gemini-cli - 💡(How to fix) Fix Feature request: credential helper / external credential process for dynamic API key & token provisioning [1 participants]

What would you like to be added?

Support for the ability to configure a custom script to generate the value of Authorization: Bearer header for model requests (e.g., parity with claude code's apiKeyHelper).

Why is this needed?

I am operating in GCP and would like to use short lived GCP OIDC identity tokens for inference auth, e.g. as generated by a script like

#!/bin/bash
# Fetches a GCP OIDC identity token.
# Usage: get-proxy-token.sh <audience-url>
AUDIENCE="${1:?Usage: get-proxy-token.sh <audience-url>}"
curl -sf -H "Metadata-Flavor: Google" \
  "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity?audience=${AUDIENCE}&format=full"

Claude code supports this via apiKeyHelper (which also has some affordance for refresh intervals, etc). As far as I can tell Gemini currently only supports static values for auth.

Additional context

No response