lib-client-google-auth 0.1.0

Google OAuth2 authentication library for ADI
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115

use serde::{Deserialize, Serialize};

/// Google service account credentials from JSON key file.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct ServiceAccountCredentials {
    /// Service account type (should be "service_account").
    #[serde(rename = "type")]
    pub account_type: String,

    /// Project ID.
    pub project_id: String,

    /// Private key ID.
    pub private_key_id: String,

    /// Private key in PEM format.
    pub private_key: String,

    /// Service account email.
    pub client_email: String,

    /// Client ID.
    pub client_id: String,

    /// Auth URI.
    pub auth_uri: String,

    /// Token URI.
    pub token_uri: String,

    /// Auth provider certificate URL.
    pub auth_provider_x509_cert_url: String,

    /// Client certificate URL.
    pub client_x509_cert_url: String,

    /// Universe domain.
    #[serde(default = "default_universe_domain")]
    pub universe_domain: String,
}

fn default_universe_domain() -> String {
    "googleapis.com".to_string()
}

impl ServiceAccountCredentials {
    /// Load credentials from a JSON file.
    pub async fn from_file(path: &str) -> crate::Result<Self> {
        let content = tokio::fs::read_to_string(path).await?;
        Self::from_json(&content)
    }

    /// Parse credentials from JSON string.
    pub fn from_json(json: &str) -> crate::Result<Self> {
        let creds: Self = serde_json::from_str(json)?;
        if creds.account_type != "service_account" {
            return Err(crate::Error::InvalidCredentials(format!(
                "Expected type 'service_account', got '{}'",
                creds.account_type
            )));
        }
        Ok(creds)
    }
}

/// Unified credentials type for Google authentication.
#[derive(Debug, Clone)]
pub enum Credentials {
    /// API key authentication.
    ApiKey(String),

    /// Service account credentials.
    ServiceAccount(ServiceAccountCredentials),

    /// OAuth2 credentials (client ID + secret).
    OAuth2 {
        client_id: String,
        client_secret: String,
        refresh_token: Option<String>,
    },
}

impl Credentials {
    /// Create API key credentials.
    pub fn api_key(key: impl Into<String>) -> Self {
        Self::ApiKey(key.into())
    }

    /// Create service account credentials from JSON.
    pub fn service_account(creds: ServiceAccountCredentials) -> Self {
        Self::ServiceAccount(creds)
    }

    /// Create OAuth2 credentials.
    pub fn oauth2(client_id: impl Into<String>, client_secret: impl Into<String>) -> Self {
        Self::OAuth2 {
            client_id: client_id.into(),
            client_secret: client_secret.into(),
            refresh_token: None,
        }
    }

    /// Create OAuth2 credentials with refresh token.
    pub fn oauth2_with_refresh(
        client_id: impl Into<String>,
        client_secret: impl Into<String>,
        refresh_token: impl Into<String>,
    ) -> Self {
        Self::OAuth2 {
            client_id: client_id.into(),
            client_secret: client_secret.into(),
            refresh_token: Some(refresh_token.into()),
        }
    }
}