Update src/google/adk/auth/credential_manager.py

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
google · guillaumeblaquiere · Dec 5, 2025 · Dec 5, 2025 · Dec 5, 2025 · Dec 6, 2025
commit 428cd57cb09081d39e1afc197940446337475f42
diff --git a/src/google/adk/auth/credential_manager.py b/src/google/adk/auth/credential_manager.py
@@ -286,14 +286,14 @@ async def _exchange_credential(
         ]
         restored = True
 
-      exchanged_credential = await exchanger.exchange(
-          credential, self._auth_config.auth_scheme
-      )
-
-      # Redact client secret again after exchange to prevent leakage
-      if exchanged_credential.oauth2:
-        exchanged_credential.oauth2.client_secret = "<redacted>"
-
+      try:
+        exchanged_credential = await exchanger.exchange(
+            credential, self._auth_config.auth_scheme
+        )
+      finally:
+        # Redact client secret again after exchange to prevent leakage
+        if restored and credential.oauth2:
+          credential.oauth2.client_secret = "<redacted>"
     return exchanged_credential, True
 
   async def _refresh_credential(