Repository navigation

feat(oauth2): implement IAM impersonation mTLS transport pinning and 401 recovery - #14212

Merged

macastelaz merged 21 commits into

googleapis:oauth2-bound-tokensfrom

macastelaz:cert-bound-oauth-iam-pinning

Oct 15, 2026

Merged

feat(oauth2): implement IAM impersonation mTLS transport pinning and 401 recovery#14212
macastelaz merged 21 commits into
googleapis:oauth2-bound-tokensfrom
macastelaz:cert-bound-oauth-iam-pinning

Commits on Sep 17, 2026
Commits on Sep 18, 2026
- fix(oauth2): annotate refreshAccessToken(HttpTransportFactory) with @InternalExtensionOnly
  macastelaz
  committed
  a5e69ed
Commits on Sep 21, 2026
- fix(oauth2): address review feedback on mTLS transport pinning and 401 recovery
  macastelaz
  committed
  13e8be0
Commits on Sep 22, 2026
Commits on Sep 23, 2026
- fix(oauth2): handle mid-rotation invalid_grant, cached STS 401 retry, and single cert read on impersonated refresh
  macastelaz
  committed
  ddd5ea8
- fix(auth): harden concurrency and nullability in ImpersonatedCredentials and CertificateIdentityPoolSubjectTokenSupplier
  macastelaz
  committed
  b47ab2a
Commits on Sep 25, 2026
Commits on Sep 28, 2026
- fix(auth): address PR #14212 follow-up review comments
  macastelaz
  committed
  091a91b
Commits on Oct 14, 2026
- fix(oauth2): extract refreshWithRetry helpers and clarify mTLS/impersonation comments
  macastelaz
  committed
  4bf0fdd
- chore(oauth2_http): simplify IdentityPoolCredentials retry flow and scope cycle overloads
  macastelaz
  committed
  fe93d90
Commits on Oct 15, 2026
- Merge branch 'oauth2-bound-tokens' into cert-bound-oauth-iam-pinning
  macastelaz
  committed
  a9acfb5
- fix(auth): return null on KeyStore error and unconditionally clear scoped token
  macastelaz
  committed
  16716d0