Module client

Forces header keys and values to be strings, i.e not unicode.

The httplib module just concats the header keys and values in a way that may
make the message header a unicode string, which, if it then tries to
contatenate to a binary request body may result in a unicode decode error.

Args:
  headers: dict, A dictionary of headers.

Returns:
  The same dictionary but with all the keys converted to strings.

Verifies a signed JWT id_token.

This function requires PyOpenSSL and because of that it does not work on
App Engine.

Args:
  id_token: string, A Signed JWT.
  audience: string, The audience 'aud' that the token should be for.
  http: httplib2.Http, instance to use to make the HTTP request. Callers
    should supply an instance that has caching enabled.
  cert_uri: string, URI of the certificates in JSON format to
    verify the JWT against.

Returns:
  The deserialized JSON in the JWT.

Raises:
  oauth2client.crypt.AppIdentityError if the JWT fails to verify.

Decorators:

• @util.positional(2)

Exchanges an authorization code for an OAuth2Credentials object.

Args:
  client_id: string, client identifier.
  client_secret: string, client secret.
  scope: string or iterable of strings, scope(s) to request.
  code: string, An authroization code, most likely passed down from
    the client
  redirect_uri: string, this is generally set to 'postmessage' to match the
    redirect_uri that the client specified
  http: httplib2.Http, optional http instance to use to do the fetch
  token_uri: string, URI for token endpoint. For convenience
    defaults to Google's endpoints but any OAuth 2.0 provider can be used.
  auth_uri: string, URI for authorization endpoint. For convenience
    defaults to Google's endpoints but any OAuth 2.0 provider can be used.
  revoke_uri: string, URI for revoke endpoint. For convenience
    defaults to Google's endpoints but any OAuth 2.0 provider can be used.

Returns:
  An OAuth2Credentials object.

Raises:
  FlowExchangeError if the authorization code cannot be exchanged for an
   access token

Decorators:

• @util.positional(4)

Returns OAuth2Credentials from a clientsecrets file and an auth code.

Will create the right kind of Flow based on the contents of the clientsecrets
file or will raise InvalidClientSecretsError for unknown types of Flows.

Args:
  filename: string, File name of clientsecrets.
  scope: string or iterable of strings, scope(s) to request.
  code: string, An authorization code, most likely passed down from
    the client
  message: string, A friendly string to display to the user if the
    clientsecrets file is missing or invalid. If message is provided then
    sys.exit will be called in the case of an error. If message in not
    provided then clientsecrets.InvalidClientSecretsError will be raised.
  redirect_uri: string, this is generally set to 'postmessage' to match the
    redirect_uri that the client specified
  http: httplib2.Http, optional http instance to use to do the fetch
  cache: An optional cache service client that implements get() and set()
    methods. See clientsecrets.loadfile() for details.

Returns:
  An OAuth2Credentials object.

Raises:
  FlowExchangeError if the authorization code cannot be exchanged for an
   access token
  UnknownClientSecretsFlowError if the file describes an unknown kind of Flow.
  clientsecrets.InvalidClientSecretsError if the clientsecrets file is
    invalid.

Decorators:

• @util.positional(3)

Create a Flow from a clientsecrets file.

Will create the right kind of Flow based on the contents of the clientsecrets
file or will raise InvalidClientSecretsError for unknown types of Flows.

Args:
  filename: string, File name of client secrets.
  scope: string or iterable of strings, scope(s) to request.
  redirect_uri: string, Either the string 'urn:ietf:wg:oauth:2.0:oob' for
    a non-web-based application, or a URI that handles the callback from
    the authorization server.
  message: string, A friendly string to display to the user if the
    clientsecrets file is missing or invalid. If message is provided then
    sys.exit will be called in the case of an error. If message in not
    provided then clientsecrets.InvalidClientSecretsError will be raised.
  cache: An optional cache service client that implements get() and set()
    methods. See clientsecrets.loadfile() for details.

Returns:
  A Flow object.

Raises:
  UnknownClientSecretsFlowError if the file describes an unknown kind of Flow.
  clientsecrets.InvalidClientSecretsError if the clientsecrets file is
    invalid.

Decorators:

• @util.positional(2)

ID_TOKEN_VERIFICATON_CERTS

Value:

'https://www.googleapis.com/oauth2/v1/certs'