Support for Workload Identity Federation?

[antspy]

Hi,

First of all, thanks a lot for the library, that's super useful!

One question: when calling the getTokens function in server components, you're meant to pass a service account with its private key.

Is there a plan to add support for Workload Identity Federation? Downloading service account keys seems to be discouraged by GCP.

Thank you!

[awinogrodzki]

Hey @antspy,

At the moment, the library does not support Workload Identity Federation.

It does not require serviceAccount though, if you're running the app in Google Cloud Run environment with Service Account configured, as per Usage in Google Cloud Run Environment

Identity Pool support could be added in the future. Let's keep this issue open for a reference