google: add safer credentials JSON loading options. Add safer credentials JSON loading options in `google` package. Adds `CredentialsFromJSONWithType` and `CredentialsFromJSONWithTypeAndParams` to mitigate a security vulnerability where credential configurations from untrusted sources could be used without validation. These new functions require the credential type to be explicitly specified. Deprecates the less safe `CredentialsFromJSON` and `CredentialsFromJSONWithParams` functions. Change-Id: I27848b5ebd2dff76d0397cdc08908d680c0ccd69 Reviewed-on: https://go-review.googlesource.com/c/oauth2/+/732440 Reviewed-by: Seth Hollyman <shollyman@google.com> Reviewed-by: Cody Oss <codyoss@google.com> Reviewed-by: Sai Sunder Srinivasan <saisunder@google.com> TryBot-Bypass: Cody Oss <codyoss@google.com>
oauth2 package contains a client implementation for OAuth 2.0 spec.
See pkg.go.dev for further documentation and examples.
We no longer accept new provider-specific packages in this repo if all they do is add a single endpoint variable. If you just want to add a single endpoint, add it to the pkg.go.dev/golang.org/x/oauth2/endpoints package.
The main issue tracker for the oauth2 repository is located at https://github.com/golang/oauth2/issues.
This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://go.dev/doc/contribute.
The git repository is https://go.googlesource.com/oauth2.
Note: