Method generate_auth_uri

src/google/adk/auth/auth_handler.py:152–244

Generates a response containing the auth uri for user to sign in. Returns: An AuthCredential object containing the auth URI and state. Raises: ValueError: If the authorization endpoint is not configured in the auth scheme.

(
      self,
  )

    )

  def generate_auth_uri(
      self,
  ) -> AuthCredential:
    """Generates a response containing the auth uri for user to sign in.

    Returns:
        An AuthCredential object containing the auth URI and state.

    Raises:
        ValueError: If the authorization endpoint is not configured in the auth
            scheme.
    """
    if not AUTHLIB_AVAILABLE:
      return (
          self.auth_config.raw_auth_credential.model_copy(deep=True)
          if self.auth_config.raw_auth_credential
          else None
      )

    auth_scheme = self.auth_config.auth_scheme
    auth_credential = self.auth_config.raw_auth_credential
    if not auth_credential or not auth_credential.oauth2:
      raise ValueError("raw_auth_credential or oauth2 is empty")

    if isinstance(auth_scheme, OpenIdConnectWithConfig):
      authorization_endpoint = auth_scheme.authorization_endpoint
      scopes = _normalize_oauth_scopes(auth_scheme.scopes)
    else:
      authorization_endpoint = (
          auth_scheme.flows.implicit
          and auth_scheme.flows.implicit.authorizationUrl
          or auth_scheme.flows.authorizationCode
          and auth_scheme.flows.authorizationCode.authorizationUrl
          or auth_scheme.flows.clientCredentials
          and auth_scheme.flows.clientCredentials.tokenUrl
          or auth_scheme.flows.password
          and auth_scheme.flows.password.tokenUrl
      )
      if auth_scheme.flows.implicit:
        scopes = _normalize_oauth_scopes(auth_scheme.flows.implicit.scopes)
      elif auth_scheme.flows.authorizationCode:
        scopes = _normalize_oauth_scopes(
            auth_scheme.flows.authorizationCode.scopes
        )
      elif auth_scheme.flows.clientCredentials:
        scopes = _normalize_oauth_scopes(
            auth_scheme.flows.clientCredentials.scopes
        )
      elif auth_scheme.flows.password:
        scopes = _normalize_oauth_scopes(auth_scheme.flows.password.scopes)
      else:
        scopes = []

    client = OAuth2Session(
        auth_credential.oauth2.client_id,
        auth_credential.oauth2.client_secret,
        scope=" ".join(scopes),
        redirect_uri=auth_credential.oauth2.redirect_uri,