jqpddlmZmZddlmZddlmZmZddlm Z ddl m Z ddlm Z m Z Gd d ee Zy ) )OptionalAny)AccessTokenInfo) AadClientAsyncContextManager) GetTokenMixin)get_client_credential)AadClientCertificatevalidate_tenant_idc ~eZdZdZddededeededdf fd Zdd Zdd Z d ededee fd Z d edede fd Z xZ S)CertificateCredentialaAuthenticates as a service principal using a certificate. The certificate must have an RSA private key, because this credential signs assertions using RS256. See `Microsoft Entra ID documentation `__ for more information on configuring certificate authentication. :param str tenant_id: ID of the service principal's tenant. Also called its 'directory' ID. :param str client_id: The service principal's client ID :param str certificate_path: Optional path to a certificate file in PEM or PKCS12 format, including the private key. If not provided, **certificate_data** is required. :keyword str authority: Authority of a Microsoft Entra endpoint, for example 'login.microsoftonline.com', the authority for Azure Public Cloud (which is the default). :class:`~azure.identity.AzureAuthorityHosts` defines authorities for other clouds. :keyword bytes certificate_data: The bytes of a certificate in PEM or PKCS12 format, including the private key. :keyword password: The certificate's password. If a unicode string, it will be encoded as UTF-8. If the certificate requires a different encoding, pass appropriately encoded bytes instead. :paramtype password: str or bytes :keyword cache_persistence_options: Configuration for persistent token caching. If unspecified, the credential will cache tokens in memory. :paramtype cache_persistence_options: ~azure.identity.TokenCachePersistenceOptions :keyword List[str] additionally_allowed_tenants: Specifies tenants in addition to the specified "tenant_id" for which the credential may acquire tokens. Add the wildcard value "*" to allow the credential to acquire tokens for any tenant the application can access. .. admonition:: Example: .. literalinclude:: ../samples/credential_creation_code_snippets.py :start-after: [START create_certificate_credential_async] :end-before: [END create_certificate_credential_async] :language: python :dedent: 4 :caption: Create a CertificateCredential. N tenant_id client_idcertificate_pathkwargsreturnc t|t|fi|}t|d|jd|_t ||fi||_||_t|%y)N private_key passphrase)password) r r r get _certificater_client _client_idsuper__init__)selfrrrrclient_credential __class__s l/root/aria/tools/markitdown-venv/lib/python3.12/site-packages/azure/identity/aio/_credentials/certificate.pyrzCertificateCredential.__init__3sf9%12BMfM0 m ,7H7L7L\7Z !I@@ # cVK|jjd{|S7wN)r __aenter__rs r"r&z CertificateCredential.__aenter__@s&ll%%'''  (s )')cTK|jjd{y7w)z)Close the credential's transport session.N)r __aexit__r's r"closezCertificateCredential.closeDsll$$&&&s (&(scopescDK|jj|fi|Swr%)rget_cached_access_tokenrr+rs r"_acquire_token_silentlyz-CertificateCredential._acquire_token_silentlyIs"3t||33FEfEEs cnK|jj||jfi|d{S7wr%)r"obtain_token_by_client_certificaterr.s r"_request_tokenz$CertificateCredential._request_tokenLs1DT\\DDVTM^M^ibhiiiis ,535r%)rr)rN)__name__ __module__ __qualname____doc__strrrrr&r*rr/r2 __classcell__)r!s@r"rrs"H # # RU il qu ' FSFCFHUdLeFjCj3j?jr#rN)typingrrazure.core.credentialsr _internalrr_internal.get_token_mixinr _credentials.certificater r r rr#r"r?s* !265=A?j/?jr#