File: //opt/cppython/lib/python3.8/site-packages/google/auth/__pycache__/app_engine.cpython-38.pyc
U
KD�g� � @ s� d Z ddlZddlmZ ddlmZ ddlmZ ddlmZ zddlmZ W n e k
rd dZY nX G dd � d ej
�Z
d
d � Z G d d
� d
ej ej
ej�ZdS )a Google App Engine standard environment support.
This module provides authentication and signing for applications running on App
Engine in the standard environment using the `App Identity API`_.
.. _App Identity API:
https://cloud.google.com/appengine/docs/python/appidentity/
� N)�_helpers)� credentials)�crypt)�
exceptions)� app_identityc @ s0 e Zd ZdZedd� �Ze�ej �dd� �Z
dS )�Signerz�Signs messages using the App Engine App Identity service.
This can be used in place of :class:`google.auth.crypt.Signer` when
running in the App Engine standard environment.
c C s dS )z�Optional[str]: The key ID used to identify this private key.
.. warning::
This is always ``None``. The key ID used by App Engine can not
be reliably determined ahead of time.
N� ��selfr r �C/opt/cppython/lib/python3.8/site-packages/google/auth/app_engine.py�key_id/ s z
Signer.key_idc C s t �|�}t�|�\}}|S �N)r �to_bytesr Z sign_blob)r
�message�_� signaturer r r �sign9 s
z Signer.signN) �__name__�
__module__� __qualname__�__doc__�propertyr r �copy_docstringr r r r r r r r ( s
r c C s t dkrt�d��t �� S )z�Gets the project ID for the current App Engine application.
Returns:
str: The project ID
Raises:
google.auth.exceptions.OSError: If the App Engine APIs are unavailable.
N�&The App Engine APIs are not available.)r r �OSErrorZget_application_idr r r r �get_project_id@ s
r c s� e Zd ZdZd� fdd� Ze�ej�dd� �Z e
dd� �Z e
d d
� �Z e�ej
�dd d ��Ze�ej�d
d� �Ze�ej�dd� �Ze
e�ej�dd� ��Ze
e�ej�dd� ��Z� ZS )� Credentialsz�App Engine standard environment credentials.
These credentials use the App Engine App Identity API to obtain access
tokens.
Nc sD t dkrt�d��tt| ��� || _|| _|| _t � | _
|| _ dS )a�
Args:
scopes (Sequence[str]): Scopes to request from the App Identity
API.
default_scopes (Sequence[str]): Default scopes passed by a
Google client library. Use 'scopes' for user-defined scopes.
service_account_id (str): The service account ID passed into
:func:`google.appengine.api.app_identity.get_access_token`.
If not specified, the default application service account
ID will be used.
quota_project_id (Optional[str]): The project ID used for quota
and billing.
Raises:
google.auth.exceptions.OSError: If the App Engine APIs are unavailable.
Nr ) r r r �superr �__init__�_scopes�_default_scopes�_service_account_idr �_signerZ_quota_project_id)r
�scopes�default_scopes�service_account_id�quota_project_id�� __class__r r r Z s
zCredentials.__init__c C sF | j d k r| j n| j}t�|| j�\}}tj�|�}|| | _| _d S r
) r r r Zget_access_tokenr! �datetime�utcfromtimestamp�token�expiry)r
�requestr# r+ �ttlr, r r r �refresh~ s zCredentials.refreshc C s | j dkrt�� | _ | j S )zThe service account email.N)r! r Zget_service_account_namer r r r �service_account_email� s
z!Credentials.service_account_emailc C s | j o| j S )z�Checks if the credentials requires scopes.
Returns:
bool: True if there are no scopes set otherwise False.
)r r r r r r �requires_scopes� s zCredentials.requires_scopesc C s | j ||| j| jd�S )N)r# r$ r% r& )r( r! r& )r
r# r$ r r r � with_scopes� s �zCredentials.with_scopesc C s | j | j| j|d�S )N)r# r% r& )r( r r! )r
r& r r r �with_quota_project� s
�z Credentials.with_quota_projectc C s | j �|�S r
)r" r )r
r r r r �
sign_bytes� s zCredentials.sign_bytesc C s | j S r
)r0 r r r r � signer_email� s zCredentials.signer_emailc C s | j S r
)r" r r r r �signer� s zCredentials.signer)NNNN)N)r r r r r r r r r r/ r r0 r1 �Scopedr2 �CredentialsWithQuotaProjectr3 �Signingr4 r5 r6 �
__classcell__r r r' r r Q s0 �$
r )r r) Z google.authr r r r Zgoogle.appengine.apir � ImportErrorr r r7 r9 r8 r r r r r �<module> s
�