Get GCP identity or access token programmatically

gcp_token.py

import google.auth
from google.auth.transport.requests import Request
import requests

def get_credentials() -> str:
    credentials, _project_id = google.auth.default(scopes=['https://www.googleapis.com/auth/cloud-platform'])
    request = Request()
    credentials.refresh(request)
    return credentials

# gcloud auth print-identity-token
def get_identity_token() -> str:
    credentials = get_credentials()
    return credentials.id_token

# gcloud auth print-access-token
def get_access_token() -> str:
    credentials = get_credentials()
    return credentials.token