Skip to content

Commit ab92349

Browse files
authored
docs: Add warnings regarding consuming externally sourced credentials (#80)
1 parent 28f012c commit ab92349

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

pydata_google_auth/auth.py

+11
Original file line numberDiff line numberDiff line change
@@ -502,6 +502,17 @@ def load_user_credentials(path):
502502
"""
503503
Gets user account credentials from JSON file at ``path``.
504504
505+
.. warning::
506+
Important: If you accept a credential configuration (credential JSON/File/Stream)
507+
from an external source for authentication to Google Cloud Platform, you must
508+
validate it before providing it to any Google API or client library. Providing an
509+
unvalidated credential configuration to Google APIs or libraries can compromise
510+
the security of your systems and data. For more information, refer to
511+
`Validate credential configurations from external sources`_.
512+
513+
.. _Validate credential configurations from external sources:
514+
https://cloud.google.com/docs/authentication/external/externally-sourced-credentials
515+
505516
Parameters
506517
----------
507518
path : str

0 commit comments

Comments
 (0)