Dear Manh,
I'm assuming you got the JSON file from the Google console, so just assign
the path of the file to the environmental variable like this in shell - as
described
here
<https://googlecloudplatform.github.io/gcloud-python/latest/gcloud-auth.html>
:
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/keyfile.json
And your gRPC application will take care of the rest by looking for this
environment variable. You don't need to specify a token - it really is
that simple.
Paul
On Friday, August 26, 2016 at 3:49:26 AM UTC-4, Manh Tran wrote:
>
> Dear Paul,
>
> The my credentials-key.json have format:
> *{*
> * "type": "service_account",*
> * "project_id": "",*
> * "private_key_id": "",*
> * "private_key": "",*
> * "client_email": "",*
> * "client_id": "",*
> * "auth_uri": "https://accounts.google.com/o/oauth2/auth
> <https://accounts.google.com/o/oauth2/auth>",*
> * "token_uri": "https://accounts.google.com/o/oauth2/token
> <https://accounts.google.com/o/oauth2/token>",*
> * "auth_provider_x509_cert_url":
> "https://www.googleapis.com/oauth2/v1/certs
> <https://www.googleapis.com/oauth2/v1/certs>",*
> * "client_x509_cert_url":
> "https://www.googleapis.com/robot/v1/metadata/x509/643974956331%40developer.gserviceaccount.com
>
> <https://www.googleapis.com/robot/v1/metadata/x509/643974956331%40developer.gserviceaccount.com>"*
> *}*
>
> In my C++ program, I would like to using directly this information to get
> token from google's. Please show me how to do it.
>
> Thanks.
>
> On Friday, August 26, 2016 at 12:40:43 PM UTC+7, Paul Grosu wrote:
>>
>> Hi Manh,
>>
>> By the way gRPC does this automatically via the
>> GOOGLE_APPLICATION_CREDENTIALS environment variable defined in
>> grpc_security_constants.h
>> <https://github.com/grpc/grpc/blob/dde6dfbb0bd1dfb3deac0b4f703d63528e1dc798/include/grpc/grpc_security_constants.h#L54-L57>
>> :
>>
>> /* Environment variable that points to the google default application
>> credentials json key or refresh token. Used in the
>> grpc_google_default_credentials_create function. */
>> #define GRPC_GOOGLE_CREDENTIALS_ENV_VAR "GOOGLE_APPLICATION_CREDENTIALS"
>>
>> Keep in mind if you go via the the GoogleDefaultCredentials() function -
>> as Yang previously suggested - it basically performs several checks to find
>> a way to authenticate you. Basically the call in secure_credentials.cc
>> <https://github.com/grpc/grpc/blob/master/src/cpp/client/secure_credentials.cc#L84-L87>
>>
>> calls grpc_google_default_credentials_create()as such:
>>
>> std::shared_ptr<ChannelCredentials> GoogleDefaultCredentials() {
>> GrpcLibraryCodegen init; // To call grpc_init().
>> return
>> WrapChannelCredentials(grpc_google_default_credentials_create());
>> }
>>
>> Which grpc_google_default_credentials_create() goes through a multitude
>> of checks in google_default_credentials.c
>> <https://github.com/grpc/grpc/blob/master/src/core/lib/security/credentials/google_default/google_default_credentials.c>
>> :
>>
>> grpc_channel_credentials *grpc_google_default_credentials_create(void) {
>> ...
>> /* First, try the environment variable. */
>> err = create_default_creds_from_path(
>> gpr_getenv(GRPC_GOOGLE_CREDENTIALS_ENV_VAR), &call_creds);
>> ...
>>
>> /* Then the well-known file. */
>> err = create_default_creds_from_path(
>> grpc_get_well_known_google_credentials_file_path(), &call_creds);
>> ...
>>
>> /* At last try to see if we're on compute engine (do the detection
>> only once
>> since it requires a network test). */
>> if (!compute_engine_detection_done) {
>> int need_compute_engine_creds =
>> is_stack_running_on_compute_engine();
>> compute_engine_detection_done = 1;
>> if (need_compute_engine_creds) {
>> call_creds = grpc_google_compute_engine_credentials_create(NULL);
>> ...
>> }
>>
>> Then create_default_creds_from_path() performs these two checks:
>>
>> /* First, try an auth json key. */
>> key = grpc_auth_json_key_create_from_json(json);
>> ...
>>
>> /* Then try a refresh token if the auth json key was invalid. */
>> token = grpc_auth_refresh_token_create_from_json(json);
>> ...
>>
>> And the last function above looks up the stored gcloud credentials:
>>
>> char *grpc_get_well_known_google_credentials_file_path(void) {
>> if (creds_path_getter != NULL) return creds_path_getter();
>> return grpc_get_well_known_google_credentials_file_path_impl();
>> }
>>
>> The returned function call is in credentials_posix.c
>> <https://github.com/grpc/grpc/blob/master/src/core/lib/security/credentials/google_default/credentials_posix.c#L54-L56>
>> :
>>
>> gpr_asprintf(&result, "%s/.config/%s/%s", home,
>> GRPC_GOOGLE_CLOUD_SDK_CONFIG_DIRECTORY,
>> GRPC_GOOGLE_WELL_KNOWN_CREDENTIALS_FILE);
>>
>> And the two above variables are stored in google_default_credentials.h
>> <https://github.com/grpc/grpc/blob/master/src/core/lib/security/credentials/google_default/google_default_credentials.h#L39-L41>
>> :
>>
>> #define GRPC_GOOGLE_CLOUD_SDK_CONFIG_DIRECTORY "gcloud"
>> #define GRPC_GOOGLE_WELL_KNOWN_CREDENTIALS_FILE \
>> "application_default_credentials.json"
>>
>> If you tried to see if you have this file - which you will by running
>> gcloud beta auth application-default login - you will see the following
>> directory as constructed above (the one below is for how it looks for me):
>>
>> $ ls ~/.config/gcloud/application_default_credentials.json
>> /home/pgrosu/.config/gcloud/application_default_credentials.json
>> $
>>
>> And sure it is possible via the Google APIs Client Library for C++
>> <https://github.com/google/google-api-cpp-client>. In the example file
>> <https://github.com/google/google-api-cpp-client/blob/master/src/samples/webflow_sample_main.cc>
>>
>> you'll notice the following on lines 657-661
>> <https://github.com/google/google-api-cpp-client/blob/master/src/samples/webflow_sample_main.cc#L657-L661>
>> :
>>
>> googleapis::util::Status status;
>> flow_.reset(OAuth2AuthorizationFlow::MakeFlowFromClientSecretsPath(
>> FLAGS_client_secrets_path,
>> config_->NewDefaultTransportOrDie(),
>> &status));
>>
>> I think you might also find the following links helpful:
>>
>> https://developers.google.com/identity/protocols/OAuth2
>>
>>
>> http://google.github.io/google-api-cpp-client/latest/doxygen/classgoogleapis_1_1client_1_1OAuth2AuthorizationFlow.html
>>
>>
>> http://google.github.io/google-api-cpp-client/latest/doxygen/classgoogleapis_1_1client_1_1OAuth2Credential.html
>>
>> Hope it helps,
>> Paul
>>
>> On Thursday, August 25, 2016 at 10:54:35 PM UTC-4, Manh Tran wrote:
>>>
>>> It seem only read access_token from OAuth2Credential* credential.
>>> Currently, I've credentials-key.json. Are there any way using
>>> this credentials-key.json file to get access token from google's server.
>>>
>>> Thanks.
>>>
>>> On Friday, August 26, 2016 at 4:10:02 AM UTC+7, Paul Grosu wrote:
>>>>
>>>> Gladly :) Check out webflow_sample_main.cc example
>>>> <https://github.com/google/google-api-cpp-client/blob/master/src/samples/webflow_sample_main.cc>
>>>>
>>>> on line 386
>>>> <https://github.com/google/google-api-cpp-client/blob/master/src/samples/webflow_sample_main.cc#L386>
>>>> :
>>>>
>>>> string new_access_token = credential->access_token().as_string();
>>>>
>>>> Hope it helps,
>>>> ~p
>>>>
>>>>
>>>> On Thursday, August 25, 2016 at 3:29:47 AM UTC-4, Manh Tran wrote:
>>>>>
>>>>> Could you show me detail using the Google APIs Client Library for C++?
>>>>>
>>>>> Thank you so much.
>>>>>
>>>>> On Thursday, August 25, 2016 at 12:16:13 PM UTC+7, Paul Grosu wrote:
>>>>>>
>>>>>>
>>>>>> Of course :) You have two options:
>>>>>>
>>>>>> 1) Use the Google APIs Client Library for C++:
>>>>>>
>>>>>>
>>>>>> https://google.github.io/google-api-cpp-client/latest/guide/oauth2.html
>>>>>> <https://google.github.io/google-api-cpp-client/latest/guide/oauth2.html>
>>>>>>
>>>>>> 2) Or just use execve system call to run an external program to
>>>>>> provide the token :)
>>>>>>
>>>>>> ~p
>>>>>>
>>>>>> On Thursday, August 25, 2016 at 1:05:08 AM UTC-4, Manh Tran wrote:
>>>>>>>
>>>>>>> Are there any way to get token within my C++ program?
>>>>>>>
>>>>>>> Thanks.
>>>>>>> On Thursday, August 25, 2016 at 9:09:54 AM UTC+7, Nicolas Noble
>>>>>>> wrote:
>>>>>>>>
>>>>>>>> It depends on your platform. But basically, you need to use and
>>>>>>>> authenticate with the gcloud command line tool, which will create the
>>>>>>>> token
>>>>>>>> for you that will be read by grpc automatically.
>>>>>>>>
>>>>>>>> See https://cloud.google.com/sdk/gcloud/reference/auth/login about
>>>>>>>> how to do that.
>>>>>>>>
>>>>>>>> On Wed, Aug 24, 2016, 18:43 Manh Tran <[email protected]> wrote:
>>>>>>>>
>>>>>>>>> Hi,
>>>>>>>>>
>>>>>>>>> I'm writing a gRPC client connect to google cloud speech. I think
>>>>>>>>> it needs an access token to connect to google cloud. Please tell me
>>>>>>>>> how to
>>>>>>>>> get an access token OAuth2 on gRPC C++.
>>>>>>>>>
>>>>>>>>> Thanks.
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> You received this message because you are subscribed to the Google
>>>>>>>>> Groups "grpc.io" group.
>>>>>>>>> To unsubscribe from this group and stop receiving emails from it,
>>>>>>>>> send an email to [email protected].
>>>>>>>>> To post to this group, send email to [email protected].
>>>>>>>>> To view this discussion on the web visit
>>>>>>>>> https://groups.google.com/d/msgid/grpc-io/25d7e7d5-8d67-4f0c-96bd-775a9397e4d4%40googlegroups.com
>>>>>>>>>
>>>>>>>>> <https://groups.google.com/d/msgid/grpc-io/25d7e7d5-8d67-4f0c-96bd-775a9397e4d4%40googlegroups.com?utm_medium=email&utm_source=footer>
>>>>>>>>> .
>>>>>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>>>>>>
>>>>>>>>
--
You received this message because you are subscribed to the Google Groups
"grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/grpc-io/770c77c8-2ba9-407b-86b9-15c97a3cb680%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
