Imports are listed. setTrustBoundaries removed.

Author: vverman

oauth2_http/java/com/google/auth/oauth2/ExternalAccountAuthorizedUserCredentials.java

@@ -31,7 +31,9 @@
 
 package com.google.auth.oauth2;
 
-import static com.google.auth.oauth2.OAuth2Utils.*;
+import static com.google.auth.oauth2.OAuth2Utils.IAM_CREDENTIALS_ALLOWED_LOCATIONS_URL_FORMAT_WORKFORCE_POOL;
+import static com.google.auth.oauth2.OAuth2Utils.JSON_FACTORY;
+import static com.google.auth.oauth2.OAuth2Utils.WORKFORCE_AUDIENCE_PATTERN;
 import static com.google.common.base.Preconditions.checkNotNull;
 
 import com.google.api.client.http.GenericUrl;

oauth2_http/java/com/google/auth/oauth2/ExternalAccountCredentials.java

@@ -533,10 +533,9 @@ protected AccessToken exchangeExternalCredentialForAccessToken(
     }
     if (this.impersonatedCredentials != null) {
       AccessToken accessToken = this.impersonatedCredentials.refreshAccessToken();
-      // We use the impersonated account's credential as the trust boundary
-      // since the regional restriction is bounded by the access that the
-      // impersonated account has.
-      setTrustBoundary(this.impersonatedCredentials.getTrustBoundary());
+      // After the impersonated credential refreshes, its trust boundary is
+      // also refreshed. That is the trust boundary we will use.
+      this.trustBoundary = this.impersonatedCredentials.getTrustBoundary();
       return accessToken;
     }
 

oauth2_http/java/com/google/auth/oauth2/GoogleCredentials.java

@@ -108,7 +108,7 @@ String getFileType() {
   private final String universeDomain;
   private final boolean isExplicitUniverseDomain;
 
-  private TrustBoundary trustBoundary;
+  TrustBoundary trustBoundary;
 
   protected final String quotaProjectId;