---
id: gcloud-rest-auth
version: "5.5.0"
license: MIT
license_treatment: permissive
maintenance: active
---

# gcloud-rest-auth — Python Client for Google Cloud Auth

License: permissive · Maintenance: active · Downloads: 605.0K/mo

## What it is and what it does

gcloud-rest-auth is a Python client library for authenticating with Google Cloud Platform services. It abstracts away the complexity of GCP credential management by providing a Token class that handles multiple authentication methods—service accounts, user credentials, GCE metadata, impersonated service accounts, and workload identity federation—and manages token lifecycle including refresh. The library also provides specialized classes like IamClient for interacting with GCP public keys and URL signing, and IapToken for securing access to Identity-Aware Proxy protected services.

The package is designed to integrate with other gcloud-rest-* components, allowing you to define authentication once and reuse it across multiple GCP service clients. It supports both asyncio and threadsafe execution models, making it suitable for concurrent applications. With active maintenance, no known vulnerabilities, and a permissive MIT license, it's a stable choice for applications that need reliable GCP authentication without managing credentials manually.

Use it for:

- Authenticate a Python application against GCP services using a service account JSON file.
- Implement workload identity federation for applications running outside GCP (e.g., on-premises or other clouds).
- Authorize requests to an Identity-Aware Proxy protected GCP service using IAP tokens.
- Build a multi-tenant application where each tenant uses impersonated service account credentials.
- Manage token refresh automatically in a long-running async application accessing multiple GCP services.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides Python client libraries for Google Cloud authentication, supporting service accounts, user credentials, GCE metadata, impersonated accounts, and workload identity federation via asyncio or threadsafe interfaces.

Yes. The package is actively maintained, has no known vulnerabilities, uses a permissive MIT license, and offers low-friction installation. It solves a real problem—GCP credential management—across multiple authentication methods and execution models. Suitable for production use in applications that need reliable, flexible authentication with Google Cloud.

## Install

pip install gcloud-rest-auth
uv add gcloud-rest-auth
poetry add gcloud-rest-auth

## Installing gcloud-rest-auth

Before you install: Low friction installation with a pure Python wheel. Active maintenance with a release 28 days ago and recent commits. Depends on standard libraries (requests, cryptography, pyjwt, tenacity, chardet) with no compiled dependencies.

License in practice: MIT license permits commercial and private use with minimal restrictions—you may use, modify, and distribute this package freely provided you include the license notice.

Quickstart:

pip install gcloud-rest-auth

from gcloud_rest_auth import Token

token = Token(service_account_credentials)
await token.get()  # or token.get() in threadsafe mode

Requires Python 3.10 or later. GCP credentials (service account JSON, user credentials, or GCE metadata) must be available at runtime.

Verify before relying:

- Whether the package supports both asyncio and threadsafe modes simultaneously or requires choosing one at install time.
- Performance characteristics when handling token refresh under high concurrency.
- Whether external account credentials work with all GCP services or have known limitations.

## Package facts

- License: MIT (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 605.0K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

google cloud authentication python, gcp service account client, identity-aware proxy token, google cloud credentials library, async google auth, gcp iam client, workload identity federation, gcp-auth, workload-identity, async-ready

[View on SkillFed](https://skillfed.io/packages/gcloud-rest-auth) · [View on PyPI](https://pypi.org/project/gcloud-rest-auth/)