v1.3.0

• Added google.oauth2.credentials.Credentials.from_authorized_user_file (#226)
• Dropped direct pyasn1 dependency in favor of letting pyasn1-modules specify the right version. (#230)
• default() now checks for the project ID environment var before warning about missing project ID. (#227)
• Fixed the docstrings for has_scopes() and with_scopes(). (#228)
• Fixed example in docstring for ReadOnlyScoped. (#219)
• Made transport.requests use timeouts and retries to improve reliability. (#220)

v1.2.1

• Excluded compiled Python files in source distributions. (#215)
• Updated docs for creating RSASigner from string. (#213)
• Use six.raise_from wherever possible. (#212)
• Fixed a typo in a comment seconds not sections. (#210)

v1.2.0

• Added google.auth.credentials.AnonymousCredentials. (#206)
• Updated the documentation to link to the Google Cloud Platform Python setup guide (#204)

v1.1.0

• Added service_account.Credentials.project_id. (#187)
• Move read-only methods of credentials.Scoped into new interface credentials.ReadOnlyScoped. (#195, #196)
• Make compute_engine.Credentials derive from ReadOnlyScoped instead of Scoped. (#195)
• Fix App Engine's expiration calculation (#197)
• Split crypt module into a package to allow alternative implementations. (#189)
• Add error message to handle case of empty string or missing file for GOOGLE_APPLICATION_CREDENTIALS (#188)

v1.0.2

• Fixed a bug where the Cloud SDK executable could not be found on Windows, leading to project ID detection failing. (#179)
• Fixed a bug where the timeout argument wasn't being passed through the httplib transport correctly. (#175)
• Added documentation for using the library on Google App Engine standard. (#172)
• Testing style updates. (#168)
• Added documentation around the oauth2client deprecation. (#165)
• Fixed a few lint issues caught by newer versions of pylint. (#166)

v1.0.1

• Fixed a bug in the clock skew accommodation logic where expired credentials could be used for up to 5 minutes. (#158)

v1.0.0

Milestone release for v1.0.0.
No significant changes since v0.10.0

v0.10.0

• Added jwt.OnDemandCredentials. (#142)
• Added new public property id_token to oauth2.credentials.Credentials. (#150)
• Added the ability to set the address used to communicate with the Compute Engine metadata server via the GCE_METADATA_ROOT and GCE_METADATA_IP environment variables. (#148)
• Changed the way cloud project IDs are ascertained from the Google Cloud SDK. (#147)
• Modified expiration logic to add a 5 minute clock skew accommodation. (#145)

v0.9.0

• Added service_account.Credentials.with_claims. (#140)
• Moved google.auth.oauthlib and google.auth.flow to a new separate package google_auth_oauthlib. (#137, #139, #135, #126)
• Added InstalledAppFlow to google_auth_oauthlib. (#128)
• Fixed some packaging and documentation issues. (#131)
• Added a helpful error message when importing optional dependencies. (#125)
• Made all properties required to reconstruct google.oauth2.credentials.Credentials public. (#124)
• Added official Python 3.6 support. (#102)
• Added jwt.Credentials.from_signing_credentials and removed service_account.Credentials.to_jwt_credentials. (#120)

v0.8.0

• Removed one-time token behavior from jwt.Credentials, audience claim is now required and fixed. (#117)
• crypt.Signer and crypt.Verifier are now abstract base classes. The concrete implementations have been renamed to crypt.RSASigner and crypt.RSAVerifier. app_engine.Signer and iam.Signer now inherit from crypt.Signer. (#115)
• transport.grpc now correctly calls Credentials.before_request. (#116)