fix expiry in compute_engine.IDTokenCredentials

fixes #1323
googleapis · Jun 8, 2023 · d9900db · d9900db
1 parent bcb85bf
commit d9900db
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/google/auth/compute_engine/credentials.py b/google/auth/compute_engine/credentials.py
@@ -389,7 +389,7 @@ def _call_metadata_identity_endpoint(self, request):
             six.raise_from(new_exc, caught_exc)
 
         _, payload, _, _ = jwt._unverified_decode(id_token)
-        return id_token, datetime.datetime.fromtimestamp(payload["exp"])
+        return id_token, datetime.datetime.utcfromtimestamp(payload["exp"])
 
     def refresh(self, request):
         """Refreshes the ID token.