U /j@sdZddlZddlZddlZddlZddlZddlZddlmZddl m Z ddl Z ddl Z eeZejedddZdeeeeejdd d Zd d Zd dZdddZdddZdS)z< Helper functions for mTLS in async for discovery of certs. N)Optional) exceptions)contentc csVt\}}z,t|d}||W5QRX|VW5tj|rPt|XdS)zCreates a temporary file with the given content. Args: content (bytes): The content to write to the file. Yields: str: The path to the temporary file. wbN)tempfilemkstempospathexistsremovefdopenwrite)rfd file_pathfrB/tmp/pip-unpacked-wheel-l8yytoim/google/auth/aio/transport/mtls.py_create_temp_file"s   r) cert_bytes key_bytes passphrasereturncCst|}t|~}z.callback)googleauth transportZmtlsZhas_default_client_cert_sourcerr.)r1rrrdefault_client_cert_sourcegs  r5cs6ttjjjj|dIdH\}}|r2|r2d||dfSdS)aReturns the client side certificate, private key and passphrase. We look for certificates and keys with the following order of priority: 1. Certificate and key specified by certificate_config.json. Currently, only X.509 workload certificates are supported. Args: certificate_config_path (str): The certificate_config.json file path. Returns: Tuple[bool, bytes, bytes, bytes]: A boolean indicating if cert, key and passphrase are obtained, the cert bytes and key bytes both in PEM format, and passphrase bytes. Raises: google.auth.exceptions.ClientCertError: if problems occurs when getting the cert, key and passphrase. FNT)FNNN)r,r2r3r4Z _mtls_helperZ_get_workload_cert_and_key)Zcertificate_config_pathcertkeyrrrget_client_ssl_credentialss  r8csb|rD|}z|IdH\}}Wntk r8|\}}YnXd||fStIdH\}}}}|||fS)aReturns the client side certificate and private key. The function first tries to get certificate and key from client_cert_callback; if the callback is None or doesn't provide certificate and key, the function tries application default SSL credentials. Args: client_cert_callback (Optional[Callable[[], (bytes, bytes)]]): An optional callback which returns client certificate bytes and private key bytes both in PEM format. Returns: Tuple[bool, bytes, bytes]: A boolean indicating if cert and key are obtained, the cert bytes and key bytes both in PEM format. Raises: google.auth.exceptions.ClientCertError: if problems occurs when getting the cert and key. NT) TypeErrorr8)Zclient_cert_callbackresultr6r7Zhas_certr/rrrr-s r-)N)N)N)__doc__r( contextlibloggingrrrtypingrZ google.authrZ"google.auth.transport._mtls_helperr2Zgoogle.auth.transport.mtls getLogger__name__Z_LOGGERcontextmanagerbytesr SSLContextr'r,r5r8r-rrrrs2    ! #