@lightdash/cli 0.1973.2 → 0.1974.0

package/dist/dbt/targets/Bigquery/index.js

@@ -77,18 +77,27 @@ const convertBigquerySchema = async (target) => {
         }
         if (target.project === undefined && target.method !== 'oauth')
             throw new common_1.ParseError(`BigQuery project is required for ${target.method} authentication method`);
-        return {
+        const result = {
             type: common_1.WarehouseTypes.BIGQUERY,
             project: target.project || '',
             dataset: target.dataset || target.schema,
             timeoutSeconds: target.timeout_seconds,
             priority: target.priority,
-            keyfileContents: await getBigqueryCredentials(target),
+            keyfileContents: {},
             retries: target.retries,
             maximumBytesBilled: target.maximum_bytes_billed,
             location: target.location,
             executionProject: target.execution_project,
         };
+        const oauthOrKeyResult = await getBigqueryCredentials(target);
+        if (oauthOrKeyResult.authenticationType ===
+            common_1.BigqueryAuthenticationType.ADC) {
+            result.authenticationType = common_1.BigqueryAuthenticationType.ADC;
+        }
+        else {
+            result.keyfileContents = oauthOrKeyResult;
+        }
+        return result;
     }
     const errs = (0, better_ajv_errors_1.default)(exports.bigqueryTargetJsonSchema, target, validate.errors || []);
     throw new common_1.ParseError(`Couldn't read profiles.yml file for ${target.type}:\n${errs}`);

package/dist/dbt/targets/Bigquery/oauth.js

@@ -20,6 +20,13 @@ const getBigqueryCredentialsFromOauth = async () => {
         }
         throw new common_1.ParseError(`Cannot get credentials from UserRefreshClient`);
     }
+    else if (credentials.credential instanceof google_auth_library_1.ExternalAccountClient) {
+        // Support ADC via workforce identity federation / external_account configuration.
+        // In this case we should rely on ADC at runtime and not pass explicit credentials.
+        return {
+            authenticationType: common_1.BigqueryAuthenticationType.ADC,
+        };
+    }
     else if ('email' in credentials.credential &&
         'key' in credentials.credential) {
         // Works with service credentials

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightdash/cli",
-  "version": "0.1973.2",
+  "version": "0.1974.0",
   "license": "MIT",
   "bin": {
     "lightdash": "dist/index.js"
@@ -32,8 +32,8 @@
     "parse-node-version": "^2.0.0",
     "unique-names-generator": "^4.7.1",
     "uuid": "^11.0.3",
-    "@lightdash/common": "0.1973.2",
-    "@lightdash/warehouses": "0.1973.2"
+    "@lightdash/warehouses": "0.1974.0",
+    "@lightdash/common": "0.1974.0"
   },
   "description": "Lightdash CLI tool",
   "devDependencies": {