googleauth 1.17.0 → 1.17.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: af793408bd622c160b50d6839cea9d58523e1424c05cf5fa52beecd93b52aee9
-  data.tar.gz: 0131f0f3459d5e093b1de8fe48d1986a7b51b583be9a3a23383624dea6c5112c
+  metadata.gz: bc45e207ab32f63ca0badeb96e1706bc80d38931ff0b69caa0a9a111163aa340
+  data.tar.gz: 8de82f27d3a8df7a71d0d11ebae8e814a60a3fc963f26825e1c4d420c910dc44
 SHA512:
-  metadata.gz: c5ea780b6bc8b2ae699cb5839f8e4dcfdea65133ec0bd90396c6c1383a6ae34a2b71af9027319c67226faa5ec55e55d75b9aae434e37581ef8e9f54337cd8f5c
-  data.tar.gz: 972fcf255773491f037a360fb8c1d557594b5413f8024cc1c888f7d18536e4b3ff732ffb5f928291984348bb5e0f87af34b01054b3f5f3cd16262f75d1cb4260
+  metadata.gz: e3d50e8368efa58acb323b0fde998d3006a00ca4f044f72f5cb04f2313c3340a7f7577710b3b3a034f9d58699583952bdb60e9eb4d5ecbef3319f01d6e4bf713
+  data.tar.gz: ebb4d26b60a9f6d2744cd184dce52c13551773d706319bb53c6566001b39312d87f6c7c98f0ee5b15bda856447a2516f8f2336e6eb7437db8898776e1ac6dc9d

data/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Release History
 
+### 1.17.2 (2026-07-23)
+
+#### Bug Fixes
+
+* return auth header from source_credentials in ImpersonatedServiceAccountCredentials ([#586](https://github.com/googleapis/google-auth-library-ruby/issues/586)) 
+
+### 1.17.1 (2026-06-08)
+
+#### Bug Fixes
+
+* repair impersonated email helper ([#578](https://github.com/googleapis/google-auth-library-ruby/issues/578)) ([6317f9b](https://github.com/googleapis/google-auth-library-ruby/commit/6317f9b3f44a26ffff569ed29a09b929cc2ab45e)), closes [#577](https://github.com/googleapis/google-auth-library-ruby/issues/577)
+
 ### 1.17.0 (2026-06-04)
 
 #### Features

data/README.md

@@ -265,7 +265,7 @@ Custom storage implementations can also be used. See
 
 ## Supported Ruby Versions
 
-This library is supported on Ruby 3.0+.
+This library is supported on Ruby 3.2+.
 
 Google provides official support for Ruby versions that are actively supported
 by Ruby Core—that is, Ruby versions that are either in normal maintenance or

data/lib/googleauth/external_account/external_account_utils.rb

@@ -101,13 +101,8 @@ module Google
         #   service_account_impersonation_url, or nil if it cannot be determined
         def service_account_email
           return nil if @service_account_impersonation_url.nil?
-          start_idx = @service_account_impersonation_url.rindex "/"
-          end_idx = @service_account_impersonation_url.index ":generateAccessToken"
-          if start_idx != -1 && end_idx != -1 && start_idx < end_idx
-            start_idx += 1
-            return @service_account_impersonation_url[start_idx..end_idx]
-          end
-          nil
+          match = @service_account_impersonation_url.match %r{serviceAccounts/([^:]+):generateAccessToken$}
+          match[1] if match
         end
       end
     end

data/lib/googleauth/id_tokens/key_sources.rb

@@ -135,13 +135,13 @@ module Google
             rsa_key.public_key
           end
 
-          # @private
           CURVE_NAME_MAP = {
             "P-256"     => "prime256v1",
             "P-384"     => "secp384r1",
             "P-521"     => "secp521r1",
             "secp256k1" => "secp256k1"
           }.freeze
+          private_constant :CURVE_NAME_MAP
 
           def extract_ec_key jwk
             begin

data/lib/googleauth/id_tokens/verifier.rb

@@ -109,13 +109,13 @@ module Google
           payload["azp"] ||= payload["cid"] if payload.key? "cid"
 
           # Payload content validation
-          if aud && (Array(aud) & Array(payload["aud"])).empty?
+          if aud && !Array(aud).intersect?(Array(payload["aud"]))
             raise AudienceMismatchError, "Token aud mismatch: #{payload['aud']}"
           end
-          if azp && (Array(azp) & Array(payload["azp"])).empty?
+          if azp && !Array(azp).intersect?(Array(payload["azp"]))
             raise AuthorizedPartyMismatchError, "Token azp mismatch: #{payload['azp']}"
           end
-          if iss && (Array(iss) & Array(payload["iss"])).empty?
+          if iss && !Array(iss).intersect?(Array(payload["iss"]))
             raise IssuerMismatchError, "Token iss mismatch: #{payload['iss']}"
           end
 

data/lib/googleauth/impersonated_service_account.rb

@@ -297,9 +297,9 @@ module Google
       # @private
       # @return [Hash] The authorization header with the source credentials' token
       def prepare_auth_header
-        auth_header = {}
-        @source_credentials.updater_proc.call auth_header
-        auth_header
+        # updater_proc returns a new hash containing authorization headers
+        # rather than mutating the passed hash in place.
+        @source_credentials.updater_proc.call({})
       end
 
       # Makes the HTTP request to the impersonation endpoint.

data/lib/googleauth/version.rb

@@ -16,6 +16,6 @@ module Google
   # Module Auth provides classes that provide Google-specific authorization
   # used to access Google APIs.
   module Auth
-    VERSION = "1.17.0".freeze
+    VERSION = "1.17.2".freeze
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: googleauth
 version: !ruby/object:Gem::Version
-  version: 1.17.0
+  version: 1.17.2
 platform: ruby
 authors:
 - Google LLC
@@ -198,7 +198,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.0'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="