@wjL8dZddlmZddlZddlmZddlmZddlmZddl m Z  ddl Z ejeZGd d e j"Z dd ZGd d Zy#e $rZ e de dZ [ wwxYw)zAuthorization support for gRPC.)absolute_importN) exceptions) _mtls_helper)mtls)service_accountzWgRPC is not installed from please install the grpcio package to use the gRPC transport.c8eZdZdZ dddfd ZdZdZxZS)AuthMetadataPluginaA `gRPC AuthMetadataPlugin`_ that inserts the credentials into each request. .. _gRPC AuthMetadataPlugin: http://www.grpc.io/grpc/python/grpc.html#grpc.AuthMetadataPlugin Args: credentials (google.auth.credentials.Credentials): The credentials to add to requests. request (google.auth.transport.Request): A HTTP transport request object used to refresh credentials as needed. default_host (Optional[str]): A host like "pubsub.googleapis.com". This is used when a self-signed JWT is created from service account credentials. suppress_metrics_header (bool): When enabled, ``x-goog-api-client`` will be stripped from authorization headers. F)suppress_metrics_headercbtt| ||_||_||_||_yN)superr __init__ _credentials_request _default_host_suppress_metrics_header)self credentialsrequest default_hostr __class__s X/root/dashboard-youtube/.venv/lib/python3.12/site-packages/google/auth/transport/grpc.pyrzAuthMetadataPlugin.__init__7s2  $02' )(?%ci}t|jtjrB|jj |j rdj |j nd|jj|j|j|j||jrd|vr|d=t|jS)zGets the authorization headers for a request. Returns: Sequence[Tuple[str, str]]: A list of request headers (key, value) to add to the request. z https://{}/Nzx-goog-api-client) isinstancerr Credentials_create_self_signed_jwtrformatbefore_requestr method_name service_urlrlistitems)rcontextheaderss r_get_authorization_headersz-AuthMetadataPlugin._get_authorization_headersCs d'')D)D E    5 5<@O#<<_M/'' ,  &<<> 3,.ID#"::"&CO!/!1 0@@O"::>0   v'< G GGrc6eZdZdZdZedZedZy)r8a*Class for application default SSL credentials. Mutual TLS (mTLS) is enabled if either: 1. The `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is explicitly set to `"true"`. 2. The `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is unset or empty, but a valid workload certificate configuration is found (e.g., via the `GOOGLE_API_CERTIFICATE_CONFIG` environment variable or the default gcloud config path). See https://google.aip.dev/auth/4114 for client certificate discovery details. If client certificate usage is enabled, then for devices with endpoint verification support, a device certificate will be automatically loaded and mutual TLS will be established. See https://cloud.google.com/endpoint-verification/docs/overview. crtj}|sd|_ytj|_y)NF)rr6_is_mtlsrhas_default_client_cert_source)rrAs rrzSslCredentials.__init__3s*&<<>!DM ??ADMrc|jre tj\}}}}|rtj|||_n tj|_d|_|j Stj|_|j S#t jtf$r}t j|}||d}~wwxYw)aGet the created SSL channel credentials. For devices with endpoint verification support, if the device certificate loading has any problems, corresponding exceptions will be raised. For a device without endpoint verification support, no exceptions will be raised. Returns: grpc.ChannelCredentials: The created grpc channel credentials. Raises: google.auth.exceptions.MutualTLSChannelError: If mutual TLS channel creation failed for any reason. r0FN) rIrget_client_ssl_credentialsr3r7_ssl_credentialsrClientCertErrorOSErrorMutualTLSChannelError)rhas_certrBrC_ caught_excnew_excs rr9zSslCredentials.ssl_credentials:s == .)5)P)P)R&$Q,0,H,H*.C-D)-1,H,H,JD)$)DM$$$%)$@$@$BD !$$$ ..8 .$:::F:- .sABC 0CC c|jS)z?Indicates if the created SSL channel credentials is mutual TLS.)rI)rs ris_mtlszSslCredentials.is_mtls\s}}rN)r*r+r,r-rpropertyr9rVrrr8r8 s6$B%%Brr8)NN)r- __future__rlogging google.authrgoogle.auth.transportrr google.oauth2rr3 ImportErrorrS getLoggerr*_LOGGERr rFr8rXrrras&&".&) '  H %BA00BAR tHn??I a  sA""A5' A00A5