From 29131c630362bb4fb18cc28c850b40646d948442 Mon Sep 17 00:00:00 2001
From: Brent Shaffer <betterbrent@google.com>
Date: Fri, 7 Aug 2026 10:04:14 +0000
Subject: [PATCH] feat(gax): configure InsecureCredentialsWrapper when
 hasEmulator is true

---
 Gax/src/GapicClientTrait.php            | 2 ++
 Gax/tests/Unit/GapicClientTraitTest.php | 5 +++++
 2 files changed, 7 insertions(+)

diff --git a/Gax/src/GapicClientTrait.php b/Gax/src/GapicClientTrait.php
index 46d4967055da..5f779de9d0f2 100644
--- a/Gax/src/GapicClientTrait.php
+++ b/Gax/src/GapicClientTrait.php
@@ -353,6 +353,8 @@ private function setClientOptions(array $options)
                 $options['apiKey'],
                 $options['credentialsConfig']['quotaProject'] ?? null
             );
+        } elseif ($hasEmulator && !isset($options['credentials'])) {
+            $this->credentialsWrapper = new InsecureCredentialsWrapper();
         } else {
             $enableRegionalAccessBoundary = filter_var(
                 getenv('GOOGLE_AUTH_TRUST_BOUNDARY_ENABLE_EXPERIMENT'),
diff --git a/Gax/tests/Unit/GapicClientTraitTest.php b/Gax/tests/Unit/GapicClientTraitTest.php
index 7c0df631ed16..c3b10e14578f 100644
--- a/Gax/tests/Unit/GapicClientTraitTest.php
+++ b/Gax/tests/Unit/GapicClientTraitTest.php
@@ -1861,6 +1861,7 @@ public function testHasEmulatorOption()
             use GapicClientTrait {
                 buildClientOptions as public;
                 setClientOptions as public;
+                getCredentialsWrapper as public;
             }
             use ClientDefaultsTrait {
                 ClientDefaultsTrait::getClientDefaults insteadof GapicClientTrait;
@@ -1881,6 +1882,10 @@ private function createTransport(
         $gapic->setClientOptions($options);
 
         $this->assertTrue($gapic->hasEmulator);
+        $this->assertInstanceOf(
+            \Google\ApiCore\InsecureCredentialsWrapper::class,
+            $gapic->getCredentialsWrapper()
+        );
     }
 
     public function testGetServiceScopes()