a d=ic"@sdZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl mZddlmZeZdZdZgdZGdd d eZd d ZGd d d ejjZGdddejZddZdS)z8Provides authentication support for TensorBoardUploader.N)util) tb_logging)Zopenidz.https://www.googleapis.com/auth/userinfo.emaila { "installed": { "client_id": "373649185512-8v619h5kft38l4456nm2dj4ubeqsrvh6.apps.googleusercontent.com", "project_id": "hosted-tensorboard-prod", "auth_uri": "https://accounts.google.com/o/oauth2/auth", "token_uri": "https://oauth2.googleapis.com/token", "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs", "client_secret": "pOyAuU2yq2arsM98Bw5hwYtr", "redirect_uris": [ "urn:ietf:wg:oauth:2.0:oob", "http://localhost" ] } } )Z tensorboard credentialszuploader-creds.jsonc@s:eZdZdZeZefddZddZddZdd Z d S) CredentialsStorezAPrivate file store for a `google.oauth2.credentials.Credentials`.cCsN|tjur$t}|dur$td|dur4d|_ntjj |gt R|_dS)awCreates a CredentialsStore. Args: user_config_directory: Optional absolute path to the root directory for storing user configs, under which to store the credentials file. If not set, defaults to a platform-specific location. If set to None, the store is disabled (reads return None; write and clear are no-ops). Nz@Credentials caching disabled - no private config directory found) r_DEFAULT_CONFIG_DIRECTORYrZget_user_config_directoryloggerwarning_credentials_filepathospathjoin&TENSORBOARD_CREDENTIALS_FILEPATH_PARTS)selfZuser_config_directoryrj/home/droni/.local/share/virtualenvs/DPS-5Je3_V2c/lib/python3.9/site-packages/tensorboard/uploader/auth.py__init__Ps zCredentialsStore.__init__cCs2|jdurdStj|jr.tjjj|jSdS)zMReturns the current `google.oauth2.credentials.Credentials`, or None.N) r r r existsgoogleoauth2r CredentialsZfrom_authorized_user_file)rrrrread_credentialsfs  z!CredentialsStore.read_credentialscCst|tjjjs tdt||jdur.dStj dk}t j |j|d|j |j |j|j|jdd}t|jd}t||Wdn1s0YdS)z>Writes a `google.oauth2.credentials.Credentials` to the store.z#Cannot write credentials of type %sNnt)privateZauthorized_user) refresh_token token_uri client_id client_secretscopestypew) isinstancerrrr TypeErrorrr r namerZmake_file_with_directoriesrrrrropenjsondump)rrrdatafrrrwrite_credentialsss&   z"CredentialsStore.write_credentialsc CsV|jdurdSzt|jWn2tyP}z|jtjkr<WYd}~n d}~00dS)z:Clears the store of any persisted credentials information.N)r r removeOSErrorerrnoENOENT)rerrrclears  zCredentialsStore.clearN) __name__ __module__ __qualname____doc__objectrrrr(r.rrrrrKs   rcCstj|tdS)zReturns a `CustomInstalledAppFlow` for the given config. Args: client_config (Mapping[str, Any]): The client configuration in the Google client secrets format. Returns: CustomInstalledAppFlow: the constructed flow. )r)CustomInstalledAppFlowZfrom_client_configOPENID_CONNECT_SCOPES)Z client_configrrrbuild_installed_app_flows r6c@seZdZdZdddZdS)r4z4Customized version of the Installed App OAuth2 flow.FcCsF|s>tdr>z|jddWStjy<tjdYn0|S)zMRun the flow using a local server if possible, otherwise the console.ZDISPLAYr)portz/Falling back to console authentication flow... ) r getenvZrun_local_server webbrowserErrorsysstderrwriteZ run_console)rZ force_consolerrrruns zCustomInstalledAppFlow.runN)F)r/r0r1r2r>rrrrr4sr4cs(eZdZdZfddZddZZS)IdTokenAuthMetadataPluginasA `gRPC AuthMetadataPlugin` that uses ID tokens. This works like the existing `google.auth.transport.grpc.AuthMetadataPlugin` except that instead of always using access tokens, it preferentially uses the `Credentials.id_token` property if available (and logs an error otherwise). See http://www.grpc.io/grpc/python/grpc.html#grpc.AuthMetadataPlugin cs>tt|t|tjjjs.tdt |||_ ||_ dS)a3Constructs an IdTokenAuthMetadataPlugin. Args: credentials (google.auth.credentials.Credentials): The credentials to add to requests. request (google.auth.transport.Request): A HTTP transport request object used to refresh credentials as needed. z-Cannot get ID tokens from credentials type %sN) superr?rr rrrrr!r _credentials_request)rrrequest __class__rrrs z"IdTokenAuthMetadataPlugin.__init__cCs`i}|j|j|j|j|t|jdd}|r@|jj||dn td|t | ddS)aPasses authorization metadata into the given callback. Args: context (grpc.AuthMetadataContext): The RPC context. callback (grpc.AuthMetadataPluginCallback): The callback that will be invoked to pass in the authorization metadata. id_tokenN)tokenz#Failed to find ID token credentials) rAZbefore_requestrB method_nameZ service_urlgetattrapplyrerrorlistitems)rcontextcallbackheadersrFrrr__call__s z"IdTokenAuthMetadataPlugin.__call__)r/r0r1r2rrQ __classcell__rrrDrr?s r?cCstjjj}tt||S)zConstructs `grpc.CallCredentials` using `google.auth.Credentials.id_token`. Args: credentials (google.auth.credentials.Credentials): The credentials to use. Returns: grpc.CallCredentials: The call credentials. )rauth transportrequestsRequestgrpcZmetadata_call_credentialsr?)rrCrrrid_token_call_credentialss rX)r2r+r$r r;r9Zgoogle_auth_oauthlib.flowZgoogle_auth_oauthlibrWZ google.authrZgoogle.auth.transport.requestsZgoogle.oauth2.credentialsZtensorboard.uploaderrZtensorboard.utilrZ get_loggerrr5ZOAUTH_CLIENT_CONFIGr r3rr6ZflowZInstalledAppFlowr4ZAuthMetadataPluginr?rXrrrrs*  M1