)]}'
{
  "commit": "e8fd1623cb0ae6e8157c681fbbf148d01ce013d7",
  "tree": "60055435ab9fc22465f1e27fe2ca0025164396ad",
  "parents": [
    "8dc791c501dd095cddad032979e0a93a935caf2b"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Wed Mar 11 11:59:00 2026 -0700"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Wed Mar 11 12:17:04 2026 -0700"
  },
  "message": "all: set correct IAP audience\n\nWe previously skipped JWT audience verification, which allowed any valid\nJWT for any GCP IAP to be used to bypass authentication. This CL adds\naudience verification to ensure that only JWTs created by _our_ IAP\ninstances can be used.\n\nAlso, remove the unused iapServiceIDs map and IAPServiceID method, and\nreplace it with a iapServiceAudience map and IAPServiceAudience method\nthat returns the full audience string instead of just the service ID.\n\nChange-Id: I6590b58ca81357ead73960914171aa9b72b50fc8\nReviewed-on: https://go-review.googlesource.com/c/build/+/754380\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@golang.org\u003e\nReviewed-by: Carlos Amedee \u003ccarlos@golang.org\u003e\nReviewed-by: Neal Patel \u003cnealpatel@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Roland Shoemaker \u003croland@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "7c05ab7cb85a497b0645d2ae0142292d8c9c9413",
      "old_mode": 33188,
      "old_path": "buildenv/envs.go",
      "new_id": "d845c1fbc4238ef75026808829041e8e4c0eaac1",
      "new_mode": 33188,
      "new_path": "buildenv/envs.go"
    },
    {
      "type": "modify",
      "old_id": "52f4cdbca2c87a771f9b55543b472010f0a52ea4",
      "old_mode": 33188,
      "old_path": "cmd/coordinator/coordinator.go",
      "new_id": "4409c4575a6e139eb32c8a5602b3acdd95784414",
      "new_mode": 33188,
      "new_path": "cmd/coordinator/coordinator.go"
    },
    {
      "type": "modify",
      "old_id": "bb0add5ba637624fd5810fb67a7577b73a566eec",
      "old_mode": 33188,
      "old_path": "cmd/gomoteserver/gomoteserver.go",
      "new_id": "88f9b67ef47523350846c6e78857621035cb8ee2",
      "new_mode": 33188,
      "new_path": "cmd/gomoteserver/gomoteserver.go"
    },
    {
      "type": "modify",
      "old_id": "ee3acc18f8297429dfc878ec40a972044848bff6",
      "old_mode": 33188,
      "old_path": "cmd/relui/main.go",
      "new_id": "81714490d596386a09873f06cf442e260f1fc2a3",
      "new_mode": 33188,
      "new_path": "cmd/relui/main.go"
    },
    {
      "type": "modify",
      "old_id": "7f5153e8229d9d5e82a6432514b569d1306345bc",
      "old_mode": 33188,
      "old_path": "internal/access/access.go",
      "new_id": "7cab3c555497a4c3557965092256c2b7d0f89e5f",
      "new_mode": 33188,
      "new_path": "internal/access/access.go"
    }
  ]
}