mirror of
https://github.com/home-assistant/core
synced 2024-08-28 03:36:46 +02:00
141 lines
4.8 KiB
Python
141 lines
4.8 KiB
Python
"""API for Google Nest Device Access bound to Home Assistant OAuth."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import datetime
|
|
import logging
|
|
from typing import cast
|
|
|
|
from aiohttp import ClientSession
|
|
from google.oauth2.credentials import Credentials
|
|
from google_nest_sdm.auth import AbstractAuth
|
|
from google_nest_sdm.google_nest_subscriber import GoogleNestSubscriber
|
|
|
|
from homeassistant.config_entries import ConfigEntry
|
|
from homeassistant.core import HomeAssistant
|
|
from homeassistant.helpers import aiohttp_client, config_entry_oauth2_flow
|
|
|
|
from .const import (
|
|
API_URL,
|
|
CONF_PROJECT_ID,
|
|
CONF_SUBSCRIBER_ID,
|
|
OAUTH2_TOKEN,
|
|
SDM_SCOPES,
|
|
)
|
|
|
|
_LOGGER = logging.getLogger(__name__)
|
|
|
|
|
|
class AsyncConfigEntryAuth(AbstractAuth):
|
|
"""Provide Google Nest Device Access authentication tied to an OAuth2 based config entry."""
|
|
|
|
def __init__(
|
|
self,
|
|
websession: ClientSession,
|
|
oauth_session: config_entry_oauth2_flow.OAuth2Session,
|
|
client_id: str,
|
|
client_secret: str,
|
|
) -> None:
|
|
"""Initialize Google Nest Device Access auth."""
|
|
super().__init__(websession, API_URL)
|
|
self._oauth_session = oauth_session
|
|
self._client_id = client_id
|
|
self._client_secret = client_secret
|
|
|
|
async def async_get_access_token(self) -> str:
|
|
"""Return a valid access token for SDM API."""
|
|
if not self._oauth_session.valid_token:
|
|
await self._oauth_session.async_ensure_token_valid()
|
|
return cast(str, self._oauth_session.token["access_token"])
|
|
|
|
async def async_get_creds(self) -> Credentials:
|
|
"""Return an OAuth credential for Pub/Sub Subscriber."""
|
|
# We don't have a way for Home Assistant to refresh creds on behalf
|
|
# of the google pub/sub subscriber. Instead, build a full
|
|
# Credentials object with enough information for the subscriber to
|
|
# handle this on its own. We purposely don't refresh the token here
|
|
# even when it is expired to fully hand off this responsibility and
|
|
# know it is working at startup (then if not, fail loudly).
|
|
token = self._oauth_session.token
|
|
creds = Credentials(
|
|
token=token["access_token"],
|
|
refresh_token=token["refresh_token"],
|
|
token_uri=OAUTH2_TOKEN,
|
|
client_id=self._client_id,
|
|
client_secret=self._client_secret,
|
|
scopes=SDM_SCOPES,
|
|
)
|
|
creds.expiry = datetime.datetime.fromtimestamp(token["expires_at"])
|
|
return creds
|
|
|
|
|
|
class AccessTokenAuthImpl(AbstractAuth):
|
|
"""Authentication implementation used during config flow, without refresh.
|
|
|
|
This exists to allow the config flow to use the API before it has fully
|
|
created a config entry required by OAuth2Session. This does not support
|
|
refreshing tokens, which is fine since it should have been just created.
|
|
"""
|
|
|
|
def __init__(
|
|
self,
|
|
websession: ClientSession,
|
|
access_token: str,
|
|
) -> None:
|
|
"""Init the Nest client library auth implementation."""
|
|
super().__init__(websession, API_URL)
|
|
self._access_token = access_token
|
|
|
|
async def async_get_access_token(self) -> str:
|
|
"""Return the access token."""
|
|
return self._access_token
|
|
|
|
async def async_get_creds(self) -> Credentials:
|
|
"""Return an OAuth credential for Pub/Sub Subscriber."""
|
|
return Credentials(
|
|
token=self._access_token,
|
|
token_uri=OAUTH2_TOKEN,
|
|
scopes=SDM_SCOPES,
|
|
)
|
|
|
|
|
|
async def new_subscriber(
|
|
hass: HomeAssistant, entry: ConfigEntry
|
|
) -> GoogleNestSubscriber | None:
|
|
"""Create a GoogleNestSubscriber."""
|
|
implementation = (
|
|
await config_entry_oauth2_flow.async_get_config_entry_implementation(
|
|
hass, entry
|
|
)
|
|
)
|
|
if not isinstance(
|
|
implementation, config_entry_oauth2_flow.LocalOAuth2Implementation
|
|
):
|
|
raise TypeError(f"Unexpected auth implementation {implementation}")
|
|
if not (subscriber_id := entry.data.get(CONF_SUBSCRIBER_ID)):
|
|
raise ValueError("Configuration option 'subscriber_id' missing")
|
|
auth = AsyncConfigEntryAuth(
|
|
aiohttp_client.async_get_clientsession(hass),
|
|
config_entry_oauth2_flow.OAuth2Session(hass, entry, implementation),
|
|
implementation.client_id,
|
|
implementation.client_secret,
|
|
)
|
|
return GoogleNestSubscriber(auth, entry.data[CONF_PROJECT_ID], subscriber_id)
|
|
|
|
|
|
def new_subscriber_with_token(
|
|
hass: HomeAssistant,
|
|
access_token: str,
|
|
project_id: str,
|
|
subscriber_id: str,
|
|
) -> GoogleNestSubscriber:
|
|
"""Create a GoogleNestSubscriber with an access token."""
|
|
return GoogleNestSubscriber(
|
|
AccessTokenAuthImpl(
|
|
aiohttp_client.async_get_clientsession(hass),
|
|
access_token,
|
|
),
|
|
project_id,
|
|
subscriber_id,
|
|
)
|