jddlZddlZddlmZmZmZmZddlmZm Z m Z ddl m Z ddl mZddlmZdd lmZdd lmZd d lmZd d lmZej2eZGddeZy)N)OptionalUnionAnycast) AccessTokenAccessTokenInfoTokenRequestOptions)AsyncSupportsTokenInfo)log_get_token_async)CredentialUnavailableError)EnvironmentVariables)AsyncContextManager)CertificateCredential)ClientSecretCredentialc eZdZdZdeddfdZddZddZedddd e d e e d e e dede f d Z edd d e de e defdZy)EnvironmentCredentialaA credential configured by environment variables. This credential is capable of authenticating as a service principal using a client secret or a certificate. Configuration is attempted in this order, using these environment variables: Service principal with secret: - **AZURE_TENANT_ID**: ID of the service principal's tenant. Also called its 'directory' ID. - **AZURE_CLIENT_ID**: the service principal's client ID - **AZURE_CLIENT_SECRET**: one of the service principal's client secrets - **AZURE_AUTHORITY_HOST**: authority of a Microsoft Entra endpoint, for example "login.microsoftonline.com", the authority for Azure Public Cloud, which is the default when no value is given. Service principal with certificate: - **AZURE_TENANT_ID**: ID of the service principal's tenant. Also called its 'directory' ID. - **AZURE_CLIENT_ID**: the service principal's client ID - **AZURE_CLIENT_CERTIFICATE_PATH**: path to a PEM or PKCS12 certificate file including the private key. - **AZURE_CLIENT_CERTIFICATE_PASSWORD**: (optional) password of the certificate file, if any. - **AZURE_AUTHORITY_HOST**: authority of a Microsoft Entra endpoint, for example "login.microsoftonline.com", the authority for Azure Public Cloud, which is the default when no value is given. .. admonition:: Example: .. literalinclude:: ../samples/credential_creation_code_snippets.py :start-after: [START create_environment_credential_async] :end-before: [END create_environment_credential_async] :language: python :dedent: 4 :caption: Create an EnvironmentCredential. kwargsreturnNc d|_tdtjDrrt d t j tjt j tjt j tjd||_ntdtjDrtd t j tjt j tjt j tjt j jtjtt j jtj dd||_|jr5t"j%d|jj&j(yt+tjtjz}|Dcgc]}|t j vs|}}|rVt"j-|jdrt.j0nt.j2dd j5|yt"j%d ycc}w) Nc3^K|]%}tjj|du'ywNosenvironget.0vs l/root/aria/tools/markitdown-venv/lib/python3.12/site-packages/azure/identity/aio/_credentials/environment.py z1EnvironmentCredential.__init__..9s"^rzz~~a ,^+-) client_id client_secret tenant_idc3^K|]%}tjj|du'ywrrrs r"r#z1EnvironmentCredential.__init__..@s"W1"$.Wr$F)r%r'certificate_pathpasswordsend_certificate_chainz Environment is configured for %s _within_dacz[Incomplete environment configuration for EnvironmentCredential. These variables are set: %sz, z#No environment configuration found.) _credentialallrCLIENT_SECRET_VARSrrrAZURE_CLIENT_IDAZURE_CLIENT_SECRETAZURE_TENANT_ID CERT_VARSrAZURE_CLIENT_CERTIFICATE_PATHr!AZURE_CLIENT_CERTIFICATE_PASSWORDbool#AZURE_CLIENT_SEND_CERTIFICATE_CHAIN_LOGGERinfo __class____name__setlogloggingINFOWARNINGjoin)selfrexpected_variablesr! set_variabless r"__init__zEnvironmentCredential.__init__6s[_ ^6J6]6]^ ^5 **%9%I%IJ jj)=)Q)QR**%9%I%IJ   D  W8L8V8VW W4 **%9%I%IJ**%9%I%IJ!#,@,^,^!_(<(^(^_'+JJNN#7#[#[]bc(  D     LL;T=M=M=W=W=`=` a!$%9%C%CFZFmFm%m!n (:N1a2::oQNMN $*JJ}$=GLL7??qIIm,  BCOs <JJcnK|jr"|jjd{|S7wr)r. __aenter__rCs r"rHz EnvironmentCredential.__aenter__Zs1   ""--/ / /  0 *535cnK|jr#|jjd{yy7w)z)Close the credential's transport session.N)r. __aexit__rIs r"closezEnvironmentCredential.close_s1   "",,. . .  .rJclaimsr'scopesrOr'cK|jsd}t||jj|||d|d{S7w)aNAsynchronously request an access token for `scopes`. This method is called automatically by Azure SDK clients. :param str scopes: desired scopes for the access token. This method requires at least one scope. For more information about scopes, see https://learn.microsoft.com/entra/identity-platform/scopes-oidc. :keyword str claims: additional claims required in the token, such as those returned in a resource provider's claims challenge following an authorization failure. :keyword str tenant_id: optional tenant to include in the token request. :return: An access token with the desired scopes. :rtype: ~azure.core.credentials.AccessToken :raises ~azure.identity.CredentialUnavailableError: environment variable configuration is incomplete EnvironmentCredential authentication unavailable. Environment variables are not fully configured. Visit https://aka.ms/azsdk/python/identity/environmentcredential/troubleshoot to troubleshoot this issue.messagerNN)r.r get_token)rCrOr'rPrrTs r"rUzEnvironmentCredential.get_tokenesR&  -W= =/T%%//R[f_effffs=AAA)optionsrVcK|jsd}t|tt|jj|d|id{S7w)aRequest an access token for `scopes`. This is an alternative to `get_token` to enable certain scenarios that require additional properties on the token. This method is called automatically by Azure SDK clients. :param str scopes: desired scope for the access token. This method requires at least one scope. For more information about scopes, see https://learn.microsoft.com/entra/identity-platform/scopes-oidc. :keyword options: A dictionary of options for the token request. Unknown options will be ignored. Optional. :paramtype options: ~azure.core.credentials.TokenRequestOptions :rtype: ~azure.core.credentials.AccessTokenInfo :return: An AccessTokenInfo instance containing information about the token. :raises ~azure.identity.CredentialUnavailableError: environment variable configuration is incomplete. rRrSrVN)r.rrr get_token_info)rCrVrPrTs r"rXz$EnvironmentCredential.get_token_infosV"  -W= =RT0$2B2BCRRTZldkllllsAA A A)rr)rN)r< __module__ __qualname____doc__rrFrHrMr strrrrUr rrXr-r"rrs@"D"D"DH / 48UYgg$,SMgEMc]gehg gg6Z^mCm(CV:Wmcrmmr]r)r?rtypingrrrrazure.core.credentialsrrr azure.core.credentials_asyncr _internal.decoratorsr r _constantsr _internalr certificaterr&r getLoggerr<r9rr-r]r"rgsQ  --TT?6*.+.1 '  H %Dm/Dmr]