yup-oauth2 12.1.2

//! This example demonstrates how to use the same connection pool for both obtaining the tokens and
//! using the API that these tokens authorize. In most cases e.g. obtaining the service account key
//! will already establish a keep-alive http connection, so the succeeding API call should be much
//! faster.
//!
//! It is also a better use of resources (memory, sockets, etc.)

use std::time::Duration;

use hyper_util::client::legacy::connect::Connect;
use yup_oauth2::HyperClientBuilder;

async fn r#use<C>(
    client: hyper_util::client::legacy::Client<C, String>,
    authenticator: yup_oauth2::authenticator::Authenticator<C>,
) -> Result<(), Box<dyn std::error::Error + Send + Sync>>
where
    C: Connect + Clone + Send + Sync + 'static,
{
    let access_token = authenticator.token(&["email"]).await?;
    let request = http::Request::get("https://example.com")
        .header(
            http::header::AUTHORIZATION,
            format!("Bearer {}", access_token.token().ok_or("no access token")?),
        )
        .body(String::new())?;
    let response = client.request(request).await?;
    drop(response); // Implementing handling of the response is left as an exercise for the reader.
    Ok(())
}

#[tokio::main]
async fn main() {
    let google_credentials = std::env::var("GOOGLE_APPLICATION_CREDENTIALS")
        .expect("env var GOOGLE_APPLICATION_CREDENTIALS is required");
    let secret = yup_oauth2::read_service_account_key(google_credentials)
        .await
        .expect("$GOOGLE_APPLICATION_CREDENTIALS is not a valid service account key");
    let client = hyper_util::client::legacy::Client::builder(hyper_util::rt::TokioExecutor::new())
        .build(
            hyper_rustls::HttpsConnectorBuilder::new()
                .with_native_roots()
                .expect("failed to find native root certificates")
                .https_only()
                .enable_http1()
                .enable_http2()
                .build(),
        );
    let authenticator = yup_oauth2::ServiceAccountAuthenticator::with_client(
        secret,
        yup_oauth2::CustomHyperClientBuilder::from(client.clone())
            .with_timeout(Duration::from_secs(10)),
    )
    .build()
    .await
    .expect("could not create an authenticator");
    r#use(client, authenticator)
        .await
        .expect("use is successful!");
}