Add more auth samples (GoogleCloudPlatform#981)

Jon Wayne Parrott · web-flow · commit 88700c3b27f5 · 2017-06-12T13:28:37.000-07:00
Add samples for explicitly using compute and app engine credentials.
diff --git a/auth/api-client/snippets.py b/auth/api-client/snippets.py
@@ -48,6 +48,40 @@ def explicit(project):
     print(buckets)
 
 
+def explicit_compute_engine(project):
+    from google.auth import compute_engine
+    import googleapiclient.discovery
+
+    # Explicitly use Compute Engine credentials. These credentials are
+    # available on Compute Engine, App Engine Flexible, and Container Engine.
+    credentials = compute_engine.Credentials()
+
+    # Explicitly pass the credentials to the client library.
+    storage_client = googleapiclient.discovery.build(
+        'storage', 'v1', credentials=credentials)
+
+    # Make an authenticated API request
+    buckets = storage_client.buckets().list(project=project).execute()
+    print(buckets)
+
+
+def explicit_app_engine(project):
+    from google.auth import app_engine
+    import googleapiclient.discovery
+
+    # Explicitly use App Engine credentials. These credentials are
+    # only available when running on App Engine Standard.
+    credentials = app_engine.Credentials()
+
+    # Explicitly pass the credentials to the client library.
+    storage_client = googleapiclient.discovery.build(
+        'storage', 'v1', credentials=credentials)
+
+    # Make an authenticated API request
+    buckets = storage_client.buckets().list(project=project).execute()
+    print(buckets)
+
+
 if __name__ == '__main__':
     parser = argparse.ArgumentParser(
         description=__doc__,
@@ -57,10 +91,18 @@ def explicit(project):
     subparsers = parser.add_subparsers(dest='command')
     subparsers.add_parser('implicit', help=implicit.__doc__)
     subparsers.add_parser('explicit', help=explicit.__doc__)
+    subparsers.add_parser(
+        'explicit_compute_engine', help=explicit_compute_engine.__doc__)
+    subparsers.add_parser(
+        'explicit_app_engine', help=explicit_app_engine.__doc__)
 
     args = parser.parse_args()
 
     if args.command == 'implicit':
         implicit(args.project)
     elif args.command == 'explicit':
         explicit(args.project)
+    elif args.command == 'explicit_compute_engine':
+        explicit_compute_engine(args.project)
+    elif args.command == 'explicit_app_engine':
+        explicit_app_engine(args.project)
diff --git a/auth/api-client/snippets_test.py b/auth/api-client/snippets_test.py
@@ -14,6 +14,7 @@
 
 import os
 
+import google.auth
 import mock
 
 import snippets
@@ -31,3 +32,21 @@ def test_explicit():
 
     with mock.patch('io.open', open_mock):
         snippets.explicit(os.environ['GCLOUD_PROJECT'])
+
+
+def test_explicit_compute_engine():
+    adc, project = google.auth.default()
+    credentials_patch = mock.patch(
+        'google.auth.compute_engine.Credentials', return_value=adc)
+
+    with credentials_patch:
+        snippets.explicit_compute_engine(project)
+
+
+def test_explicit_app_engine():
+    adc, project = google.auth.default()
+    credentials_patch = mock.patch(
+        'google.auth.app_engine.Credentials', return_value=adc)
+
+    with credentials_patch:
+        snippets.explicit_app_engine(project)
diff --git a/auth/cloud-client/snippets.py b/auth/cloud-client/snippets.py
@@ -45,6 +45,22 @@ def explicit():
     print(buckets)
 
 
+def explicit_compute_engine(project):
+    from google.auth import compute_engine
+    from google.cloud import storage
+
+    # Explicitly use Compute Engine credentials. These credentials are
+    # available on Compute Engine, App Engine Flexible, and Container Engine.
+    credentials = compute_engine.Credentials()
+
+    # Create the client using the credentials and specifying a project ID.
+    storage_client = storage.Client(credentials=credentials, project=project)
+
+    # Make an authenticated API request
+    buckets = list(storage_client.list_buckets())
+    print(buckets)
+
+
 if __name__ == '__main__':
     parser = argparse.ArgumentParser(
         description=__doc__,
@@ -53,10 +69,15 @@ def explicit():
     subparsers = parser.add_subparsers(dest='command')
     subparsers.add_parser('implicit', help=implicit.__doc__)
     subparsers.add_parser('explicit', help=explicit.__doc__)
+    explicit_gce_parser = subparsers.add_parser(
+        'explicit_compute_engine', help=explicit_compute_engine.__doc__)
+    explicit_gce_parser.add_argument('project')
 
     args = parser.parse_args()
 
     if args.command == 'implicit':
         implicit()
     elif args.command == 'explicit':
         explicit()
+    elif args.command == 'explicit_compute_engine':
+        explicit_compute_engine(args.project)
diff --git a/auth/cloud-client/snippets_test.py b/auth/cloud-client/snippets_test.py
@@ -14,6 +14,7 @@
 
 import os
 
+import google.auth
 import mock
 
 import snippets
@@ -31,3 +32,12 @@ def test_explicit():
 
     with mock.patch('io.open', open_mock):
         snippets.explicit()
+
+
+def test_explicit_compute_engine():
+    adc, project = google.auth.default()
+    credentials_patch = mock.patch(
+        'google.auth.compute_engine.Credentials', return_value=adc)
+
+    with credentials_patch:
+        snippets.explicit_compute_engine(project)
