From b5a563a72b4f5775db764e5b32a1eacc8c2dd6e9 Mon Sep 17 00:00:00 2001 From: YU MING HSU Date: Wed, 16 Jul 2025 22:34:45 +0000 Subject: [PATCH] fix: Unable to acquire impersonated credentials add scope "https://www.googleapis.com/auth/cloud-platform" within google.auth.default --- .../auth/credential_exchangers/service_account_exchanger.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/google/adk/tools/openapi_tool/auth/credential_exchangers/service_account_exchanger.py b/src/google/adk/tools/openapi_tool/auth/credential_exchangers/service_account_exchanger.py index 53587f4e6..9833f5c9c 100644 --- a/src/google/adk/tools/openapi_tool/auth/credential_exchangers/service_account_exchanger.py +++ b/src/google/adk/tools/openapi_tool/auth/credential_exchangers/service_account_exchanger.py @@ -72,7 +72,9 @@ def exchange_credential( try: if auth_credential.service_account.use_default_credential: - credentials, _ = google.auth.default() + credentials, _ = google.auth.default( + scopes=["https://www.googleapis.com/auth/cloud-platform"], + ) else: config = auth_credential.service_account credentials = service_account.Credentials.from_service_account_info(