Add samples for auth (GoogleCloudPlatform#969)

Author: Jon Wayne Parrott

auth/api-client/requirements.txt

@@ -0,0 +1,3 @@
+google-api-python-client==1.6.2
+google-auth-httplib2==0.0.2
+google-auth==1.0.1

auth/api-client/snippets.py

@@ -0,0 +1,66 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Demonstrates how to authenticate to Google Cloud Platform APIs using
+the Google API Client."""
+
+import argparse
+
+
+def implicit(project):
+    import googleapiclient.discovery
+
+    # If you don't specify credentials when constructing the client, the
+    # client library will look for credentials in the environment.
+    storage_client = googleapiclient.discovery.build('storage', 'v1')
+
+    # Make an authenticated API request
+    buckets = storage_client.buckets().list(project=project).execute()
+    print(buckets)
+
+
+def explicit(project):
+    from google.oauth2 import service_account
+    import googleapiclient.discovery
+
+    # Construct service account credentials using the service account key
+    # file.
+    credentials = service_account.Credentials.from_service_account_file(
+        'service_account.json')
+
+    # Explicitly pass the credentials to the client library.
+    storage_client = googleapiclient.discovery.build(
+        'storage', 'v1', credentials=credentials)
+
+    # Make an authenticated API request
+    buckets = storage_client.buckets().list(project=project).execute()
+    print(buckets)
+
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(
+        description=__doc__,
+        formatter_class=argparse.RawDescriptionHelpFormatter)
+    parser.add_argument('project')
+
+    subparsers = parser.add_subparsers(dest='command')
+    subparsers.add_parser('implicit', help=implicit.__doc__)
+    subparsers.add_parser('explicit', help=explicit.__doc__)
+
+    args = parser.parse_args()
+
+    if args.command == 'implicit':
+        implicit(args.project)
+    elif args.command == 'explicit':
+        explicit(args.project)

auth/api-client/snippets_test.py

@@ -0,0 +1,33 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import os
+
+import mock
+
+import snippets
+
+
+def test_implicit():
+    snippets.implicit(os.environ['GCLOUD_PROJECT'])
+
+
+def test_explicit():
+    with open(os.environ['GOOGLE_APPLICATION_CREDENTIALS']) as creds_file:
+        creds_file_data = creds_file.read()
+
+    open_mock = mock.mock_open(read_data=creds_file_data)
+
+    with mock.patch('io.open', open_mock):
+        snippets.explicit(os.environ['GCLOUD_PROJECT'])

auth/cloud-client/requirements.txt

@@ -0,0 +1 @@
+google-cloud-storage==1.1.1

auth/cloud-client/snippets.py

@@ -0,0 +1,62 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Demonstrates how to authenticate to Google Cloud Platform APIs using
+the Google Cloud Client Libraries."""
+
+import argparse
+
+
+def implicit():
+    from google.cloud import storage
+
+    # If you don't specify credentials when constructing the client, the
+    # client library will look for credentials in the environment.
+    storage_client = storage.Client()
+
+    # Make an authenticated API request
+    buckets = list(storage_client.list_buckets())
+    print(buckets)
+
+
+def explicit():
+    from google.cloud import storage
+
+    # Explicitly use service account credentials by specifying the private key
+    # file. All clients in google-cloud-python have this helper, see
+    # https://google-cloud-python.readthedocs.io/en/latest/core/modules.html
+    #   #google.cloud.client.Client.from_service_account_json
+    storage_client = storage.Client.from_service_account_json(
+        'service_account.json')
+
+    # Make an authenticated API request
+    buckets = list(storage_client.list_buckets())
+    print(buckets)
+
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(
+        description=__doc__,
+        formatter_class=argparse.RawDescriptionHelpFormatter)
+
+    subparsers = parser.add_subparsers(dest='command')
+    subparsers.add_parser('implicit', help=implicit.__doc__)
+    subparsers.add_parser('explicit', help=explicit.__doc__)
+
+    args = parser.parse_args()
+
+    if args.command == 'implicit':
+        implicit()
+    elif args.command == 'explicit':
+        explicit()

auth/cloud-client/snippets_test.py

@@ -0,0 +1,33 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import os
+
+import mock
+
+import snippets
+
+
+def test_implicit():
+    snippets.implicit()
+
+
+def test_explicit():
+    with open(os.environ['GOOGLE_APPLICATION_CREDENTIALS']) as creds_file:
+        creds_file_data = creds_file.read()
+
+    open_mock = mock.mock_open(read_data=creds_file_data)
+
+    with mock.patch('io.open', open_mock):
+        snippets.explicit()

auth/http-client/requirements.txt

@@ -0,0 +1,2 @@
+requests==2.17.3
+google-auth==1.0.1

auth/http-client/snippets.py

@@ -0,0 +1,79 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Demonstrates how to authenticate to Google Cloud Platform APIs using the
+Requests HTTP library."""
+
+import argparse
+
+
+def implicit():
+    import google.auth
+    from google.auth.transport import requests
+
+    # Get the credentials and project ID from the environment.
+    credentials, project = google.auth.default(
+        scopes=['https://www.googleapis.com/auth/cloud-platform'])
+
+    # Create a requests Session object with the credentials.
+    session = requests.AuthorizedSession(credentials)
+
+    # Make an authenticated API request
+    response = session.get(
+        'https://www.googleapis.com/storage/v1/b'.format(project),
+        params={'project': project})
+    response.raise_for_status()
+    buckets = response.json()
+    print(buckets)
+
+
+def explicit(project):
+    from google.auth.transport import requests
+    from google.oauth2 import service_account
+
+    # Construct service account credentials using the service account key
+    # file.
+    credentials = service_account.Credentials.from_service_account_file(
+        'service_account.json')
+    credentials = credentials.with_scopes(
+        ['https://www.googleapis.com/auth/cloud-platform'])
+
+    # Create a requests Session object with the credentials.
+    session = requests.AuthorizedSession(credentials)
+
+    # Make an authenticated API request
+    response = session.get(
+        'https://www.googleapis.com/storage/v1/b'.format(project),
+        params={'project': project})
+    response.raise_for_status()
+    buckets = response.json()
+    print(buckets)
+
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(
+        description=__doc__,
+        formatter_class=argparse.RawDescriptionHelpFormatter)
+
+    subparsers = parser.add_subparsers(dest='command')
+    subparsers.add_parser('implicit', help=implicit.__doc__)
+    explicit_parser = subparsers.add_parser('explicit', help=explicit.__doc__)
+    explicit_parser.add_argument('project')
+
+    args = parser.parse_args()
+
+    if args.command == 'implicit':
+        implicit()
+    elif args.command == 'explicit':
+        explicit(args.project)

auth/http-client/snippets_test.py

@@ -0,0 +1,33 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import os
+
+import mock
+
+import snippets
+
+
+def test_implicit():
+    snippets.implicit()
+
+
+def test_explicit():
+    with open(os.environ['GOOGLE_APPLICATION_CREDENTIALS']) as creds_file:
+        creds_file_data = creds_file.read()
+
+    open_mock = mock.mock_open(read_data=creds_file_data)
+
+    with mock.patch('io.open', open_mock):
+        snippets.explicit(os.environ['GCLOUD_PROJECT'])