fix(deps): require google-api-core>=1.32.0,>=2.8.0 (#120)

- [ ] Regenerate this pull request now. PiperOrigin-RevId: 459095142 Source-Link: googleapis/googleapis@4f1be99 Source-Link: https://github.com/googleapis/googleapis-gen/commit/ae686d9cde4fc3e36d0ac02efb8643b15890c1ed Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiYWU2ODZkOWNkZTRmYzNlMzZkMGFjMDJlZmI4NjQzYjE1ODkwYzFlZCJ9 feat: add audience parameter PiperOrigin-RevId: 456827138 Source-Link: googleapis/googleapis@23f1a15 Source-Link: https://github.com/googleapis/googleapis-gen/commit/4075a8514f676691ec156688a5bbf183aa9893ce Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiNDA3NWE4NTE0ZjY3NjY5MWVjMTU2Njg4YTViYmYxODNhYTk4OTNjZSJ9

Author: gcf-owl-bot[bot]

google/cloud/vpcaccess_v1/services/vpc_access_service/client.py

@@ -432,6 +432,7 @@ def __init__(
  quota_project_id=client_options.quota_project_id,
  client_info=client_info,
  always_use_jwt_access=True,
+ api_audience=client_options.api_audience,
  )
 
  def create_connector(

google/cloud/vpcaccess_v1/services/vpc_access_service/transports/base.py

@@ -55,6 +55,7 @@ def __init__(
  quota_project_id: Optional[str] = None,
  client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
  always_use_jwt_access: Optional[bool] = False,
+ api_audience: Optional[str] = None,
  **kwargs,
  ) -> None:
  """Instantiate the transport.
@@ -82,11 +83,6 @@ def __init__(
  be used for service account credentials.
  """
 
- # Save the hostname. Default to port 443 (HTTPS) if none is specified.
- if ":" not in host:
- host += ":443"
- self._host = host
-
  scopes_kwargs = {"scopes": scopes, "default_scopes": self.AUTH_SCOPES}
 
  # Save the scopes.
@@ -107,6 +103,11 @@ def __init__(
  credentials, _ = google.auth.default(
  **scopes_kwargs, quota_project_id=quota_project_id
  )
+ # Don't apply audience if the credentials file passed from user.
+ if hasattr(credentials, "with_gdch_audience"):
+ credentials = credentials.with_gdch_audience(
+ api_audience if api_audience else host
+ )
 
  # If the credentials are service account credentials, then always try to use self signed JWT.
  if (
@@ -119,6 +120,11 @@ def __init__(
  # Save the credentials.
  self._credentials = credentials
 
+ # Save the hostname. Default to port 443 (HTTPS) if none is specified.
+ if ":" not in host:
+ host += ":443"
+ self._host = host
+
  def _prep_wrapped_messages(self, client_info):
  # Precompute the wrapped methods.
  self._wrapped_methods = {

google/cloud/vpcaccess_v1/services/vpc_access_service/transports/grpc.py

@@ -60,6 +60,7 @@ def __init__(
  quota_project_id: Optional[str] = None,
  client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
  always_use_jwt_access: Optional[bool] = False,
+ api_audience: Optional[str] = None,
  ) -> None:
  """Instantiate the transport.
 
@@ -156,6 +157,7 @@ def __init__(
  quota_project_id=quota_project_id,
  client_info=client_info,
  always_use_jwt_access=always_use_jwt_access,
+ api_audience=api_audience,
  )
 
  if not self._grpc_channel:

google/cloud/vpcaccess_v1/services/vpc_access_service/transports/grpc_asyncio.py

@@ -105,6 +105,7 @@ def __init__(
  quota_project_id=None,
  client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
  always_use_jwt_access: Optional[bool] = False,
+ api_audience: Optional[str] = None,
  ) -> None:
  """Instantiate the transport.
 
@@ -201,6 +202,7 @@ def __init__(
  quota_project_id=quota_project_id,
  client_info=client_info,
  always_use_jwt_access=always_use_jwt_access,
+ api_audience=api_audience,
  )
 
  if not self._grpc_channel:

setup.py

@@ -25,10 +25,7 @@
 release_status = "Development Status :: 5 - Production/Stable"
 url = "https://github.com/googleapis/python-vpc-access"
 dependencies = [
- # NOTE: Maintainers, please do not require google-api-core>=2.x.x
- # Until this issue is closed
- # https://github.com/googleapis/google-cloud-python/issues/10566
- "google-api-core[grpc] >= 1.31.5, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.0",
+ "google-api-core[grpc] >= 1.32.0, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*",
  "proto-plus >= 1.15.0, <2.0.0dev",
  "protobuf >= 3.19.0, <4.0.0dev",
 ]

testing/constraints-3.6.txt

@@ -0,0 +1,9 @@
+# This constraints file is used to check that lower bounds
+# are correct in setup.py
+# List all library dependencies and extras in this file.
+# Pin the version to the lower bound.
+# e.g., if setup.py has "google-cloud-foo >= 1.14.0, < 2.0.0dev",
+# Then this file should have google-cloud-foo==1.14.0
+google-api-core==1.32.0
+proto-plus==1.15.0
+protobuf==3.19.0

testing/constraints-3.7.txt

@@ -238,6 +238,7 @@ def test_vpc_access_service_client_client_options(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
  # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
@@ -255,6 +256,7 @@ def test_vpc_access_service_client_client_options(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
  # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
@@ -272,6 +274,7 @@ def test_vpc_access_service_client_client_options(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
  # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT has
@@ -301,6 +304,25 @@ def test_vpc_access_service_client_client_options(
  quota_project_id="octopus",
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
+ )
+ # Check the case api_endpoint is provided
+ options = client_options.ClientOptions(
+ api_audience="https://language.googleapis.com"
+ )
+ with mock.patch.object(transport_class, "__init__") as patched:
+ patched.return_value = None
+ client = client_class(client_options=options, transport=transport_name)
+ patched.assert_called_once_with(
+ credentials=None,
+ credentials_file=None,
+ host=client.DEFAULT_ENDPOINT,
+ scopes=None,
+ client_cert_source_for_mtls=None,
+ quota_project_id=None,
+ client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
+ api_audience="https://language.googleapis.com",
  )
 
 
@@ -378,6 +400,7 @@ def test_vpc_access_service_client_mtls_env_auto(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
  # Check the case ADC client cert is provided. Whether client cert is used depends on
@@ -412,6 +435,7 @@ def test_vpc_access_service_client_mtls_env_auto(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
  # Check the case client_cert_source and ADC client cert are not provided.
@@ -434,6 +458,7 @@ def test_vpc_access_service_client_mtls_env_auto(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
 
@@ -548,6 +573,7 @@ def test_vpc_access_service_client_client_options_scopes(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
 
@@ -586,6 +612,7 @@ def test_vpc_access_service_client_client_options_credentials_file(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
 
@@ -606,6 +633,7 @@ def test_vpc_access_service_client_client_options_from_dict():
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
 
@@ -644,6 +672,7 @@ def test_vpc_access_service_client_create_channel_credentials_file(
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )
 
  # test that the credentials from file are saved and used as the credentials.
@@ -2050,6 +2079,28 @@ def test_vpc_access_service_transport_auth_adc(transport_class):
  )
 
 
+@pytest.mark.parametrize(
+ "transport_class",
+ [
+ transports.VpcAccessServiceGrpcTransport,
+ transports.VpcAccessServiceGrpcAsyncIOTransport,
+ ],
+)
+def test_vpc_access_service_transport_auth_gdch_credentials(transport_class):
+ host = "https://language.com"
+ api_audience_tests = [None, "https://language2.com"]
+ api_audience_expect = [host, "https://language2.com"]
+ for t, e in zip(api_audience_tests, api_audience_expect):
+ with mock.patch.object(google.auth, "default", autospec=True) as adc:
+ gdch_mock = mock.MagicMock()
+ type(gdch_mock).with_gdch_audience = mock.PropertyMock(
+ return_value=gdch_mock
+ )
+ adc.return_value = (gdch_mock, None)
+ transport_class(host=host, api_audience=t)
+ gdch_mock.with_gdch_audience.assert_called_once_with(e)
+
+
 @pytest.mark.parametrize(
  "transport_class,grpc_helpers",
  [
@@ -2552,4 +2603,5 @@ def test_api_key_credentials(client_class, transport_class):
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
  always_use_jwt_access=True,
+ api_audience=None,
  )