Moving token to post for tokeninfo call

googleapis · Sep 22, 2022 · 8dcc05e · 8dcc05e
1 parent 96bba68
commit 8dcc05e
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/google/auth/compute_engine/_metadata.py b/google/auth/compute_engine/_metadata.py
@@ -264,5 +264,5 @@ def get_service_account_token(request, service_account="default", scopes=None):
     token_expiry = _helpers.utcnow() + datetime.timedelta(
         seconds=token_json["expires_in"]
     )
-    _LOGGER.debug("Received token with expiry: %s", token_json["expires_in"])
+    _LOGGER.debug("Received token with expiry: %s, %s", token_expiry, token_json["expires_in"])
     return token_json["access_token"], token_expiry
diff --git a/google/auth/credentials.py b/google/auth/credentials.py
@@ -120,11 +120,11 @@ def apply(self, headers, token=None):
             if self.expiry is None:
                 _LOGGER.debug("expiry is none")
             elif _helpers.utcnow() >= self.expiry - datetime.timedelta(seconds=600):
-                token_info_response = requests.get(
-                    "https://oauth2.googleapis.com/tokeninfo?access_token={}".format(
-                        self.token
-                    )
+                token_info_response = requests.post(
+                    "https://oauth2.googleapis.com/tokeninfo",
+                    data = {"access_token": self.token}
                 )
+
                 token_expires_in = 10000
                 if token_info_response.status_code == 200:
                     parsed_json = token_info_response.json()

diff --git a/google/auth/version.py b/google/auth/version.py
@@ -12,4 +12,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-__version__ = "2.11.2-dev2"
+__version__ = "2.11.2-dev3"