airflow.providers.google.common.utils.id_token_credentials

You can execute this module to get ID Token.

python -m airflow.providers.google.common.utils.id_token_credentials_provider

To obtain info about this token, run the following commands:

ID_TOKEN="$(python -m airflow.providers.google.common.utils.id_token_credentials)" curl "https://www.googleapis.com/oauth2/v3/tokeninfo?id_token=${ID_TOKEN}" -v

Module Contents

class airflow.providers.google.common.utils.id_token_credentials.IDTokenCredentialsAdapter(credentials: oauth2_credentials.Credentials)[source]

Bases: google.auth.credentials.Credentials

Convert Credentials with "openid" scope to IDTokenCredentials.

expired[source]
refresh(self, request)[source]
airflow.providers.google.common.utils.id_token_credentials._load_credentials_from_file(filename: str, target_audience: Optional[str]) → Optional[google_auth_credentials.Credentials][source]
Loads credentials from a file.

The credentials file must be a service account key or a stored authorized user credential.

Parameters

filename (str) -- The full path to the credentials file.

Returns

Loaded credentials

Return type

google.auth.credentials.Credentials

Raises

google.auth.exceptions.DefaultCredentialsError -- if the file is in the wrong format or is missing.

airflow.providers.google.common.utils.id_token_credentials._get_explicit_environ_credentials(target_audience: Optional[str]) → Optional[google_auth_credentials.Credentials][source]
Gets credentials from the GOOGLE_APPLICATION_CREDENTIALS environment variable.
airflow.providers.google.common.utils.id_token_credentials._get_gcloud_sdk_credentials(target_audience: Optional[str]) → Optional[google_auth_credentials.Credentials][source]
Gets the credentials and project ID from the Cloud SDK.
airflow.providers.google.common.utils.id_token_credentials._get_gce_credentials(target_audience: Optional[str], request: Optional[google.auth.transport.Request] = None) → Optional[google_auth_credentials.Credentials][source]
Gets credentials and project ID from the GCE Metadata Service.
airflow.providers.google.common.utils.id_token_credentials.get_default_id_token_credentials(target_audience: Optional[str], request: google.auth.transport.Request = None) → google_auth_credentials.Credentials[source]
Gets the default ID Token credentials for the current environment.

Application Default Credentials provides an easy way to obtain credentials to call Google APIs for server-to-server or local applications.

Parameters

  • target_audience (Sequence[str]) -- The intended audience for these credentials.

  • request (google.auth.transport.Request) -- An object used to make HTTP requests. This is used to detect whether the application is running on Compute Engine. If not specified, then it will use the standard library http client to make requests.

Returns

the current environment's credentials.

Return type

google.auth.credentials.Credentials

Raises

DefaultCredentialsError -- If no credentials were found, or if the credentials found were invalid.

airflow.providers.google.common.utils.id_token_credentials.request_adapter[source]

Was this entry helpful?