fix: Override toBuilder() for ExternalAccountCredential and subclasses

Author: lqiu96

oauth2_http/java/com/google/auth/oauth2/AwsCredentials.java

@@ -233,6 +233,11 @@ public static AwsCredentials.Builder newBuilder(AwsCredentials awsCredentials) {
     return new AwsCredentials.Builder(awsCredentials);
   }
 
+  @Override
+  public AwsCredentials.Builder toBuilder() {
+    return new AwsCredentials.Builder(this);
+  }
+
   public static class Builder extends ExternalAccountCredentials.Builder {
 
     private AwsSecurityCredentialsSupplier awsSecurityCredentialsSupplier;

oauth2_http/java/com/google/auth/oauth2/ExternalAccountCredentials.java

@@ -682,6 +682,9 @@ private static boolean isValidUrl(String url) {
     return true;
   }
 
+  @Override
+  public abstract ExternalAccountCredentials.Builder toBuilder();
+
   /**
    * Encapsulates the service account impersonation options portion of the configuration for
    * ExternalAccountCredentials.

oauth2_http/java/com/google/auth/oauth2/IdentityPoolCredentials.java

@@ -153,6 +153,11 @@ public static Builder newBuilder(IdentityPoolCredentials identityPoolCredentials
     return new Builder(identityPoolCredentials);
   }
 
+  @Override
+  public IdentityPoolCredentials.Builder toBuilder() {
+    return new IdentityPoolCredentials.Builder(this);
+  }
+
   private IdentityPoolSubjectTokenSupplier createCertificateSubjectTokenSupplier(
       Builder builder, IdentityPoolCredentialSource credentialSource) throws IOException {
     // Configure the mTLS transport with the x509 keystore.

oauth2_http/java/com/google/auth/oauth2/PluggableAuthCredentials.java

@@ -203,6 +203,11 @@ public static Builder newBuilder(PluggableAuthCredentials pluggableAuthCredentia
     return new Builder(pluggableAuthCredentials);
   }
 
+  @Override
+  public PluggableAuthCredentials.Builder toBuilder() {
+    return new PluggableAuthCredentials.Builder(this);
+  }
+
   @VisibleForTesting
   @Nullable
   ExecutableHandler getExecutableHandler() {