Server : LiteSpeed
System : Linux server51.dnsbootclub.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64
User : nandedex ( 1060)
PHP Version : 8.1.33
Disable Function : NONE
Directory :  /opt/cppython/lib/python3.8/site-packages/google/oauth2/__pycache__/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]


Current File : //opt/cppython/lib/python3.8/site-packages/google/oauth2/__pycache__/credentials.cpython-38.pyc
U

O��gQa�@s�dZddlmZddlZddlZddlZddlZddlmZddlmZddlm	Z	ddlm
Z
ddlmZdd	lm
Z
e�e�Zd
ZdZGdd
�d
e	je	j�ZGdd�de	j�ZdS)a�OAuth 2.0 Credentials.

This module provides credentials based on OAuth 2.0 access and refresh tokens.
These credentials usually access resources on behalf of a user (resource
owner).

Specifically, this is intended to use access tokens acquired using the
`Authorization Code grant`_ and can refresh those tokens using a
optional `refresh token`_.

Obtaining the initial access and refresh token is outside of the scope of this
module. Consult `rfc6749 section 4.1`_ for complete details on the
Authorization Code grant flow.

.. _Authorization Code grant: https://tools.ietf.org/html/rfc6749#section-1.3.1
.. _refresh token: https://tools.ietf.org/html/rfc6749#section-6
.. _rfc6749 section 4.1: https://tools.ietf.org/html/rfc6749#section-4.1
�)�datetimeN)�
_cloud_sdk)�_helpers)�credentials)�
exceptions)�metrics)�reauthz#https://oauth2.googleapis.com/tokenz'https://oauth2.googleapis.com/tokeninfocs�eZdZdZddddddddddddddejdf�fdd�	Zdd�Zdd	�Ze	d
d��Z
e	dd
��Ze	dd��Ze	dd��Z
e	dd��Ze	dd��Ze	dd��Ze	dd��Ze	dd��Ze	dd��Zejdd��Ze	dd ��Zd!d"�Ze�ej�d#d$��Ze�ej�d%d&��Ze�ej�d'd(��Zd)d*�Ze�ej �d+d,��Z!d-d.�Z"e�ej�d/d0��Z#e$d7d1d2��Z%e$d8d3d4��Z&d9d5d6�Z'�Z(S):�Credentialsa�Credentials using OAuth 2.0 access and refresh tokens.

    The credentials are considered immutable except the tokens and the token
    expiry, which are updated after refresh. If you want to modify the quota
    project, use :meth:`with_quota_project` or ::

        credentials = credentials.with_quota_project('myproject-123')

    Reauth is disabled by default. To enable reauth, set the
    `enable_reauth_refresh` parameter to True in the constructor. Note that
    reauth feature is intended for gcloud to use only.
    If reauth is enabled, `pyu2f` dependency has to be installed in order to use security
    key reauth feature. Dependency can be installed via `pip install pyu2f` or `pip install
    google-auth[reauth]`.
    NFcs�tt|���||_|
|_||_||_||_||_||_	||_
||_||_|	|_
||_||_|
|_||_|pptj|_|pzd|_d|_dS)a
        Args:
            token (Optional(str)): The OAuth 2.0 access token. Can be None
                if refresh information is provided.
            refresh_token (str): The OAuth 2.0 refresh token. If specified,
                credentials can be refreshed.
            id_token (str): The Open ID Connect ID Token.
            token_uri (str): The OAuth 2.0 authorization server's token
                endpoint URI. Must be specified for refresh, can be left as
                None if the token can not be refreshed.
            client_id (str): The OAuth 2.0 client ID. Must be specified for
                refresh, can be left as None if the token can not be refreshed.
            client_secret(str): The OAuth 2.0 client secret. Must be specified
                for refresh, can be left as None if the token can not be
                refreshed.
            scopes (Sequence[str]): The scopes used to obtain authorization.
                This parameter is used by :meth:`has_scopes`. OAuth 2.0
                credentials can not request additional scopes after
                authorization. The scopes must be derivable from the refresh
                token if refresh information is provided (e.g. The refresh
                token scopes are a superset of this or contain a wild card
                scope like 'https://www.googleapis.com/auth/any-api').
            default_scopes (Sequence[str]): Default scopes passed by a
                Google client library. Use 'scopes' for user-defined scopes.
            quota_project_id (Optional[str]): The project ID used for quota and billing.
                This project may be different from the project used to
                create the credentials.
            rapt_token (Optional[str]): The reauth Proof Token.
            refresh_handler (Optional[Callable[[google.auth.transport.Request, Sequence[str]], [str, datetime]]]):
                A callable which takes in the HTTP request callable and the list of
                OAuth scopes and when called returns an access token string for the
                requested scopes and its expiry datetime. This is useful when no
                refresh tokens are provided and tokens are obtained by calling
                some external process on demand. It is particularly useful for
                retrieving downscoped tokens from a token broker.
            enable_reauth_refresh (Optional[bool]): Whether reauth refresh flow
                should be used. This flag is for gcloud to use only.
            granted_scopes (Optional[Sequence[str]]): The scopes that were consented/granted by the user.
                This could be different from the requested scopes and it could be empty if granted
                and requested scopes were same.
            trust_boundary (str): String representation of trust boundary meta.
            universe_domain (Optional[str]): The universe domain. The default
                universe domain is googleapis.com.
            account (Optional[str]): The account associated with the credential.
        �N)�superr	�__init__�token�expiry�_refresh_token�	_id_token�_scopes�_default_scopes�_granted_scopes�
_token_uri�
_client_id�_client_secret�_quota_project_id�_rapt_token�refresh_handler�_enable_reauth_refresh�_trust_boundaryr�DEFAULT_UNIVERSE_DOMAIN�_universe_domain�_account�_cred_file_path)�selfr
�
refresh_token�id_token�	token_uri�	client_id�
client_secret�scopes�default_scopes�quota_project_idr�
rapt_tokenr�enable_reauth_refresh�granted_scopes�trust_boundary�universe_domain�account��	__class__��F/opt/cppython/lib/python3.8/site-packages/google/oauth2/credentials.pyrJs&A
zCredentials.__init__cCs*|j��}d|kr|d=d|kr&|d=|S)z�A __getstate__ method must exist for the __setstate__ to be called
        This is identical to the default implementation.
        See https://docs.python.org/3.7/library/pickle.html#object.__setstate__
        �_refresh_handler�_refresh_worker)�__dict__�copy)r Z
state_dictr1r1r2�__getstate__�s
zCredentials.__getstate__cCs�|�d�|_|�d�|_|�d�|_|�d�|_|�d�|_|�d�|_|�d�|_|�d�|_|�d	�|_	|�d
�|_
|�d�|_|�d�|_|�d
�|_
|�d�|_|�d�p�tj|_|�d�|_d|_d|_|�dd�|_|�dd�|_dS)z\Credentials pickled with older versions of the class do not have
        all the attributes.r
rrrrrrrrrrrrrrrN�_use_non_blocking_refreshFrr
)�getr
rrrrrrrrrrrrrrrrrr3r4r8r)r �dr1r1r2�__setstate__�s*�zCredentials.__setstate__cCs|jS)z+Optional[str]: The OAuth 2.0 refresh token.)r�r r1r1r2r!�szCredentials.refresh_tokencCs|jS)z/Optional[str]: The OAuth 2.0 permission scopes.)rr<r1r1r2r&�szCredentials.scopescCs|jS)zWOptional[Sequence[str]]: The OAuth 2.0 permission scopes that were granted by the user.)rr<r1r1r2r+�szCredentials.granted_scopescCs|jS)zOOptional[str]: The OAuth 2.0 authorization server's token endpoint
        URI.)rr<r1r1r2r#�szCredentials.token_uricCs|jS)adOptional[str]: The Open ID Connect ID Token.

        Depending on the authorization server and the scopes requested, this
        may be populated when credentials are obtained and updated when
        :meth:`refresh` is called. This token is a JWT. It can be verified
        and decoded using :func:`google.oauth2.id_token.verify_oauth2_token`.
        )rr<r1r1r2r"�s	zCredentials.id_tokencCs|jS)z'Optional[str]: The OAuth 2.0 client ID.)rr<r1r1r2r$�szCredentials.client_idcCs|jS)z+Optional[str]: The OAuth 2.0 client secret.)rr<r1r1r2r%�szCredentials.client_secretcCsdS)zvFalse: OAuth 2.0 credentials have their scopes set when
        the initial token is requested and can not be changed.Fr1r<r1r1r2�requires_scopes�szCredentials.requires_scopescCs|jS)z&Optional[str]: The reauth Proof Token.)rr<r1r1r2r)�szCredentials.rapt_tokencCs|jS)z�Returns the refresh handler if available.

        Returns:
           Optional[Callable[[google.auth.transport.Request, Sequence[str]], [str, datetime]]]:
               The current refresh handler.
        )r3r<r1r1r2rszCredentials.refresh_handlercCs"t|�s|dk	rtd��||_dS)a/Updates the current refresh handler.

        Args:
            value (Optional[Callable[[google.auth.transport.Request, Sequence[str]], [str, datetime]]]):
                The updated value of the refresh handler.

        Raises:
            TypeError: If the value is not a callable or None.
        Nz7The provided refresh_handler is not a callable or None.)�callable�	TypeErrorr3)r �valuer1r1r2r
scCs|jS)zlstr: The user account associated with the credential. If the account is unknown an empty string is returned.)rr<r1r1r2r.szCredentials.accountcCsR|j|j|j|j|j|j|j|j|j|j	|j
|j|j|j
|j|jd�}|j|_|S)N)r!r"r#r$r%r&r'r+r(r)r*r,r-r.)r0r
r!r"r#r$r%r&r'r+r(r)rrrrr)r �credr1r1r2�
_make_copys&�zCredentials._make_copycCs*|jr&|jdd�}|jr"|j|d<|SdS)Nzuser credentials)Zcredential_sourceZcredential_typeZ	principal)rr.)r Z	cred_infor1r1r2�
get_cred_info3s�
zCredentials.get_cred_infocCs|��}||_|S�N)rBr)r r(rAr1r1r2�with_quota_project?szCredentials.with_quota_projectcCs|��}||_|SrD)rBr)r r#rAr1r1r2�with_token_uriEszCredentials.with_token_uricCs|��}||_|S)z�Returns a copy of these credentials with a modified account.

        Args:
            account (str): The account to set

        Returns:
            google.oauth2.credentials.Credentials: A new credentials instance.
        )rBr)r r.rAr1r1r2�with_accountKs	zCredentials.with_accountcCs|��}||_|SrD)rBr)r r-rAr1r1r2�with_universe_domainXsz Credentials.with_universe_domaincCstjSrD)rZCRED_TYPE_USERr<r1r1r2�_metric_header_for_usage^sz$Credentials._metric_header_for_usagec
Cs�|jtjkrt�d�|j���|jdk	r.|jn|j}|jdkr�|j	r�|j	||d�\}}t
|t�sjt�d��t
|t�s~t�d��t
��|t
jkr�t�d��||_||_dS|jdks�|jdks�|jdks�|jdkr�t�d��tj||j|j|j|j||j|jd�\}}}}}||_||_||_|�d�|_||_|�r�d	|k�r�t|�}	|d	��|_t|j�}
|	|
}|�r�t�d
�d� |���dS)NaUser credential refresh is only supported in the default googleapis.com universe domain, but the current universe domain is {}. If you created the credential with an access token, it's likely that the provided token is expired now, please update your code with a valid token.)r&z3The refresh_handler returned token is not a string.z=The refresh_handler returned expiry is not a datetime object.zDThe credentials returned by the refresh_handler are already expired.z�The credentials do not contain the necessary fields need to refresh the access token. You must specify refresh_token, token_uri, client_id, and client_secret.)r&r)r*r"�scopezUNot all requested scopes were granted by the authorization server, missing scopes {}.�, )!rrrrZRefreshError�formatrrrr�
isinstance�strrr�utcnow�REFRESH_THRESHOLDr
rrrrrZ
refresh_grantrrr9r�	frozenset�splitr�_LOGGER�warning�join)r �requestr&r
rZaccess_tokenr!Zgrant_responser)Zrequested_scopesr+Z scopes_requested_but_not_grantedr1r1r2�refreshas���

�
���������
��zCredentials.refreshcCs�td�}|�|���}|r.td�d�|����|�d�}|rZt�|�	d��
d�dd�}nt��tj
}|d	kr�d
|kr�|�d
�}t|t�r�|�
d�}||�d�|�d
�t||�d�|�d�|�d�||�d�|�d�|�d�|�dd�d�S)a�Creates a Credentials instance from parsed authorized user info.

        Args:
            info (Mapping[str, str]): The authorized user info in Google
                format.
            scopes (Sequence[str]): Optional list of scopes to include in the
                credentials.

        Returns:
            google.oauth2.credentials.Credentials: The constructed
                credentials.

        Raises:
            ValueError: If the info is not in the expected format.
        )r!r$r%zGAuthorized user info was not in the expected format, missing fields {}.rKr�Z�.rz%Y-%m-%dT%H:%M:%SNr&� r
r!r$r%r(r)r,r-r.r
)r
r!r#r&r$r%r(rr)r,r-r.)�set�
difference�keys�
ValueErrorrLrUr9r�strptime�rstriprRrrOrPrMrN�_GOOGLE_OAUTH2_TOKEN_ENDPOINT)�cls�infor&Zkeys_needed�missingrr1r1r2�from_authorized_user_info�sB��
�



�z%Credentials.from_authorized_user_infoc
Cs>tj|ddd��$}t�|�}|�||�W5QR�SQRXdS)a�Creates a Credentials instance from an authorized user json file.

        Args:
            filename (str): The path to the authorized user json file.
            scopes (Sequence[str]): Optional list of scopes to include in the
                credentials.

        Returns:
            google.oauth2.credentials.Credentials: The constructed
                credentials.

        Raises:
            ValueError: If the file is not in the expected format.
        �rzutf-8)�encodingN)�io�open�json�loadre)rb�filenamer&Z	json_file�datar1r1r2�from_authorized_user_file�s
z%Credentials.from_authorized_user_filec
s||j|j|j|j|j|j|j|j|jd�	}|j	rB|j	�
�d|d<dd�|��D�}�dk	rr�fdd�|��D�}t�
|�S)a�Utility function that creates a JSON representation of a Credentials
        object.

        Args:
            strip (Sequence[str]): Optional list of members to exclude from the
                                   generated JSON.

        Returns:
            str: A JSON representation of this instance. When converted into
            a dictionary, it can be passed to from_authorized_user_info()
            to create a new credential instance.
        )	r
r!r#r$r%r&r)r-r.rXrcSsi|]\}}|dk	r||�qSrDr1��.0�k�vr1r1r2�
<dictcomp>#sz'Credentials.to_json.<locals>.<dictcomp>Ncsi|]\}}|�kr||�qSr1r1ro��stripr1r2rs's)r
r!r#r$r%r&r)rrr�	isoformat�itemsrj�dumps)r ru�prepr1rtr2�to_jsons �zCredentials.to_json)N)N)N))�__name__�
__module__�__qualname__�__doc__rrrr7r;�propertyr!r&r+r#r"r$r%r=r)r�setterr.rBr�copy_docstringr	rC�CredentialsWithQuotaProjectrEZCredentialsWithTokenUrirFrGZCredentialsWithUniverseDomainrHrIrW�classmethodrernrz�
__classcell__r1r1r/r2r	9s|�U










	











Y7r	csZeZdZdZd
�fdd�	Zdd�Ze�ej	�dd��Z
d	d
�Ze�ej�dd��Z
�ZS)�UserAccessTokenCredentialsa�Access token credentials for user account.

    Obtain the access token for a given user account or the current active
    user account with the ``gcloud auth print-access-token`` command.

    Args:
        account (Optional[str]): Account to get the access token for. If not
            specified, the current active account will be used.
        quota_project_id (Optional[str]): The project ID used for quota
            and billing.
    Ncs(t�d�tt|���||_||_dS)Nz�UserAccessTokenCredentials is deprecated, please use google.oauth2.credentials.Credentials instead. To use that credential type, simply run `gcloud auth application-default login` and let the client libraries pick up the application default credentials.)�warnings�warnrr�rrr)r r.r(r/r1r2r9s�z#UserAccessTokenCredentials.__init__cCs|j||jd�S)aCreate a new instance with the given account.

        Args:
            account (str): Account to get the access token for.

        Returns:
            google.oauth2.credentials.UserAccessTokenCredentials: The created
                credentials with the given account.
        �r.r()r0r)r r.r1r1r2rGEs
z'UserAccessTokenCredentials.with_accountcCs|j|j|d�S)Nr�)r0r)r r(r1r1r2rEQsz-UserAccessTokenCredentials.with_quota_projectcCst�|j�|_dS)a{Refreshes the access token.

        Args:
            request (google.auth.transport.Request): This argument is required
                by the base class interface but not used in this implementation,
                so just set it to `None`.

        Raises:
            google.auth.exceptions.UserAccessTokenError: If the access token
                refresh failed.
        N)rZget_auth_access_tokenrr
)r rVr1r1r2rWUsz"UserAccessTokenCredentials.refreshcCs|�|�|�|�dSrD)rW�apply)r rV�method�url�headersr1r1r2�before_requestcs
z)UserAccessTokenCredentials.before_request)NN)r{r|r}r~rrGrr�rr�rErWr	r�r�r1r1r/r2r�,s


r�)r~rrhrj�loggingr�Zgoogle.authrrrrrZ
google.oauth2r�	getLoggerr{rSraZ"_GOOGLE_OAUTH2_TOKEN_INFO_ENDPOINTZReadOnlyScopedr�r	r�r1r1r1r2�<module>s&
v

F1le Man4ger