o ~j6h @sldZddlmZddlmZddlmZddlmZGdddejej ejZGdd d ej ej ejZ d S) aService Accounts: JSON Web Token (JWT) Profile for OAuth 2.0 NOTE: This file adds asynchronous refresh methods to both credentials classes, and therefore async/await syntax is required when calling this method when using service account credentials with asynchronous functionality. Otherwise, all other methods are inherited from the regular service account credentials file google.oauth2.service_account )_credentials_async)_helpers) _client_async)service_accountc@$eZdZdZeejddZdS) Credentialsa7Service account credentials Usually, you'll create these credentials with one of the helper constructors. To create credentials using a Google service account private key JSON file:: credentials = _service_account_async.Credentials.from_service_account_file( 'service-account.json') Or if you already have the service account file loaded:: service_account_info = json.load(open('service_account.json')) credentials = _service_account_async.Credentials.from_service_account_info( service_account_info) Both helper methods pass on arguments to the constructor, so you can specify additional scopes and a subject if necessary:: credentials = _service_account_async.Credentials.from_service_account_file( 'service-account.json', scopes=['email'], subject='user@example.com') The credentials are considered immutable. If you want to modify the scopes or the subject used for delegation, use :meth:`with_scopes` or :meth:`with_subject`:: scoped_credentials = credentials.with_scopes(['email']) delegated_credentials = credentials.with_subject(subject) To add a quota project, use :meth:`with_quota_project`:: credentials = credentials.with_quota_project('myproject-123') c6|}t||j|IdH\}}}||_||_dSN)#_make_authorization_grant_assertionr jwt_grant _token_uritokenexpiryselfrequest assertion access_tokenr_rs/var/www/html/chefvision.cloud.itp360.com/venv/lib/python3.10/site-packages/google/oauth2/_service_account_async.pyrefreshE zCredentials.refreshN __name__ __module__ __qualname____doc__rcopy_docstringcredentials_asyncrrrrrrrs #rc@r)IDTokenCredentialsaqOpen ID Connect ID Token-based service account credentials. These credentials are largely similar to :class:`.Credentials`, but instead of using an OAuth 2.0 Access Token as the bearer token, they use an Open ID Connect ID Token as the bearer token. These credentials are useful when communicating to services that require ID Tokens and can not accept access tokens. Usually, you'll create these credentials with one of the helper constructors. To create credentials using a Google service account private key JSON file:: credentials = ( _service_account_async.IDTokenCredentials.from_service_account_file( 'service-account.json')) Or if you already have the service account file loaded:: service_account_info = json.load(open('service_account.json')) credentials = ( _service_account_async.IDTokenCredentials.from_service_account_info( service_account_info)) Both helper methods pass on arguments to the constructor, so you can specify additional scopes and a subject if necessary:: credentials = ( _service_account_async.IDTokenCredentials.from_service_account_file( 'service-account.json', scopes=['email'], subject='user@example.com')) The credentials are considered immutable. If you want to modify the scopes or the subject used for delegation, use :meth:`with_scopes` or :meth:`with_subject`:: scoped_credentials = credentials.with_scopes(['email']) delegated_credentials = credentials.with_subject(subject) crr )r rid_token_jwt_grantr r rrrrrr}rzIDTokenCredentials.refreshNrrrrrr Os )r N) r google.authrrr google.oauth2rrrScopedr Signingrrrrs      0