Merge branch 'impersonated-creds-fix' of github.com:googleapis/google…

…-auth-library-python into impersonated-creds-fix

system_tests/test_oauth2_credentials.py

@@ -42,10 +42,14 @@ def test_refresh(authorized_user_file, http_request, token_info):
 
     # Canonical list of scopes at https://cloud.google.com/sdk/gcloud/reference/auth/application-default/login
     # or do `gcloud auth application-defaut login --help`
-    assert set(info_scopes) == set(
+    canonical_scopes = set(
         [
             "https://www.googleapis.com/auth/userinfo.email",
             "https://www.googleapis.com/auth/cloud-platform",
             "openid",
         ]
     )
+    # When running the test locally, we always have an additional "accounts.reauth" scope.
+    canonical_scopes_with_reauth = canonical_scopes.copy()
+    canonical_scopes_with_reauth.add("https://www.googleapis.com/auth/accounts.reauth")
+    assert set(info_scopes) == canonical_scopes or set(info_scopes) == canonical_scopes_with_reauth