v0.12.0

11-14-2018 14:53 PST

Implementation Changes

• Show error message in case of problems with getting access token (#206)
• Add note about NO_GCE_CHECK to metadata 404 error message (#205)

New Features

• Add ImpersonatedCredentials (#211)
• Add option to suppress end user credentials warning. (#207)

Dependencies

• Update google-http-java-client dependency to 1.27.0 (#208)

Documentation

• README grammar fix (#192)
• Add unstable badge to README (#184)
• Update README with instructions on installing the App Engine SDK and running the tests (#209)

Internal / Testing Changes

• Cleanup ImpersonatedCredentials (#212)
• Add codecov (#201)
• Kokoro release (#200)
• Enable releasetool (#202)
• Add CODEOWNERS and issue/pr templates (#203)
• Fix snapshot version in pom files and fix urls after repo move (#196)
• Fix warnings (#199)
• Add Kokoro continuous job configs (#197)
• Add windows Kokoro test config (#181)
• Fix assorted warnings (#186)
• 0.11.0 has been released (#182)
• Add Kokoro CI config (#180)

v0.11.0

Implementation Changes

• Update auth token urls (#174)

Dependencies

• Update dependencies (guava) (#170)
• Bumping google-http-client version to 1.24.1 (#171)

Documentation

• Documentation for ComputeEngineCredential signing. (#176)
• Fix README link (#169)

Internal / Testing Changes

• 0.10.1-SNAPSHOT version bump (#168)

v0.10.0

Functionality

• Read token_uri from service account JSON (#160)
• Add OAuth2Credentials#refreshIfExpired() (#163)
• Log warning if default credentials yeids a user token from gcloud sdk (#166)
• ComputeEngineCredentials implements ServiceAccountSigner (#141)

Documentation

• Versionless Javadocs (#164)
• Fix documentation for getAccessToken() returning cached value (#162)

v0.9.1

Functionality

• Add caching for JWT tokens (#151)

0.9.0

Functionality

• Fix NPE deserializing ServiceAccountCredentials (#132)
• Surface cleanup (#136)
• Providing a method to remove CredentialsChangedListeners (#130)
• Implemented in-memory TokenStore and added opportunity to save user credentials into file (#129)

Documentation

• Fixes comment typos. (#131)

0.8.0

This release announcement is a very delayed announcement; the actual release of 0.8.0 was performed on 8 Sep, 2017. There are additional commits on github that are not part of this release.

Functionality

• Extracting the project_id field from service account JSON files (#118)
• Fixing an Integer Overflow Issue (#121)
• use metadata server to get credentials for GAE 8 standard environment (#122)
• Switch OAuth2 HTTP surface to use builder pattern (#123)
• Add builder pattern to AppEngine credentials (#125)

Documentation

• Fix API Documentation link rendering (#112)

Internal

• Update release process for Javadoc update (#116)
• Remove oracle jdk7 from Travis (#124)

Retry credentials on Compute Engine

Mitigate occasional failures in looking up Application Default Credentials on a Google Compute Engine (GCE) Virtual Machine (#110 addresses #109):

• Add retry to the credentials check for the GCE environment
• Use fixed IP address for the GCE VM metadata server used to perform the check (to avoid nameserver lookup)
• Allow skipping the check by setting an environment variable NO_GCE_CHECK=true
• Use a custom GCE metadata server address by setting the environment variable GCE_METADATA_HOST=<hostname>

0.7.0

• Add GoogleCredentials.createDelegated() method to allow using domain-wide delegation with service accounts (#102 addresses #90): see https://developers.google.com/identity/protocols/OAuth2ServiceAccount#delegatingauthority

• Retry HTTP errors in ServiceAccountCredentials.refreshAccessToken() to avoid propagating failures (#100 addresses #91)

• Allow bypassing App Engine credential check using environment variable, to allow Application Default Credentials to detect GCE when running on GAE Flex (#103)

Better token refresh

1. Refresh Auth token with 5 minutes left (was 1 min)
2. Several typo are fixed
3. GAE API's and Servlets are provided - so mark them that way.

0.5.0

Features

• Add ServiceAccountSigner interface and implement signing capabilities (byte[] sign(byte[])) in AppEngine and service account credentials (#73)
• GoogleCredentials.getApplicationDefault no longer requires google-auth-library-appengine to be in the classpath to create AppEngine credentials. AE SDK is accessed using reflection (#71)
• Make credentials serializable. Add HttpTransportFactory class to wrap HttpTransport creation an enable serialization (#69)
• Add asynchronous getRequestMetadata(URI, Executor, RequestMetadataCallback) to Credentials to allow getting request metadata without blocking (#64, #65)
• Check CLOUDSDK_CONFIG for default credentials location (#63)