Ѯh! dZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddl m Z e jZgdZej"dd d gZ Gd d ZGd deZGddeZGddeZGddeZdZy)zFirebase credentials module.N) Credentials)requests) credentials)service_account)z.https://www.googleapis.com/auth/cloud-platformz)https://www.googleapis.com/auth/datastorez5https://www.googleapis.com/auth/devstorage.read_writez(https://www.googleapis.com/auth/firebasez/https://www.googleapis.com/auth/identitytoolkitz.https://www.googleapis.com/auth/userinfo.emailAccessTokenInfo access_tokenexpiryceZdZdZdZdZy)Basez>Provides OAuth2 access tokens for accessing Firebase services.c|j}|jtt|j|j S)zFetches a Google OAuth2 access token using this credential instance. Returns: AccessTokenInfo: An access token obtained using the credential. )get_credentialrefresh_requestrtokenr )self google_creds l/home/www/academy-backend.kofcorporation.com/venv/lib/python3.12/site-packages/firebase_admin/credentials.pyget_access_tokenzBase.get_access_token0s9 ))+ H%{00+2D2DEEct)z?Returns the Google credential instance used for authentication.)NotImplementedErrorrs rr zBase.get_credential:s!!rN)__name__ __module__ __qualname____doc__rr rrr r -sHF"rr c.eZdZdZdeffd ZdZxZS)_ExternalCredentialszLA wrapper for google.auth.credentials.Credentials typed credential instances credentialc0t|||_yNsuper__init__ _g_credential)rr __class__s rr%z_ExternalCredentials.__init__As 'rc|jS)zReturns the underlying Google Credential Returns: google.auth.credentials.Credentials: A Google Auth credential instance.r&rs rr z#_ExternalCredentials.get_credentialE !!!r)rrrrGoogleAuthCredentialsr%r __classcell__r's@rrr>sV(#8("rrc\eZdZdZdZfdZedZedZedZ dZ xZ S) Certificatez9A credential initialized from a JSON certificate keyfile.rct|t|r,t|d5}t j |}dddn"t |tr|}ntd|djd|jk7rtd|jd tjj|t |_y#1swYlxYw#t$r}td |d |d}~wwxYw) a]Initializes a credential from a Google service account certificate. Service account certificates can be downloaded as JSON files from the Firebase console. To instantiate a credential from a certificate file, either specify the file path or a dict representing the parsed contents of the file. Args: cert: Path to a certificate file or a dict representing the contents of a certificate. Raises: IOError: If the specified certificate file doesn't exist or cannot be read. ValueError: If the specified certificate is invalid. utf-8encodingNzInvalid certificate argument: "z[". Certificate argument must be a file path, or a dict containing the parsed file contents.typezUInvalid service account certificate. Certificate must contain a "type" field set to "".scopesz;Failed to initialize a certificate credential. Caused by: "")r$r% _is_file_pathopenjsonload isinstancedict ValueErrorget_CREDENTIAL_TYPErrfrom_service_account_info_scopesr&)rcert json_file json_dataerrorr's rr%zCertificate.__init__Qs   dW- 1 IIi0  1 1 d #I1$8GGH H == D$9$9 9((,(=(='>bBC C c!0!eZdZdZfdZdZedZdZxZ S)ApplicationDefaultz(A Google Application Default credential.c0t|d|_y)zCreates an instance that will use Application Default credentials. The credentials will be lazily initialized when get_credential() or project_id() is called. See those methods for possible errors raised. Nr#)rr's rr%zApplicationDefault.__init__s !rc:|j|jS)a:Returns the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.)_load_credentialr&rs rr z!ApplicationDefault.get_credentials !!!rc:|j|jS)aReturns the project_id from the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: str: The project id.)rU _project_idrs rrIzApplicationDefault.project_ids rc|js2tjjt\|_|_yy)Nr6)r&googleauthdefaultrCrWrs rrUz#ApplicationDefault._load_credentials2!!39;;3F3Fg3F3V 0D  0"r) rrrrr%r rPrIrUr,r-s@rrRrRs*2" "    WrrRc\eZdZdZdZfdZedZedZedZ dZ xZ S) RefreshTokenz8A credential initialized from an existing refresh token.authorized_userct|t|r,t|d5}t j |}dddn"t |tr|}ntd|djd|jk7rtd|jdtjj|t|_y#1swYjxYw) aInitializes a credential from a refresh token JSON file. The JSON must consist of client_id, client_secret and refresh_token fields. Refresh token files are typically created and managed by the gcloud SDK. To instantiate a credential from a refresh token file, either specify the file path or a dict representing the parsed contents of the file. Args: refresh_token: Path to a refresh token file or a dict representing the contents of a refresh token file. Raises: IOError: If the specified file doesn't exist or cannot be read. ValueError: If the refresh token configuration is invalid. r1r2Nz!Invalid refresh token argument: "z]". Refresh token argument must be a file path, or a dict containing the parsed file contents.r4zNInvalid refresh token configuration. JSON must contain a "type" field set to "r5)r$r%r9r:r;r<r=r>r?r@rArrfrom_authorized_user_inforCr&)r refresh_tokenrErFr's rr%zRefreshToken.__init__s   'mg6 1) IIi0  1 1  t ,%I3M?CQQR R == D$9$9 9((,(=(='>bBC C)44NNyZab 1 1s C  Cc.|jjSr")r& client_idrs rrczRefreshToken.client_ids!!+++rc.|jjSr")r& client_secretrs rrezRefreshToken.client_secret!!///rc.|jjSr")r&rars rrazRefreshToken.refresh_tokenrfrc|jSrOr)rs rr zRefreshToken.get_credentialr*r) rrrrrAr%rPrcrerar r,r-s@rr]r]sTB(cB,,0000"rr]cN tj|y#t$rYywxYw)NTF)pathlibPath TypeError)paths rr9r9s( T s  $$)r collectionsr;rj google.authrYgoogle.auth.credentialsrr+google.auth.transportr google.oauth2rrRequestrrC namedtuplerr rr/rRr]r9rrrrus# H*%) 8    )+(():^X