feat: Enable Bound Token for Agentic Identities - #13873

Open

macastelaz wants to merge 26 commits into

googleapis:agentic-identities-bound-tokenfrom

macastelaz:pr-13169-fixes

Commits on Jul 29, 2026

Port Agent Identities feature for Cloud Run

vverman
authored and
macastelaz
committed
0af6032
Added support for:

vverman
authored and
macastelaz
committed
9d5672f
Added logic to verify key and cert to ensure no mismatch along with retry logic.

vverman
authored and
macastelaz
committed
a591db4
Added documentation and addressed comments.

vverman
authored and
macastelaz
committed
18afacb
lint fix.

vverman
authored and
macastelaz
committed
7a2ae21
Fix unaddressed comments from PR 13169
macastelaz
committed
2c1c298
Fix incorrect fail-fast logic for custom certificate config paths
macastelaz
committed
0e3d440
Fix AgentIdentityUtils token binding logic and TOCTOU vulnerabilities
macastelaz
committed
c5fab1d
Fix token binding 30s timeout on permission and absent config errors
macastelaz
committed
0036d0c
fix: resolve lint/formatting issues in AgentIdentityUtils
macastelaz
committed
4d99d25
fix: resolve checkstyle and format violations
macastelaz
committed
727b596
test: add edge case coverage and refactor brittle resource loading
macastelaz
committed
bd2f98b
style: fix checkstyle violations in auth utilities
macastelaz
committed
e3d105e
Fix AgentIdentityUtilsTest compilation after checkstyle
macastelaz
committed
cb71972
test: fix missing InputStream import in tests
macastelaz
committed
a4b6192
Restore EnableAutoValue.txt for AutoValue annotation processor
macastelaz
committed
71cd2c1
Restore accidentally deleted gradle-wrapper.jar
macastelaz
committed
ea07ce4
style: fix formatting violations in oauth2_http
macastelaz
committed
5b1c82b
docs(oauth2): Make AgentIdentityUtils Javadoc comments proper and fulfill CI formatting rules
macastelaz
committed
0649e49

Commits on Aug 5, 2026

fix(oauth2): address PR 13873 review findings for agent identity token binding
macastelaz
committed
6181f6a

Commits on Sep 3, 2026

Commits on Sep 16, 2026

Commits on Sep 17, 2026

fix(auth): address second round of review feedback on bound tokens
macastelaz
committed
618a317

Navigation Menu

feat: Enable Bound Token for Agentic Identities - #13873

feat: Enable Bound Token for Agentic Identities#13873
macastelaz wants to merge 26 commits into
googleapis:agentic-identities-bound-tokenfrom
macastelaz:pr-13169-fixes

Commits on Jul 29, 2026

Port Agent Identities feature for Cloud Run

Added support for:

Added logic to verify key and cert to ensure no mismatch along with retry logic.

Added documentation and addressed comments.

lint fix.

Fix unaddressed comments from PR 13169

Fix incorrect fail-fast logic for custom certificate config paths

Fix AgentIdentityUtils token binding logic and TOCTOU vulnerabilities

Fix token binding 30s timeout on permission and absent config errors

fix: resolve lint/formatting issues in AgentIdentityUtils

fix: resolve checkstyle and format violations

test: add edge case coverage and refactor brittle resource loading

style: fix checkstyle violations in auth utilities

Fix AgentIdentityUtilsTest compilation after checkstyle

test: fix missing InputStream import in tests

Restore EnableAutoValue.txt for AutoValue annotation processor

Restore accidentally deleted gradle-wrapper.jar

style: fix formatting violations in oauth2_http

docs(oauth2): Make AgentIdentityUtils Javadoc comments proper and fulfill CI formatting rules

Commits on Aug 5, 2026

fix(oauth2): address PR 13873 review findings for agent identity token binding

Commits on Sep 3, 2026

fix(oauth2): address PR 13873 review feedback for agent identity token binding

docs(oauth2): make AgentIdentityUtils class Javadoc runtime-agnostic

docs(oauth2): clarify certificate-only fallback comment in AgentIdentityUtils

Commits on Sep 16, 2026

fix(oauth2): address PR 13873 review feedback on polling, caching, and key validation

fix(oauth2): strictly require key_path and verifyKeyPair for bound token credentials

Commits on Sep 17, 2026

fix(auth): address second round of review feedback on bound tokens