gcp/cloudsql: use WithIAMAuthNTokenSources in NewDialerWithIAM

aplr · claude · aplr · commit 0e7c9ecb6a13 · 2026-03-24T01:01:24.000+01:00
WithTokenSource should not be combined with WithIAMAuthN; use the
dedicated WithIAMAuthNTokenSources instead, passing the same token
source for both the API client and the IAM login token.

Co-Authored-By: Claude Sonnet 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/gcp/cloudsql/cloudsql.go b/gcp/cloudsql/cloudsql.go
@@ -104,7 +104,7 @@ func NewDialer(ctx context.Context, ts oauth2.TokenSource) (*cloudsqlconn.Dialer
 // The returned cleanup function must be called when the dialer is no longer needed.
 func NewDialerWithIAM(ctx context.Context, ts oauth2.TokenSource) (*cloudsqlconn.Dialer, func(), error) {
 	d, err := cloudsqlconn.NewDialer(ctx,
-		cloudsqlconn.WithTokenSource(ts),
+		cloudsqlconn.WithIAMAuthNTokenSources(ts, ts),
 		cloudsqlconn.WithIAMAuthN(),
 	)
 	if err != nil {

Original file line number	Diff line number	Diff line change
`@@ -104,7 +104,7 @@ func NewDialer(ctx context.Context, ts oauth2.TokenSource) (*cloudsqlconn.Dialer`
`104`	`104`	`// The returned cleanup function must be called when the dialer is no longer needed.`
`105`	`105`	`func NewDialerWithIAM(ctx context.Context, ts oauth2.TokenSource) (*cloudsqlconn.Dialer, func(), error) {`
`106`	`106`	`d, err := cloudsqlconn.NewDialer(ctx,`
`107`		`- cloudsqlconn.WithTokenSource(ts),`
	`107`	`+ cloudsqlconn.WithIAMAuthNTokenSources(ts, ts),`
`108`	`108`	`cloudsqlconn.WithIAMAuthN(),`
`109`	`109`	`)`
`110`	`110`	`if err != nil {`