Home Original page

feat: MDS connections use mTLS by nolanleastin · Pull Request #1856 · googleapis/google-auth-library-python

@nolanleastin requested a review from a team

November 3, 2025 21:32

sai-sunder-s

sai-sunder-s

sai-sunder-s

daniel-sanche

daniel-sanche

daniel-sanche

sai-sunder-s

sai-sunder-s

daniel-sanche

sai-sunder-s

daniel-sanche

@nolanleastin

@nolanleastin

@nolanleastin

@nolanleastin

@nolanleastin

@nolanleastin 

1. now we do not create a new request. instead, create an mds mtls
   adapter and mount it on the request session.

2. added _validate_gce_mds_configured_environment, which ensures if we
   are using strict, that the host being contacted is default

3. fix unit tests and add new tests

@nolanleastin

@nolanleastin

@nolanleastin

@nolanleastin

@nolanleastin

@nolanleastin

@nolanleastin

vchudnov-g added a commit that referenced this pull request

Dec 15, 2025 
PR created by the Librarian CLI to initialize a release. Merging this PR
will auto trigger a release.

Librarian Version: v0.7.0
Language Image:
us-central1-docker.pkg.dev/cloud-sdk-librarian-prod/images-prod/python-librarian-generator:latest
<details><summary>google-auth: 2.44.0</summary>

##
[2.44.0](v2.43.0...v2.44.0)
(2025-12-12)

### Features

* MDS connections use mTLS (#1856)
([0387bb9](0387bb95))

* support Python 3.14 (#1822)
([0f7097e](0f7097e7))

* add ecdsa p-384 support (#1872)
([39c381a](39c381a5))

* Add shlex to correctly parse executable commands with spaces (#1855)
([cf6fc3c](cf6fc3cc))

* Implement token revocation in STS client and add revoke() metho…
(#1849)
([d563898](d5638986))

### Bug Fixes

* Add temporary patch to workload cert logic to accomodate Cloud Run
mis-configuration (#1880)
([78de790](78de7907))

* Delegate workload cert and key default lookup to helper function
(#1877)
([b0993c7](b0993c7e))

* Use public refresh method for source credentials in
ImpersonatedCredentials (#1884)
([e0c3296](e0c3296f))

</details>

This was referenced

Mar 26, 2026