@wj0J4dZddlmZddlmZddlZddlZ ddlZ ddl Z ddl Z ddl m Z ddlmZddlmZdd lmZdd lmZdd lmZe j.e j0e j.d k\re j2j4Zne j6j4Zej8eZGd dej>Z GddejBZ!dZ"dZ#GddeZ$y#e $rdZYwxYw#e $rZe dededZ[wwxYw)zTransport adapter for urllib3.)absolute_importN)versionzError: aS. The 'google-auth' library requires the extras installed for urllib3 network transport. Please install the necessary dependencies using pip: pip install google-auth[urllib3] (Note: Using '[urllib3]' ensures the specific dependencies needed for this feature are installed. We recommend running this command in your virtual environment.))_helpers) exceptions) transport) _mtls_helper)service_accountz2.0.0cFeZdZdZdZedZedZedZy) _Responsezurllib3 transport response adapter. Args: response (urllib3.response.HTTPResponse): The raw urllib3 response. c||_yN) _response)selfresponses [/root/dashboard-youtube/.venv/lib/python3.12/site-packages/google/auth/transport/urllib3.py__init__z_Response.__init__Js !c.|jjSr )rstatusrs rrz_Response.statusMs~~$$$rc.|jjSr )rheadersrs rrz_Response.headersQs~~%%%rc.|jjSr )rdatars rrz_Response.dataUs~~"""rN) __name__ __module__ __qualname____doc__rpropertyrrrrrr r CsH "%%&&##rr c eZdZdZdZ ddZy)Requestaurllib3 request adapter. This class is used internally for making requests using various transports in a consistent way. If you use :class:`AuthorizedHttp` you do not need to construct or use this class directly. This class can be useful if you want to manually refresh a :class:`~google.auth.credentials.Credentials` instance:: import google.auth.transport.urllib3 import urllib3 http = urllib3.PoolManager() request = google.auth.transport.urllib3.Request(http) credentials.refresh(request) Args: http (urllib3.PoolManager): An instance of a urllib3 class that implements the request interface (e.g. :class:`urllib3.PoolManager`). .. automethod:: __call__ c||_yr )http)rr$s rrzRequest.__init__ss  rNc R|||d< tjt|||||jj||f||d|}tj t|t |S#tjj$r}tj|} | |d}~wwxYw)a=Make an HTTP request using urllib3. Args: url (str): The URI to be requested. method (str): The HTTP method to use for the request. Defaults to 'GET'. body (bytes): The payload / body in HTTP request. headers (Mapping[str, str]): Request headers. timeout (Optional[int]): The number of seconds to wait for a response from the server. If not specified or if None, the urllib3 default timeout will be used. kwargs: Additional arguments passed throught to the underlying urllib3 :meth:`urlopen` method. Returns: google.auth.transport.Response: The HTTP response. Raises: google.auth.exceptions.TransportError: If any exception occurred. Ntimeoutbodyr) r request_log_LOGGERr$request response_logr urllib3r HTTPErrorTransportError) rurlmethodr(rr&kwargsr caught_excnew_excs r__call__zRequest.__call__vs2   'F9  *  &#tW E(tyy(("&;AH  ! !'8 4X& &!!++ * // ;Gz ) *sA"A,,B& B!!B&)GETNNN)rrrrrr5r rrr"r"Zs0CG%*rr"ct)tjdtjStjS)N CERT_REQUIRED) cert_reqsca_certs)certifir- PoolManagerwherer rr_make_default_httpr>s0""_w}}WW""$$rcddl}ddl}tjjj }|j |j tj||5\}}}|}|j|||dddtj&|} | S#1swY!xYw#|jttttt f$r} t#j$d| d} ~ wwxYw)aCreate a mutual TLS HTTP connection with the given client cert and key. See https://github.com/urllib3/urllib3/issues/474#issuecomment-253168415 Args: cert (bytes): client certificate in PEM format key (bytes): client private key in PEM format Returns: urllib3.PoolManager: Mutual TLS HTTP connection. Raises: google.auth.exceptions.MutualTLSChannelError: If the cert or key is invalid. rN)cafile)certfilekeyfilepasswordz8Failed to configure client certificate and key for mTLS.) ssl_context)r;sslr-utilssl_create_urllib3_contextload_verify_locationsr=rsecure_cert_key_pathsload_cert_chainSSLErrorOSErrorIOError ValueError RuntimeError TypeErrorrMutualTLSChannelErrorr<) certkeyr;rEctx cert_pathkey_path passphraserCexcr$s r_make_mutual_tls_httprZs ,,   2 2 4C]W]]_5  / /c : ?   !H   " !      3 /D K#   LL'7J i P.. F  s0B0)B$B0$B-)B00)C4C//C4ceZdZdZdej ej dffd Zd dZd dZ dZ dZ dZ e d Zejd ZxZS) AuthorizedHttpa A urllib3 HTTP class with credentials. This class is used to perform requests to API endpoints that require authorization:: from google.auth.transport.urllib3 import AuthorizedHttp authed_http = AuthorizedHttp(credentials) response = authed_http.request( 'GET', 'https://www.googleapis.com/storage/v1/b') This class implements the urllib3 request interface and can be used just like any other :class:`urllib3.PoolManager`. The underlying :meth:`urlopen` implementation handles adding the credentials' headers to the request and refreshing credentials as needed. This class also supports mutual TLS via :meth:`configure_mtls_channel` method. In order to use this method, the `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable must be explicitly set to `true`, otherwise it does nothing. Assume the environment is set to `true`, the method behaves in the following manner: If client_cert_callback is provided, client certificate and private key are loaded using the callback; if client_cert_callback is None, application default SSL credentials will be used. Exceptions are raised if there are problems with the certificate, private key, or the loading process, so it should be called within a try/except block. First we set the environment variable to `true`, then create an :class:`AuthorizedHttp` instance and specify the endpoints:: regular_endpoint = 'https://pubsub.googleapis.com/v1/projects/{my_project_id}/topics' mtls_endpoint = 'https://pubsub.mtls.googleapis.com/v1/projects/{my_project_id}/topics' authed_http = AuthorizedHttp(credentials) Now we can pass a callback to :meth:`configure_mtls_channel`:: def my_cert_callback(): # some code to load client cert bytes and private key bytes, both in # PEM format. some_code_to_load_client_cert_and_key() if loaded: return cert, key raise MyClientCertFailureException() # Always call configure_mtls_channel within a try/except block. try: is_mtls = authed_http.configure_mtls_channel(my_cert_callback) except: # handle exceptions. if is_mtls: response = authed_http.request('GET', mtls_endpoint) else: response = authed_http.request('GET', regular_endpoint) You can alternatively use application default SSL credentials like this:: try: is_mtls = authed_http.configure_mtls_channel() except: # handle exceptions. Args: credentials (google.auth.credentials.Credentials): The credentials to add to the request. http (urllib3.PoolManager): The underlying HTTP object to use to make requests. If not specified, a :class:`urllib3.PoolManager` instance will be constructed with sane defaults. refresh_status_codes (Sequence[int]): Which HTTP status codes indicate that credentials should be refreshed and the request should be retried. max_refresh_attempts (int): The maximum number of times to attempt to refresh the credentials and retry the request. default_host (Optional[str]): A host like "pubsub.googleapis.com". This is used when a self-signed JWT is created from service account credentials. Nc|t|_d|_n||_d|_||_||_||_||_t|j|_d|_ t|jtjrB|jj|j rdj|j ndtt |Gy)NFTz https://{}/)r>r$_has_user_provided_http credentials_refresh_status_codes_max_refresh_attempts _default_hostr"_request_is_mtls isinstancer Credentials_create_self_signed_jwtformatsuperr\r)rr_r$refresh_status_codesmax_refresh_attempts default_host __class__s rrzAuthorizedHttp.__init__!s <*,DI+0D (DI+/D (&%9"%9")  *   d&&(C(C D    4 4<@z7AuthorizedHttp.configure_mtls_channel..~r _cached_certz1`http` provided in the constructor is overwritten)rrcheck_use_client_certget_client_cert_and_keyrZr>rClientCertError ImportErrorrMrOrRr$rdrcgetattrrthasattrr^warningswarn UserWarning) rclient_cert_callbackuse_client_certfound_cert_keyrSrTnew_http new_is_mtlsr3r4old_https rconfigure_mtls_channelz%AuthorizedHttp.configure_mtls_channelBs7:$00FFH *(1(>(>(V(V$) %ND#0s;" -/# 99 # %   HH$< PGHgwx,'O P R  $D t^,%  ' '+0D ( MMC[ ;  & &      * !66zBGz ) *sAC99#D9D44D9c |jdd}| |j}d}|jrddg}t|D cgc]} | |vc} }|j } |j j |j||| |jj||f|| d|} | j|jvr||jkr| jtjk(rm|rktj |j"\} } | | k7r- t$j'd|j)fd  nt$j'd t$j'd| j|dz|j|j j3|j|j||f|||dzd|S| Scc} w#t*$r1}t$j-d |t/j0d |d}~wwxYw)z$Implementation of urllib3's urlopen._credential_refresh_attemptrNFzmtls.googleapis.comzmtls.sandbox.googleapis.comr'z;Client certificate has changed, reconfiguring mTLS channel.c fSr r )call_cert_bytescall_key_bytessrrrz(AuthorizedHttp.urlopen..s$3$2>"r)r~z&Failed to reconfigure mTLS channel: %sz"Failed to reconfigure mTLS channelzXSkipping reconfiguration of mTLS channel because the client certificate has not changed.z;Refreshing credentials due to a %s response. Attempt %s/%s.)r(rr)poprrdanycopyr_before_requestrcr$urlopenrr`ra http_client UNAUTHORIZEDr*check_parameters_for_unauthorized_responsertr*infor ExceptionerrorrrRrefresh)rr1r0r(rr2ruse_mtlsMTLS_URL_PREFIXESprefixrequest_headersrcached_fingerprintcurrent_cert_fingerprinterrs @@rrzAuthorizedHttp.urlopens''-jj1NPQ&R# ?llG ==!68U V 8IJfFcMJKH",,. '' vsOT$499$$ C "O ?E  OOt99 9+d.H.HH+":":: %OO)) '&*0*-EE%#LL!+!776"8 B LLM+a/**      $ $T]] 3 4<<,G!,K    YKZ )%#MM*RTUV","B"B D##$%%s G +G H ,HH c6|jjSProxy to ``self.http``.)r$ __enter__rs rrzAuthorizedHttp.__enter__syy""$$rc<|jj|||Sr)r$__exit__)rexc_typeexc_valexc_tbs rrzAuthorizedHttp.__exit__syy!!(GV<.rsr)rzr$ryrs r__del__zAuthorizedHttp.__del__s? 4 TYY%: RGDIIw 7L(Q R T&; rc.|jjSrr$rrs rrzAuthorizedHttp.headerssyy   rc&||j_y)rNr)rvalues rrzAuthorizedHttp.headerss" rr )NN)rrrrrDEFAULT_REFRESH_STATUS_CODESDEFAULT_MAX_REFRESH_ATTEMPTSrrrrrrrrsetter __classcell__)rms@rr\r\stPj&CC&CC /BJX]B%=U!! ^^""rr\)%r __future__r http.clientclientrloggingr{r;rxr-urllib3.exceptions packagingrr3 google.authrrrgoogle.auth.transportr google.oauth2r parse __version___request_methodsRequestMethodsr+ getLoggerrr*Responser r"r>rZr\r rrrs#%&!! !"!.)7==$$%w)??--<