Lines Matching +full:server +full:- +full:id

7 #      http://www.apache.org/licenses/LICENSE-2.0
15 """Google ID Token helpers.
17 Provides support for verifying `OpenID Connect ID Tokens`_, especially ones
20 To parse and verify an ID Token issued by Google's OAuth 2.0 authorization
21 server use :func:`verify_oauth2_token`. To verify an ID Token issued by
24 A general purpose ID Token verifier is available as :func:`verify_token`.
34         token, request, 'my-client-id.example.com')
38 By default, this will re-fetch certificates for each verification. Because
42 library like `CacheControl`_ to create a cache-aware
53 .. _OpenID Connect ID Tokens:
54     http://openid.net/specs/openid-connect-core-1_0.html#IDToken
70 # The URL that provides public certificates for verifying ID tokens issued
71 # by Google's OAuth 2.0 authorization server.
74 # The URL that provides public certificates for verifying ID tokens issued
87     Google-style cerificate endpoints return JSON in the format of
88     ``{'key id': 'x509 certificate'}``.
96         Mapping[str, str]: A mapping of public key ID to x.509 certificate
106     return json.loads(response.data.decode("utf-8"))
116     """Verifies an ID token and returns the decoded token.
126             ``{'key id': 'x509 certificate'}``.
144     """Verifies an ID Token issued by Google's OAuth 2.0 authorization server.
151             typically your application's OAuth 2.0 client ID. If None then the
181     """Verifies an ID Token issued by Firebase Authentication.
188             typically your Firebase application ID. If None then the audience
206     """Create the ID Token credentials from the current environment.
208     This function acquires ID token from the environment in the following order.
212        to the path of a valid service account JSON file, then ID token is
215        then the ID token are obtained from the metadata server.
216     3. If metadata server doesn't exist and no valid service account credentials
228         # Create ID token credentials.
231         # Refresh the credential to obtain an ID token.
238         audience (str): The audience that this ID token is intended for.
243         google.auth.credentials.Credentials: The ID token credentials.
247             If metadata server doesn't exist and no valid service account
278     # 2. Try to fetch ID token from metada server if it exists. The code
279     # works for GAE and Cloud Run metadata server as well.
296         "Neither metadata server or valid service account credentials are found."
301     """Fetch the ID Token from the current environment.
303     This function acquires ID token from the environment in the following order.
307        to the path of a valid service account JSON file, then ID token is
310        then the ID token are obtained from the metadata server.
311     3. If metadata server doesn't exist and no valid service account credentials
328         audience (str): The audience that this ID token is intended for.
331         str: The ID token.
335             If metadata server doesn't exist and no valid service account