googleauth 1.17.1 → 1.17.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 65760a71937d92e7ac7645084b04fa503e9e824ce4cdde626013e1e5b218d1ff
-  data.tar.gz: 735c54698d8ac9f2419b4b2b5d0525d079d799fb06cdcef10ea8a7bb76f7e5a9
+  metadata.gz: bc45e207ab32f63ca0badeb96e1706bc80d38931ff0b69caa0a9a111163aa340
+  data.tar.gz: 8de82f27d3a8df7a71d0d11ebae8e814a60a3fc963f26825e1c4d420c910dc44
 SHA512:
-  metadata.gz: 58a86a3662c68bdabfbb96f12066c6d24ecc8aa1a4927e9be89578269001d5d64010340bb98285e5e6717c30b0d7b118d3b07dd631581db6b668934f6074117f
-  data.tar.gz: 41e44fdbe1863fe39bed931e07948ddbeaa6c627a7f7d28a4f43591e6b281898d7bf6afdeb76d06ad4668297028a374ba936d29785c0c544ba853fbadc8aaf2c
+  metadata.gz: e3d50e8368efa58acb323b0fde998d3006a00ca4f044f72f5cb04f2313c3340a7f7577710b3b3a034f9d58699583952bdb60e9eb4d5ecbef3319f01d6e4bf713
+  data.tar.gz: ebb4d26b60a9f6d2744cd184dce52c13551773d706319bb53c6566001b39312d87f6c7c98f0ee5b15bda856447a2516f8f2336e6eb7437db8898776e1ac6dc9d

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Release History
 
+### 1.17.2 (2026-07-23)
+
+#### Bug Fixes
+
+* return auth header from source_credentials in ImpersonatedServiceAccountCredentials ([#586](https://github.com/googleapis/google-auth-library-ruby/issues/586)) 
+
 ### 1.17.1 (2026-06-08)
 
 #### Bug Fixes

data/README.md

@@ -265,7 +265,7 @@ Custom storage implementations can also be used. See
 
 ## Supported Ruby Versions
 
-This library is supported on Ruby 3.0+.
+This library is supported on Ruby 3.2+.
 
 Google provides official support for Ruby versions that are actively supported
 by Ruby Core—that is, Ruby versions that are either in normal maintenance or

data/lib/googleauth/id_tokens/key_sources.rb

@@ -135,13 +135,13 @@ module Google
             rsa_key.public_key
           end
 
-          # @private
           CURVE_NAME_MAP = {
             "P-256"     => "prime256v1",
             "P-384"     => "secp384r1",
             "P-521"     => "secp521r1",
             "secp256k1" => "secp256k1"
           }.freeze
+          private_constant :CURVE_NAME_MAP
 
           def extract_ec_key jwk
             begin

data/lib/googleauth/id_tokens/verifier.rb

@@ -109,13 +109,13 @@ module Google
           payload["azp"] ||= payload["cid"] if payload.key? "cid"
 
           # Payload content validation
-          if aud && (Array(aud) & Array(payload["aud"])).empty?
+          if aud && !Array(aud).intersect?(Array(payload["aud"]))
             raise AudienceMismatchError, "Token aud mismatch: #{payload['aud']}"
           end
-          if azp && (Array(azp) & Array(payload["azp"])).empty?
+          if azp && !Array(azp).intersect?(Array(payload["azp"]))
             raise AuthorizedPartyMismatchError, "Token azp mismatch: #{payload['azp']}"
           end
-          if iss && (Array(iss) & Array(payload["iss"])).empty?
+          if iss && !Array(iss).intersect?(Array(payload["iss"]))
             raise IssuerMismatchError, "Token iss mismatch: #{payload['iss']}"
           end
 

data/lib/googleauth/impersonated_service_account.rb

@@ -297,9 +297,9 @@ module Google
       # @private
       # @return [Hash] The authorization header with the source credentials' token
       def prepare_auth_header
-        auth_header = {}
-        @source_credentials.updater_proc.call auth_header
-        auth_header
+        # updater_proc returns a new hash containing authorization headers
+        # rather than mutating the passed hash in place.
+        @source_credentials.updater_proc.call({})
       end
 
       # Makes the HTTP request to the impersonation endpoint.

data/lib/googleauth/version.rb

@@ -16,6 +16,6 @@ module Google
   # Module Auth provides classes that provide Google-specific authorization
   # used to access Google APIs.
   module Auth
-    VERSION = "1.17.1".freeze
+    VERSION = "1.17.2".freeze
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: googleauth
 version: !ruby/object:Gem::Version
-  version: 1.17.1
+  version: 1.17.2
 platform: ruby
 authors:
 - Google LLC
@@ -198,7 +198,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.0'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="