Repository navigation
Scopes not configured for service account error #341
Copy link
Copy link
Closed
Labels
🚨 criticalP0 critical issue. Requires immediate fixP0 critical issue. Requires immediate fixapi: coreauthtriage meI really want to be triaged.I really want to be triaged.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.
Description
This error occurs to me when I try to use default credentials created from the GOOGLE_APPLICATION_CREDENTIALS variable. This is the error I get whenever I try to issue a request:
java.io.IOException: Scopes not configured for service account. Scoped should be specifed by calling createScoped or passing scopes to constructor.
at com.google.auth.oauth2.ServiceAccountCredentials.refreshAccessToken(ServiceAccountCredentials.java:183)
at com.google.auth.oauth2.OAuth2Credentials.refresh(OAuth2Credentials.java:76)
at com.google.auth.oauth2.OAuth2Credentials.getRequestMetadata(OAuth2Credentials.java:53)
at com.google.auth.http.HttpCredentialsAdapter.initialize(HttpCredentialsAdapter.java:40)
at com.google.gcloud.ServiceOptions$1.initialize(ServiceOptions.java:510)
at com.google.api.client.http.HttpRequestFactory.buildRequest(HttpRequestFactory.java:93)
at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.buildHttpRequest(AbstractGoogleClientRequest.java:300)
at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:419)
at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:352)
at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.execute(AbstractGoogleClientRequest.java:469)
at com.google.gcloud.spi.DefaultStorageRpc.list(DefaultStorageRpc.java:148)
It seems that to create default credentials based on the env variable we must supply the service scopes. This can be done by changing this line to:
GoogleCredentials.getApplicationDefault().createScoped(scopes);This would require, however, to change our AuthCredentials.createApplicationDefaults method to accept a set of scopes as a parameter.
Noticeably, scopes are not required to be passed when Google Cloud SDK credentials are used. Is this a desired behavior of the auth library? Should we add this scopes parameter?
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
🚨 criticalP0 critical issue. Requires immediate fixP0 critical issue. Requires immediate fixapi: coreauthtriage meI really want to be triaged.I really want to be triaged.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.
Activity
ajkannan commentedon Nov 10, 2015
@mziccard I noticed this too yesterday afternoon while doing auth cleanup. I will add scoping for the ApplicationDefaultCredentials in #337.
aozarov commentedon Nov 10, 2015
Fixed by #343
deps: update dependency com.google.cloud:google-cloud-shared-dependen…
chore: release 2.1.1 (#343)
chore(deps): update dependency com.google.cloud:google-cloud-workflow…
deps: update dependency com.google.cloud:google-cloud-bigquery to v2.…
chore(main): release 3.7.3 (#341)
deps: update dependency com.google.cloud:google-cloud-shared-dependen…
chore(main): release 1.2.9 (#342)
chore(main): release 2.3.9 (#349)
deps: update dependency io.grpc:grpc-stub to v1.46.0 (#341)
chore(main): release 1.3.4 (#345)
chore(main): release 2.0.0 (#739)
chore: release 2.1.0 (#341)
chore(deps): update dependency com.google.cloud:libraries-bom to v17 (#…
chore(master): release 1.105.8 (#341)
deps: update dependency com.google.http-client:google-http-client-bom…
chore: release 2.1.0 (googleapis#341)
deps: update dependency com.google.http-client:google-http-client-bom…
chore: Re-generated to pick up changes from synthtool. (googleapis#341)
build(deps): update dependency org.apache.maven.plugins:maven-project…
build(deps): update dependency org.apache.maven.plugins:maven-project…
deps: update autovalue.version to v1.7.3 (googleapis#341)