8?jR;dZddlmZddlZddlZddlmZddlmZm Z ddl m Z  ddl Z n#e $rZe dedZ[wwxYwee ddZeeerggZed D]-Z eee"#e$rYnwxYwer eed krejd eejeZGd d e jZ ddZ GddZ!dS)zAuthorization support for gRPC.)absolute_importN) exceptions) _mtls_helpermtls)service_accountzWgRPC is not installed from please install the grpcio package to use the gRPC transport. __version__.)Sra^grpcio < 1.83.0 does not support Post-Quantum Cryptography (PQC). Support for non-PQC environments is deprecated. In April 2027, google-auth will raise its minimum requirements to enforce grpcio >= 1.83.0. For more details on Google Cloud's post-quantum security migration, visit: https://cloud.google.com/security/resources/post-quantum-cryptographyc8eZdZdZ dddfd ZdZdZxZS) AuthMetadataPluginaA `gRPC AuthMetadataPlugin`_ that inserts the credentials into each request. .. _gRPC AuthMetadataPlugin: http://www.grpc.io/grpc/python/grpc.html#grpc.AuthMetadataPlugin Args: credentials (google.auth.credentials.Credentials): The credentials to add to requests. request (google.auth.transport.Request): A HTTP transport request object used to refresh credentials as needed. default_host (Optional[str]): A host like "pubsub.googleapis.com". This is used when a self-signed JWT is created from service account credentials. suppress_metrics_header (bool): When enabled, ``x-goog-api-client`` will be stripped from authorization headers. NF)suppress_metrics_headerctt|||_||_||_||_dSN)superr __init__ _credentials_request _default_host_suppress_metrics_header)self credentialsrequest default_hostr __class__s KC:\Projects\Historical\venv\Lib\site-packages\google/auth/transport/grpc.pyrzAuthMetadataPlugin.__init__KsG  $''00222' )(?%%%cpi}t|jtjr;|j|jrd|jnd|j|j|j |j ||j rd|vr|d=t| S)zGets the authorization headers for a request. Returns: Sequence[Tuple[str, str]]: A list of request headers (key, value) to add to the request. z https://{}/Nzx-goog-api-client) isinstancerr Credentials_create_self_signed_jwtrformatbefore_requestr method_name service_urlrlistitems)rcontextheaderss r_get_authorization_headersz-AuthMetadataPlugin._get_authorization_headersWs d')D E E    5 5<@>O#<_MM / ' ,    =&<>>  =3 =,,..ID#":"&COO =!/!1!1 0@OO":<0  v'< G G G GGrcDeZdZdZdZedZedZdS)r<a*Class for application default SSL credentials. Mutual TLS (mTLS) is enabled if either: 1. The `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is explicitly set to `"true"`. 2. The `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is unset or empty, but a valid workload certificate configuration is found (e.g., via the `GOOGLE_API_CERTIFICATE_CONFIG` environment variable or the default gcloud config path). See https://google.aip.dev/auth/4114 for client certificate discovery details. If client certificate usage is enabled, then for devices with endpoint verification support, a device certificate will be automatically loaded and mutual TLS will be established. See https://cloud.google.com/endpoint-verification/docs/overview. crtj}|s d|_dStj|_dS)NF)rr:_is_mtlsrhas_default_client_cert_source)rrEs rrzSslCredentials.__init__Gs8&<>> B!DMMM ?AADMMMrcf|jr tj\}}}}|rtj|||_ntj|_d|_nM#t jtf$r}t j |}||d}~wwxYwtj|_|jS)aGet the created SSL channel credentials. For devices with endpoint verification support, if the device certificate loading has any problems, corresponding exceptions will be raised. For a device without endpoint verification support, no exceptions will be raised. Returns: grpc.ChannelCredentials: The created grpc channel credentials. Raises: google.auth.exceptions.MutualTLSChannelError: If mutual TLS channel creation failed for any reason. r4FN) rMrget_client_ssl_credentialsr7r;_ssl_credentialsrClientCertErrorOSErrorMutualTLSChannelError)rhas_certrFrG_ caught_excnew_excs rr=zSslCredentials.ssl_credentialsNs = C .)5)P)R)R&$Q*,0,H*.C---D))-1,H,J,JD)$)DM.8 . . .$::FF:- .%)$@$B$BD !$$sAAB5B  Bc|jS)z?Indicates if the created SSL channel credentials is mutual TLS.)rM)rs ris_mtlszSslCredentials.is_mtlsps }rN)r.r/r0r1rpropertyr=rZrrr<r<4sg$BBB%%X%BXrr<)NN)"r1 __future__rloggingwarnings google.authrgoogle.auth.transportrr google.oauth2rr7 ImportErrorrWgetattr _grpc_ver_strrstr_partssplit_partappendint ValueErrortuplewarn FutureWarning getLoggerr._LOGGERr rJr<r\rrrrs)&%&&&&&&""""""44444444))))))KKKK +a    mT22  :mS!! F$$S))  MM##e** % % % %    EE   %%--*,,  T     ' H % %BABABABABA0BABABAR tHtHtHtHn??????????s$+A <A7BBB