Fixing lint issues

Author: nbayati

google/auth/_regional_access_boundary_utils.py

@@ -65,8 +65,7 @@ def run(self):
                         "Asynchronous Regional Access Boundary lookup failed. Entering cooldown."
                     )
                 self._credentials._regional_access_boundary_cooldown_expiry = (
-                    _helpers.utcnow()
-                    + self._credentials._current_rab_cooldown_duration
+                    _helpers.utcnow() + self._credentials._current_rab_cooldown_duration
                 )
                 new_cooldown_duration = (
                     self._credentials._current_rab_cooldown_duration * 2

google/auth/compute_engine/credentials.py

@@ -22,8 +22,6 @@
 import datetime
 import logging
 
-_LOGGER = logging.getLogger(__name__)
-
 from google.auth import _constants
 from google.auth import _helpers
 from google.auth import credentials
@@ -34,6 +32,8 @@
 from google.auth.compute_engine import _metadata
 from google.oauth2 import _client
 
+_LOGGER = logging.getLogger(__name__)
+
 
 class Credentials(
     credentials.Scoped,

google/auth/credentials.py

@@ -16,21 +16,18 @@
 """Interfaces for credentials."""
 
 import abc
-import datetime
 from enum import Enum
 import logging
 import os
 import threading
 from urllib.parse import urlparse
-import warnings
 
-from google.auth import _exponential_backoff
 from google.auth import _helpers, environment_vars
+from google.auth import _regional_access_boundary_utils
 from google.auth import exceptions
 from google.auth import metrics
 from google.auth._credentials_base import _BaseCredentials
 from google.auth._refresh_worker import RefreshThreadManager
-from google.auth import _regional_access_boundary_utils
 
 DEFAULT_UNIVERSE_DOMAIN = "googleapis.com"
 
@@ -326,7 +323,10 @@ def _perform_refresh_token(self, request):
     def _with_regional_access_boundary(self, regional_access_boundary):
         """Returns a copy of these credentials with a modified Regional Access Boundary.
         This is an internal method used by credential factory methods (e.g., from_info)
-        to seed the RAB cache. The provided value is cached with the default TTL.
+        to seed the RAB cache when a new boundary is fetched or explicitly provided.
+        Because this represents a newly acquired boundary, it is granted a fresh
+        default TTL and any previous cooldowns are cleared. To copy an existing boundary's
+        state (including its remaining TTL and cooldowns), use `_copy_regional_access_boundary_state`.
         Args:
             regional_access_boundary (dict): Must contain an "encodedLocations" key.
         Returns:

google/auth/external_account.py

@@ -34,12 +34,8 @@
 import functools
 import io
 import json
-import re
-import warnings
-
 import logging
-
-_LOGGER = logging.getLogger(__name__)
+import re
 
 from google.auth import _constants
 from google.auth import _helpers
@@ -50,6 +46,8 @@
 from google.oauth2 import sts
 from google.oauth2 import utils
 
+_LOGGER = logging.getLogger(__name__)
+
 # External account JSON type identifier.
 _EXTERNAL_ACCOUNT_JSON_TYPE = "external_account"
 # The token exchange grant_type used for exchanging credentials.

google/auth/external_account_authorized_user.py

@@ -36,12 +36,8 @@
 import datetime
 import io
 import json
-import re
-import warnings
-
 import logging
-
-_LOGGER = logging.getLogger(__name__)
+import re
 
 from google.auth import _constants
 from google.auth import _helpers
@@ -50,6 +46,8 @@
 from google.oauth2 import sts
 from google.oauth2 import utils
 
+_LOGGER = logging.getLogger(__name__)
+
 _EXTERNAL_ACCOUNT_AUTHORIZED_USER_JSON_TYPE = "external_account_authorized_user"
 
 

google/auth/impersonated_credentials.py

@@ -30,20 +30,18 @@
 from datetime import datetime
 import http.client as http_client
 import json
-import warnings
+import logging
 
+from google.auth import _constants
 from google.auth import _exponential_backoff
 from google.auth import _helpers
 from google.auth import credentials
 from google.auth import exceptions
 from google.auth import iam
 from google.auth import jwt
 from google.auth import metrics
-from google.auth import _constants
 from google.oauth2 import _client
 
-import logging
-
 _LOGGER = logging.getLogger(__name__)
 
 _REFRESH_ERROR = "Unable to acquire impersonated credentials"

google/oauth2/_client.py

@@ -26,9 +26,8 @@
 import datetime
 import http.client as http_client
 import json
-import urllib
-
 import logging
+import urllib
 
 from google.auth import _exponential_backoff
 from google.auth import _helpers

google/oauth2/_service_account_async.py

@@ -75,6 +75,13 @@ async def refresh(self, request):
         self.token = access_token
         self.expiry = expiry
 
+    @_helpers.copy_docstring(credentials_async.Credentials)
+    async def before_request(self, request, method, url, headers):
+        await credentials_async.Credentials.before_request(
+            self, request, method, url, headers
+        )
+        self._maybe_start_regional_access_boundary_refresh(request, url)
+
 
 class IDTokenCredentials(
     service_account.IDTokenCredentials,

google/oauth2/service_account.py

@@ -72,6 +72,7 @@
 
 import copy
 import datetime
+import logging
 
 from google.auth import _constants
 from google.auth import _helpers
@@ -83,8 +84,6 @@
 from google.auth import metrics
 from google.oauth2 import _client
 
-import logging
-
 _LOGGER = logging.getLogger(__name__)
 
 _DEFAULT_TOKEN_LIFETIME_SECS = 3600  # 1 hour in seconds