-
Story
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
False
-
-
False
-
-
Add package 'google-auth-oauthlib' into the RHAI pipeline onboarding collection.
The package requires builder repository onboarding before it can be added to the RHAI pipeline. This ticket is blocked by the builder onboarding ticket.
Summary
Here is the executive summary formatted as a JIRA comment in JIRA wiki markup:
Executive Summary: google-auth-oauthlib Build Analysis
google-auth-oauthlib (v1.2.4) is a pure-Python package with a complexity score of 1/10, providing oauthlib integration with Google Auth for OAuth 2.0 authorization flows. There are no blockers for source building or redistribution. The package requires no native compilation, uses the Apache 2.0 license (fully Red Hat compatible), and produces a universal py3-none-any wheel — meaning a single build covers all hardware targets (CPU, CUDA, ROCm) with no architecture-specific considerations. The recommended approach is a straightforward source build from the upstream repository using setuptools.
Key Technical Details
The build process is trivial and requires only standard Python tooling (setuptools, wheel, Python 3.7+). No environment variables, system libraries, or compilers are needed. The package has two direct runtime dependencies: google-auth (>=2.15.0,<3.0.0) and requests-oauthlib (>=0.7.0). Note: the transitive dependency cryptography (via google-auth) contains compiled C extensions, but this is typically pre-installed in Red Hat base images and should not pose an issue. All transitive dependency licenses (Apache-2.0, ISC, BSD, MIT, MPL-2.0) are Red Hat-compatible with full redistribution rights.
git clone https://github.com/GoogleCloudPlatform/google-auth-library-python-oauthlib.git
cd google-auth-library-python-oauthlib
pip wheel --no-deps . -w dist/
# Output: google_auth_oauthlib-1.2.4-py3-none-any.whl (19 KB)
Recommendations for AIPCC-10795
- Pin to version 1.2.4 (released 2026-01-15), which resolves all known google-auth compatibility issues (notably the version exclusions for 2.43.0–2.45.0 from issue #422).
- The optional [tool] extra (click) is only needed for the google-oauthlib-tool CLI and can be omitted for most use cases.
- google-api-python-client, also referenced in the JIRA ticket, is a separate package sharing the google-auth dependency and should be tracked independently.
- No critical blockers exist. All previously known packaging issues are resolved in 1.2.4, and upstream enforces 99% test coverage. Default probe tests are appropriate for validation.
- blocks
-
AIPCC-10809 Onboard google-auth-oauthlib into the AIPCC Builder
-
- Closed
-
- mentioned on