CURRENT PATH:
/
opt
/
gsutil
/
gslib
/
__pycache__
/
[ ⬅ KEMBALI ]
|
[ HOME ]
Upload File:
Upload Ke Sini
Dir Baru
File Baru
Editing:
iamcredentials_api.cpython-39.pyc
a +(Wg�. � @ s. d Z ddlmZ ddlmZ ddlmZ ddlmZ ddlZddlZddlZddl m Z ddl m Z dd lmZ dd lmZ dd lmZ dd lmZ dd lmZ ddlmZ ddlmZ ddlmZ ddlm Z ddl m Z ddl m Z ddl m Z ddl m!Z! e j"Z#e �$� �rdZ%ndZ%G dd� de&�Z'dS )z>JSON gsutil Cloud API implementation for Google Cloud Storage.� )�absolute_import)�print_function)�division)�unicode_literalsN)� exceptions)�config)�AccessDeniedException)�BadRequestException)�NotFoundException)�PreconditionException)�ServiceException)�NoOpCredentials)�iamcredentials_v1_client)�iamcredentials_v1_messages)� system_util)� GetCertsFile)�GetMaxRetryDelay)� GetNewHttp)� GetNumRetrieszVInsufficient OAuth2 scope to perform this operation. Please re-run `gcloud auth login`zRInsufficient OAuth2 scope to perform this operation. Please re-run `gsutil config`c sV e Zd ZdZd� fdd� Zdd� Zdd � Zdd d �Zdd d �Zdd� Z dd� Z � Z S )�IamcredentailsApizCWraps calls to the Cloud IAM Credentials v1 interface via apitools.Nr c s� t t| ��� || _|| _t� | _t� | _d| _ d}t � ddt � d|d��| _ t � ddd�}|rhd| nd | _ | j | j | j | _|d k}|d k}tj| j| j||| jd �| _t� | _| j| j_t� | _| j| j_t| jt�r�| j�d d � dS )a Performs necessary setup for interacting with Google Cloud IAM Credentials. Args: logger: logging.logger for outputting log messages. credentials: Credentials to be used for interacting with Cloud IAM debug: Debug level for the API implementation (0..3). zhttps://Zgs_iamcredentails_host� CredentialsZgs_iamcredentials_hostz iamcredentials.googleapis.comZgs_iamcredentails_portN�:� � )�url�http� log_request� log_response� credentials�key�'AIzaSyDnacJHrKma0048b13sh8cgxNUwulubmJM)�superr �__init__�loggerr r � certs_filer r � http_baser �get� host_base� host_port�url_base�apitools_clientZIamcredentialsV1� api_clientr � num_retriesr �max_retry_wait� isinstancer �AddGlobalParam)�selfr# r �debugZ legacy_typoZgs_iamcred_portr r �� __class__� �'/opt/gsutil/gslib/iamcredentials_api.pyr" 9 s> �� �zIamcredentailsApi.__init__c C sh d| }t j|d�}t j||d�}z| jj�|�W S tyb } z| �||� W Y d}~n d}~0 0 dS )z0Sign the blob using iamcredentials.SignBlob API.� projects/-/serviceAccounts/%s)�payload)�nameZsignBlobRequestN)�apitools_messagesZSignBlobRequestZ4IamcredentialsProjectsServiceAccountsSignBlobRequestr+ �projects_serviceAccounts�SignBlob� TRANSLATABLE_APITOOLS_EXCEPTIONS�_TranslateExceptionAndRaise)r0 �service_account_id�messager8 Zsign_blob_request�request�er4 r4 r5 r; j s ��zIamcredentailsApi.SignBlobc C sh d| }t j|d�}t j||d�}z| jj�|�W S tyb } z| �||� W Y d}~n d}~0 0 dS )z8Generates an access token for the given service account.r6 )�scope)r8 ZgenerateAccessTokenRequestN)r9 ZGenerateAccessTokenRequestZ?IamcredentialsProjectsServiceAccountsGenerateAccessTokenRequestr+ r: �GenerateAccessTokenr< r= )r0 r> �scopesr8 Z generate_access_token_requestr@ rA r4 r4 r5 rC v s ���z%IamcredentailsApi.GenerateAccessTokenc C s> | j �tj�r | j �dt�� � | j||d�}|r8|�n� dS )a8 Translates an HTTP exception and raises the translated or original value. Args: e: Any Exception. service_account_id: Optional service account in request that caused the exception. Raises: Translated CloudApi exception, or the original exception if it was not translatable. z TranslateExceptionAndRaise: %s)r> N)r# � isEnabledFor�logging�DEBUGr1 � traceback� format_exc�_TranslateApitoolsException)r0 rA r> �translated_exceptionr4 r4 r5 r= � s ��z-IamcredentailsApi._TranslateExceptionAndRaisec C s� t |tj��r�| �|�}|jdkr4t|p*d|jd�S |jdkr�dt|�v r\t|pRd|jd�S dt|�v r~tt|j| � |�d�S �nJ|jd k�rld t|�v r�td �S d t|�v r�t|�S d t|�v r�t|p�d|jd�S dt|�v r�t|p�d|jd�S dt|�v �rtd|jd�S dt|�v �r*td|jd�S dt|�v �rNtt|j| � |�d�S t|�p`|j �p`||jd�S n`|jdk�r�t |�p�|j |jd�S |jdk�r�|�r�t d| |jd�S |jdk�r�t ||jd�S t ||jd�S dS )aA Translates apitools exceptions into their gsutil equivalents. Args: e: Any exception in TRANSLATABLE_APITOOLS_EXCEPTIONS. service_account_id: Optional service account ID that caused the exception. Returns: CloudStorageApiServiceException for translatable exceptions, None otherwise. i� z Bad Request)�statusi� zLogin Requiredz Access denied: login required.�insufficient_scope)rL �bodyi� z#The caller does not have permissiona Service account impersonation failed. Please go to the Google Cloud Platform Console (https://cloud.google.com/console), select IAM & admin, then Service Accounts, and grant your originating account the Service Account Token Creator role on the target service account.z5IAM Service Account Credentials API has not been usedz7The account for the specified project has been disabledzAccount disabled.z,Daily Limit for Unauthenticated Use Exceededz8Access denied: quota exceeded. Is your project ID valid?zUser Rate Limit Exceededz5Rate limit exceeded. Please retry this request later.zAccess Not Configuredz�Access Not Configured. Please go to the Google Cloud Platform Console (https://cloud.google.com/console#/project) for your project, select APIs & services, and enable the Google Cloud IAM Credentials API.i� i� zThe key %s already exists.i� N)r. �apitools_exceptions� HttpError�_GetMessageFromHttpError� status_coder �strr �"_INSUFFICIENT_OAUTH2_SCOPE_MESSAGE�!_GetAcceptableScopesFromHttpErrorr? r r r )r0 rA r> r? r4 r4 r5 rJ � s� � � � � � ����� �� z-IamcredentailsApi._TranslateApitoolsExceptionc C sb t |tj�r^t|dd �r^z2t�|j�}d|v rHd|d v rH|d d W S W n ty\ Y n0 d S )N�content�errorr? )r. rO rP �getattr�json�loadsrV � Exception)r0 � http_error�json_objr4 r4 r5 rQ � s z*IamcredentailsApi._GetMessageFromHttpErrorc C sX z@|j d }|�d�}|dkr>||d � �d�d }d| W S W n tyR Y n0 d S )Nzwww-authenticatezscope="r �"� zAcceptable scopes: %s)�response�find�splitr[ )r0 r\ �www_authenticate� scope_idxrD r4 r4 r5 rU � s z3IamcredentailsApi._GetAcceptableScopesFromHttpError)NNr )N)N) �__name__� __module__� __qualname__�__doc__r" r; rC r= rJ rQ rU � __classcell__r4 r4 r2 r5 r 6 s 1 X r )(rh � __future__r r r r rY rF rH �apitools.base.pyr rO �botor �gslib.cloud_apir r r r r �gslib.no_op_credentialsr Z)gslib.third_party.iamcredentials_apitoolsr r* r r9 � gslib.utilsr �gslib.utils.boto_utilr r r r rP r< �InvokedViaCloudSdkrT �objectr r4 r4 r4 r5 �<module> s: ��
SIMPAN
[ BATAL ]