o
    g!                     @   s   d Z ddlZddlZddlZddlZddlmZ ddl	m
Z
 ddlmZ ddlmZ e
 Zg dZedd	d
gZ	 G dd dZG dd deZG dd deZG dd deZG dd deZdd ZdS )zFirebase credentials module.    N)Credentials)requests)credentials)service_account)z.https://www.googleapis.com/auth/cloud-platformz)https://www.googleapis.com/auth/datastorez5https://www.googleapis.com/auth/devstorage.read_writez(https://www.googleapis.com/auth/firebasez/https://www.googleapis.com/auth/identitytoolkitz.https://www.googleapis.com/auth/userinfo.emailAccessTokenInfoaccess_tokenexpiryc                   @   s    e Zd ZdZdd Zdd ZdS )Basez>Provides OAuth2 access tokens for accessing Firebase services.c                 C   s    |   }|t t|j|jS )zFetches a Google OAuth2 access token using this credential instance.

        Returns:
          AccessTokenInfo: An access token obtained using the credential.
        )get_credentialrefresh_requestr   tokenr   )selfgoogle_cred r   f/var/www/html/Testing_prj/Navya-Bakers/venv/lib/python3.10/site-packages/firebase_admin/credentials.pyget_access_token0   s   
zBase.get_access_tokenc                 C   s   t )z?Returns the Google credential instance used for authentication.)NotImplementedErrorr   r   r   r   r
   :   s   zBase.get_credentialN)__name__
__module____qualname____doc__r   r
   r   r   r   r   r	   -   s    
r	   c                       s.   e Zd ZdZdef fddZdd Z  ZS )_ExternalCredentialszLA wrapper for google.auth.credentials.Credentials typed credential instances
credentialc                    s   t t|   || _d S N)superr   __init___g_credential)r   r   	__class__r   r   r   A   s   
z_ExternalCredentials.__init__c                 C      | j S )zReturns the underlying Google Credential

        Returns:
          google.auth.credentials.Credentials: A Google Auth credential instance.r   r   r   r   r   r
   E      z#_ExternalCredentials.get_credential)r   r   r   r   GoogleAuthCredentialsr   r
   __classcell__r   r   r   r   r   >   s    r   c                       P   e Zd ZdZdZ fddZedd Zedd Zed	d
 Z	dd Z
  ZS )Certificatez9A credential initialized from a JSON certificate keyfile.r   c              
      s   t t|   t|r%t|}t|}W d   n1 sw   Y  nt|tr-|}nt	d
||d| jkrDt	d
| jztjj|td| _W dS  t	yc } zt	d
|d}~ww )a]  Initializes a credential from a Google service account certificate.

        Service account certificates can be downloaded as JSON files from the Firebase console.
        To instantiate a credential from a certificate file, either specify the file path or a
        dict representing the parsed contents of the file.

        Args:
          cert: Path to a certificate file or a dict representing the contents of a certificate.

        Raises:
          IOError: If the specified certificate file doesn't exist or cannot be read.
          ValueError: If the specified certificate is invalid.
        Nz}Invalid certificate argument: "{0}". Certificate argument must be a file path, or a dict containing the parsed file contents.typezZInvalid service account certificate. Certificate must contain a "type" field set to "{0}".scopesz?Failed to initialize a certificate credential. Caused by: "{0}")r   r'   r   _is_file_pathopenjsonload
isinstancedict
ValueErrorformatget_CREDENTIAL_TYPEr   r   from_service_account_info_scopesr   )r   cert	json_file	json_dataerrorr   r   r   r   Q   s4   

zCertificate.__init__c                 C      | j jS r   )r   
project_idr   r   r   r   r<   t      zCertificate.project_idc                 C   r;   r   )r   signerr   r   r   r   r>   x   r=   zCertificate.signerc                 C   r;   r   )r   service_account_emailr   r   r   r   r?   |   r=   z!Certificate.service_account_emailc                 C   r!   zReturns the underlying Google credential.

        Returns:
          google.auth.credentials.Credentials: A Google Auth credential instance.r"   r   r   r   r   r
      r#   zCertificate.get_credential)r   r   r   r   r4   r   propertyr<   r>   r?   r
   r%   r   r   r   r   r'   L   s    #


r'   c                       s<   e Zd ZdZ fddZdd Zedd Zdd	 Z  Z	S )
ApplicationDefaultz(A Google Application Default credential.c                    s   t t|   d| _dS )zCreates an instance that will use Application Default credentials.

        The credentials will be lazily initialized when get_credential() or
        project_id() is called. See those methods for possible errors raised.
        N)r   rB   r   r   r   r   r   r   r      s   
zApplicationDefault.__init__c                 C      |    | jS )a:  Returns the underlying Google credential.

        Raises:
          google.auth.exceptions.DefaultCredentialsError: If Application Default
              credentials cannot be initialized in the current environment.
        Returns:
          google.auth.credentials.Credentials: A Google Auth credential instance.)_load_credentialr   r   r   r   r   r
      s   z!ApplicationDefault.get_credentialc                 C   rC   )a  Returns the project_id from the underlying Google credential.

        Raises:
          google.auth.exceptions.DefaultCredentialsError: If Application Default
              credentials cannot be initialized in the current environment.
        Returns:
          str: The project id.)rD   _project_idr   r   r   r   r<      s   	zApplicationDefault.project_idc                 C   s$   | j stjjtd\| _ | _d S d S )Nr)   )r   googleauthdefaultr6   rE   r   r   r   r   rD      s   z#ApplicationDefault._load_credential)
r   r   r   r   r   r
   rA   r<   rD   r%   r   r   r   r   rB      s    	
rB   c                       r&   )RefreshTokenz8A credential initialized from an existing refresh token.authorized_userc                    s   t t|   t|r%t|}t|}W d   n1 sw   Y  nt|tr-|}nt	d
||d| jkrDt	d
| jtj|t| _dS )a  Initializes a credential from a refresh token JSON file.

        The JSON must consist of client_id, client_secret and refresh_token fields. Refresh
        token files are typically created and managed by the gcloud SDK. To instantiate
        a credential from a refresh token file, either specify the file path or a dict
        representing the parsed contents of the file.

        Args:
          refresh_token: Path to a refresh token file or a dict representing the contents of a
              refresh token file.

        Raises:
          IOError: If the specified file doesn't exist or cannot be read.
          ValueError: If the refresh token configuration is invalid.
        NzInvalid refresh token argument: "{0}". Refresh token argument must be a file path, or a dict containing the parsed file contents.r(   zSInvalid refresh token configuration. JSON must contain a "type" field set to "{0}".)r   rI   r   r+   r,   r-   r.   r/   r0   r1   r2   r3   r4   r   r   from_authorized_user_infor6   r   )r   refresh_tokenr8   r9   r   r   r   r      s"   

zRefreshToken.__init__c                 C   r;   r   )r   	client_idr   r   r   r   rM      r=   zRefreshToken.client_idc                 C   r;   r   )r   client_secretr   r   r   r   rN      r=   zRefreshToken.client_secretc                 C   r;   r   )r   rL   r   r   r   r   rL      r=   zRefreshToken.refresh_tokenc                 C   r!   r@   r"   r   r   r   r   r
      r#   zRefreshToken.get_credential)r   r   r   r   r4   r   rA   rM   rN   rL   r
   r%   r   r   r   r   rI      s     


rI   c                 C   s&   zt |  W dS  ty   Y dS w )NTF)pathlibPath	TypeError)pathr   r   r   r+      s   
r+   )r   collectionsr-   rO   google.authrF   google.auth.credentialsr   r$   google.auth.transportr   google.oauth2r   r   Requestr   r6   
namedtupler   r	   r   r'   rB   rI   r+   r   r   r   r   <module>   s&   	<'9