HEX

File: //opt/cppython/lib/python3.8/site-packages/google/auth/__pycache__/_default_async.cpython-38.pyc
U

KD�g7-�@s~dZddlZddlZddlZddlmZddlmZddlmZddd�Zddd	�Z	dd
d�Z
dd
�Zddd�Zddd�Z
dS)zgApplication default credentials.

Implements application default credentials and project ID detection.
�N)�_default)�environment_vars)�
exceptionscCs�tj�|�st�d�|���t�|d��P}zt�	|�}Wn:t
k
rr}zt�d�|�|�}||�W5d}~XYnXW5QRX|�d�}|tj
k�rddlm}z|jj||d�}Wn>t
k
r�}z d	�|�}	t�|	|�}||�W5d}~XYnX|�r|�|�}|j�st�|�|dfS|tjk�r�dd
lm}
z|
jj||d��|�}Wn@t
k
�r�}z d�|�}	t�|	|�}||�W5d}~XYnX||�d�fSt�d
j||tjd���dS)aFLoads Google credentials from a file.

    The credentials file must be a service account key or stored authorized
    user credentials.

    Args:
        filename (str): The full path to the credentials file.
        scopes (Optional[Sequence[str]]): The list of scopes for the credentials. If
            specified, the credentials will automatically be scoped if
            necessary
        quota_project_id (Optional[str]):  The project ID used for
                quota and billing.

    Returns:
        Tuple[google.auth.credentials.Credentials, Optional[str]]: Loaded
            credentials and the project ID. Authorized user credentials do not
            have the project ID information.

    Raises:
        google.auth.exceptions.DefaultCredentialsError: if the file is in the
            wrong format or is missing.
    zFile {} was not found.�rz!File {} is not a valid json file.N�typer)�_credentials_async)�scopesz2Failed to load authorized user credentials from {})�_service_account_asyncz2Failed to load service account credentials from {}�
project_idzZThe file {file} does not have a valid type. Type is {type}, expected one of {valid_types}.)�filerZvalid_types)�os�path�existsr�DefaultCredentialsError�format�io�open�json�load�
ValueError�getrZ_AUTHORIZED_USER_TYPEZ
google.oauth2r�CredentialsZfrom_authorized_user_info�with_quota_project�quota_project_idZ#_warn_about_problematic_credentialsZ_SERVICE_ACCOUNT_TYPEr	Zfrom_service_account_infoZ_VALID_TYPES)�filenamerrZfile_obj�infoZ
caught_exc�new_excZcredential_type�credentials�msgZservice_account�r�G/opt/cppython/lib/python3.8/site-packages/google/auth/_default_async.py�load_credentials_from_filesf��"
�



��
��r!cCsHddlm}|��}tj�|�s$dSt||d�\}}|s@|��}||fS)z7Gets the credentials and project ID from the Cloud SDK.r��
_cloud_sdk�NN�r)�google.authr#�(get_application_default_credentials_pathrr
�isfiler!Zget_project_id)rr#Zcredentials_filenamerr
rrr �_get_gcloud_sdk_credentialsms�
r)cCslddlm}|��}tj�tj�}|dk	r<||kr<t|d�S|dk	rdt	tjtj|d�\}}||fSdSdS)zRGets credentials from the GOOGLE_APPLICATION_CREDENTIALS environment
    variable.rr"Nr%r$)
r&r#r'r�environrrZCREDENTIALSr)r!)rr#Zcloud_sdk_adc_pathZ
explicit_filerr
rrr �!_get_explicit_environ_credentials�s

�
r+cCst��S)z?Gets Google App Engine App Identity credentials and project ID.)r�_get_gae_credentialsrrrr r,�sr,cCs
t�|�S)z>Gets credentials and project ID from the GCE Metadata Service.)r�_get_gce_credentials��requestrrr r-�s
r-cs�ddlm}ddlm}tj�tjtj�tj	��}�fdd��fdd�t
�fdd�f}|D]`}|�\}}	|dk	rZ|||�}�r�t||�r�|���}|p�|	}
|
s�t
j�d	tj�||
fSqZt�t
j��dS)
ah
Gets the default credentials for the current environment.

    `Application Default Credentials`_ provides an easy way to obtain
    credentials to call Google APIs for server-to-server or local applications.
    This function acquires credentials from the environment in the following
    order:

    1. If the environment variable ``GOOGLE_APPLICATION_CREDENTIALS`` is set
       to the path of a valid service account JSON private key file, then it is
       loaded and returned. The project ID returned is the project ID defined
       in the service account file if available (some older files do not
       contain project ID information).
    2. If the `Google Cloud SDK`_ is installed and has application default
       credentials set they are loaded and returned.

       To enable application default credentials with the Cloud SDK run::

            gcloud auth application-default login

       If the Cloud SDK has an active project, the project ID is returned. The
       active project can be set using::

            gcloud config set project

    3. If the application is running in the `App Engine standard environment`_
       (first generation) then the credentials and project ID from the
       `App Identity Service`_ are used.
    4. If the application is running in `Compute Engine`_ or `Cloud Run`_ or
       the `App Engine flexible environment`_ or the `App Engine standard
       environment`_ (second generation) then the credentials and project ID
       are obtained from the `Metadata Service`_.
    5. If no credentials are found,
       :class:`~google.auth.exceptions.DefaultCredentialsError` will be raised.

    .. _Application Default Credentials: https://developers.google.com            /identity/protocols/application-default-credentials
    .. _Google Cloud SDK: https://cloud.google.com/sdk
    .. _App Engine standard environment: https://cloud.google.com/appengine
    .. _App Identity Service: https://cloud.google.com/appengine/docs/python            /appidentity/
    .. _Compute Engine: https://cloud.google.com/compute
    .. _App Engine flexible environment: https://cloud.google.com            /appengine/flexible
    .. _Metadata Service: https://cloud.google.com/compute/docs            /storing-retrieving-metadata
    .. _Cloud Run: https://cloud.google.com/run

    Example::

        import google.auth

        credentials, project_id = google.auth.default()

    Args:
        scopes (Sequence[str]): The list of scopes for the credentials. If
            specified, the credentials will automatically be scoped if
            necessary.
        request (google.auth.transport.Request): An object used to make
            HTTP requests. This is used to detect whether the application
            is running on Compute Engine. If not specified, then it will
            use the standard library http client to make requests.
        quota_project_id (Optional[str]):  The project ID used for
            quota and billing.
    Returns:
        Tuple[~google.auth.credentials.Credentials, Optional[str]]:
            the current environment's credentials and project ID. Project ID
            may be None, which indicates that the Project ID could not be
            ascertained from the environment.

    Raises:
        ~google.auth.exceptions.DefaultCredentialsError:
            If no credentials were found, or if the credentials found were
            invalid.
    r)�with_scopes_if_required)�CredentialsWithQuotaProjectcs
t�d�S�Nr%)r+rr%rr �<lambda>�zdefault_async.<locals>.<lambda>cs
t�d�Sr2)r)rr%rr r3r4cst��S)N)r-rr.rr r3r4NzvNo project ID could be determined. Consider running `gcloud config set project` or setting the %s environment variable)Zgoogle.auth._credentials_asyncr0Zgoogle.auth.credentialsr1rr*rrZPROJECTZLEGACY_PROJECTr,�
isinstancerrZ_LOGGER�warningrrZ_CLOUD_SDK_MISSING_CREDENTIALS)rr/rr0r1Zexplicit_project_idZcheckers�checkerrr
Zeffective_project_idr)rr/r �
default_async�s8K�


�

�
�r8)NN)N)N)N)NNN)�__doc__rrrr&rrrr!r)r+r,r-r8rrrr �<module>s
P