Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion src/secops/auth.py
Original file line number Diff line number Diff line change
Expand Up @@ -188,7 +188,11 @@ def _get_credentials(
"""Get credentials from various sources."""
try:
if credentials:
google_credentials = credentials.with_scopes(self.scopes)
if hasattr(credentials, "with_scopes"):
google_credentials = credentials.with_scopes(self.scopes)
else:
# Assume credentials are already scoped
google_credentials = credentials

elif service_account_info:
google_credentials = (
Expand Down
13 changes: 13 additions & 0 deletions tests/test_auth.py
Original file line number Diff line number Diff line change
Expand Up @@ -73,3 +73,16 @@ def test_custom_user_agent():
assert session is not None
assert hasattr(session, "headers")
assert session.headers.get("User-Agent") == "secops-wrapper-sdk"


def test_bearer_token_credentials_accepted():
"""Test scope passed for token credentials"""
from google.oauth2.credentials import Credentials as OAuthCredentials

creds = OAuthCredentials(token="fake-bearer-token")
assert not hasattr(creds, "with_scopes"), (
"Test assumption broken: OAuthCredentials now has with_scopes"
)

auth = SecOpsAuth(credentials=creds)
assert auth.credentials is creds