Skip to content

Commit a65c22d

Browse files
authored
fix: Do not retrieve the default SA principal when getting an access token (#1839)
* fix: Do not retrieve the default SA account when getting an access token * chore: Fix the logging tests
1 parent 39fdc64 commit a65c22d

File tree

2 files changed

+4
-39
lines changed

2 files changed

+4
-39
lines changed

oauth2_http/java/com/google/auth/oauth2/ComputeEngineCredentials.java

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -344,11 +344,6 @@ private String getUniverseDomainFromMetadata() throws IOException {
344344
/** Refresh the access token by getting it from the GCE metadata server */
345345
@Override
346346
public AccessToken refreshAccessToken() throws IOException {
347-
// Retrieve the default service account email prior to retrieving the access token
348-
if (principal == null) {
349-
principal = getDefaultServiceAccount();
350-
}
351-
352347
HttpResponse response =
353348
getMetadataResponse(createTokenUrlWithScopes(), RequestType.ACCESS_TOKEN_REQUEST, true);
354349
int statusCode = response.getStatusCode();

oauth2_http/javatests/com/google/auth/oauth2/LoggingTest.java

Lines changed: 4 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -441,39 +441,9 @@ public void getRequestMetadata_hasAccessToken() throws IOException {
441441

442442
TestUtils.assertContainsBearerToken(metadata, ACCESS_TOKEN);
443443

444-
assertEquals(6, testAppender.events.size());
445-
446-
ILoggingEvent defaultServiceAccountRequest = testAppender.events.get(0);
447-
assertEquals(
448-
"Sending request for universe domain/default service account",
449-
defaultServiceAccountRequest.getMessage());
450-
assertEquals(3, defaultServiceAccountRequest.getKeyValuePairs().size());
451-
for (KeyValuePair kvp : defaultServiceAccountRequest.getKeyValuePairs()) {
452-
assertTrue(
453-
kvp.key.equals("request.headers")
454-
|| kvp.key.equals("request.method")
455-
|| kvp.key.equals("request.url"));
456-
if (kvp.key.equals("request.headers")) {
457-
assertTrue(isValidJson((String) kvp.value));
458-
}
459-
}
460-
ILoggingEvent defaultServiceAccountResponse = testAppender.events.get(1);
461-
assertEquals(
462-
"Received response for universe domain/default service account",
463-
defaultServiceAccountResponse.getMessage());
464-
assertEquals(3, defaultServiceAccountResponse.getKeyValuePairs().size());
465-
for (KeyValuePair kvp : defaultServiceAccountResponse.getKeyValuePairs()) {
466-
assertTrue(
467-
kvp.key.equals("response.headers")
468-
|| kvp.key.equals("response.status")
469-
|| kvp.key.equals("response.status.message"));
470-
}
471-
ILoggingEvent defaultServiceAccountPayload = testAppender.events.get(2);
472-
assertEquals(
473-
"Received default service account payload", defaultServiceAccountPayload.getMessage());
474-
assertEquals(1, defaultServiceAccountPayload.getKeyValuePairs().size());
444+
assertEquals(3, testAppender.events.size());
475445

476-
ILoggingEvent accessTokenRequest = testAppender.events.get(3);
446+
ILoggingEvent accessTokenRequest = testAppender.events.get(0);
477447
assertEquals("Sending request to refresh access token", accessTokenRequest.getMessage());
478448
assertEquals(3, accessTokenRequest.getKeyValuePairs().size());
479449
for (KeyValuePair kvp : accessTokenRequest.getKeyValuePairs()) {
@@ -485,7 +455,7 @@ public void getRequestMetadata_hasAccessToken() throws IOException {
485455
assertTrue(isValidJson((String) kvp.value));
486456
}
487457
}
488-
ILoggingEvent accessTokenResponse = testAppender.events.get(4);
458+
ILoggingEvent accessTokenResponse = testAppender.events.get(1);
489459
assertEquals("Received response for refresh access token", accessTokenResponse.getMessage());
490460
assertEquals(3, accessTokenResponse.getKeyValuePairs().size());
491461
for (KeyValuePair kvp : accessTokenResponse.getKeyValuePairs()) {
@@ -494,7 +464,7 @@ public void getRequestMetadata_hasAccessToken() throws IOException {
494464
|| kvp.key.equals("response.status")
495465
|| kvp.key.equals("response.status.message"));
496466
}
497-
ILoggingEvent accessTokenPayload = testAppender.events.get(5);
467+
ILoggingEvent accessTokenPayload = testAppender.events.get(2);
498468
assertEquals("Response payload for access token", accessTokenPayload.getMessage());
499469
assertEquals(3, accessTokenPayload.getKeyValuePairs().size());
500470

0 commit comments

Comments
 (0)