WSfdZddlZddlZddlZddlZddlmZddlm Z ddlm Z ejZ gdZ ejddd gZ Gd d ZGd d eZGddeZGddeZdZy)zFirebase credentials module.N)requests) credentials)service_account)z.https://www.googleapis.com/auth/cloud-platformz)https://www.googleapis.com/auth/datastorez5https://www.googleapis.com/auth/devstorage.read_writez(https://www.googleapis.com/auth/firebasez/https://www.googleapis.com/auth/identitytoolkitz.https://www.googleapis.com/auth/userinfo.emailAccessTokenInfo access_tokenexpiryceZdZdZdZdZy)Basez>Provides OAuth2 access tokens for accessing Firebase services.c|j}|jtt|j|j S)zFetches a Google OAuth2 access token using this credential instance. Returns: AccessTokenInfo: An access token obtained using the credential. )get_credentialrefresh_requestrtokenr)self google_creds YC:\Users\user\Documents\project_loop\venv\Lib\site-packages\firebase_admin/credentials.pyget_access_tokenzBase.get_access_token/s9 ))+ H%{00+2D2DEEct)z?Returns the Google credential instance used for authentication.)NotImplementedErrorrs rr zBase.get_credential9s!!rN)__name__ __module__ __qualname____doc__rr rrr r ,sHF"rr c\eZdZdZdZfdZedZedZedZ dZ xZ S) Certificatez9A credential initialized from a JSON certificate keyfile.rc6tt| t|r*t |5}t j |}dddn-t|tr|}ntdj|jd|jk7r$tdj|j tjj|t |_y#1swYwxYw#t$r}tdj|d}~wwxYw)a]Initializes a credential from a Google service account certificate. Service account certificates can be downloaded as JSON files from the Firebase console. To instantiate a credential from a certificate file, either specify the file path or a dict representing the parsed contents of the file. Args: cert: Path to a certificate file or a dict representing the contents of a certificate. Raises: IOError: If the specified certificate file doesn't exist or cannot be read. ValueError: If the specified certificate is invalid. Nz}Invalid certificate argument: "{0}". Certificate argument must be a file path, or a dict containing the parsed file contents.typezZInvalid service account certificate. Certificate must contain a "type" field set to "{0}".scopesz?Failed to initialize a certificate credential. Caused by: "{0}")superr__init__ _is_file_pathopenjsonload isinstancedict ValueErrorformatget_CREDENTIAL_TYPEr Credentialsfrom_service_account_info_scopes _g_credential)rcert json_file json_dataerror __class__s rr$zCertificate.__init__Cs  k4)+  d 1y IIi0  1 1 d #IAAGO O == D$9$9 9::@&AVAV:WY Y ?!0!z!Certificate.service_account_emailns!!777rc|jSzReturns the underlying Google credential. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.r2rs rr zCertificate.get_credentialr !!!r) rrrrr.r$propertyr:r<r>r __classcell__r7s@rrr>sSC(!?F--))88"rrc>eZdZdZfdZdZedZdZxZ S)ApplicationDefaultz(A Google Application Default credential.c8tt| d|_y)zCreates an instance that will use Application Default credentials. The credentials will be lazily initialized when get_credential() or project_id() is called. See those methods for possible errors raised. N)r#rGr$r2)rr7s rr$zApplicationDefault.__init__}s  $02!rc:|j|jS)a:Returns the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.)_load_credentialr2rs rr z!ApplicationDefault.get_credentials !!!rc:|j|jS)aReturns the project_id from the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: str: The project id.)rJ _project_idrs rr:zApplicationDefault.project_ids rc|js2tjjt\|_|_yy)Nr!)r2googleauthdefaultr1rLrs rrJz#ApplicationDefault._load_credentials2!!39;;3F3Fg3F3V 0D  0"r) rrrrr$r rCr:rJrDrEs@rrGrGzs*2" "    WrrGc\eZdZdZdZfdZedZedZedZ dZ xZ S) RefreshTokenz8A credential initialized from an existing refresh token.authorized_userctt| t|r*t |5}t j |}dddn-t|tr|}ntdj|jd|jk7r$tdj|jtjj|t |_y#1swYuxYw)aInitializes a credential from a refresh token JSON file. The JSON must consist of client_id, client_secret and refresh_token fields. Refresh token files are typically created and managed by the gcloud SDK. To instantiate a credential from a refresh token file, either specify the file path or a dict representing the parsed contents of the file. Args: refresh_token: Path to a refresh token file or a dict representing the contents of a refresh token file. Raises: IOError: If the specified file doesn't exist or cannot be read. ValueError: If the refresh token configuration is invalid. NzInvalid refresh token argument: "{0}". Refresh token argument must be a file path, or a dict containing the parsed file contents.r zSInvalid refresh token configuration. JSON must contain a "type" field set to "{0}".)r#rRr$r%r&r'r(r)r*r+r,r-r.rr/from_authorized_user_infor1r2)r refresh_tokenr4r5r7s rr$zRefreshToken.__init__s lD*,  'm$ 1  IIi0  1 1  t ,%IGGMvmG\^ ^ == D$9$9 9::@&AVAV:WY Y(44NNyZab 1 1s C""C+c.|jjSr9)r2 client_idrs rrXzRefreshToken.client_ids!!+++rc.|jjSr9)r2 client_secretrs rrZzRefreshToken.client_secret!!///rc.|jjSr9)r2rVrs rrVzRefreshToken.refresh_tokenr[rc|jSr@rArs rr zRefreshToken.get_credentialrBr) rrrrr.r$rCrXrZrVr rDrEs@rrRrRsTB(c@,,0000"rrRcN tj|y#t$rYywxYw)NTF)pathlibPath TypeError)paths rr%r%s( T s  $$)r collectionsr'r_ google.authrNgoogle.auth.transportr google.oauth2rrRequestrr1 namedtuplerr rrGrRr%rrrris# *%) 8    )+(():^X