feat(auth): implement regional access boundary support for standalone JWT and async service accounts#17025

Merged

nbayati merged 34 commits into

googleapis:mainfrom

nbayati:rab-support-async-sa-jwt

Jun 5, 2026

Commits on May 19, 2026

feat: add async support for RAB to ServiceAccountCredentials and implement async refresh manager
nbayati
committed
Add unit tests for the async RAB implementation.
nbayati
committed
fix async unit tests
nbayati
committed
Update unit tests to accept both mtls and standard allowedLocations endpoint.
nbayati
committed
test: verify iam endpoint constant resolution in mTLS environments
nbayati
committed
refactor: introduce _after_refresh hook in Credentials base class to support Regional Access Boundary logic
nbayati
committed
add __setstate__ to the base RAB class for backward compatibility
nbayati
committed
Implement RAB support for jwt credentials
nbayati
committed
fix lint errors
nbayati
committed
fix: preserve refresh manager type when copying RAB manager
nbayati
committed
refactor(auth): optimize RAB manager copy logic to only share boundary data and config
nbayati
committed
fix(auth): enhance client lookup robustness with defensive checks and timeout fixes
nbayati
committed
refactor(auth): centralize async RAB lifecycle via _after_refresh base hook
nbayati
committed
feat: add pickling support for _AsyncRegionalAccessBoundaryRefreshManager in service account credentials
nbayati
committed
revert changes to the _token_endpoint_request_no_throw to keep PR focused on RAB
nbayati
committed
fix(auth): align async client with AIO transport spec and add unit tests
nbayati
committed
test(auth): assert closed session safety in async RAB refresh and fix pickling docs
nbayati
committed
docs(auth): clarify async RAB transport requirements in docstrings
nbayati
committed
feat(auth): support async blocking RAB lookups and add support to async jwt
nbayati
committed
update unit tests
nbayati
committed

Commits on May 26, 2026

test(auth): assert RAB blocking flag and data copying on subclass credentials cloning
nbayati
committed

Commits on May 27, 2026

Commits on May 28, 2026

fix(auth): prevent sync-on-async crash in RAB manager blocking refresh
nbayati
committed

Commits on May 29, 2026