Audience URI? about google-auth-library-java

[chingor13]

Sorry for the delay in getting to this.

After further review, this looks like a legit bug - BigQuery is using the older generated clients (com.google.apis:google-api-services-bigquery) and it's not supplying an audience id for the request when requesting getRequestMetadata() from the credentials.

[elharo]

So is the bug here or in BigQuery? Do we need to upgrade BigQuery to the latest auth library? Or fix its calls? Or both?

[chingor13]

Finally, getting back to this issue - it has 2 parts:

First, is the exception which seems to be a bug and is addressed in #223 - the request initializer is trying to build a token before the request's URI is set. We can delay fetching the token until right before the request is executed using an HttpRequestInterceptor.

Second, is that this use case won't work as the BigQuery API does not allow for signed JWTs - it requires an OAuth 2.0 token so the ServiceAccountJWTCredentials cannot be used against it.

[sduskis]

It sounds like there's nothing actionable on this issue in the google-auth-library-java repo. Please contact the BigQuery team for support or a feature request (https://cloud.google.com/bigquery/support) for the signed JWT credentials support.