o  i!@sdZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddl m Z e ZgdZedd d gZ Gd d d ZGd ddeZGdddeZGdddeZGdddeZddZdS)zFirebase credentials module.N) Credentials)requests) credentials)service_account)z.https://www.googleapis.com/auth/cloud-platformz)https://www.googleapis.com/auth/datastorez5https://www.googleapis.com/auth/devstorage.read_writez(https://www.googleapis.com/auth/firebasez/https://www.googleapis.com/auth/identitytoolkitz.https://www.googleapis.com/auth/userinfo.emailAccessTokenInfo access_tokenexpiryc@s eZdZdZddZddZdS)Basez>Provides OAuth2 access tokens for accessing Firebase services.cCs |}|tt|j|jS)zFetches a Google OAuth2 access token using this credential instance. Returns: AccessTokenInfo: An access token obtained using the credential. )get_credentialrefresh_requestrtokenr)self google_credrz/var/www/snowflake_co_dev_github/snow_flake_back_end_deploy/env/lib/python3.10/site-packages/firebase_admin/credentials.pyget_access_token0s zBase.get_access_tokencCst)z?Returns the Google credential instance used for authentication.)NotImplementedErrorrrrrr :szBase.get_credentialN)__name__ __module__ __qualname____doc__rr rrrrr -s r cs.eZdZdZdeffdd ZddZZS)_ExternalCredentialszLA wrapper for google.auth.credentials.Credentials typed credential instances credentialcst||_dSNsuper__init__ _g_credential)rr __class__rrrAs  z_ExternalCredentials.__init__cC|jS)zReturns the underlying Google Credential Returns: google.auth.credentials.Credentials: A Google Auth credential instance.rrrrrr Ez#_ExternalCredentials.get_credential)rrrrGoogleAuthCredentialsrr __classcell__rrr rr>srcPeZdZdZdZfddZeddZeddZed d Z d d Z Z S) Certificatez9A credential initialized from a JSON certificate keyfile.rc stt|r%t|dd }t|}Wdn1swYnt|tr-|}ntd|d| d|j krFtd|j dz t j j |td |_WdStyg}z td |d |d}~ww) a]Initializes a credential from a Google service account certificate. Service account certificates can be downloaded as JSON files from the Firebase console. To instantiate a credential from a certificate file, either specify the file path or a dict representing the parsed contents of the file. Args: cert: Path to a certificate file or a dict representing the contents of a certificate. Raises: IOError: If the specified certificate file doesn't exist or cannot be read. ValueError: If the specified certificate is invalid. utf-8encodingNzInvalid certificate argument: "z[". Certificate argument must be a file path, or a dict containing the parsed file contents.typezUInvalid service account certificate. Certificate must contain a "type" field set to "".scopesz;Failed to initialize a certificate credential. Caused by: "")rr _is_file_pathopenjsonload isinstancedict ValueErrorget_CREDENTIAL_TYPErrfrom_service_account_info_scopesr)rcert json_file json_dataerrorr rrrQs:     zCertificate.__init__cC|jjSr)r project_idrrrrrAuzCertificate.project_idcCr@r)rsignerrrrrrCyrBzCertificate.signercCr@r)rservice_account_emailrrrrrD}rBz!Certificate.service_account_emailcCr"zReturns the underlying Google credential. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.r#rrrrr r$zCertificate.get_credential) rrrrr9rpropertyrArCrDr r&rrr rr(Ls $   r(cs<eZdZdZfddZddZeddZdd ZZ S) ApplicationDefaultz(A Google Application Default credential.cstd|_dS)zCreates an instance that will use Application Default credentials. The credentials will be lazily initialized when get_credential() or project_id() is called. See those methods for possible errors raised. Nrrr rrrs  zApplicationDefault.__init__cC||jS)a:Returns the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.)_load_credentialrrrrrr sz!ApplicationDefault.get_credentialcCrH)aReturns the project_id from the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: str: The project id.)rI _project_idrrrrrAs zApplicationDefault.project_idcCs$|jstjjtd\|_|_dSdS)Nr.)rgoogleauthdefaultr;rJrrrrrIsz#ApplicationDefault._load_credential) rrrrrr rFrArIr&rrr rrGs    rGcr') RefreshTokenz8A credential initialized from an existing refresh token.authorized_usercstt|r%t|dd }t|}Wdn1swYnt|tr-|}ntd|d| d|j krFtd|j dt j |t|_dS) aInitializes a credential from a refresh token JSON file. The JSON must consist of client_id, client_secret and refresh_token fields. Refresh token files are typically created and managed by the gcloud SDK. To instantiate a credential from a refresh token file, either specify the file path or a dict representing the parsed contents of the file. Args: refresh_token: Path to a refresh token file or a dict representing the contents of a refresh token file. Raises: IOError: If the specified file doesn't exist or cannot be read. ValueError: If the refresh token configuration is invalid. r)r*Nz!Invalid refresh token argument: "z]". Refresh token argument must be a file path, or a dict containing the parsed file contents.r,zNInvalid refresh token configuration. JSON must contain a "type" field set to "r-)rrr1r2r3r4r5r6r7r8r9rrfrom_authorized_user_infor;r)r refresh_tokenr=r>r rrrs$    zRefreshToken.__init__cCr@r)r client_idrrrrrRrBzRefreshToken.client_idcCr@r)r client_secretrrrrrSrBzRefreshToken.client_secretcCr@r)rrQrrrrrQrBzRefreshToken.refresh_tokencCr"rEr#rrrrr r$zRefreshToken.get_credential) rrrrr9rrFrRrSrQr r&rrr rrNs !   rNcCs&zt|WdStyYdSw)NTF)pathlibPath TypeError)pathrrrr1s   r1)r collectionsr3rT google.authrKgoogle.auth.credentialsrr%google.auth.transportr google.oauth2rrRequestr r; namedtuplerr rr(rGrNr1rrrrs&     =' :