@@ -457,6 +457,7 @@ def __init__(
 quota_project_id=client_options.quota_project_id,
 client_info=client_info,
 always_use_jwt_access=True,
+api_audience=client_options.api_audience,
 )
 
 def create_job(

@@ -55,6 +55,7 @@ def __init__(
 quota_project_id: Optional[str] = None,
 client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
 always_use_jwt_access: Optional[bool] = False,
+api_audience: Optional[str] = None,
 **kwargs,
 ) -> None:
 """Instantiate the transport.
@@ -82,11 +83,6 @@ def __init__(
 be used for service account credentials.
 """
 
-# Save the hostname. Default to port 443 (HTTPS) if none is specified.
-if ":" not in host:
-host += ":443"
-self._host = host
-
 scopes_kwargs = {"scopes": scopes, "default_scopes": self.AUTH_SCOPES}
 
 # Save the scopes.
@@ -107,6 +103,11 @@ def __init__(
 credentials, _ = google.auth.default(
 **scopes_kwargs, quota_project_id=quota_project_id
 )
+# Don't apply audience if the credentials file passed from user.
+if hasattr(credentials, "with_gdch_audience"):
+credentials = credentials.with_gdch_audience(
+api_audience if api_audience else host
+)
 
 # If the credentials are service account credentials, then always try to use self signed JWT.
 if (
@@ -119,6 +120,11 @@ def __init__(
 # Save the credentials.
 self._credentials = credentials
 
+# Save the hostname. Default to port 443 (HTTPS) if none is specified.
+if ":" not in host:
+host += ":443"
+self._host = host
+
 def _prep_wrapped_messages(self, client_info):
 # Precompute the wrapped methods.
 self._wrapped_methods = {

@@ -64,6 +64,7 @@ def __init__(
 quota_project_id: Optional[str] = None,
 client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
 always_use_jwt_access: Optional[bool] = False,
+api_audience: Optional[str] = None,
 ) -> None:
 """Instantiate the transport.
 
@@ -159,6 +160,7 @@ def __init__(
 quota_project_id=quota_project_id,
 client_info=client_info,
 always_use_jwt_access=always_use_jwt_access,
+api_audience=api_audience,
 )
 
 if not self._grpc_channel:

@@ -109,6 +109,7 @@ def __init__(
 quota_project_id=None,
 client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
 always_use_jwt_access: Optional[bool] = False,
+api_audience: Optional[str] = None,
 ) -> None:
 """Instantiate the transport.
 
@@ -204,6 +205,7 @@ def __init__(
 quota_project_id=quota_project_id,
 client_info=client_info,
 always_use_jwt_access=always_use_jwt_access,
+api_audience=api_audience,
 )
 
 if not self._grpc_channel:

@@ -42,10 +42,7 @@
 platforms="Posix; MacOS X; Windows",
 include_package_data=True,
 install_requires=(
-# NOTE: Maintainers, please do not require google-api-core>=2.x.x
-# Until this issue is closed
-# https://.com/googleapis/google-cloud-python/issues/10566
-"google-api-core[grpc] >= 1.31.5, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.0",
+"google-api-core[grpc] >= 1.32.0, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*",
 "proto-plus >= 1.20.3, <2.0.0dev",
 "protobuf >= 3.19.0, <4.0.0dev",
 ),

@@ -5,6 +5,6 @@
 #
 # e.g., if setup.py has "foo >= 1.14.0, < 2.0.0dev",
 # Then this file should have foo==1.14.0
-google-api-core==1.31.5
+google-api-core==1.32.0
 proto-plus==1.20.3
 protobuf==3.19.0

@@ -232,6 +232,7 @@ def test_transcoder_service_client_client_options(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
@@ -249,6 +250,7 @@ def test_transcoder_service_client_client_options(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
@@ -266,6 +268,7 @@ def test_transcoder_service_client_client_options(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT has
@@ -295,6 +298,25 @@ def test_transcoder_service_client_client_options(
 quota_project_id="octopus",
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
+)
+# Check the case api_endpoint is provided
+options = client_options.ClientOptions(
+api_audience="https://language.googleapis.com"
+)
+with mock..object(transport_class, "__init__") as ed:
+ed.return_value = None
+client = client_class(client_options=options, transport=transport_name)
+ed.assert_called_once_with(
+credentials=None,
+credentials_file=None,
+host=client.DEFAULT_ENDPOINT,
+scopes=None,
+client_cert_source_for_mtls=None,
+quota_project_id=None,
+client_info=transports.base.DEFAULT_CLIENT_INFO,
+always_use_jwt_access=True,
+api_audience="https://language.googleapis.com",
 )
 
 
@@ -372,6 +394,7 @@ def test_transcoder_service_client_mtls_env_auto(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 # Check the case ADC client cert is provided. Whether client cert is used depends on
@@ -406,6 +429,7 @@ def test_transcoder_service_client_mtls_env_auto(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 # Check the case client_cert_source and ADC client cert are not provided.
@@ -428,6 +452,7 @@ def test_transcoder_service_client_mtls_env_auto(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 
@@ -542,6 +567,7 @@ def test_transcoder_service_client_client_options_scopes(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 
@@ -580,6 +606,7 @@ def test_transcoder_service_client_client_options_credentials_file(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 
@@ -600,6 +627,7 @@ def test_transcoder_service_client_client_options_from_dict():
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 
@@ -638,6 +666,7 @@ def test_transcoder_service_client_create_channel_credentials_file(
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )
 
 # test that the credentials from file are saved and used as the credentials.
@@ -3217,6 +3246,28 @@ def test_transcoder_service_transport_auth_adc(transport_class):
 )
 
 
+@pytest.mark.parametrize(
+"transport_class",
+[
+transports.TranscoderServiceGrpcTransport,
+transports.TranscoderServiceGrpcAsyncIOTransport,
+],
+)
+def test_transcoder_service_transport_auth_gdch_credentials(transport_class):
+host = "https://language.com"
+api_audience_tests = [None, "https://language2.com"]
+api_audience_expect = [host, "https://language2.com"]
+for t, e in zip(api_audience_tests, api_audience_expect):
+with mock..object(google.auth, "default", autospec=True) as adc:
+gdch_mock = mock.MagicMock()
+type(gdch_mock).with_gdch_audience = mock.PropertyMock(
+return_value=gdch_mock
+)
+adc.return_value = (gdch_mock, None)
+transport_class(host=host, api_audience=t)
+gdch_mock.with_gdch_audience.assert_called_once_with(e)
+
+
 @pytest.mark.parametrize(
 "transport_class,grpc_helpers",
 [
@@ -3716,4 +3767,5 @@ def test_api_key_credentials(client_class, transport_class):
 quota_project_id=None,
 client_info=transports.base.DEFAULT_CLIENT_INFO,
 always_use_jwt_access=True,
+api_audience=None,
 )