Function tokenSourceForServiceAccountScopes

internal/googleapi/service_account.go:40–67

(
	ctx context.Context,
	dependencies AuthDependencies,
	serviceLabel string,
	email string,
	scopes []string,
)

}

func tokenSourceForServiceAccountScopes(
	ctx context.Context,
	dependencies AuthDependencies,
	serviceLabel string,
	email string,
	scopes []string,
) (oauth2.TokenSource, string, bool, error) {
	store, err := dependencies.serviceAccountStore()
	if err != nil {
		return nil, "", false, err
	}

	file, exists, err := store.Read(email, serviceLabel == "keep")
	if err != nil {
		return nil, "", false, fmt.Errorf("read service account: %w", err)
	}

	if !exists {
		return nil, "", false, nil
	}

	ts, err := dependencies.serviceAccountTokenSource(ctx, file.Data, email, scopes)
	if err != nil {
		return nil, "", false, err
	}

	return ts, file.Path, true, nil
}