AXj6dZddlmZddlZddlmZddlmZddlmZddl m Z  ddl Z ejeZGd d e j"Z dd ZGd d Zy#e $rZ e de dZ [ wwxYw)zAuthorization support for gRPC.)absolute_importN) exceptions) _mtls_helper)mtls)service_accountzWgRPC is not installed from please install the grpcio package to use the gRPC transport.c0eZdZdZdfd ZdZdZxZS)AuthMetadataPluginanA `gRPC AuthMetadataPlugin`_ that inserts the credentials into each request. .. _gRPC AuthMetadataPlugin: http://www.grpc.io/grpc/python/grpc.html#grpc.AuthMetadataPlugin Args: credentials (google.auth.credentials.Credentials): The credentials to add to requests. request (google.auth.transport.Request): A HTTP transport request object used to refresh credentials as needed. default_host (Optional[str]): A host like "pubsub.googleapis.com". This is used when a self-signed JWT is created from service account credentials. cTtt| ||_||_||_yN)superr __init__ _credentials_request _default_host)self credentialsrequest default_host __class__s `/var/www/html/content_generation/venv/lib/python3.12/site-packages/google/auth/transport/grpc.pyr zAuthMetadataPlugin.__init__5s*  $02' )c|i}t|jtjrB|jj |j rdj |j nd|jj|j|j|j|t|jS)zGets the authorization headers for a request. Returns: Sequence[Tuple[str, str]]: A list of request headers (key, value) to add to the request. z https://{}/N) isinstancerr Credentials_create_self_signed_jwtrformatbefore_requestr method_name service_urllistitems)rcontextheaderss r_get_authorization_headersz-AuthMetadataPlugin._get_authorization_headers>s d'')D)D E    5 5<@O#<<_M/'' ,  &<<> 3,.ID#"::"&CO!/!1 0@@O"::>0   v'< G GGrc6eZdZdZdZedZedZy)r6a*Class for application default SSL credentials. Mutual TLS (mTLS) is enabled if either: 1. The `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is explicitly set to `"true"`. 2. The `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is unset or empty, but a valid workload certificate configuration is found (e.g., via the `GOOGLE_API_CERTIFICATE_CONFIG` environment variable or the default gcloud config path). See https://google.aip.dev/auth/4114 for client certificate discovery details. If client certificate usage is enabled, then for devices with endpoint verification support, a device certificate will be automatically loaded and mutual TLS will be established. See https://cloud.google.com/endpoint-verification/docs/overview. crtj}|sd|_ytj|_y)NF)rr4_is_mtlsrhas_default_client_cert_source)rr?s rr zSslCredentials.__init__+s*&<<>!DM ??ADMrc|jre tj\}}}}|rtj|||_n tj|_d|_|j Stj|_|j S#t jtf$r}t j|}||d}~wwxYw)aGet the created SSL channel credentials. For devices with endpoint verification support, if the device certificate loading has any problems, corresponding exceptions will be raised. For a device without endpoint verification support, no exceptions will be raised. Returns: grpc.ChannelCredentials: The created grpc channel credentials. Raises: google.auth.exceptions.MutualTLSChannelError: If mutual TLS channel creation failed for any reason. r.FN) rGrget_client_ssl_credentialsr1r5_ssl_credentialsrClientCertErrorOSErrorMutualTLSChannelError)rhas_certr@rA_ caught_excnew_excs rr7zSslCredentials.ssl_credentials2s == .)5)P)P)R&$Q,0,H,H*.C-D)-1,H,H,JD)$)DM$$$%)$@$@$BD !$$$ ..8 .$:::F:- .sABC 0CC c|jS)z?Indicates if the created SSL channel credentials is mutual TLS.)rG)rs ris_mtlszSslCredentials.is_mtlsTs}}rN)r(r)r*r+r propertyr7rTrrr6r6s6$B%%Brr6)NN)r+ __future__rlogging google.authrgoogle.auth.transportrr google.oauth2rr1 ImportErrorrQ getLoggerr(_LOGGERr rDr6rVrrr_s&&".&) '  H %:A00:AB tHn??y a  sA""A5' A00A5