
    (ph                         S r SSKJr  SSKJr  SSKJr  SSKJr   " S S\R                  \R                  \R                  5      r " S S	\R                  \R                  \R                  5      r
g
)a  Service Accounts: JSON Web Token (JWT) Profile for OAuth 2.0

NOTE: This file adds asynchronous refresh methods to both credentials
classes, and therefore async/await syntax is required when calling this
method when using service account credentials with asynchronous functionality.
Otherwise, all other methods are inherited from the regular service account
credentials file google.oauth2.service_account

    )_credentials_async)_helpers)_client_async)service_accountc                   \    \ rS rSrSr\R                  " \R                  5      S 5       r	Sr
g)Credentials   a  Service account credentials

Usually, you'll create these credentials with one of the helper
constructors. To create credentials using a Google service account
private key JSON file::

    credentials = _service_account_async.Credentials.from_service_account_file(
        'service-account.json')

Or if you already have the service account file loaded::

    service_account_info = json.load(open('service_account.json'))
    credentials = _service_account_async.Credentials.from_service_account_info(
        service_account_info)

Both helper methods pass on arguments to the constructor, so you can
specify additional scopes and a subject if necessary::

    credentials = _service_account_async.Credentials.from_service_account_file(
        'service-account.json',
        scopes=['email'],
        subject='user@example.com')

The credentials are considered immutable. If you want to modify the scopes
or the subject used for delegation, use :meth:`with_scopes` or
:meth:`with_subject`::

    scoped_credentials = credentials.with_scopes(['email'])
    delegated_credentials = credentials.with_subject(subject)

To add a quota project, use :meth:`with_quota_project`::

    credentials = credentials.with_quota_project('myproject-123')
c                    #    U R                  5       n[        R                  " XR                  U5      I S h  vN u  p4nX0l        X@l        g  N7fN)#_make_authorization_grant_assertionr   	jwt_grant
_token_uritokenexpiryselfrequest	assertionaccess_tokenr   _s         W/var/www/html/venv/lib/python3.13/site-packages/google/oauth2/_service_account_async.pyrefreshCredentials.refreshE   sG     <<>	(5(?(?__i)
 #
a "
	#
   5AAAr   r   N__name__
__module____qualname____firstlineno____doc__r   copy_docstringcredentials_asyncr   r   __static_attributes__     r   r   r      s.    !F .::; <r&   r   c                   \    \ rS rSrSr\R                  " \R                  5      S 5       r	Sr
g)IDTokenCredentialsO   a  Open ID Connect ID Token-based service account credentials.

These credentials are largely similar to :class:`.Credentials`, but instead
of using an OAuth 2.0 Access Token as the bearer token, they use an Open
ID Connect ID Token as the bearer token. These credentials are useful when
communicating to services that require ID Tokens and can not accept access
tokens.

Usually, you'll create these credentials with one of the helper
constructors. To create credentials using a Google service account
private key JSON file::

    credentials = (
        _service_account_async.IDTokenCredentials.from_service_account_file(
            'service-account.json'))

Or if you already have the service account file loaded::

    service_account_info = json.load(open('service_account.json'))
    credentials = (
        _service_account_async.IDTokenCredentials.from_service_account_info(
            service_account_info))

Both helper methods pass on arguments to the constructor, so you can
specify additional scopes and a subject if necessary::

    credentials = (
        _service_account_async.IDTokenCredentials.from_service_account_file(
            'service-account.json',
            scopes=['email'],
            subject='user@example.com'))

The credentials are considered immutable. If you want to modify the scopes
or the subject used for delegation, use :meth:`with_scopes` or
:meth:`with_subject`::

    scoped_credentials = credentials.with_scopes(['email'])
    delegated_credentials = credentials.with_subject(subject)

c                    #    U R                  5       n[        R                  " XR                  U5      I S h  vN u  p4nX0l        X@l        g  N7fr   )r   r   id_token_jwt_grantr   r   r   r   s         r   r   IDTokenCredentials.refresh}   sG     <<>	(5(H(H__i)
 #
a "
	#
r   r   Nr   r%   r&   r   r(   r(   O   s.    
'R .::; <r&   r(   N)r!   google.authr   r#   r   google.oauth2r   r   r   Scopedr(   Signingr%   r&   r   <module>r1      sd    @   ' )-!2!9!9;L;X;X-`5&&!!5r&   