Added HTTP implicit/explicit auth samples

Author: ryanmats

auth/auth.php

@@ -168,6 +168,43 @@
     })
 );
 
+// Create auth-http-implicit Command.
+$application->add((new Command('auth-http-implicit'))
+    ->addArgument('projectId', InputArgument::REQUIRED, 'Your project ID')
+    ->setDescription('Authenticate to a cloud API with HTTP using a service account implicitly.')
+    ->setHelp(<<
+The %command.name% command authenticates to a cloud API with HTTP
+using a service account implicitly.
+
+    php %command.full_name%
+
+EOF
+    )
+    ->setCode(function ($input, $output) {
+        auth_http_implicit($input->getArgument('projectId'));
+    })
+);
+
+// Create auth-http-explicit Command.
+$application->add((new Command('auth-http-explicit'))
+    ->addArgument('projectId', InputArgument::REQUIRED, 'Your project ID')
+    ->addArgument('serviceAccountPath', InputArgument::REQUIRED, 'Path to your service account.')
+    ->setDescription('Authenticate to a cloud API with HTTP using a service account explicitly.')
+    ->setHelp(<<
+The %command.name% command authenticates to a cloud API with HTTP
+using a service account explicitly.
+
+    php %command.full_name%
+
+EOF
+    )
+    ->setCode(function ($input, $output) {
+        $projectId = $input->getArgument('projectId');
+        $serviceAccountPath = $input->getArgument('serviceAccountPath');
+        auth_http_explicit($projectId, $serviceAccountPath);
+    })
+);
+
 if (getenv('PHPUNIT_TESTS') === '1') {
     return $application;
 }

auth/composer.json

@@ -17,7 +17,9 @@
             "src/auth_api_implicit.php",
             "src/auth_api_explicit.php",
             "src/auth_api_explicit_compute_engine.php",
-            "src/auth_api_explicit_app_engine.php"
+            "src/auth_api_explicit_app_engine.php",
+            "src/auth_http_implicit.php",
+            "src/auth_http_explicit.php"
         ]
     },
     "require-dev": {

auth/src/auth_http_explicit.php

@@ -0,0 +1,60 @@
+
+/**
+ * Copyright 2017 Google Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * For instructions on how to run the full sample:
+ *
+ * @see https://github.com/GoogleCloudPlatform/php-docs-samples/tree/master/auth/README.md
+ */
+
+# [START auth_http_explicit]
+namespace Google\Cloud\Samples\Auth;
+
+// Imports the Google Cloud Storage client library, Auth libraries, and Guzzle
+// HTTP libraries.
+use Google\Cloud\Storage\StorageClient;
+use Google\Auth\Credentials\ServiceAccountCredentials;
+use Google\Auth\Middleware\AuthTokenMiddleware;
+use GuzzleHttp\Client;
+use GuzzleHttp\HandlerStack;
+
+function auth_http_explicit($projectId, $serviceAccountPath)
+{
+    # Construct service account credentials using the service account key file
+    # and Google Auth library's ServiceAccountCredentials class.
+    $serviceAccountCredentials = new ServiceAccountCredentials(
+        'https://www.googleapis.com/auth/cloud-platform',
+        $serviceAccountPath);
+    $middleware = new AuthTokenMiddleware($serviceAccountCredentials);
+    $stack = HandlerStack::create();
+    $stack->push($middleware);
+
+    # Create an HTTP Client using Guzzle and pass in the credentials.
+    $http_client = new Client([
+        'handler' => $stack,
+        'base_uri' => 'https://www.googleapis.com/storage/v1/',
+        'auth' => 'google_auth'
+    ]);
+
+    # Make an authenticated API request (listing storage buckets)
+    $response = $http_client->request('GET', 'b', ['query' =>['project'=>$projectId]]);
+    $body_content = json_decode($response->getBody());
+    foreach ($body_content->items as $item) {
+        $bucket = $item->id;
+        printf('Bucket: %s' . PHP_EOL, $bucket);
+    }
+}
+# [END auth_http_explicit]

auth/src/auth_http_implicit.php

@@ -0,0 +1,58 @@
+
+/**
+ * Copyright 2017 Google Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * For instructions on how to run the full sample:
+ *
+ * @see https://github.com/GoogleCloudPlatform/php-docs-samples/tree/master/auth/README.md
+ */
+
+# [START auth_http_implicit]
+namespace Google\Cloud\Samples\Auth;
+
+// Imports the Google Cloud Storage client library, Auth libraries, and Guzzle
+// HTTP libraries.
+use Google\Cloud\Storage\StorageClient;
+use Google\Auth\ApplicationDefaultCredentials;
+use Google\Auth\Middleware\AuthTokenMiddleware;
+use GuzzleHttp\Client;
+use GuzzleHttp\HandlerStack;
+
+function auth_http_implicit($projectId)
+{
+    # Get the credentials and project ID from the environment using Google Auth
+    # library's ApplicationDefaultCredentials class.
+    $middleware = ApplicationDefaultCredentials::getMiddleware(
+        'https://www.googleapis.com/auth/cloud-platform');
+    $stack = HandlerStack::create();
+    $stack->push($middleware);
+
+    # Create a HTTP Client using Guzzle and pass in the credentials.
+    $http_client = new Client([
+        'handler' => $stack,
+        'base_uri' => 'https://www.googleapis.com/storage/v1/',
+        'auth' => 'google_auth'
+    ]);
+
+    # Make an authenticated API request (listing storage buckets)
+    $response = $http_client->request('GET', 'b', ['query' =>['project'=>$projectId]]);
+    $body_content = json_decode($response->getBody());
+    foreach ($body_content->items as $item) {
+        $bucket = $item->id;
+        printf('Bucket: %s' . PHP_EOL, $bucket);
+    }
+}
+# [END auth_http_implicit]

auth/test/authTest.php

@@ -61,6 +61,19 @@ public function testAuthApiExplicitCommand()
         $this->assertContains($this->bucketName, $output);
     }
 
+    public function testAuthHttpImplicitCommand()
+    {
+        $output = $this->runCommand('auth-http-implicit', $this->projectId);
+        $this->assertContains($this->bucketName, $output);
+    }
+
+    public function testAuthHttpExplicitCommand()
+    {
+        $serviceAccountPath = getenv('GOOGLE_APPLICATION_CREDENTIALS');
+        $output = $this->runCommand('auth-http-explicit', $this->projectId, $serviceAccountPath);
+        $this->assertContains($this->bucketName, $output);
+    }
+
     private function runCommand($commandName, $projectId = null, $serviceAccountPath=null)
     {
         $application = require __DIR__ . '/../auth.php';