google/oauth2l v1.2.0

OAuth2l v1.2.0 Release

on GitHub

This is a major release containing several new features and bug fixes.

Features added:

1. Service Account Impersonation:

• Added "--impersonate-service-account xxx" option to exchange the retrieved User access token with a Service Account access token using Google's IAM Service.

1. Domain-wide Delegation:

• Use "--email xxx" option to specify a user email account for domain-wide delegation when authenticating with Service Account credentials.

1. Exporting gcloud Refresh Token Credentials:

• Use “--output_format refresh_token” to export a gcloud refresh token credentials JSON when authenticating with 3-legged OAuth. This credentials JSON can subsequently be used for user-based authentication in client libraries.

1. Replaced “sgauth” module with official “oauth2” library:

• The “sgauth” module that powered oauth2l was a forked version of the golang “oauth2” library. The feature gaps have been reconciled, and oauth2l will use the official oauth2 library going forward.