quotaProject support to existing credentials classes (ServiceAccountCredentials, ClientViaServiceAccount, ClientFromFlow).clientViaApplicationDefaultCredentials now extracts quotaProject correctly from service account credentials JSON.clientViaServiceAccountImpersonation and ImpersonatedAuthClient now accept an optional baseClient.impersonated_service_account source files.external_account source files for Workload Identity Federation using Google Security Token Service.quota_project_id for Service Account credentials.CredentialsFileException and AuthorizationCallbackException classes.Exception, ArgumentError, and UnsupportedError) with more specific exception types throughout the package to improve error handling and debuggability.AuthClientSigningExtension.sign() now accepts an optional serviceAccountEmail parameter that is passed down to signBlob.AuthClientSigningExtension: Added sign() which accepts an optional serviceAccountCredentials argument, and getServiceAccountEmail().ServiceAccountCredentialsprojectId and universeDomain properties.sign() method for RSA-SHA256 signing.signBlob() function for signing via IAM Credentials API.MetadataServerAuthorizationFlowgetMetadataValue (caching) and fetchMetadataValue (non-caching) from package:google_cloud.refresh support to run().clientViaServiceAccountImpersonation() function and ImpersonatedAuthClient class for service account impersonation via IAM Credentials API.RSAPrivateKey which is exposed by ServiceAccountCredentials.google_cloud: ^0.3.0.meta: ^1.15.0.sdk: ^3.9.0.args dependency.RefreshFailedException.auth.dart library.sdk: ^3.6.0auth_browser.dartCodeResponse. Exports the same class from package:google_identity_serivces_web.auth_browser.dart: handle pop-up closed errors correctly.google_identity_services_web: ^0.3.0http: ^1.0.0package:http.README to include a warning about Flutter application usage.googlapis_auth.dartauthenticatedClient function: added optional bool closeUnderlyingClient parameter.auth_browser.dart libraryAuthenticationException and use it instead of Exception or StateError in many cases where authentication can fail.requestAccessCredentials, requestAuthorizationCode, revokeConsent, and CodeResponse to support the new Google Identity Services.createImplicitBrowserFlow function.auth_io.dart librarylistenPort parameter to clientViaUserConsent and obtainAccessCredentialsViaUserConsent.plugin_name during browser authorization.secret param in ClientId constructor is now optional.auth_browser library:auth2 Javascript API.hostedDomain to all applicable functions.createImplicitBrowserFlow: added (unsupported) enableDebugLogs param. (Maybe helpful for debugging, but should not be used in production.)auth_io library:obtainAccessCredentialsViaCodeExchangescopes are now acquired from the initial API call and not via a separate API call to the tokeninfo endpoint.codeVerifier parameter.hostedDomain parameter to many functions in auth_io.dart. If provided, restricts sign-in to Google Apps hosted accounts at that domain.clientViaApiKey is now exported from googleapis_auth.dart.String? details to UserConsentException.http://metadata/ to http://metadata.google.internal.RefreshFailedException - ServerRequestFailedException is used instead.googleapis_auth.dart library. It is convention to have the default library within a package align with the package name. auth.dart is now deprecated and will be removed in v2.fromJson factory and toJson method to AccessToken, AccessCredentials, and ClientId.dart:async import that isn't required for >=Dart 2.1.clientViaApplicationDefaultCredentials for obtaining credentials using ADC.ImplicitFlow.force parameter to the obtainAccessCredentialsViaUserConsent API.$GCE_METADATA_HOST.ResponseType, allowing applications to obtain an id_token using ImplicitBrowserFlow.package:http >=0.11.3+17 <0.13.0.dart:convert to lowercase.loginHint parameter to browser oauth2 flow APIs which can be used to specify a hint as to which user is being logged in.Added id_token to AccessCredentials
Migrated to Dart 2 BigInt.
crypto package.MetadataServerAuthorizationFlow instead of the deprecated “X-Google-Metadata-Request” header.ServiceAccountCredentials constructors to take an optional user argument to specify a user to impersonate.ServiceAccountCredentials.fromJson to accept a Map.README.mdforce and immediate arguments to runHybridFlow.forceUserConsent parameter to immediate.runHybridFlow function to auth_browser, with corresponding HybridFlowResult class.clientViaApiKey functions to auth_io ad auth_browser.