gcloud-aio-auth

Python Client for Google Cloud Auth

gcloud-aio-auth Permissive license MIT Active ★ 348 v5.5.0 released 2026-07-17

Install

gcloud-aio-auth on PyPI

pip

pip install gcloud-aio-auth

uv

uv add gcloud-aio-auth

poetry

poetry add gcloud-aio-auth

Package facts

License	MIT (permissive)
Python support	supports the current Python release (<4.0,>=3.10)
Install friction	low — pure-Python wheel
Runtime dependencies	5 — aiohttp, chardet, cryptography, pyjwt, tenacity
Maintenance	actively maintained — 27 days since the last release
Last repo commit	2026-08-11
First released	2017-10-18
Popularity	one of the top 1,000 most-downloaded packages on PyPI (30-day window, as of 2026-08-13)
Known vulnerabilities	none known (OSV.dev, checked 2026-08-13)

Evidence: gcloud_aio_auth-5.5.0-py3-none-any.whl

Development Status :: 5 - Production/StableIntended Audience :: DevelopersLicense :: OSI Approved :: MIT LicenseOperating System :: OS IndependentProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Topic :: Internet

About gcloud-aio-auth

from the package's own PyPI description — quoted content, verbatim

(Asyncio OR Threadsafe) Python Client for Google Cloud Auth

This is a shared codebase for ``gcloud-aio-auth`` and ``gcloud-rest-auth``

This library implements an IamClient class, which can be used to interact with GCP public keys and URL sign blobs.

It also implements an IapToken class which is used for authorizing against an Identity-Aware Proxy_ (IAP) secured GCP service. IAP uses identity tokens which are specific to the target service and allows administrators to configure a list of identities (ex. service accounts, users, or groups) that may access the service. Therefore each IapToken instance corresponds to an ID token which may be used to authorize against a single IAP service.

It additionally implements a Token class, which is used for authorizing against Google Cloud. The other gcloud-aio-* package components accept a Token instance as an argument; you can define a single token for all of these components or define one for each. Each component corresponds to a given Google Cloud service and each service requires various "scopes_".

The library supports multiple...

Read as markdown · JSON record · Source repository

AI interpretation — verify before relying

AI-generated interpretation of the package facts above; every digit, version, license, or vulnerability id it cites is grounded in the facts already shown on this page

Provides asyncio and threadsafe Python clients for Google Cloud authentication, supporting service accounts, authorized users, GCE metadata, impersonated accounts, and workload identity federation via Token, IamClient, and IapToken classes.

Low friction: pure Python wheel with five stable runtime dependencies (aiohttp, chardet, cryptography, pyjwt, tenacity). Active maintenance with a release 27 days ago and last commit in August 2026; supports Python 3.10–3.14.

MIT license (permissive) allows commercial and private use with minimal restrictions; attribution required but no copyleft obligations.

Usage

pip install gcloud-aio-auth

from gcloud.aio.auth import Token
import aiohttp

async with aiohttp.ClientSession() as session:
    token = Token(session=session)
    access_token = await token.get()

Requires Python 3.10 or later; asyncio usage requires an event loop context.

Verdict: Production-ready, actively maintained authentication library for Google Cloud with broad credential support and low install friction. MIT license and zero known vulnerabilities make it a safe choice for GCP integration in async Python applications.

Needs verification

Whether the Token class requires explicit GCP credentials (service account JSON, environment variables, or metadata server) to function in the usage example.
Performance characteristics and rate-limiting behavior of the tenacity retry mechanism under high-concurrency loads.

google cloud authentication python asyncgcp service account token clientidentity-aware proxy tokenasyncio google cloud authgcp credentials managementworkload identity federation pythongoogle cloud iam client