google-cloud-storage 1.57.0 → 1.57.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ba3f85cab0b6bd616c783973578f6f3610d23bd9679e74a42f77eda3e5b7b20
-  data.tar.gz: c5399ac6a4e32d290f3c112ee435696d176c4afe329213acbca36cc629a1f647
+  metadata.gz: 86a7f1131dc71cb9b5db56afce6c3b9e25a9a21544500367cdcd39ac8eb8ef46
+  data.tar.gz: 070b6c33b09fb8af9eb8a59f5d074b3b5929fd6d61233f1cf738ac4b6c0809a2
 SHA512:
-  metadata.gz: 3655fcc4fe59d97a956c1dd4ab3d98abdcf406261b2bb4d30a3c300d4c64aa37d2c7262c99484befa1538758ba4240b5e0a51d0ed753066a850db3d82a74b9ea
-  data.tar.gz: 9f0c4e40ecc8f906259d2a2c027b419c464519b65b83309e574f5cd4f7bc9eae55dd5c0735798e96be8b5696af75e315f1ee299dc4e91cba374c6119b3258e78
+  metadata.gz: 9c6370f20e62e933a41fbab067870c29c4e28bde041c97e53edb7a9e0280d1a029bf8d6ce238877cf14114b202535e7c9d0407192dbbfb4af8d071d9a3c3f575
+  data.tar.gz: 7da8c7b4afed6c3b0504c33c14bac1ce04a43e3740119af18c7c30c4eca540287da4e59798f6358f4e15098ab1476c09dcd9377c988ed063f47ff5846689eb84

data/AUTHENTICATION.md

@@ -28,6 +28,12 @@ providing **Project ID** and **Service Account Credentials** directly in code.
 
 **Credentials** are discovered in the following order:
 
+> [!WARNING]
+> If you accept a credential configuration (JSON file or Hash) from an
+> external source for authentication to Google Cloud, you must validate it before
+> providing it to a Google API client library. Providing an unvalidated credential
+> configuration to Google APIs can compromise the security of your systems and data.
+
 1. Specify credentials in method arguments
 2. Specify credentials in configuration
 3. Discover credentials path in environment variables
@@ -81,11 +87,17 @@ The **Project ID** and the path to the **Credentials JSON** file can be configur
 instead of placing them in environment variables or providing them as arguments.
 
 ```ruby
+require "googleauth"
 require "google/cloud/storage"
 
+credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+  json_key_io: ::File.open("/path/to/keyfile.json"),
+  scope: "https://www.googleapis.com/auth/devstorage.full_control"
+)
+
 Google::Cloud::Storage.configure do |config|
   config.project_id  = "my-project-id"
-  config.credentials = "path/to/keyfile.json"
+  config.credentials = credentials
 end
 
 storage = Google::Cloud::Storage.new

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Release History
 
+### 1.57.1 (2025-11-04)
+
+#### Documentation
+
+* add warning about loading unvalidated credentials ([#31776](https://github.com/googleapis/google-cloud-ruby/issues/31776)) 
+
 ### 1.57.0 (2025-08-15)
 
 #### Features

data/OVERVIEW.md

@@ -14,11 +14,17 @@ your code or via environment variables. Read more about the options for
 connecting in the {file:AUTHENTICATION.md Authentication Guide}.
 
 ```ruby
+require "googleauth"
 require "google/cloud/storage"
 
+credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+  json_key_io: ::File.open("/path/to/keyfile.json"),
+  scope: "https://www.googleapis.com/auth/devstorage.full_control"
+)
+
 storage = Google::Cloud::Storage.new(
   project_id: "my-project",
-  credentials: "/path/to/keyfile.json"
+  credentials: credentials
 )
 
 bucket = storage.bucket "my-bucket"

data/lib/google/cloud/storage/credentials.rb

@@ -25,18 +25,29 @@ module Google
       # Storage API.
       #
       # @example
+      #   # The recommended way to provide credentials is to use the `make_creds` method
+      #   # on the appropriate credentials class for your environment.
+      #
+      #   require "googleauth"
       #   require "google/cloud/storage"
       #
-      #   keyfile = "/path/to/keyfile.json"
-      #   creds = Google::Cloud::Storage::Credentials.new keyfile
+      #   credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+      #     json_key_io: ::File.open("/path/to/keyfile.json"),
+      #     scope: "https://www.googleapis.com/auth/devstorage.full_control"
+      #   )
       #
       #   storage = Google::Cloud::Storage.new(
       #     project_id: "my-project",
-      #     credentials: creds
+      #     credentials: credentials
       #   )
       #
       #   storage.project_id #=> "my-project"
       #
+      # @note Warning: If you accept a credential configuration (JSON file or Hash) from an
+      #   external source for authentication to Google Cloud, you must validate it before
+      #   providing it to a Google API client library. Providing an unvalidated credential
+      #   configuration to Google APIs can compromise the security of your systems and data.
+      #
       class Credentials < Google::Auth::Credentials
         SCOPE = ["https://www.googleapis.com/auth/devstorage.full_control"].freeze
         PATH_ENV_VARS = [

data/lib/google/cloud/storage/version.rb

@@ -16,7 +16,7 @@
 module Google
   module Cloud
     module Storage
-      VERSION = "1.57.0".freeze
+      VERSION = "1.57.1".freeze
     end
   end
 end

data/lib/google/cloud/storage.rb

@@ -42,9 +42,12 @@ module Google
       # @param [String] project_id Project identifier for the Storage service
       #   you are connecting to. If not present, the default project for the
       #   credentials is used.
-      # @param [String, Hash, Google::Auth::Credentials] credentials The path to
-      #   the keyfile as a String, the contents of the keyfile as a Hash, or a
-      #   Google::Auth::Credentials object. (See {Storage::Credentials})
+      # @param [Google::Auth::Credentials] credentials A Google::Auth::Credentials
+      #   object. (See {Storage::Credentials})
+      # @note Warning: Passing a `String` to a keyfile path or a `Hash` of
+      #   credentials is deprecated. Providing an unvalidated credential
+      #   configuration to Google APIs can compromise the security of your
+      #   systems and data.
       # @param [String, Array<String>] scope The OAuth 2.0 scopes controlling
       #   the set of resources and operations that the connection can access.
       #   See [Using OAuth 2.0 to Access Google

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-storage
 version: !ruby/object:Gem::Version
-  version: 1.57.0
+  version: 1.57.1
 platform: ruby
 authors:
 - Mike Moore