[Python SDK][Auth] Refresh token id w/o gcloud cli

[pyalex]

Signed-off-by: Oleksii Moskalenko [email protected]

What this PR does / why we need it:

Currently python SDK requires gcloud cli to be installed in order to extract id_token from ServiceAccount. This is very inconvenient. This PR uses google.oauth2 instead.

Which issue(s) this PR fixes:

Fixes #

Does this PR introduce a user-facing change?:

NONE

[woop]

So you are able to strip the oid token with the oauth module? I believe I added that code because it didn't work without the gcloud CLI.

Currently python SDK requires gcloud cli to be installed in order to extract id_token from ServiceAccount.

It doesnt seem to be a requirement. It's wrapped in a try/except.

[pyalex]

It doesnt seem to be a requirement. It's wrapped in a try/except.

Yes, but google_auth.default doesn't refresh id_token for service accounts. Thus the only way to authorize with service account is to have gcloud cli installed.

[khorshuheng]

/lgtm

[feast-ci-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: khorshuheng, pyalex
To complete the pull request process, please assign jklegar after the PR has been reviewed.
You can assign the PR to them by writing /assign @jklegar in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment