Replace oauth2client with google-auth

[andrewmwhite]

oauth2client has been deprecated in favor of google-auth. Stethoscope's use of oauth2client to interact with Google's APIs should therefore be replaced with google-auth, particularly since the former is no longer being supported.

[suprithcs]

Hi Andrew, I'm interested to take this up. I'm new to the code base. I did run a grep on the repo and found some places that needs change. However, I'd like to hear from you about where the changes should be made. Also, best way to test the changes. I'll send out a pr in couple days. Thanks

[andrewmwhite]

Hi Suprith,

Thanks for your interest in contributing to Stethoscope! One caveat that just occurred to me with implementing this is you'll need a Google Apps service account set up and running for testing. If you don't have access to that, you might want to look around for other ways to contribute.

I looked through the codebase and it seems like the changes that need to be made are:

• Add tests. It would probably be a good idea to create tests for the GoogleAPIConnection class. This might mean modifying the tox setup to create different test environments for the two different versions of oauth2client currently supported (< 2.0.0 and >= 2.0.0) as well as google-auth; if you don't know how to do that, you can leave it to me. For the tests themselves, you could use these as a model:
  • https://github.com/google/google-api-python-client/blob/89906ac33b37c6017c893841743aa4f45729c91f/tests/test__auth.py#L66
  • https://github.com/google/google-api-python-client/blob/89906ac33b37c6017c893841743aa4f45729c91f/tests/test__auth.py#L117
• Update dependencies:
  • Add google-auth.
  • Add google-auth-httplib2. This is Google's legacy support package for httplib2 in google-api-python-client, since it looks like they're not going to be changing google-api-python-client itself.
• Change the get_google_api_credentials method to support google-auth:
  • Create a google-auth Credentials object via Credentials.from_service_account_info.
  • Use Credentials.with_subject to set up domain-wide delegation.
• Modify the connect method to use the new Credentials object, which probably means replacing line 45 with a call to google_auth_httplib2.AuthorizedHttp.

[suprithcs]

Hi Andrew, Thank you for the prompt response. I don't have a service account to test the changes because I don't run any instance on GCP. Do we have any work-around? If not, please recommend some other issue/feature that I can work on. Thanks again!