U %FZh!@sdZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddl m Z e Zddd d d d gZed ddgZGdddZGdddeZGdddeZGdddeZGdddeZddZdS)zFirebase credentials module.N) Credentials)requests) credentials)service_accountz.https://www.googleapis.com/auth/cloud-platformz)https://www.googleapis.com/auth/datastorez5https://www.googleapis.com/auth/devstorage.read_writez(https://www.googleapis.com/auth/firebasez/https://www.googleapis.com/auth/identitytoolkitz.https://www.googleapis.com/auth/userinfo.emailAccessTokenInfoZ access_tokenexpiryc@s eZdZdZddZddZdS)Basez>Provides OAuth2 access tokens for accessing Firebase services.cCs |}|tt|j|jS)zFetches a Google OAuth2 access token using this credential instance. Returns: AccessTokenInfo: An access token obtained using the credential. )get_credentialrefresh_requestrtokenr)selfZ google_credra/home/aprabhat/apps/x.techxrdev.in/venv/lib/python3.8/site-packages/firebase_admin/credentials.pyget_access_token0s zBase.get_access_tokencCstdS)z?Returns the Google credential instance used for authentication.N)NotImplementedErrorr rrrr :szBase.get_credentialN)__name__ __module__ __qualname____doc__rr rrrrr-s rcs.eZdZdZedfdd ZddZZS)_ExternalCredentialszLA wrapper for google.auth.credentials.Credentials typed credential instances) credentialcstt|||_dSN)superr__init__ _g_credential)r r __class__rrrAsz_ExternalCredentials.__init__cCs|jS)zReturns the underlying Google Credential Returns: google.auth.credentials.Credentials: A Google Auth credential instance.rrrrrr Esz#_ExternalCredentials.get_credential)rrrrGoogleAuthCredentialsrr __classcell__rrrrr>srcsPeZdZdZdZfddZeddZeddZed d Z d d Z Z S) Certificatez9A credential initialized from a JSON certificate keyfile.rc stt|t|r6t|}t|}W5QRXnt|trF|}nt d || d|j krtt d |j zt jj|td|_Wn0t k r}zt d |W5d}~XYnXdS)a]Initializes a credential from a Google service account certificate. Service account certificates can be downloaded as JSON files from the Firebase console. To instantiate a credential from a certificate file, either specify the file path or a dict representing the parsed contents of the file. Args: cert: Path to a certificate file or a dict representing the contents of a certificate. Raises: IOError: If the specified certificate file doesn't exist or cannot be read. ValueError: If the specified certificate is invalid. z}Invalid certificate argument: "{0}". Certificate argument must be a file path, or a dict containing the parsed file contents.typezZInvalid service account certificate. Certificate must contain a "type" field set to "{0}".Zscopesz?Failed to initialize a certificate credential. Caused by: "{0}"N)rr"r _is_file_pathopenjsonload isinstancedict ValueErrorformatget_CREDENTIAL_TYPErrZfrom_service_account_info_scopesr)r cert json_file json_dataerrorrrrrQs0   zCertificate.__init__cCs|jjSr)r project_idrrrrr4tszCertificate.project_idcCs|jjSr)rsignerrrrrr5xszCertificate.signercCs|jjSr)rservice_account_emailrrrrr6|sz!Certificate.service_account_emailcCs|jSzReturns the underlying Google credential. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.rrrrrr szCertificate.get_credential) rrrrr.rpropertyr4r5r6r r!rrrrr"Ls #   r"cs<eZdZdZfddZddZeddZdd ZZ S) ApplicationDefaultz(A Google Application Default credential.cstt|d|_dS)zCreates an instance that will use Application Default credentials. The credentials will be lazily initialized when get_credential() or project_id() is called. See those methods for possible errors raised. N)rr9rrrrrrrszApplicationDefault.__init__cCs||jS)a:Returns the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.)_load_credentialrrrrrr sz!ApplicationDefault.get_credentialcCs||jS)aReturns the project_id from the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: str: The project id.)r: _project_idrrrrr4s zApplicationDefault.project_idcCs |jstjjtd\|_|_dS)Nr$)rgoogleauthdefaultr/r;rrrrr:sz#ApplicationDefault._load_credential) rrrrrr r8r4r:r!rrrrr9s    r9csPeZdZdZdZfddZeddZeddZed d Z d d Z Z S) RefreshTokenz8A credential initialized from an existing refresh token.Zauthorized_userc stt|t|r6t|}t|}W5QRXnt|trF|}nt d || d|j krtt d |j t j|t|_dS)aInitializes a credential from a refresh token JSON file. The JSON must consist of client_id, client_secret and refresh_token fields. Refresh token files are typically created and managed by the gcloud SDK. To instantiate a credential from a refresh token file, either specify the file path or a dict representing the parsed contents of the file. Args: refresh_token: Path to a refresh token file or a dict representing the contents of a refresh token file. Raises: IOError: If the specified file doesn't exist or cannot be read. ValueError: If the refresh token configuration is invalid. zInvalid refresh token argument: "{0}". Refresh token argument must be a file path, or a dict containing the parsed file contents.r#zSInvalid refresh token configuration. JSON must contain a "type" field set to "{0}".N)rr?rr%r&r'r(r)r*r+r,r-r.rrZfrom_authorized_user_infor/r)r refresh_tokenr1r2rrrrs   zRefreshToken.__init__cCs|jjSr)r client_idrrrrrAszRefreshToken.client_idcCs|jjSr)r client_secretrrrrrBszRefreshToken.client_secretcCs|jjSr)rr@rrrrr@szRefreshToken.refresh_tokencCs|jSr7rrrrrr szRefreshToken.get_credential) rrrrr.rr8rArBr@r r!rrrrr?s    r?cCs,zt|WdStk r&YdSXdS)NTF)pathlibPath TypeError)pathrrrr%s  r%)r collectionsr'rCZ google.authr<Zgoogle.auth.credentialsrr Zgoogle.auth.transportrZ google.oauth2rrRequestr r/ namedtuplerrrr"r9r?r%rrrrs.     <'9