Method implementation and logic isOnGAEStandard7() is incorrect for java21 jetty which does not define the old jetty logging class. #1376
Labels
priority: p2
Moderately-important priority. Fix may not be included in next release.
type: bug
Error or flaw in code with unintended results or allowing sub-optimal usage patterns.
An Appengine customer recently filed this bug:
We recently upgraded to Java 21 and noticed a change in behavior when calling GoogleCredentials.getApplicationDefault()
Before Java 21, it was returning us a ComputeEngineCredentials, which was expected.But now it is returning us an AppEngineCredentials so we have to set a environment to revert to the old behavior.
We suspect maybe one of the conditions changed in isOnGaeStandard7() on Java 21 runtime.
See
google-auth-library-java/oauth2_http/java/com/google/auth/oauth2/DefaultCredentialsProvider.java
Line 319 in 3a546fb
While it might have been true for GAE Java7 (now completely removed), for the GAE runtimes java8,11 and 17, RUNTIME_JETTY_LOGGER was never null, and customers expect anyway ComputeEngineCredentials, not AppEngineCredentials by default!
But the new GAE environment supporting Java21 GAE, RUNTIME_JETTY_LOGGER is now null, as Jetty12 entirely rewrote their logging logic and doe not define this Jetty internal property.
Currently, App Engine Java21 code had to defined again this property to avoid app regression, but we need to fix this auth-library bug for newer releases so we can avoid doing this ugly workaround for GAE customers.
Maybe remove entirely the special case for GAE to avoid regression for existing GAE customers.
The text was updated successfully, but these errors were encountered: