o ~j6h'@sdZddlZddlmZddlZddlZddlmZddlm Z ddlm Z ddl m Z dd d Z dd d Zdd dZdddZ   dddZdS)aOAuth 2.0 async client. This is a client for interacting with an OAuth 2.0 authorization server's token endpoint. For more information about the token endpoint, see `Section 3.1 of rfc6749`_ .. _Section 3.1 of rfc6749: https://tools.ietf.org/html/rfc6749#section-3.2 N)_exponential_backoff) exceptions)jwt)_clientFTc s|rdtji}t|d}ndtji}tj|d}|r(d ||d<i}d}t } | D]S} |d|||dIdH} | IdH} t | d rP| dn| } zt| }Wn tyd| }Ynw| jtjkrrd |dfStj| j|d }|r~|sd||fSq2d||fS) aMakes a request to the OAuth 2.0 authorization server's token endpoint. This function doesn't throw on response errors. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorizations server's token endpoint URI. body (Mapping[str, str]): The parameters to send in the request body. access_token (Optional(str)): The access token needed to make the request. use_json (Optional(bool)): Use urlencoded format or json format for the content type. The default value is False. can_retry (bool): Enable or disable request retry behavior. Returns: Tuple(bool, Mapping[str, str], Optional[bool]): A boolean indicating if the request is successful, a mapping for the JSON-decoded response data and in the case of an error a boolean indicating if the error is retryable. z Content-Typezutf-8z Bearer {} AuthorizationFPOST)methodurlheadersbodyNdecodeT) status_code response_data)client_JSON_CONTENT_TYPEjsondumpsencode_URLENCODED_CONTENT_TYPEurllibparse urlencodeformatrExponentialBackoffcontenthasattrr loads ValueErrorstatus http_clientOK _can_retry)request token_urir access_tokenuse_json can_retryr rretryable_errorretries_responseresponse_body1 response_bodyr-j/var/www/html/chefvision.cloud.itp360.com/venv/lib/python3.10/site-packages/google/oauth2/_client_async.py _token_endpoint_request_no_throw%sD       r/c s6t||||||dIdH\}}}|st|||S)a=Makes a request to the OAuth 2.0 authorization server's token endpoint. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorizations server's token endpoint URI. body (Mapping[str, str]): The parameters to send in the request body. access_token (Optional(str)): The access token needed to make the request. use_json (Optional(bool)): Use urlencoded format or json format for the content type. The default value is False. can_retry (bool): Enable or disable request retry behavior. Returns: Mapping[str, str]: The JSON-decoded response data. Raises: google.auth.exceptions.RefreshError: If the token endpoint returned an error. )r$r%r&N)r/r_handle_error_response) r"r#r r$r%r&response_status_okrr'r-r-r._token_endpoint_requestjs r2c st|tjd}t||||dIdH}z|d}Wnty/}z tjd|dd}||d}~wwt|} || |fS)aImplements the JWT Profile for OAuth 2.0 Authorization Grants. For more details, see `rfc7523 section 4`_. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorizations server's token endpoint URI. assertion (str): The OAuth 2.0 assertion. can_retry (bool): Enable or disable request retry behavior. Returns: Tuple[str, Optional[datetime], Mapping[str, str]]: The access token, expiration, and additional data returned by the token endpoint. Raises: google.auth.exceptions.RefreshError: If the token endpoint returned an error. .. _rfc7523 section 4: https://tools.ietf.org/html/rfc7523#section-4  assertion grant_typer&Nr$zNo access token in response.F retryable)r_JWT_GRANT_TYPEr2KeyErrorr RefreshError _parse_expiry) r"r#r4r&r rr$ caught_excnew_excexpiryr-r-r. jwt_grants      r@c s|tjd}t||||dIdH}z|d}Wnty/}z tjd|dd}||d}~wwtj|dd} tj | d } || |fS) a:Implements the JWT Profile for OAuth 2.0 Authorization Grants, but requests an OpenID Connect ID Token instead of an access token. This is a variant on the standard JWT Profile that is currently unique to Google. This was added for the benefit of authenticating to services that require ID Tokens instead of access tokens or JWT bearer tokens. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorization server's token endpoint URI. assertion (str): JWT token signed by a service account. The token's payload must include a ``target_audience`` claim. can_retry (bool): Enable or disable request retry behavior. Returns: Tuple[str, Optional[datetime], Mapping[str, str]]: The (encoded) Open ID Connect ID Token, expiration, and additional data returned by the endpoint. Raises: google.auth.exceptions.RefreshError: If the token endpoint returned an error. r3r6Nid_tokenzNo ID token in response.Fr7)verifyexp) rr9r2r:rr;rr datetimeutcfromtimestamp) r"r#r4r&r rrAr=r>payloadr?r-r-r.id_token_jwt_grants"    rGc sRtj|||d}|rd||d<|r||d<t||||dIdH} t| |S)a0Implements the OAuth 2.0 refresh token grant. For more details, see `rfc678 section 6`_. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. token_uri (str): The OAuth 2.0 authorizations server's token endpoint URI. refresh_token (str): The refresh token to use to get a new access token. client_id (str): The OAuth 2.0 application's client ID. client_secret (str): The Oauth 2.0 appliaction's client secret. scopes (Optional(Sequence[str])): Scopes to request. If present, all scopes must be authorized for the refresh token. Useful if refresh token has a wild card scope (e.g. 'https://www.googleapis.com/auth/any-api'). rapt_token (Optional(str)): The reauth Proof Token. can_retry (bool): Enable or disable request retry behavior. Returns: Tuple[str, Optional[str], Optional[datetime], Mapping[str, str]]: The access token, new or current refresh token, expiration, and additional data returned by the token endpoint. Raises: google.auth.exceptions.RefreshError: If the token endpoint returned an error. .. _rfc6748 section 6: https://tools.ietf.org/html/rfc6749#section-6 )r5 client_id client_secret refresh_token scoperaptr6N)r_REFRESH_GRANT_TYPEjoinr2_handle_refresh_grant_response) r"r#rJrHrIscopes rapt_tokenr&r rr-r-r. refresh_grants* rS)NFT)T)NNT)__doc__rD http.clientrrrr google.authrrr google.oauth2rr/r2r@rGrSr-r-r-r.s&      F % *4