Index: third_party/gsutil/cloudauth/oauth2_plugin.py |
diff --git a/third_party/gsutil/cloudauth/oauth2_plugin.py b/third_party/gsutil/cloudauth/oauth2_plugin.py |
new file mode 100644 |
index 0000000000000000000000000000000000000000..b9839a523e94851f1f26920adfec4b374865385f |
--- /dev/null |
+++ b/third_party/gsutil/cloudauth/oauth2_plugin.py |
@@ -0,0 +1,45 @@ |
+# Copyright 2011 Google Inc. |
+# |
+# Licensed under the Apache License, Version 2.0 (the "License"); |
+# you may not use this file except in compliance with the License. |
+# You may obtain a copy of the License at |
+# |
+# http://www.apache.org/licenses/LICENSE-2.0 |
+# |
+# Unless required by applicable law or agreed to in writing, software |
+# distributed under the License is distributed on an "AS IS" BASIS, |
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
+# See the License for the specific language governing permissions and |
+# limitations under the License. |
+ |
+# This code implements an OAUTH2 plugin that reads the access token from |
+# App Engine StorageByKeyName. |
+ |
+from oauth2client.appengine import CredentialsProperty |
+from oauth2client.appengine import StorageByKeyName |
+from google.appengine.api import users |
+from google.appengine.ext import db |
+from boto.auth_handler import AuthHandler |
+from boto.auth_handler import NotReadyToAuthenticate |
+ |
+ |
+class Credentials(db.Model): |
+ credentials = CredentialsProperty() |
+ |
+ |
+class OAuth2Auth(AuthHandler): |
+ |
+ capability = ['google-oauth2', 's3'] |
+ |
+ def __init__(self, path, config, provider): |
+ if provider.name != 'google': |
+ raise NotReadyToAuthenticate() |
+ |
+ def add_auth(self, http_request): |
+ user = users.get_current_user() |
+ credentials = StorageByKeyName( |
+ Credentials, user.user_id(), 'credentials').get() |
+ if not credentials or credentials.invalid: |
+ raise NotReadyToAuthenticate() |
+ http_request.headers['Authorization'] = ( |
+ 'Bearer %s' % str(credentials.access_token)) |