o ˷e$@sdZddlZddlZddlZddlmZddlmZddlmZddlm Z ddl m Z  dd d Z dd d Zd dZddZ  dddZdS)aOAuth 2.0 async client. This is a client for interacting with an OAuth 2.0 authorization server's token endpoint. For more information about the token endpoint, see `Section 3.1 of rfc6749`_ .. _Section 3.1 of rfc6749: https://tools.ietf.org/html/rfc6749#section-3.2 N) http_client)urllib) exceptions)jwt)_clientFc s|rdtji}t|d}ndtji}tj|d}|r(d ||d<d} |d|||dId H}| Id H}t |d rG| dn|} t | } |jtjkrUn*| d p[d } | d pbd } tdd| | fDrw|dkrw|d7}q*|jtjk| fS|jtjk| fS)aMakes a request to the OAuth 2.0 authorization server's token endpoint. This function doesn't throw on response errors. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorizations server's token endpoint URI. body (Mapping[str, str]): The parameters to send in the request body. access_token (Optional(str)): The access token needed to make the request. use_json (Optional(bool)): Use urlencoded format or json format for the content type. The default value is False. Returns: Tuple(bool, Mapping[str, str]): A boolean indicating if the request is successful, and a mapping for the JSON-decoded response data. z Content-Typezutf-8z Bearer {} AuthorizationrTPOST)methodurlheadersbodyNdecodeerror_descriptionerrorcss|]}|dkVqdS)internal_failureN).0errR/var/www/ideatree/venv/lib/python3.10/site-packages/google/oauth2/_client_async.py ^sz3_token_endpoint_request_no_throw..)client_JSON_CONTENT_TYPEjsondumpsencode_URLENCODED_CONTENT_TYPErparse urlencodeformatcontenthasattrr loadsstatusrOKgetany) request token_urir access_tokenuse_jsonr retryresponseresponse_body1 response_body response_data error_desc error_coderrr _token_endpoint_request_no_throw&s<      r3cs0t|||||dIdH\}}|st||S)aMakes a request to the OAuth 2.0 authorization server's token endpoint. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorizations server's token endpoint URI. body (Mapping[str, str]): The parameters to send in the request body. access_token (Optional(str)): The access token needed to make the request. use_json (Optional(bool)): Use urlencoded format or json format for the content type. The default value is False. Returns: Mapping[str, str]: The JSON-decoded response data. Raises: google.auth.exceptions.RefreshError: If the token endpoint returned an error. )r*r+N)r3r_handle_error_response)r(r)r r*r+response_status_okr0rrr_token_endpoint_requesths  r6c s~|tjd}t|||IdH}z|d}Wnty4}ztd|}t||WYd}~nd}~wwt|}|||fS)aImplements the JWT Profile for OAuth 2.0 Authorization Grants. For more details, see `rfc7523 section 4`_. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorizations server's token endpoint URI. assertion (str): The OAuth 2.0 assertion. Returns: Tuple[str, Optional[datetime], Mapping[str, str]]: The access token, expiration, and additional data returned by the token endpoint. Raises: google.auth.exceptions.RefreshError: If the token endpoint returned an error. .. _rfc7523 section 4: https://tools.ietf.org/html/rfc7523#section-4  assertion grant_typeNr*zNo access token in response.) r_JWT_GRANT_TYPEr6KeyErrorr RefreshErrorsix raise_from _parse_expiry) r(r)r8r r0r* caught_excnew_excexpiryrrr jwt_grants     rCc s|tjd}t|||IdH}z|d}Wnty4}ztd|}t||WYd}~nd}~wwtj |dd}t j |d} || |fS)aImplements the JWT Profile for OAuth 2.0 Authorization Grants, but requests an OpenID Connect ID Token instead of an access token. This is a variant on the standard JWT Profile that is currently unique to Google. This was added for the benefit of authenticating to services that require ID Tokens instead of access tokens or JWT bearer tokens. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorization server's token endpoint URI. assertion (str): JWT token signed by a service account. The token's payload must include a ``target_audience`` claim. Returns: Tuple[str, Optional[datetime], Mapping[str, str]]: The (encoded) Open ID Connect ID Token, expiration, and additional data returned by the endpoint. Raises: google.auth.exceptions.RefreshError: If the token endpoint returned an error. r7Nid_tokenzNo ID token in response.F)verifyexp) rr:r6r;rr<r=r>rr datetimeutcfromtimestamp) r(r)r8r r0rDr@rApayloadrBrrrid_token_jwt_grants    rJc sNtj|||d}|rd||d<|r||d<t|||IdH}t||S)aImplements the OAuth 2.0 refresh token grant. For more details, see `rfc678 section 6`_. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorizations server's token endpoint URI. refresh_token (str): The refresh token to use to get a new access token. client_id (str): The OAuth 2.0 application's client ID. client_secret (str): The Oauth 2.0 appliaction's client secret. scopes (Optional(Sequence[str])): Scopes to request. If present, all scopes must be authorized for the refresh token. Useful if refresh token has a wild card scope (e.g. 'https://www.googleapis.com/auth/any-api'). rapt_token (Optional(str)): The reauth Proof Token. Returns: Tuple[str, Optional[str], Optional[datetime], Mapping[str, str]]: The access token, new or current refresh token, expiration, and additional data returned by the token endpoint. Raises: google.auth.exceptions.RefreshError: If the token endpoint returned an error. .. _rfc6748 section 6: https://tools.ietf.org/html/rfc6749#section-6 )r9 client_id client_secret refresh_token scoperaptN)r_REFRESH_GRANT_TYPEjoinr6_handle_refresh_grant_response) r(r)rMrKrLscopes rapt_tokenr r0rrr refresh_grants( rV)NF)NN)__doc__rGrr= six.movesrr google.authrr google.oauth2rrr3r6rCrJrVrrrrs$       C %/