gj dZddlZddlZddlZddlZddlZddlZddlmZddl m Z ddl Z ddl Z ejeZejdefdZ ddeded eed ejfd Zd Zd Z ddZddZdS)z< Helper functions for mTLS in async for discovery of certs. N)Optional) exceptionscontentc#Ktj\}} tj|d5}||dddn #1swxYwY|Vtj|rtj|dSdS#tj|rtj|wwxYw)zCreates a temporary file with the given content. Args: content (bytes): The content to write to the file. Yields: str: The path to the temporary file. wbN)tempfilemkstemposfdopenwritepathexistsremove)rfd file_pathfs b/var/www/app.qaans.com/backend/venv/lib/python3.11/site-packages/google/auth/aio/transport/mtls.py_create_temp_filer"s$&&MB ! Yr4  A GGG                   7>>) $ $ ! Ii  ! !27>>) $ $ ! Ii  !s.BA BABAB6C  cert_bytes key_bytes passphrasereturnc t|5}t|5} tjtjj}|||||cdddcdddS#tjttttf$r}tj d|d}~wwxYw#1swxYwYddddS#1swxYwYdS)aCreates an SSLContext with the given client certificate and key. This function writes the certificate and key to temporary files so that ssl.create_default_context can load them, as the ssl module requires file paths for client certificates. These temporary files are deleted immediately after the SSL context is created. Args: cert_bytes (bytes): The client certificate content in PEM format. key_bytes (bytes): The client private key content in PEM format. passphrase (Optional[bytes]): The passphrase for the private key, if any. Returns: ssl.SSLContext: The configured SSL context with client certificate. Raises: google.auth.exceptions.TransportError: If there is an error loading the certificate. )certfilekeyfilepasswordNz3Failed to load client certificate and key for mTLS.) rsslcreate_default_contextPurpose SERVER_AUTHload_cert_chainSSLErrorOSErrorIOError ValueError RuntimeErrorrTransportError)rrr cert_pathkey_pathcontextexcs rmake_client_cert_ssl_contextr,8s$ : & & )5F66   01HIIG  # #"Hz $                   gw LI   +E                            sQCB<.callbackys| *-D-F-F'F'F'F'F'F'F $Az99z2 * * * 6zBBGz ) *9$$sAA  A)googleauth transportmtlshas_default_client_cert_sourcerr<)r@s rdefault_client_cert_sourcerFgs] ; % D D# E   . 6   %%% OcKttjjjj|dd{V\}}|r|rd||dfSdS)aReturns the client side certificate, private key and passphrase. We look for certificates and keys with the following order of priority: 1. Certificate and key specified by certificate_config.json. Currently, only X.509 workload certificates are supported. Args: certificate_config_path (str): The certificate_config.json file path. Returns: Tuple[bool, bytes, bytes, bytes]: A boolean indicating if cert, key and passphrase are obtained, the cert bytes and key bytes both in PEM format, and passphrase bytes. Raises: google.auth.exceptions.ClientCertError: if problems occurs when getting the cert, key and passphrase. FNT)FNNN)r6rArBrC _mtls_helper_get_workload_cert_and_key)certificate_config_pathcertkeys rget_client_ssl_credentialsrNss.' *E ID#  %%T3$$ " "rGcK|r1|} |d{V\}}n#t$r|\}}YnwxYwd||fStd{V\}}}}|||fS)aReturns the client side certificate and private key. The function first tries to get certificate and key from client_cert_callback; if the callback is None or doesn't provide certificate and key, the function tries application default SSL credentials. Args: client_cert_callback (Optional[Callable[[], (bytes, bytes)]]): An optional callback which returns client certificate bytes and private key bytes both in PEM format. Returns: Tuple[bool, bytes, bytes]: A boolean indicating if cert and key are obtained, the cert bytes and key bytes both in PEM format. Raises: google.auth.exceptions.ClientCertError: if problems occurs when getting the cert and key. NT) TypeErrorrN)client_cert_callbackresultrLrMhas_certr=s rr;r;s(%%'' $ ID##   ID### T3#=#?#???????HdC T3 s ..r:)__doc__r. contextlibloggingr rrtypingr google.authr"google.auth.transport._mtls_helperrAgoogle.auth.transport.mtls getLogger__name___LOGGERcontextmanagerbytesr SSLContextr,r6rFrNr;rGrrbs` """"""))))!!!! ' H % % !u!!!!,HL"'5=e_^B = = =>! # # # #FrG