系统维护工具

山に住む一家は千個の巣から蜂蜜を収穫し、幼い子供たちは新しい畑で5エーカーの野菜を栽培している。系统维护工具

登出

+ / home / studionolh / www / wp-content / plugins / google-site-kit / third-party / google / auth / src / [ 返回根目录 ]

名称	大小	权限	修改时间
..	-	-	-
Cache	[目录]	drwxr-xr-x	2024-04-09 00:01
Credentials	[目录]	drwxr-xr-x	2024-04-09 00:01
HttpHandler	[目录]	drwxr-xr-x	2024-04-09 00:01
Middleware	[目录]	drwxr-xr-x	2024-04-09 00:01
Subscriber	[目录]	drwxr-xr-x	2024-04-09 00:01
AccessToken.php	18.07 KB	-rw-r--r--	2024-04-09 00:01
ApplicationDefaultCredentials.php	14.21 KB	-rw-r--r--	2024-04-09 00:01
CacheTrait.php	2.14 KB	-rw-r--r--	2024-04-09 00:01
CredentialsLoader.php	10.48 KB	-rw-r--r--	2024-04-09 00:01
FetchAuthTokenCache.php	8.52 KB	-rw-r--r--	2024-04-09 00:01
FetchAuthTokenInterface.php	1.63 KB	-rw-r--r--	2024-04-09 00:01
GCECache.php	2.60 KB	-rw-r--r--	2024-04-09 00:01
GetQuotaProjectInterface.php	975.00 B	-rw-r--r--	2024-04-09 00:01
Iam.php	3.27 KB	-rw-r--r--	2024-04-09 00:01
OAuth2.php	35.98 KB	-rw-r--r--	2024-04-09 00:01
ProjectIdProviderInterface.php	991.00 B	-rw-r--r--	2024-04-09 00:01
ServiceAccountSignerTrait.php	1.98 KB	-rw-r--r--	2024-04-09 00:01
SignBlobInterface.php	1.56 KB	-rw-r--r--	2024-04-09 00:01
UpdateMetadataInterface.php	1.20 KB	-rw-r--r--	2024-04-09 00:01

代码编辑器 :Iam.php

<?php

/*
 * Copyright 2019 Google LLC
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
namespace Google\Site_Kit_Dependencies\Google\Auth;

use Google\Site_Kit_Dependencies\Google\Auth\HttpHandler\HttpClientCache;
use Google\Site_Kit_Dependencies\Google\Auth\HttpHandler\HttpHandlerFactory;
use Google\Site_Kit_Dependencies\GuzzleHttp\Psr7;
use Google\Site_Kit_Dependencies\GuzzleHttp\Psr7\Utils;
/**
 * Tools for using the IAM API.
 *
 * @see https://cloud.google.com/iam/docs IAM Documentation
 */
class Iam
{
    const IAM_API_ROOT = 'https://iamcredentials.googleapis.com/v1';
    const SIGN_BLOB_PATH = '%s:signBlob?alt=json';
    const SERVICE_ACCOUNT_NAME = 'projects/-/serviceAccounts/%s';
    /**
     * @var callable
     */
    private $httpHandler;
    /**
     * @param callable $httpHandler [optional] The HTTP Handler to send requests.
     */
    public function __construct(callable $httpHandler = null)
    {
        $this->httpHandler = $httpHandler ?: \Google\Site_Kit_Dependencies\Google\Auth\HttpHandler\HttpHandlerFactory::build(\Google\Site_Kit_Dependencies\Google\Auth\HttpHandler\HttpClientCache::getHttpClient());
    }
    /**
     * Sign a string using the IAM signBlob API.
     *
     * Note that signing using IAM requires your service account to have the
     * `iam.serviceAccounts.signBlob` permission, part of the "Service Account
     * Token Creator" IAM role.
     *
     * @param string $email The service account email.
     * @param string $accessToken An access token from the service account.
     * @param string $stringToSign The string to be signed.
     * @param array $delegates [optional] A list of service account emails to
     *        add to the delegate chain. If omitted, the value of `$email` will
     *        be used.
     * @return string The signed string, base64-encoded.
     */
    public function signBlob($email, $accessToken, $stringToSign, array $delegates = [])
    {
        $httpHandler = $this->httpHandler;
        $name = \sprintf(self::SERVICE_ACCOUNT_NAME, $email);
        $uri = self::IAM_API_ROOT . '/' . \sprintf(self::SIGN_BLOB_PATH, $name);
        if ($delegates) {
            foreach ($delegates as &$delegate) {
                $delegate = \sprintf(self::SERVICE_ACCOUNT_NAME, $delegate);
            }
        } else {
            $delegates = [$name];
        }
        $body = ['delegates' => $delegates, 'payload' => \base64_encode($stringToSign)];
        $headers = ['Authorization' => 'Bearer ' . $accessToken];
        $request = new \Google\Site_Kit_Dependencies\GuzzleHttp\Psr7\Request('POST', $uri, $headers, \Google\Site_Kit_Dependencies\GuzzleHttp\Psr7\Utils::streamFor(\json_encode($body)));
        $res = $httpHandler($request);
        $body = \json_decode((string) $res->getBody(), \true);
        return $body['signedBlob'];
    }
}