a !f@sdZddlZddlZddlZddlZddlmZddlm Z ddlm Z e Z gdZ eddd gZGd d d ZGd d d eZGdddeZGdddeZddZdS)zFirebase credentials module.N)requests) credentials)service_account)z.https://www.googleapis.com/auth/cloud-platformz)https://www.googleapis.com/auth/datastorez5https://www.googleapis.com/auth/devstorage.read_writez(https://www.googleapis.com/auth/firebasez/https://www.googleapis.com/auth/identitytoolkitz.https://www.googleapis.com/auth/userinfo.emailAccessTokenInfoZ access_tokenexpiryc@s eZdZdZddZddZdS)Basez>Provides OAuth2 access tokens for accessing Firebase services.cCs |}|tt|j|jS)zFetches a Google OAuth2 access token using this credential instance. Returns: AccessTokenInfo: An access token obtained using the credential. )get_credentialrefresh_requestrtokenr)selfZ google_credr [/var/www/html/python-backend/venv/lib/python3.9/site-packages/firebase_admin/credentials.pyget_access_token/s zBase.get_access_tokencCstdS)z?Returns the Google credential instance used for authentication.N)NotImplementedErrorr r r rr9szBase.get_credentialN)__name__ __module__ __qualname____doc__rrr r r rr,s rcsPeZdZdZdZfddZeddZeddZed d Z d d Z Z S) Certificatez9A credential initialized from a JSON certificate keyfile.rc stt|t|rJt|}t|}Wdqh1s>0Ynt|trZ|}nt d || d|j krt d |j zt jj|td|_Wn2t y}zt d |WYd}~n d}~00dS)a]Initializes a credential from a Google service account certificate. Service account certificates can be downloaded as JSON files from the Firebase console. To instantiate a credential from a certificate file, either specify the file path or a dict representing the parsed contents of the file. Args: cert: Path to a certificate file or a dict representing the contents of a certificate. Raises: IOError: If the specified certificate file doesn't exist or cannot be read. ValueError: If the specified certificate is invalid. Nz}Invalid certificate argument: "{0}". Certificate argument must be a file path, or a dict containing the parsed file contents.typezZInvalid service account certificate. Certificate must contain a "type" field set to "{0}".Zscopesz?Failed to initialize a certificate credential. Caused by: "{0}")superr__init__ _is_file_pathopenjsonload isinstancedict ValueErrorformatget_CREDENTIAL_TYPEr CredentialsZfrom_service_account_info_scopes _g_credential)r cert json_file json_dataerror __class__r rrCs. *  zCertificate.__init__cCs|jjSN)r' project_idrr r rr/fszCertificate.project_idcCs|jjSr.)r'signerrr r rr0jszCertificate.signercCs|jjSr.)r'service_account_emailrr r rr1nsz!Certificate.service_account_emailcCs|jSzReturns the underlying Google credential. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.r'rr r rrrszCertificate.get_credential) rrrrr$rpropertyr/r0r1r __classcell__r r r,rr>s #   rcs<eZdZdZfddZddZeddZdd ZZ S) ApplicationDefaultz(A Google Application Default credential.cstt|d|_dS)zCreates an instance that will use Application Default credentials. The credentials will be lazily initialized when get_credential() or project_id() is called. See those methods for possible errors raised. N)rr6rr'rr,r rr}szApplicationDefault.__init__cCs||jS)a:Returns the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: google.auth.credentials.Credentials: A Google Auth credential instance.)_load_credentialr'rr r rrsz!ApplicationDefault.get_credentialcCs||jS)aReturns the project_id from the underlying Google credential. Raises: google.auth.exceptions.DefaultCredentialsError: If Application Default credentials cannot be initialized in the current environment. Returns: str: The project id.)r7 _project_idrr r rr/s zApplicationDefault.project_idcCs |jstjjtd\|_|_dS)Nr)r'googleauthdefaultr&r8rr r rr7sz#ApplicationDefault._load_credential) rrrrrrr4r/r7r5r r r,rr6zs    r6csPeZdZdZdZfddZeddZeddZed d Z d d Z Z S) RefreshTokenz8A credential initialized from an existing refresh token.Zauthorized_usercstt|t|rJt|}t|}Wdqh1s>0Ynt|trZ|}nt d || d|j krt d |j t j|t|_dS)aInitializes a credential from a refresh token JSON file. The JSON must consist of client_id, client_secret and refresh_token fields. Refresh token files are typically created and managed by the gcloud SDK. To instantiate a credential from a refresh token file, either specify the file path or a dict representing the parsed contents of the file. Args: refresh_token: Path to a refresh token file or a dict representing the contents of a refresh token file. Raises: IOError: If the specified file doesn't exist or cannot be read. ValueError: If the refresh token configuration is invalid. NzInvalid refresh token argument: "{0}". Refresh token argument must be a file path, or a dict containing the parsed file contents.rzSInvalid refresh token configuration. JSON must contain a "type" field set to "{0}".)rr<rrrrrrr r!r"r#r$rr%Zfrom_authorized_user_infor&r')r refresh_tokenr)r*r,r rrs  * zRefreshToken.__init__cCs|jjSr.)r' client_idrr r rr>szRefreshToken.client_idcCs|jjSr.)r' client_secretrr r rr?szRefreshToken.client_secretcCs|jjSr.)r'r=rr r rr=szRefreshToken.refresh_tokencCs|jSr2r3rr r rrszRefreshToken.get_credential) rrrrr$rr4r>r?r=rr5r r r,rr<s    r<cCs*zt|WdSty$YdS0dS)NTF)pathlibPath TypeError)pathr r rrs   r)r collectionsrr@Z google.authr9Zgoogle.auth.transportrZ google.oauth2rrRequestr r& namedtuplerrrr6r<rr r r rs    <'9