lint errors
nbayati
committed
fix: preserve refresh manager type when copying RAB manager
nbayati
committed
refactor(auth): optimize RAB manager copy logic to only share boundary data and config
nbayati
committed
fix(auth): enhance client lookup robustness with defensive checks and timeout fixes
nbayati
committed
refactor(auth): centralize async RAB lifecycle via _after_refresh base hook
nbayati
committed
feat: add pickling support for _AsyncRegionalAccessBoundaryRefreshManager in service account credentials
nbayati
committed
revert changes to the _token_endpoint_request_no_throw to keep PR focused on RAB
nbayati
committed
fix(auth): align async client with AIO transport spec and add unit tests
nbayati
committed
test(auth): assert closed session safety in async RAB refresh and fix pickling docs
nbayati
committed
docs(auth): clarify async RAB transport requirements in docstrings
nbayati
committed
feat(auth): support async blocking RAB lookups and add support to async jwt
nbayati
committed
update unit tests
nbayati
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(auth): implement regional access boundary support for standalone JWT and async service accounts#17025

feat(auth): implement regional access boundary support for standalone JWT and async service accounts#17025
nbayati wants to merge 20 commits into
googleapis:mainfrom
nbayati:rab-support-async-sa-jwt

Commits on May 19, 2026

feat: add async support for RAB to ServiceAccountCredentials and implement async refresh manager

Add unit tests for the async RAB implementation.

fix async unit tests

Update unit tests to accept both mtls and standard allowedLocations endpoint.

test: verify iam endpoint constant resolution in mTLS environments

refactor: introduce _after_refresh hook in Credentials base class to support Regional Access Boundary logic

add setstate to the base RAB class for backward compatibility

Implement RAB support for jwt credentials

fix lint errors

fix: preserve refresh manager type when copying RAB manager

refactor(auth): optimize RAB manager copy logic to only share boundary data and config

fix(auth): enhance client lookup robustness with defensive checks and timeout fixes

refactor(auth): centralize async RAB lifecycle via _after_refresh base hook

feat: add pickling support for _AsyncRegionalAccessBoundaryRefreshManager in service account credentials

revert changes to the _token_endpoint_request_no_throw to keep PR focused on RAB

fix(auth): align async client with AIO transport spec and add unit tests

test(auth): assert closed session safety in async RAB refresh and fix pickling docs

docs(auth): clarify async RAB transport requirements in docstrings

feat(auth): support async blocking RAB lookups and add support to async jwt

update unit tests