oauthclient.OAuth2Credentials does not implement create_scoped or create_scoped_required

Right now, the gcloud-python API only authorize through service account. Can we add the user authorization using client_secret.json file?

https://developers.google.com/identity/protocols/OAuth2WebServer

from oauth2client import client
from oauth2client.file import Storage
from oauth2client import tools

FLOW = flow_from_clientsecrets('client_secret.json',
                               scope='https://www.googleapis.com/auth/bigquery')
storage = Storage('bigquery_credentials.dat')
credentials = storage.get()
if credentials is None or credentials.invalid:
    credentials = run(FLOW, storage)
http = httplib2.Http()
http = credentials.authorize(http)

[tuanavu]

Hi @dhermes,

This one works perfectly:

from oauth2client.client import GoogleCredentials
from gcloud import bigquery

credentials = GoogleCredentials.get_application_default()
print credentials.to_json()

client = bigquery.Client(project='my-project-id',
                         credentials=credentials
                         )

However, I try this for the user authentication with client_secret.json, and bigquery_credentials.dat, but this one give me error:

import httplib2
from apiclient.discovery import build
from apiclient.errors import HttpError

from oauth2client import client
from oauth2client.file import Storage
from oauth2client import tools

from gcloud import bigquery

BIGQUERY_SCOPE = 'https://www.googleapis.com/auth/bigquery'

FLOW = client.flow_from_clientsecrets('client_secret.json', scope=BIGQUERY_SCOPE)
storage = Storage('bigquery_credentials.dat')
flags = tools.argparser.parse_args(args=[])
credentials = storage.get()
if credentials is None or credentials.invalid:
    credentials = tools.run_flow(FLOW, storage, flags)
http = httplib2.Http()
http = credentials.authorize(http)
# print credentials.to_json()
# print http.to_json()
client = bigquery.Client(project='my-project-id',
                         credentials=credentials
                         )

Error message:

Traceback (most recent call last):
  File "gcloud_test.py", line 36, in <module>
    credentials=credentials
  File "/usr/local/lib/python2.7/dist-packages/gcloud/client.py", line 182, in __init__
    Client.__init__(self, credentials=credentials, http=http)
  File "/usr/local/lib/python2.7/dist-packages/gcloud/client.py", line 127, in __init__
    credentials=credentials, http=http)
  File "/usr/local/lib/python2.7/dist-packages/gcloud/connection.py", line 78, in __init__
    credentials, self.SCOPE)
  File "/usr/local/lib/python2.7/dist-packages/gcloud/connection.py", line 118, in _create_scoped_credentials
    if credentials and credentials.create_scoped_required():
AttributeError: 'OAuth2Credentials' object has no attribute 'create_scoped_required'

How can I tune this to make the gcloud/connection.py works?

BTW, I cannot re-open this issue.

Thanks, Tuan

[dhermes]

“Know” might be strong but AFAIK the only other things we use a credential for are getting access tokens for signing requests and providing a way to generate a signed URL (and neither GoogleCredentials nor OAuth2Credentials can do this since they don’t have a key to sign with).