credentials/google/google: Add cloud-platform scope for ADC

halvards · halvards · commit 35e8dd5547b6 · 2024-12-02T16:29:32.000+11:00
Fixes grpc#7886
diff --git a/credentials/google/google.go b/credentials/google/google.go
@@ -30,6 +30,8 @@ import (
 	"google.golang.org/grpc/internal"
 )
 
+const defaultCloudPlatformScope = "https://www.googleapis.com/auth/cloud-platform"
+
 var logger = grpclog.Component("credentials")
 
 // DefaultCredentialsOptions constructs options to build DefaultCredentials.
@@ -120,7 +122,7 @@ var (
 		return alts.NewClientCreds(alts.DefaultClientOptions())
 	}
 	newADC = func(ctx context.Context) (credentials.PerRPCCredentials, error) {
-		return oauth.NewApplicationDefault(ctx)
+		return oauth.NewApplicationDefault(ctx, defaultCloudPlatformScope)
 	}
 )
 

Original file line number	Diff line number	Diff line change
`@@ -30,6 +30,8 @@ import (`
`30`	`30`	`"google.golang.org/grpc/internal"`
`31`	`31`	`)`
`32`	`32`
	`33`	`+const defaultCloudPlatformScope = "https://www.googleapis.com/auth/cloud-platform"`
	`34`	`+`
`33`	`35`	`var logger = grpclog.Component("credentials")`
`34`	`36`
`35`	`37`	`// DefaultCredentialsOptions constructs options to build DefaultCredentials.`
`@@ -120,7 +122,7 @@ var (`
`120`	`122`	`return alts.NewClientCreds(alts.DefaultClientOptions())`
`121`	`123`	`}`
`122`	`124`	`newADC = func(ctx context.Context) (credentials.PerRPCCredentials, error) {`
`123`		`- return oauth.NewApplicationDefault(ctx)`
	`125`	`+ return oauth.NewApplicationDefault(ctx, defaultCloudPlatformScope)`
`124`	`126`	`}`
`125`	`127`	`)`
`126`	`128`