google/auth

1.53.0 (2026-07-22)

Features

• Add support for Guzzle 8 (#677) (6f4c5f6)
• Add workload identity federation support for AWS ECS tasks (#496) (#674) (ed26eec)

Features

• Add support for Guzzle 8 (#677) (6f4c5f6)
• Add workload identity federation support for AWS ECS tasks (#496) (#674) (ed26eec)

1.52.0 (2026-06-23)

Features

• Regional Access Boundaries (#649) (fe228ee)

Features

• Regional Access Boundaries (#649) (fe228ee)

1.51.0 (2026-06-09)

Features

• Add ExternalAccountAuthorizedUser credentials (#662) (47b05b0)

Features

• Add ExternalAccountAuthorizedUser credentials (#662) (47b05b0)

1.50.2 (2026-05-29)

Documentation

• fix phpdoc codeblocks in credentials classes (#661)

1.50.1 (2026-03-18)

Bug Fixes

• ImpersonatedCredentials getLastReceivedToken returns correct token (#655) (a4fe69c)
• Support psr/log 2 (#654) (4b746b8)

Bug Fixes

• ImpersonatedCredentials getLastReceivedToken returns correct token (#655) (a4fe69c)
• Support psr/log 2 (#654) (4b746b8)

1.50.0 (2026-01-08)

Features

• Support firebase/php-jwt 7 (#645) (ae52b0a)

Features

• Support firebase/php-jwt 7 (#645) (ae52b0a)

1.49.0 (2025-11-06)

Features

• Add semaphore locking to Sysv cache (#640) (38ea069)
• Json key scopes in ImpersonatedServiceAccountCredentials (#638) (b6b6966)

Bug Fixes

• Filecache race condition (#637) (09042be)

Features

• Add semaphore locking to Sysv cache (#640) (38ea069)
• Json key scopes in ImpersonatedServiceAccountCredentials (#638) (b6b6966)

Bug Fixes

• Filecache race condition (#637) (09042be)

1.48.1 (2025-09-29)

Bug Fixes

• Remove deprecated Item class for the CacheItemPool (#631) (7ec42c6)

Bug Fixes

• Remove deprecated Item class for the CacheItemPool (#631) (7ec42c6)

1.48.0 (2025-09-16)

Features

• Add the rpcName to the logged event (#630) (d1d9e21)

Bug Fixes

• Deprecate Credentials::makeCredentials (#624) (12bb6e8)

Features

• Add the rpcName to the logged event (#630) (d1d9e21)

Bug Fixes

• Deprecate Credentials::makeCredentials (#624) (12bb6e8)

1.47.1 (2025-07-08)

Bug Fixes

• Undefined index error in cache trait (#617) (ff7ece6)

Bug Fixes

• Undefined index error in cache trait (#617) (ff7ece6)

Features

• Add support for $_ENV in CredentialsLoader (#612) (3e63576)

Features

• Add support for Impersonating ID Tokens (#580) (66db27c)

Bug Fixes

• Return impersonated token as lastReceivedToken (#606) (33c3c85)

Documentation

• fix broken reference (#602)

Bug Fixes

• Minor changes to allow for refdoc regeneration (#600) (608115c)

Features

• Add StdOutLogger and LoggingTrait (#578) (4f793fe)

Features

• Add service account impersonation for access tokens (#586) (ba137b2)

Bug Fixes

• Add support for php 8.4, remove implicit nullable (#591) (3e1061b)

Features

• Add ID tokens for user refresh credentials (#468) (1601efc)
• Call IamCredentials endpoint for generating ID tokens outside GDU (#581) (2d7d03d)

Bug Fixes

• Compatability with php 8.4 (#584) (da1f02a)
• Update universe domain URI (#572) (6b00b66)

Features

• Add a file system cache class (#571) (8555cb0)
• Private key getters on service account credentials (https://github.com/googleapis/google-auth-library-php/pull/557) (d2fa07b)

Features

• Change getCacheKey implementation for more unique keys (#560) (a35c4db)

Features

• Add windows residency check (#553) (ec13a53)

Features

• Enable auth observability metrics (#509) (6495f31)

Features

• Add ExecutableSource credentials (#525) (d98900d)

Bug Fixes

• Use gmdate to format x-amz-date with UTC irrespective of timezone (#540) (3031d2c)

Features

• Add caching for universe domain (#533) (69249ab)

Features

• Universe domain for Iam (#531) (b905a56)

Features

• Add expires_in and token_type to tokens from ServiceAccountJwtAccessCredentials (#513) (ee2436d)
• Workforce credentials (#485) (c1b240f)

Bug Fixes

• Disallow vulnerable guzzle versions (#520) (cb782dd)

Features

• Respect sub for domain-wide delegation in service account creds (#505) (821d4f3)
• Support universe domain in service account and metadata credentials (#482) (e4aa874)

Bug Fixes

• ID Token Caching for GCECredentials (#510) (3222f9e)

Features

• Add and implement universe domain interface (#477) (35781ed)

Miscellaneous

• Refactor AuthTokenMiddleware (#492)

Bug Fixes

• Allowed_algs not properly set for string value (#489) (0042b52)

Features

• Respect cache control for access token certs (#479) (6d426b5)

Features

• Add AWS credential source (#474) (e5bc897)

Features

• Add support for BYOID / STS (#473) (2938e58)

Bug Fixes

• Use PKCS8 by default for ID token verify (#466) (0c3a1be)

Features

• Check unix residency for gce when ping fails (#469) (3c672f9)

Features

• Add pkce support (#454) (1326c81)
• Implement quota project from env var in google/auth (#452) (a9e8ae3)

Features

• deps: Add support for psr/http-message 2.0 (#449) (bc71f90)

Features

• Access granted scopes (#441) (3e5c9f1)
• Add support for phpseclib3 (#425) (623acee)

Features

• Add getFetcher to FetchAuthTokenCache (#431) (cf7ac54)

Features

• Add ImpersonatedServiceAccountCredentials (#421) (de766e9)

Bug Fixes

• Do not call GCECredentials::onGCE if ADC has already checked (#422) (085cc64)

Features

• Double default truncateAt for guzzle error output (#415) (e2f6a89)

• [feat]: add support for Firebase v6.0 (#391)

• [feat]: add support for psr/cache:3 (#364)
• Dropped Support for PHP 5.6 and 7.0

• Dropped support for:
  • PHP 5.4 and 5.5
  • Guzzle 5
  • Firebase JWT 2.0, 3.0, and 4.0

• [feat]: Add support for guzzlehttp/psr7 v2 (#357)

• [fix]: consistently use useSelfSignedJwt method in ServiceAccountJwtAccessCredentials (#351)
• [feat]: add loading and executing of default client cert source (#353)
• [feat]: add support for proxy-authorization header (#347)

• [feat]: allow ServiceAccountJwtAccessCredentials to sign scopes (#341)
• [feat]: allow psr/cache:2.0 (#344)

• [fix]: ensure cached tokens are used for GCECredentials::signBlob (#340)
• [fix]: adds check for getClientName (#336)

• [fix]: update minimum phpseclib for vulnerability fix (#331)

• [feat]: support for PHP 8.0: updated dependencies and tests (#318, #319)

• [fix]: add expires_at to GCECredentials (#314)

• [fix]: Better FetchAuthTokenCache and getLastReceivedToken (#311)

• [fix]: variable typo (#310)