This is a major release containing several new features and bug fixes.
Features added:
- Service Account Impersonation:
- Added "--impersonate-service-account xxx" option to exchange the retrieved User access token with a Service Account access token using Google's IAM Service.
- Domain-wide Delegation:
- Use "--email xxx" option to specify a user email account for domain-wide delegation when authenticating with Service Account credentials.
- Exporting gcloud Refresh Token Credentials:
- Use “--output_format refresh_token” to export a gcloud refresh token credentials JSON when authenticating with 3-legged OAuth. This credentials JSON can subsequently be used for user-based authentication in client libraries.
- Replaced “sgauth” module with official “oauth2” library:
- The “sgauth” module that powered oauth2l was a forked version of the golang “oauth2” library. The feature gaps have been reconciled, and oauth2l will use the official oauth2 library going forward.