fix: enable self signed jwt for grpc (#57)

PiperOrigin-RevId: 386504689 Source-Link: googleapis/googleapis@762094a Source-Link: https://github.com/googleapis/googleapis-gen/commit/6bfc480e1a161d5de121c2bcc3745885d33b265a

Author: gcf-owl-bot[bot]

google/cloud/managedidentities_v1/services/managed_identities_service/client.py

@@ -387,6 +387,10 @@ def __init__(
  client_cert_source_for_mtls=client_cert_source_func,
  quota_project_id=client_options.quota_project_id,
  client_info=client_info,
+ always_use_jwt_access=(
+ Transport == type(self).get_transport_class("grpc")
+ or Transport == type(self).get_transport_class("grpc_asyncio")
+ ),
  )
 
  def create_microsoft_ad_domain(

tests/unit/gapic/managedidentities_v1/test_managed_identities_service.py

@@ -133,27 +133,14 @@ def test_managed_identities_service_client_from_service_account_info(client_clas
  assert client.transport._host == "managedidentities.googleapis.com:443"
 
 
-@pytest.mark.parametrize(
- "client_class",
- [ManagedIdentitiesServiceClient, ManagedIdentitiesServiceAsyncClient,],
-)
-def test_managed_identities_service_client_service_account_always_use_jwt(client_class):
- with mock.patch.object(
- service_account.Credentials, "with_always_use_jwt_access", create=True
- ) as use_jwt:
- creds = service_account.Credentials(None, None, None)
- client = client_class(credentials=creds)
- use_jwt.assert_not_called()
-
-
 @pytest.mark.parametrize(
  "transport_class,transport_name",
  [
  (transports.ManagedIdentitiesServiceGrpcTransport, "grpc"),
  (transports.ManagedIdentitiesServiceGrpcAsyncIOTransport, "grpc_asyncio"),
  ],
 )
-def test_managed_identities_service_client_service_account_always_use_jwt_true(
+def test_managed_identities_service_client_service_account_always_use_jwt(
  transport_class, transport_name
 ):
  with mock.patch.object(
@@ -163,6 +150,13 @@ def test_managed_identities_service_client_service_account_always_use_jwt_true(
  transport = transport_class(credentials=creds, always_use_jwt_access=True)
  use_jwt.assert_called_once_with(True)
 
+ with mock.patch.object(
+ service_account.Credentials, "with_always_use_jwt_access", create=True
+ ) as use_jwt:
+ creds = service_account.Credentials(None, None, None)
+ transport = transport_class(credentials=creds, always_use_jwt_access=False)
+ use_jwt.assert_not_called()
+
 
 @pytest.mark.parametrize(
  "client_class",
@@ -252,6 +246,7 @@ def test_managed_identities_service_client_client_options(
  client_cert_source_for_mtls=None,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
  # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
@@ -268,6 +263,7 @@ def test_managed_identities_service_client_client_options(
  client_cert_source_for_mtls=None,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
  # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
@@ -284,6 +280,7 @@ def test_managed_identities_service_client_client_options(
  client_cert_source_for_mtls=None,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
  # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT has
@@ -312,6 +309,7 @@ def test_managed_identities_service_client_client_options(
  client_cert_source_for_mtls=None,
  quota_project_id="octopus",
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
 
@@ -388,6 +386,7 @@ def test_managed_identities_service_client_mtls_env_auto(
  client_cert_source_for_mtls=expected_client_cert_source,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
  # Check the case ADC client cert is provided. Whether client cert is used depends on
@@ -421,6 +420,7 @@ def test_managed_identities_service_client_mtls_env_auto(
  client_cert_source_for_mtls=expected_client_cert_source,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
  # Check the case client_cert_source and ADC client cert are not provided.
@@ -442,6 +442,7 @@ def test_managed_identities_service_client_mtls_env_auto(
  client_cert_source_for_mtls=None,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
 
@@ -476,6 +477,7 @@ def test_managed_identities_service_client_client_options_scopes(
  client_cert_source_for_mtls=None,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
 
@@ -510,6 +512,7 @@ def test_managed_identities_service_client_client_options_credentials_file(
  client_cert_source_for_mtls=None,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )
 
 
@@ -529,6 +532,7 @@ def test_managed_identities_service_client_client_options_from_dict():
  client_cert_source_for_mtls=None,
  quota_project_id=None,
  client_info=transports.base.DEFAULT_CLIENT_INFO,
+ always_use_jwt_access=True,
  )