123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150 |
- // Copyright 2014 The Go Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- // +build appenginevm !appengine
- package google_test
- import (
- "fmt"
- "io/ioutil"
- "log"
- "net/http"
- "golang.org/x/oauth2"
- "golang.org/x/oauth2/google"
- "golang.org/x/oauth2/jwt"
- "google.golang.org/appengine"
- "google.golang.org/appengine/urlfetch"
- )
- func ExampleDefaultClient() {
- client, err := google.DefaultClient(oauth2.NoContext,
- "https://www.googleapis.com/auth/devstorage.full_control")
- if err != nil {
- log.Fatal(err)
- }
- client.Get("...")
- }
- func Example_webServer() {
- // Your credentials should be obtained from the Google
- // Developer Console (https://console.developers.google.com).
- conf := &oauth2.Config{
- ClientID: "YOUR_CLIENT_ID",
- ClientSecret: "YOUR_CLIENT_SECRET",
- RedirectURL: "YOUR_REDIRECT_URL",
- Scopes: []string{
- "https://www.googleapis.com/auth/bigquery",
- "https://www.googleapis.com/auth/blogger",
- },
- Endpoint: google.Endpoint,
- }
- // Redirect user to Google's consent page to ask for permission
- // for the scopes specified above.
- url := conf.AuthCodeURL("state")
- fmt.Printf("Visit the URL for the auth dialog: %v", url)
- // Handle the exchange code to initiate a transport.
- tok, err := conf.Exchange(oauth2.NoContext, "authorization-code")
- if err != nil {
- log.Fatal(err)
- }
- client := conf.Client(oauth2.NoContext, tok)
- client.Get("...")
- }
- func ExampleJWTConfigFromJSON() {
- // Your credentials should be obtained from the Google
- // Developer Console (https://console.developers.google.com).
- // Navigate to your project, then see the "Credentials" page
- // under "APIs & Auth".
- // To create a service account client, click "Create new Client ID",
- // select "Service Account", and click "Create Client ID". A JSON
- // key file will then be downloaded to your computer.
- data, err := ioutil.ReadFile("/path/to/your-project-key.json")
- if err != nil {
- log.Fatal(err)
- }
- conf, err := google.JWTConfigFromJSON(data, "https://www.googleapis.com/auth/bigquery")
- if err != nil {
- log.Fatal(err)
- }
- // Initiate an http.Client. The following GET request will be
- // authorized and authenticated on the behalf of
- // your service account.
- client := conf.Client(oauth2.NoContext)
- client.Get("...")
- }
- func ExampleSDKConfig() {
- // The credentials will be obtained from the first account that
- // has been authorized with `gcloud auth login`.
- conf, err := google.NewSDKConfig("")
- if err != nil {
- log.Fatal(err)
- }
- // Initiate an http.Client. The following GET request will be
- // authorized and authenticated on the behalf of the SDK user.
- client := conf.Client(oauth2.NoContext)
- client.Get("...")
- }
- func Example_serviceAccount() {
- // Your credentials should be obtained from the Google
- // Developer Console (https://console.developers.google.com).
- conf := &jwt.Config{
- Email: "xxx@developer.gserviceaccount.com",
- // The contents of your RSA private key or your PEM file
- // that contains a private key.
- // If you have a p12 file instead, you
- // can use `openssl` to export the private key into a pem file.
- //
- // $ openssl pkcs12 -in key.p12 -passin pass:notasecret -out key.pem -nodes
- //
- // The field only supports PEM containers with no passphrase.
- // The openssl command will convert p12 keys to passphrase-less PEM containers.
- PrivateKey: []byte("-----BEGIN RSA PRIVATE KEY-----..."),
- Scopes: []string{
- "https://www.googleapis.com/auth/bigquery",
- "https://www.googleapis.com/auth/blogger",
- },
- TokenURL: google.JWTTokenURL,
- // If you would like to impersonate a user, you can
- // create a transport with a subject. The following GET
- // request will be made on the behalf of user@example.com.
- // Optional.
- Subject: "user@example.com",
- }
- // Initiate an http.Client, the following GET request will be
- // authorized and authenticated on the behalf of user@example.com.
- client := conf.Client(oauth2.NoContext)
- client.Get("...")
- }
- func ExampleAppEngineTokenSource() {
- var req *http.Request // from the ServeHTTP handler
- ctx := appengine.NewContext(req)
- client := &http.Client{
- Transport: &oauth2.Transport{
- Source: google.AppEngineTokenSource(ctx, "https://www.googleapis.com/auth/bigquery"),
- Base: &urlfetch.Transport{
- Context: ctx,
- },
- },
- }
- client.Get("...")
- }
- func ExampleComputeTokenSource() {
- client := &http.Client{
- Transport: &oauth2.Transport{
- // Fetch from Google Compute Engine's metadata server to retrieve
- // an access token for the provided account.
- // If no account is specified, "default" is used.
- Source: google.ComputeTokenSource(""),
- },
- }
- client.Get("...")
- }
|