googleapis · gcf-merge-on-green · Jul 16, 2022 · Jun 23, 2022 · Jun 23, 2022 · Jul 5, 2022
diff --git a/google/cloud/video/transcoder_v1/services/transcoder_service/client.py b/google/cloud/video/transcoder_v1/services/transcoder_service/client.py
@@ -457,6 +457,7 @@ def __init__(
                quota_project_id=client_options.quota_project_id,
                client_info=client_info,
                always_use_jwt_access=True,
+                api_audience=client_options.api_audience,
            )

    def create_job(

diff --git a/google/cloud/video/transcoder_v1/services/transcoder_service/transports/base.py b/google/cloud/video/transcoder_v1/services/transcoder_service/transports/base.py
@@ -55,6 +55,7 @@ def __init__(
        quota_project_id: Optional[str] = None,
        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
        always_use_jwt_access: Optional[bool] = False,
+        api_audience: Optional[str] = None,
        **kwargs,
    ) -> None:
        """Instantiate the transport.
@@ -82,11 +83,6 @@ def __init__(
                be used for service account credentials.
        """

-        # Save the hostname. Default to port 443 (HTTPS) if none is specified.
-        if ":" not in host:
-            host += ":443"
-        self._host = host
-
        scopes_kwargs = {"scopes": scopes, "default_scopes": self.AUTH_SCOPES}

        # Save the scopes.
@@ -107,6 +103,11 @@ def __init__(
            credentials, _ = google.auth.default(
                **scopes_kwargs, quota_project_id=quota_project_id
            )
+            # Don't apply audience if the credentials file passed from user.
+            if hasattr(credentials, "with_gdch_audience"):
+                credentials = credentials.with_gdch_audience(
+                    api_audience if api_audience else host
+                )

        # If the credentials are service account credentials, then always try to use self signed JWT.
        if (
@@ -119,6 +120,11 @@ def __init__(
        # Save the credentials.
        self._credentials = credentials

+        # Save the hostname. Default to port 443 (HTTPS) if none is specified.
+        if ":" not in host:
+            host += ":443"
+        self._host = host
+
    def _prep_wrapped_messages(self, client_info):
        # Precompute the wrapped methods.
        self._wrapped_methods = {

diff --git a/google/cloud/video/transcoder_v1/services/transcoder_service/transports/grpc.py b/google/cloud/video/transcoder_v1/services/transcoder_service/transports/grpc.py
@@ -64,6 +64,7 @@ def __init__(
        quota_project_id: Optional[str] = None,
        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
        always_use_jwt_access: Optional[bool] = False,
+        api_audience: Optional[str] = None,
    ) -> None:
        """Instantiate the transport.

@@ -159,6 +160,7 @@ def __init__(
            quota_project_id=quota_project_id,
            client_info=client_info,
            always_use_jwt_access=always_use_jwt_access,
+            api_audience=api_audience,
        )

        if not self._grpc_channel:

diff --git a/google/cloud/video/transcoder_v1/services/transcoder_service/transports/grpc_asyncio.py b/google/cloud/video/transcoder_v1/services/transcoder_service/transports/grpc_asyncio.py
@@ -109,6 +109,7 @@ def __init__(
        quota_project_id=None,
        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
        always_use_jwt_access: Optional[bool] = False,
+        api_audience: Optional[str] = None,
    ) -> None:
        """Instantiate the transport.

@@ -204,6 +205,7 @@ def __init__(
            quota_project_id=quota_project_id,
            client_info=client_info,
            always_use_jwt_access=always_use_jwt_access,
+            api_audience=api_audience,
        )

        if not self._grpc_channel:

diff --git a/setup.py b/setup.py
@@ -42,10 +42,7 @@
    platforms="Posix; MacOS X; Windows",
    include_package_data=True,
    install_requires=(
-        # NOTE: Maintainers, please do not require google-api-core>=2.x.x
-        # Until this issue is closed
-        # https://github.com/googleapis/google-cloud-python/issues/10566
-        "google-api-core[grpc] >= 1.31.5, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.0",
+        "google-api-core[grpc] >= 1.32.0, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*",
        "proto-plus >= 1.20.3, <2.0.0dev",
        "protobuf >= 3.19.0, <4.0.0dev",
    ),

diff --git a/testing/constraints-3.6.txt b/testing/constraints-3.6.txt
diff --git a/testing/constraints-3.7.txt b/testing/constraints-3.7.txt
@@ -5,6 +5,6 @@
 #
 # e.g., if setup.py has "foo >= 1.14.0, < 2.0.0dev",
 # Then this file should have foo==1.14.0
-google-api-core==1.31.5
+google-api-core==1.32.0
 proto-plus==1.20.3
 protobuf==3.19.0
diff --git a/tests/unit/gapic/transcoder_v1/test_transcoder_service.py b/tests/unit/gapic/transcoder_v1/test_transcoder_service.py
@@ -232,6 +232,7 @@ def test_transcoder_service_client_client_options(
            quota_project_id=None,
            client_info=transports.base.DEFAULT_CLIENT_INFO,
            always_use_jwt_access=True,
+            api_audience=None,
        )

    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
@@ -249,6 +250,7 @@ def test_transcoder_service_client_client_options(
                quota_project_id=None,
                client_info=transports.base.DEFAULT_CLIENT_INFO,
                always_use_jwt_access=True,
+                api_audience=None,
            )

    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
@@ -266,6 +268,7 @@ def test_transcoder_service_client_client_options(
                quota_project_id=None,
                client_info=transports.base.DEFAULT_CLIENT_INFO,
                always_use_jwt_access=True,
+                api_audience=None,
            )

    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT has
@@ -295,6 +298,25 @@ def test_transcoder_service_client_client_options(
            quota_project_id="octopus",
            client_info=transports.base.DEFAULT_CLIENT_INFO,
            always_use_jwt_access=True,
+            api_audience=None,
+        )
+    # Check the case api_endpoint is provided
+    options = client_options.ClientOptions(
+        api_audience="https://language.googleapis.com"
+    )
+    with mock.patch.object(transport_class, "__init__") as patched:
+        patched.return_value = None
+        client = client_class(client_options=options, transport=transport_name)
+        patched.assert_called_once_with(
+            credentials=None,
+            credentials_file=None,
+            host=client.DEFAULT_ENDPOINT,
+            scopes=None,
+            client_cert_source_for_mtls=None,
+            quota_project_id=None,
+            client_info=transports.base.DEFAULT_CLIENT_INFO,
+            always_use_jwt_access=True,
+            api_audience="https://language.googleapis.com",
        )


@@ -372,6 +394,7 @@ def test_transcoder_service_client_mtls_env_auto(
                quota_project_id=None,
                client_info=transports.base.DEFAULT_CLIENT_INFO,
                always_use_jwt_access=True,
+                api_audience=None,
            )

    # Check the case ADC client cert is provided. Whether client cert is used depends on
@@ -406,6 +429,7 @@ def test_transcoder_service_client_mtls_env_auto(
                        quota_project_id=None,
                        client_info=transports.base.DEFAULT_CLIENT_INFO,
                        always_use_jwt_access=True,
+                        api_audience=None,
                    )

    # Check the case client_cert_source and ADC client cert are not provided.
@@ -428,6 +452,7 @@ def test_transcoder_service_client_mtls_env_auto(
                    quota_project_id=None,
                    client_info=transports.base.DEFAULT_CLIENT_INFO,
                    always_use_jwt_access=True,
+                    api_audience=None,
                )


@@ -542,6 +567,7 @@ def test_transcoder_service_client_client_options_scopes(
            quota_project_id=None,
            client_info=transports.base.DEFAULT_CLIENT_INFO,
            always_use_jwt_access=True,
+            api_audience=None,
        )


@@ -580,6 +606,7 @@ def test_transcoder_service_client_client_options_credentials_file(
            quota_project_id=None,
            client_info=transports.base.DEFAULT_CLIENT_INFO,
            always_use_jwt_access=True,
+            api_audience=None,
        )


@@ -600,6 +627,7 @@ def test_transcoder_service_client_client_options_from_dict():
            quota_project_id=None,
            client_info=transports.base.DEFAULT_CLIENT_INFO,
            always_use_jwt_access=True,
+            api_audience=None,
        )


@@ -638,6 +666,7 @@ def test_transcoder_service_client_create_channel_credentials_file(
            quota_project_id=None,
            client_info=transports.base.DEFAULT_CLIENT_INFO,
            always_use_jwt_access=True,
+            api_audience=None,
        )

    # test that the credentials from file are saved and used as the credentials.
@@ -3217,6 +3246,28 @@ def test_transcoder_service_transport_auth_adc(transport_class):
        )


+@pytest.mark.parametrize(
+    "transport_class",
+    [
+        transports.TranscoderServiceGrpcTransport,
+        transports.TranscoderServiceGrpcAsyncIOTransport,
+    ],
+)
+def test_transcoder_service_transport_auth_gdch_credentials(transport_class):
+    host = "https://language.com"
+    api_audience_tests = [None, "https://language2.com"]
+    api_audience_expect = [host, "https://language2.com"]
+    for t, e in zip(api_audience_tests, api_audience_expect):
+        with mock.patch.object(google.auth, "default", autospec=True) as adc:
+            gdch_mock = mock.MagicMock()
+            type(gdch_mock).with_gdch_audience = mock.PropertyMock(
+                return_value=gdch_mock
+            )
+            adc.return_value = (gdch_mock, None)
+            transport_class(host=host, api_audience=t)
+            gdch_mock.with_gdch_audience.assert_called_once_with(e)
+
+
 @pytest.mark.parametrize(
    "transport_class,grpc_helpers",
    [
@@ -3716,4 +3767,5 @@ def test_api_key_credentials(client_class, transport_class):
                quota_project_id=None,
                client_info=transports.base.DEFAULT_CLIENT_INFO,
                always_use_jwt_access=True,
+                api_audience=None,
            )