googleauth 1.5.0 → 1.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 42581efbf67b1cafdcdcd18cd227d22b5d456d695f3b5cfaa089f4121c17bce2
-  data.tar.gz: 968618cfa8048d5c246c83acc769b19c3f258958e21810481464d1b297d651bc
+  metadata.gz: 553d9c5927ca82c62dafc3a90529029ffd7813d99a9ae4ae146ae27370beb631
+  data.tar.gz: 55b33ba8e1ea2cf72f1f0c6c3c356ca825a4d575d8ac5665dc038118fc635198
 SHA512:
-  metadata.gz: 392dc977400f0229fd416cdcd2d5ed60fa0a8592926c622fed3dea2ba6ba1e083169d978c7a48d4e895014909352196fca56ac8c21df1f0b3694e55439cfedb2
-  data.tar.gz: 1a33a41171c9963196f833fa83702d61af6e335b677a229bf0f93316e7f0272f9b211f00fc7e180c4f07e1e7dd5ffbe29b484f5cd72578a49096046c6d017fc4
+  metadata.gz: 73a897d4813f5f016b252a299d126535fa32f017aa40ac7ac67200bef1332696298e2e082c279c3b8b850ca1d93d46f8a56f75d5c3ab408c33db391572944af7
+  data.tar.gz: b0d137864100e7e16ae1bac0b22ca7b2b09b5a9724692ed794170dbd712bc16b6ef00ad0913c47620d6df3e7324ce5a54484e2e4f9dfe06f999ebbeffd3c6007

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Release History
 
+### 1.5.1 (2023-04-10)
+
+#### Bug Fixes
+
+* Remove external account config validation ([#427](https://github.com/googleapis/google-auth-library-ruby/issues/427)) 
+
 ### 1.5.0 (2023-03-21)
 
 #### Features

data/lib/googleauth/external_account/aws_credentials.rb

@@ -38,11 +38,10 @@ module Google
           @audience = options[:audience]
           @credential_source = options[:credential_source] || {}
           @environment_id = @credential_source["environment_id"]
-          @region_url = validate_metadata_server @credential_source["region_url"], "region_url"
-          @credential_verification_url = validate_metadata_server @credential_source["url"], "url"
+          @region_url = @credential_source["region_url"]
+          @credential_verification_url = @credential_source["url"]
           @regional_cred_verification_url = @credential_source["regional_cred_verification_url"]
-          @imdsv2_session_token_url = validate_metadata_server @credential_source["imdsv2_session_token_url"],
-                                                               "imdsv2_session_token_url"
+          @imdsv2_session_token_url = @credential_source["imdsv2_session_token_url"]
 
           # These will be lazily loaded when needed, or will raise an error if not provided
           @region = nil
@@ -105,13 +104,6 @@ module Google
 
         private
 
-        def validate_metadata_server url, name
-          return nil if url.nil?
-          host = URI(url).host
-          raise "Invalid host #{host} for #{name}." unless ["169.254.169.254", "[fd00:ec2::254]"].include? host
-          url
-        end
-
         def get_aws_resource url, name, data: nil, headers: {}
           begin
             unless [nil, url].include? @imdsv2_session_token_url

data/lib/googleauth/external_account.rb

@@ -30,22 +30,6 @@ module Google
         AWS_SUBJECT_TOKEN_TYPE = "urn:ietf:params:aws:token-type:aws4_request".freeze
         AWS_SUBJECT_TOKEN_INVALID = "aws is the only currently supported external account type".freeze
 
-        TOKEN_URL_PATTERNS = [
-          /^[^.\s\/\\]+\.sts(?:\.mtls)?\.googleapis\.com$/,
-          /^sts(?:\.mtls)?\.googleapis\.com$/,
-          /^sts\.[^.\s\/\\]+(?:\.mtls)?\.googleapis\.com$/,
-          /^[^.\s\/\\]+-sts(?:\.mtls)?\.googleapis\.com$/,
-          /^sts-[^.\s\/\\]+\.p(?:\.mtls)?\.googleapis\.com$/
-        ].freeze
-
-        SERVICE_ACCOUNT_IMPERSONATION_URL_PATTERNS = [
-          /^[^.\s\/\\]+\.iamcredentials\.googleapis\.com$/.freeze,
-          /^iamcredentials\.googleapis\.com$/.freeze,
-          /^iamcredentials\.[^.\s\/\\]+\.googleapis\.com$/.freeze,
-          /^[^.\s\/\\]+-iamcredentials\.googleapis\.com$/.freeze,
-          /^iamcredentials-[^.\s\/\\]+\.p\.googleapis\.com$/.freeze
-        ].freeze
-
         # Create a ExternalAccount::Credentials
         #
         # @param json_key_io [IO] an IO from which the JSON key can be read
@@ -56,11 +40,6 @@ module Google
           raise "A json file is required for external account credentials." unless json_key_io
           user_creds = read_json_key json_key_io
 
-          raise "The provided token URL is invalid." unless is_token_url_valid? user_creds["token_url"]
-          unless is_service_account_impersonation_url_valid? user_creds["service_account_impersonation_url"]
-            raise "The provided service account impersonation url is invalid."
-          end
-
           # TODO: check for other External Account Credential types. Currently only AWS is supported.
           raise AWS_SUBJECT_TOKEN_INVALID unless user_creds["subject_token_type"] == AWS_SUBJECT_TOKEN_TYPE
 
@@ -85,26 +64,6 @@ module Google
           end
           json_key
         end
-
-        def self.is_valid_url? url, valid_hostnames
-          begin
-            uri = URI(url)
-          rescue URI::InvalidURIError, ArgumentError
-            return false
-          end
-
-          return false unless uri.scheme == "https"
-
-          valid_hostnames.any? { |hostname| hostname =~ uri.host }
-        end
-
-        def self.is_token_url_valid? url
-          is_valid_url? url, TOKEN_URL_PATTERNS
-        end
-
-        def self.is_service_account_impersonation_url_valid? url
-          !url or is_valid_url? url, SERVICE_ACCOUNT_IMPERSONATION_URL_PATTERNS
-        end
       end
     end
   end

data/lib/googleauth/version.rb

@@ -16,6 +16,6 @@ module Google
   # Module Auth provides classes that provide Google-specific authorization
   # used to access Google APIs.
   module Auth
-    VERSION = "1.5.0".freeze
+    VERSION = "1.5.1".freeze
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: googleauth
 version: !ruby/object:Gem::Version
-  version: 1.5.0
+  version: 1.5.1
 platform: ruby
 authors:
 - Tim Emiola
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-03-22 00:00:00.000000000 Z
+date: 2023-04-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -168,7 +168,7 @@ metadata:
   changelog_uri: https://github.com/googleapis/google-auth-library-ruby/blob/main/CHANGELOG.md
   source_code_uri: https://github.com/googleapis/google-auth-library-ruby
   bug_tracker_uri: https://github.com/googleapis/google-auth-library-ruby/issues
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -183,8 +183,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
-signing_key:
+rubygems_version: 3.4.2
+signing_key: 
 specification_version: 4
 summary: Google Auth Library for Ruby
 test_files: []