'SrSSKJr SSKJr SSKJr SSKrSSKrSSKrSSKrSSK r SSK J r SSK J r SSKJr SSKJ r SSKJr SS KJr SS KJr SS KJr SSKJ r SS KJr SS KJr SSKJr \R>"S5r \R>"S5r!Sr"\RF\RH"SS\RJ555r&g)aA git credential helper that provides Google git repository passwords. Reads a session from stdin that looks a lot like: protocol=https host=code.google.com And writes out a session to stdout that looks a lot like: username=me password=secret Errors will be reported on stderr. Note that spaces may be part of key names so, for example, "protocol" must not be proceeded by leading spaces. )absolute_import)division)unicode_literalsN) exceptions)base)log) properties)requests)creds)store)files) platformsz (.+)=(.*)z^ *$c^[R"5R5upUR[R "55 UR $![RaAn[RR[R"SUS355 SnAgSnAff=f)zObtains an access token using Application Default Credentials. Writes error messages to stderr and returns None if an error occurs. Returns: str or None: The access token if successful, otherwise None. z> ERROR: Failed to get application default credentials: z N)c_credsGetGoogleAuthDefaultdefaultrefreshr GoogleAuthRequesttokengoogle_auth_exceptionsDefaultCredentialsErrorsysstderrwritetextwrapdedent)r _es lib/surface/auth/git_helper.py_GetAccessTokenFromAdcr ;s ++-557HE MM(,,./ ;; 7 7JJX__*??@cB &    sA AB,+7B''B,c\rSrSrSrSrSr\\/rSr\ S5r \ R"\ R\R 5S5rSrS rS rS rS rg ) GitHelperOzEA git credential helper to provide access to Google git repositories.getr zgooglesource.comcFURSSS9 URSSSS9 g)Nmethodz!The git credential helper method.)helpz--ignore-unknown store_truezTProduce no output and exit with 0 when given an unknown method (e.g. store) or host.)actionr') add_argument)parsers rArgsGitHelper.ArgsZs4 'JK  6 c ^ ^[RRRR S5 UR [ R;a]UR(ag[R"SRUR SR[ R5S95eUR5nS[ R/m SSS S [ R-/m[RRR R#5nU(a T R%UR'S 55 UR)S 5nU U4S jnU"U5(d5UR(d#[R"SRUS95egUR [ R*:XaUR-5nU(dgUR/5 U[ R:Xd'UR1S [ R-5(aSnO2[RRR2R#5n[4R6R9[:R<"SUSUS355 gUR [ R>:XGa[@RBRE5[@RBRF:Xa[HRJ"S5 SRUR)S5UR)S 5S9n[HRJ"SU5 [LRN"SS/[LRP[LRP[LRPS9n U RSU5upU RT(a[HRJ"SU U 5 gggg![Van [HRJ"SSS9 Sn A gSn A ff=f) zRun the helper command.FNz8Unexpected method [{meth}]. One of [{methods}] expected.z, )methmethodssource.developers.google.comz.sourcemanager.devz .blueoryx.devz.developerconnect.dev.,hostcV>UT;agTHnURU5(dM g g)NTF)endswith)r5suffixcredentialed_domainscredentialed_domains_suffixs r _ValidateHost$GitHelper.Run.._ValidateHosts0 % %/& == 0r.zUnknown host [{host}].)r5z git-accountz username=z password=z zClearing OSX credential cache.z!protocol={protocol} host={host} protocol)r=r5zCalling erase with input: %szgit-credential-osxkeychainerase)stdinstdoutrz7Failed to clear OSX keychain: stdout: {%s} stderr: {%s}zFailed to clear OSX keychainT)exc_info),r VALUESauth#service_account_use_self_signed_jwtSetr&r"METHODSignore_unknownauth_exceptionsGitCredentialHelperErrorformatjoin _ParseInput GOOGLESOURCEcore credentialed_hosted_repo_domainsGetextendsplitr$GET_GetAccessToken _CheckNetrcr7accountrr@rrrSTORErOperatingSystemCurrentMACOSXrdebug subprocessPopenPIPE communicate returncode Exception)selfargsinfoextrar5r; access_token sent_account input_stringpouterrrr9r:s @@rRun GitHelper.Runfs* >>BB5I {{)+++    4 4 D K K;; )2C2C(D L      D&  i$$$ #    " " C C G G IE !!%++c"23 88F D     66 $ + + + 6    {{imm#))+l   )(( ( ]]3!7!77 8 8$ !((--5599;  jjx, >" >" (   '  # # + + -  & & - - . 23 C?FFxx +$((62BG , ))3\ B+W5OO____  ! ]]<0(# \\ IIK ! . (D C ))2T B Cs>CO O/O**O/c[RRRR 5n[ R "U5n[ R"U5 UR$![RaAn[RR[R"SUS355 SnAgSnAf[ a-n[RRSUS35 SnAgSnAff=f)zObtains an access token using gcloud credentials. Writes error messages to stderr and returns None if an error occurs. Returns: str or None: The access token if successful, otherwise None. z ERROR: z8 Run 'gcloud auth login' to log in. Nz&ERROR: Failed to obtain access token:  )r rBrNrVrPc_storeLoadRefreshrcreds_exceptionsErrorrrrrrra)rbrVcredrs r_GetAccessTokenFromGcloud#GitHelper._GetAccessTokenFromGclouds$$,,002G  \\' "d oodZZ  ! ! jjx, (  jj?s"EF s#,A,,C67B<< C6 #C11C6c[RRRR 5(a [ 5$UR 5$)zObtains an access token using either ADC or gcloud credentials. Writes error messages to stderr and returns None if an error occurs. Returns: str or None: The access token if successful, otherwise None. )r rBrCgit_helper_use_adcGetBoolr rv)rbs rrTGitHelper._GetAccessTokens=0088:: # %%  + + --r.cR0n[RHn[RU5(aM[RU5nU(d2[ R "SRURS5S95eUR5upEUR5X'M SU;a[ R "S5eSU;a[ R "S5eURS5S:wa2[ R "S RURS5S 95eU$) z[Parse the fields from stdin. Returns: {str: str}, The parsed parameters given on stdin. z&Invalid input line format: [{format}].ro)rJr=z Required key "protocol" missing.r5zRequired key "host" missing.httpsz*Invalid protocol [{p}]. "https" expected.)ri) rr?_BLANK_LINE_REmatch _KEYVAL_RErHrIrJrstripgroupsstripr$)rbrdlinerkeyvals rrLGitHelper._ParseInputs D    d # #t$e 66 4 ; ;{{4( <   hc))+di  4 4 , T  4 4 (  xx w&  4 4 6 = =$ >   Kr.cSnU"[R"[RR SS555 U"[R"[RR SS555 g)z:Warn on stderr if ~/.netrc contains redundant credentials.c*[RRU5(dg[R"U5nSU;aA[ R R[R"SRUS955 gg![a gf=f)z9Warn about other credential helpers that will be ignored.Nr2zYou have credentials for your Google repository in [{path}]. This repository's git credential helper is set correctly, so the credentials in [{path}] will not be used, but you may want to remove them to avoid confusion. )path) osrexistsr ReadFileContentsrrrrrrJra)ridatas rCheck$GitHelper._CheckNetrc..Check s} WW^^A    %%a( )T 1 **  8??, FFN   2   sAB BB~z.netrc_netrcN)r ExpandHomeDirrrrK)rbrs rrUGitHelper._CheckNetrcsM  %  bggll39 :; %  bggll39 :;r.N)__name__ __module__ __qualname____firstlineno____doc__rSrWrFrM staticmethodr,c_excRaiseErrorInsteadOfrHAuthenticationErrorrGoogleAuthErrorrlrvrTrLrU__static_attributes__rr.rr"r"Os~N # % %L'#,   _@@3CCEhCEhCT0 .$Lrs ''  <E(7#*(<J<*.ZZ % G$(`< `< `