feat(transport): add universe domain support

transport/http/dial.go

@@ -11,6 +11,7 @@ import (
 	"context"
 	"crypto/tls"
 	"errors"
+	"fmt"
 	"net"
 	"net/http"
 	"time"
@@ -88,6 +89,13 @@ func newTransport(ctx context.Context, base http.RoundTripper, settings *interna
 		if err != nil {
 			return nil, err
 		}
+		credsUniverseDomain, err := creds.GetUniverseDomain()
+		if err != nil {
+			return nil, err
+		}
+		if settings.GetUniverseDomain() != credsUniverseDomain {
+			return nil, errUniverseNotMatch(settings.GetUniverseDomain(), credsUniverseDomain)
+		}
 		paramTransport.quotaProject = internal.GetQuotaProject(creds, settings.QuotaProject)
 		ts := creds.TokenSource
 		if settings.ImpersonationConfig == nil && settings.TokenSource != nil {
@@ -101,6 +109,15 @@ func newTransport(ctx context.Context, base http.RoundTripper, settings *interna
 	return trans, nil
 }
 
+func errUniverseNotMatch(settingsUD, credsUD string) error {
+	return fmt.Errorf(
+		"the configured universe domain (%s) does not match the universe "+
+			"domain found in the credentials (%s). If you haven't configured "+
+			"WithUniverseDomain explicitly, googleapis.com is the default",
+		settingsUD,
+		credsUD)
+}
+
 func newSettings(opts []option.ClientOption) (*internal.DialSettings, error) {
 	var o internal.DialSettings
 	for _, opt := range opts {