Revision history for Google-Auth
0.04 Mon Jul 20 2026
[CPAN RT #180157 Fix]
- Replaced system free() with Perl's Safefree() for memory allocated via Newx() in XS.xs generate_self_signed_cert() and verify_signature().
- Fixes "invalid pointer" and "double free or corruption" test failures on Perls compiled with -DDEBUGGING and MULTIPLICITY.
0.03 Fri Jul 17 2026
[OpenSSL 3.0 & Cryptographic Modernization]
- Modernized XS.xs C bindings to use OpenSSL 3.0 high-level EVP_PKEY_fromdata and OSSL_PARAM_BLD APIs in load_rsa_pubkey and load_ec_pubkey, eliminating all OpenSSL 3.0 deprecation warnings.
- Retained backward-compatible fallback paths for OpenSSL 1.1.1 installations.
- Properly indented C preprocessor directives inside XS CODE: blocks for xsubpp parser compatibility.
[Authentication & Workload Identity Federation]
- Expanded Workload Identity Federation (WIF) support with Pluggable credentials (Google::Auth::ExternalAccountCredentials::Pluggable) and AWS IAM authentication (Google::Auth::ExternalAccountCredentials::Aws).
- Hardened Service Account, Impersonated Credentials, and Compute Engine metadata server token refresh loops.
[Architecture & Versioning]
- Upgraded distribution version to 0.03 (lib/Google/Auth.pm).
- Streamlined package versioning to single entrypoint $VERSION.
0.02 2022-03-16
- Release approved by Google OSPO
0.01 2022-03-02
- First version, including translation from Ruby into lib/Google/Auth/IDTokens/KeySources.pm
- Included tests translated from Ruby into t/key_sources_test.t and expanded upon