File manager - Edit - /usr/local/CyberCP/lib/python3.10/site-packages/google/auth/__pycache__/pluggable.cpython-310.pyc
Back
o �h�C � @ s� d Z zddlmZ W n ey ddlmZ Y nw ddlZddlZddlZddlZddl Z ddl m Z ddl m Z ddl m Z dZdZd Zd ZdZd ZG d d � d e j�ZdS )a� Pluggable Credentials. Pluggable Credentials are initialized using external_account arguments which are typically loaded from third-party executables. Unlike other credentials that can be initialized with a list of explicit arguments, secrets or credentials, external account clients use the environment and hints/guidelines provided by the external_account JSON file to retrieve credentials and exchange them for Google access tokens. Example credential_source for pluggable credential: { "executable": { "command": "/path/to/get/credentials.sh --arg1=value1 --arg2=value2", "timeout_millis": 5000, "output_file": "/path/to/generated/cached/credentials" } } � )�MappingN)�_helpers)� exceptions)�external_account� i0u i� i�� i@w c s� e Zd ZdZ� fdd�Ze�ej�dd� �Z dd� Z e dd � �Z e � fd d ��Ze � fd d ��Zdd� Zdd� Zdd� Zdd� Zdd� Z� fdd�Z� ZS )� Credentialsz6External account credentials sourced from executables.c s |� dd�| _tt| �j|||||d�|�� t|t�s$d| _t� d��|� d�| _| js2t� d��| j� d�| _ | j� d �| _ | j� d �| _ | j� d �| _d | _| j sYt� d ��| j s`t| _ n| j tk sj| j tkrot�d��| j r�| j tk s|| j tkr�t�d��dS dS )ad Instantiates an external account credentials object from a executables. Args: audience (str): The STS audience field. subject_token_type (str): The subject token type. token_url (str): The STS endpoint URL. credential_source (Mapping): The credential source dictionary used to provide instructions on how to retrieve external credential to be exchanged for Google access tokens. Example credential_source for pluggable credential: { "executable": { "command": "/path/to/get/credentials.sh --arg1=value1 --arg2=value2", "timeout_millis": 5000, "output_file": "/path/to/generated/cached/credentials" } } args (List): Optional positional arguments passed into the underlying :meth:`~external_account.Credentials.__init__` method. kwargs (Mapping): Optional keyword arguments passed into the underlying :meth:`~external_account.Credentials.__init__` method. Raises: google.auth.exceptions.RefreshError: If an error is encountered during access token retrieval logic. google.auth.exceptions.InvalidValue: For invalid parameters. google.auth.exceptions.MalformedError: For invalid parameters. .. note:: Typically one of the helper constructors :meth:`from_file` or :meth:`from_info` are used instead of calling the constructor directly. � interactiveF)�audience�subject_token_type� token_url�credential_sourceNz?Missing credential_source. The credential_source is not a dict.� executablez<Missing credential_source. An 'executable' must be provided.�command�timeout_millis�interactive_timeout_millis� output_file� z;Missing command field. Executable command must be provided.z*Timeout must be between 5 and 120 seconds.z>Interactive timeout must be between 30 seconds and 30 minutes.)�popr �superr �__init__� isinstancer � _credential_source_executabler �MalformedError�get�%_credential_source_executable_command�,_credential_source_executable_timeout_millis�8_credential_source_executable_interactive_timeout_millis�)_credential_source_executable_output_file�_tokeninfo_username�!EXECUTABLE_TIMEOUT_MILLIS_DEFAULT�%EXECUTABLE_TIMEOUT_MILLIS_LOWER_BOUND�%EXECUTABLE_TIMEOUT_MILLIS_UPPER_BOUND� InvalidValue�1EXECUTABLE_INTERACTIVE_TIMEOUT_MILLIS_LOWER_BOUND�1EXECUTABLE_INTERACTIVE_TIMEOUT_MILLIS_UPPER_BOUND)�selfr r r r �args�kwargs�� __class__� �H/usr/local/CyberCP/lib/python3.10/site-packages/google/auth/pluggable.pyr > sv * ��� � ��������� ����zCredentials.__init__c C s� | � � | jd urVz t| jdd�� }t�|�}W d � n1 s!w Y W n ty0 Y n&w z| �|�}d|vr>tj�W |S tj tj fyL � tjyU Y nw t � � s_t�d��t j�� }| �|� d|d< | jru| jd n| jd }| jr�tjnd }| jr�tjntj}| jr�tjntj} tj| j� � |||| |d�} | j d kr�t�d � | j | j���| jr�t� | j� d��nd }|s�| jd ur�t�t| jdd��}| �|�}|S ) N�utf-8)�encoding�expiration_time�0Pluggable auth is only supported for python 3.7+�0� GOOGLE_EXTERNAL_ACCOUNT_REVOKE�� )�timeout�stdin�stdout�stderr�envr z9Executable exited with non-zero return code {}. Error: {})!�_validate_running_moder �open�json�load� Exception�_parse_subject_tokenr � RefreshErrorr r" r � is_python_3�os�environ�copy�_inject_env_variablesr r r �sysr4 r5 � subprocess�PIPE�STDOUT�runr �split� returncode�format�loads�decode) r% �requestr �response� subject_tokenr7 � exe_timeout� exe_stdin� exe_stdout� exe_stderr�resultr* r* r+ �retrieve_subject_token� sv � �� � ���� ��� �� � z"Credentials.retrieve_subject_tokenc C s� | j st�d��| �� t�� st�d��tj� � }| � |� d|d< t j | j �� | jd t jt j|d�}|jdkrEt�d�|j|j���t�|j�d ��}| �|� d S ) aG Revokes the subject token using the credential_source object. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Raises: google.auth.exceptions.RefreshError: If the executable revocation not properly executed. z.Revoke is only enabled under interactive mode.r/ �1r1 r2 )r3 r5 r6 r7 r zNAuth revoke failed on executable. Exit with non-zero return code {}. Error: {}r, N)r r r" r8 r r? r> r@ rA rB rC rE rH r rI r rF rG rJ rK r5 r: rL rM �_validate_revoke_response)r% rN r7 rU rO r* r* r+ �revoke� s: �� �� ��zCredentials.revokec C s | j p| jS )a1 Returns the external account identifier. When service account impersonation is used the identifier is the service account email. Without service account impersonation, this returns None, unless it is being used by the Google Cloud CLI which populates this field. )�service_account_emailr )r% r* r* r+ �external_account_id s z Credentials.external_account_idc � t t| �j|fi |��S )a' Creates a Pluggable Credentials instance from parsed external account info. Args: info (Mapping[str, str]): The Pluggable external account info in Google format. kwargs: Additional arguments to pass to the constructor. Returns: google.auth.pluggable.Credentials: The constructed credentials. Raises: google.auth.exceptions.InvalidValue: For invalid parameters. google.auth.exceptions.MalformedError: For invalid parameters. )r r � from_info)�cls�infor' r( r* r+ r] + s zCredentials.from_infoc r\ )aj Creates an Pluggable Credentials instance from an external account json file. Args: filename (str): The path to the Pluggable external account json file. kwargs: Additional arguments to pass to the constructor. Returns: google.auth.pluggable.Credentials: The constructed credentials. )r r � from_file)r^ �filenamer' r( r* r+ r` > s zCredentials.from_filec C s` | j |d< | j|d< | j|d< | jrdnd|d< | jd ur"| j|d< | jd ur.| j|d< d S d S ) N� GOOGLE_EXTERNAL_ACCOUNT_AUDIENCE�"GOOGLE_EXTERNAL_ACCOUNT_TOKEN_TYPE�GOOGLE_EXTERNAL_ACCOUNT_IDrW r0 �#GOOGLE_EXTERNAL_ACCOUNT_INTERACTIVE�*GOOGLE_EXTERNAL_ACCOUNT_IMPERSONATED_EMAIL�#GOOGLE_EXTERNAL_ACCOUNT_OUTPUT_FILE)� _audience�_subject_token_typer[ r �"_service_account_impersonation_urlrZ r )r% r7 r* r* r+ rC L s �� ���z!Credentials._inject_env_variablesc C s� | � |� |d s#d|vsd|vrt�d��t�d�|d |d ���d|v r4|d t�� k r4t�d��d|vr=t�d ��|d d ksI|d d krM|d S |d d krW|d S t�d��)N�success�code�messagez;Error code and message fields are required in the response.zAExecutable returned unsuccessful response: code: {}, message: {}.r. z0The token returned by the executable is expired.� token_typez8The executable response is missing the token_type field.z$urn:ietf:params:oauth:token-type:jwtz)urn:ietf:params:oauth:token-type:id_token�id_tokenz&urn:ietf:params:oauth:token-type:saml2� saml_responsez+Executable returned unsupported token type.)�_validate_response_schemar r r> rK �time�r% rO r* r* r+ r= [ s2 � ���� z Credentials._parse_subject_tokenc C s | � |� |d st�d��d S )Nrk z)Revoke failed with unsuccessful response.)rq r r> rs r* r* r+ rX y s �z%Credentials._validate_revoke_responsec C sH d|vr t �d��|d tkrt �d�|d ���d|vr"t �d��d S )N�versionz5The executable response is missing the version field.z+Executable returned unsupported version {}.rk z5The executable response is missing the success field.)r r � EXECUTABLE_SUPPORTED_MAX_VERSIONr> rK rs r* r* r+ rq ~ s � ����z%Credentials._validate_response_schemac C sh t j�d�}|dkrt�d��| jr| jst�d��| jr%| js%t�d��| jr0| j s2t� d��d S d S )N�)GOOGLE_EXTERNAL_ACCOUNT_ALLOW_EXECUTABLESrW zhExecutables need to be explicitly allowed (set GOOGLE_EXTERNAL_ACCOUNT_ALLOW_EXECUTABLES to '1') to run.zVAn output_file must be specified in the credential configuration for interactive mode.z;Interactive mode cannot run without an interactive timeout.z4Interactive mode is only enabled for workforce pool.) r@ rA r r r r r r �InvalidOperation�is_workforce_poolr" )r% �env_allow_executablesr* r* r+ r8 � s. �� ���� ��z"Credentials._validate_running_modec s t t| ��� }d|d< |S )Nr �source)r r � _create_default_metrics_options)r% �metrics_optionsr( r* r+ r{ � s z+Credentials._create_default_metrics_options)�__name__� __module__� __qualname__�__doc__r r �copy_docstringr r rV rY �propertyr[ � classmethodr] r` rC r= rX rq r8 r{ � __classcell__r* r* r( r+ r ; s$ h H/ r )r� �collections.abcr � ImportError� collectionsr: r@ rE rD rr � google.authr r r ru r r r! r# r$ r r* r* r* r+ �<module> s* �
| ver. 1.4 |
Github
|
.
| PHP 8.2.28 | Generation time: 0.02 |
proxy
|
phpinfo
|
Settings