mirror of
https://github.com/google/nomulus.git
synced 2025-07-26 04:28:34 +02:00
6352b8a01a
RemoteApiOption has a package-private method that takes a Stream representing the content of a JSON and use a GoogleCredential created from it as its credential. This CL uses reflection to change the access modifier of that method in order to supply a credential stream that is self-managed. This is obviously not ideal and prone to breakage in case the getGoogleCredentialStream method is changed. Unfortunately upstream is not willing to make it public citing the reason that GoogleCredential.fromStream() (which getGoogleCredentialStream uses) is a @Beta annotated function (see https://groups.google.com[]forum/#!searchin/domain-registry-eng/remoteapioptions%7Csort:date/domain-registry-eng/Flsah6skszQ/CySZv2XEBwAJ). However this function is introduced 5 years ago as a public function (b857184bfa). I think at this point it is safe to assume that it is part of the widely used APIs and will not change without sufficient notice.
Note here that RemoteApiOptions creates its own copy of GoogleCredential to be used to call App Engine APIs locally, whereas communications to Nomulus endpoints use the Credential provided in AuthModule. Even though both credentials are created from the same client id, client secret and refresh token (the three elements needed to construct a GoogleCredential this way, see https://github.com/googleapis/google-api-java-client/blob/master/google-api-client/src/main/java/com/google/api/client/googleapis/auth/oauth2/GoogleCredential.java#L842), their refreshes cycles are independent of each other. I verified that refreshing one of the credential does not invalidate the access token of the other credential, as long as it is not expired yet.
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=224156131
126 lines
4.1 KiB
Text
126 lines
4.1 KiB
Text
package(
|
|
default_visibility = ["//visibility:public"],
|
|
)
|
|
|
|
licenses(["notice"]) # Apache 2.0
|
|
|
|
# Restrict visibility to :tools because :remoteapi-internal should never be
|
|
# linked into an App Engine deploy jar, since the App Engine API is provided by
|
|
# the runtime environment.
|
|
package_group(
|
|
name = "allowed-tools",
|
|
packages = [
|
|
"//java/google/registry/testing",
|
|
"//java/google/registry/tools",
|
|
"//javatests/google/registry/testing",
|
|
"//javatests/google/registry/tools",
|
|
],
|
|
)
|
|
|
|
java_library(
|
|
name = "tools",
|
|
srcs = glob([
|
|
"*.java",
|
|
"javascrap/*.java",
|
|
]),
|
|
resources = glob([
|
|
"*.properties",
|
|
"sql/*.sql",
|
|
|
|
# These are example client secret files. You'll need to obtain your
|
|
# own for every environment you use and install them in this
|
|
# directory.
|
|
"resources/client_secret*.json",
|
|
]),
|
|
visibility = [":allowed-tools"],
|
|
runtime_deps = [
|
|
"//java/google/registry/module/backend",
|
|
"//java/google/registry/module/frontend",
|
|
"//java/google/registry/module/pubapi",
|
|
"//java/google/registry/module/tools",
|
|
],
|
|
deps = [
|
|
"//java/google/registry/backup",
|
|
"//java/google/registry/beam/invoicing",
|
|
"//java/google/registry/beam/spec11",
|
|
"//java/google/registry/bigquery",
|
|
"//java/google/registry/config",
|
|
"//java/google/registry/dns",
|
|
"//java/google/registry/dns/writer",
|
|
"//java/google/registry/dns/writer/clouddns",
|
|
"//java/google/registry/dns/writer/dnsupdate",
|
|
"//java/google/registry/export",
|
|
"//java/google/registry/flows",
|
|
"//java/google/registry/gcs",
|
|
"//java/google/registry/keyring",
|
|
"//java/google/registry/keyring/api",
|
|
"//java/google/registry/keyring/kms",
|
|
"//java/google/registry/loadtest",
|
|
"//java/google/registry/model",
|
|
"//java/google/registry/pricing",
|
|
"//java/google/registry/rde",
|
|
"//java/google/registry/request",
|
|
"//java/google/registry/request:modules",
|
|
"//java/google/registry/security",
|
|
"//java/google/registry/tmch",
|
|
"//java/google/registry/tools/params",
|
|
"//java/google/registry/tools/server",
|
|
"//java/google/registry/tools/soy:soy_java_wrappers",
|
|
"//java/google/registry/util",
|
|
"//java/google/registry/whois",
|
|
"//java/google/registry/xjc",
|
|
"//java/google/registry/xml",
|
|
"//third_party/jaxb",
|
|
"//third_party/objectify:objectify-v4_1",
|
|
"@com_beust_jcommander",
|
|
"@com_google_api_client",
|
|
"@com_google_api_client_appengine",
|
|
"@com_google_apis_google_api_services_appengine",
|
|
"@com_google_apis_google_api_services_bigquery",
|
|
"@com_google_apis_google_api_services_dns",
|
|
"@com_google_appengine_api_1_0_sdk",
|
|
"@com_google_appengine_remote_api",
|
|
"@com_google_appengine_remote_api//:link",
|
|
"@com_google_auto_value",
|
|
"@com_google_code_findbugs_jsr305",
|
|
"@com_google_code_gson",
|
|
"@com_google_dagger",
|
|
"@com_google_flogger",
|
|
"@com_google_flogger_system_backend",
|
|
"@com_google_guava",
|
|
"@com_google_http_client",
|
|
"@com_google_http_client_jackson2",
|
|
"@com_google_oauth_client",
|
|
"@com_google_oauth_client_java6",
|
|
"@com_google_oauth_client_jetty",
|
|
"@com_google_re2j",
|
|
"@com_googlecode_json_simple",
|
|
"@io_bazel_rules_closure//closure/templates",
|
|
"@jline",
|
|
"@joda_time",
|
|
"@org_bouncycastle_bcpg_jdk15on",
|
|
"@org_bouncycastle_bcpkix_jdk15on",
|
|
"@org_joda_money",
|
|
"@org_json",
|
|
],
|
|
)
|
|
|
|
java_binary(
|
|
name = "nomulus",
|
|
create_executable = 1,
|
|
main_class = "google.registry.tools.RegistryTool",
|
|
runtime_deps = [
|
|
":tools",
|
|
"@com_google_appengine_api_1_0_sdk//:link",
|
|
"@com_google_appengine_remote_api//:link",
|
|
],
|
|
)
|
|
|
|
java_binary(
|
|
name = "compare_db_backups",
|
|
create_executable = 1,
|
|
main_class = "google.registry.tools.CompareDbBackups",
|
|
runtime_deps = [
|
|
":tools",
|
|
],
|
|
)
|