o 0= j!@sdZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddl m Z e ZgdZedd d gZ Gd d d ZGd ddeZGdddeZGdddeZGdddeZddZdS)zFirebase credentials module.N) Credentials)requests) credentials)service_account)z.https://www.googleapis.com/auth/cloud-platformz)https://www.googleapis.com/auth/datastorez5https://www.googleapis.com/auth/devstorage.read_writez(https://www.googleapis.com/auth/firebasez/https://www.googleapis.com/auth/identitytoolkitz.https://www.googleapis.com/auth/userinfo.emailAccessTokenInfoZ access_tokenexpiryc@s eZdZdZddZddZdS)Basez>Provides OAuth2 access tokens for accessing Firebase services.cCs |}|tt|j|jS)zFetches a Google OAuth2 access token using this credential instance. Returns: AccessTokenInfo: An access token obtained using the credential. N)get_credentialZrefresh_requestrtokenr)selfZ google_credr dC:\Users\psant\Downloads\Anu Raj Backend\school\venv\Lib\site-packages\firebase_admin/credentials.pyget_access_token0s zBase.get_access_tokencCst)z?Returns the Google credential instance used for authentication.N)NotImplementedErrorr r r rr :szBase.get_credentialN)__name__ __module__ __qualname____doc__rr r r r rr-s rcs.eZdZdZdeffdd ZddZZS)_ExternalCredentialszLA wrapper for google.auth.credentials.Credentials typed credential instances credentialcst||_dSNsuper__init__ _g_credential)r r __class__r rrAs  z_ExternalCredentials.__init__cC|jS)zReturns the underlying Google Credential Returns: google.auth.credentials.Credentials: A Google Auth credential instance.Nrrr r rr Ez#_ExternalCredentials.get_credential)rrrrGoogleAuthCredentialsrr __classcell__r r rrr>srcPeZdZdZdZfddZeddZeddZed d Z d d Z Z S) Certificatez9A credential initialized from a JSON certificate keyfile.rc stt|r%t|dd }t|}Wdn1swYnt|tr-|}ntd|d| d|j krFtd|j dz t j j |td |_WdStyg}z td |d |d}~ww) a]Initializes a credential from a Google service account certificate. Service account certificates can be downloaded as JSON files from the Firebase console. To instantiate a credential from a certificate file, either specify the file path or a dict representing the parsed contents of the file. Args: cert: Path to a certificate file or a dict representing the contents of a certificate. Raises: IOError: If the specified certificate file doesn't exist or cannot be read. ValueError: If the specified certificate is invalid. utf-8encodingNzInvalid certificate argument: "z[". Certificate argument must be a file path, or a dict containing the parsed file contents.typezUInvalid service account certificate. Certificate must contain a "type" field set to "".Zscopesz;Failed to initialize a certificate credential. Caused by: "")rr _is_file_pathopenjsonload isinstancedict ValueErrorget_CREDENTIAL_TYPErrZfrom_service_account_info_scopesr)r cert json_file json_dataerrorrr rrQs8     zCertificate.__init__cC|jjSr)r project_idrr r rr<uzCertificate.project_idcCr;r)rsignerrr r rr>yr=zCertificate.signercCr;r)rservice_account_emailrr r rr?}r=z!Certificate.service_account_emailcCrzReturns the underlying Google credential. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.Nr rr r rr r!zCertificate.get_credential) rrrrr5rpropertyr<r>r?r r#r r rrr%Ls $   r%cs<eZdZdZfddZddZeddZdd ZZ S) ApplicationDefaultz(A Google Application Default credential.cstd|_dS)zCreates an instance that will use Application Default credentials. The credentials will be lazily initialized when get_credential() or project_id() is called. See those methods for possible errors raised. Nrrrr rrs  zApplicationDefault.__init__cC||jS)a:Returns the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.N)_load_credentialrrr r rr sz!ApplicationDefault.get_credentialcCrC)aReturns the project_id from the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: str: The project id.N)rD _project_idrr r rr<s zApplicationDefault.project_idcCs$|jstjjtd\|_|_dSdS)Nr+)rgoogleauthdefaultr6rErr r rrDsz#ApplicationDefault._load_credential) rrrrrr rAr<rDr#r r rrrBs    rBcr$) RefreshTokenz8A credential initialized from an existing refresh token.Zauthorized_usercstt|r%t|dd }t|}Wdn1swYnt|tr-|}ntd|d| d|j krFtd|j dt j |t|_dS) aInitializes a credential from a refresh token JSON file. The JSON must consist of client_id, client_secret and refresh_token fields. Refresh token files are typically created and managed by the gcloud SDK. To instantiate a credential from a refresh token file, either specify the file path or a dict representing the parsed contents of the file. Args: refresh_token: Path to a refresh token file or a dict representing the contents of a refresh token file. Raises: IOError: If the specified file doesn't exist or cannot be read. ValueError: If the refresh token configuration is invalid. r&r'Nz!Invalid refresh token argument: "z]". Refresh token argument must be a file path, or a dict containing the parsed file contents.r)zNInvalid refresh token configuration. JSON must contain a "type" field set to "r*)rrr-r.r/r0r1r2r3r4r5rrZfrom_authorized_user_infor6r)r refresh_tokenr8r9rr rrs"    zRefreshToken.__init__cCr;r)r client_idrr r rrKr=zRefreshToken.client_idcCr;r)r client_secretrr r rrLr=zRefreshToken.client_secretcCr;r)rrJrr r rrJr=zRefreshToken.refresh_tokencCrr@r rr r rr r!zRefreshToken.get_credential) rrrrr5rrArKrLrJr r#r r rrrIs !   rIcCs&zt|WdStyYdSw)NTF)pathlibPath TypeError)pathr r rr-s   r-)r collectionsr/rMZ google.authrFZgoogle.auth.credentialsrr"Zgoogle.auth.transportrZ google.oauth2rrRequestr r6 namedtuplerrrr%rBrIr-r r r rs&     =' :