jhw · June 29, 2024 08:35
diff --git a/.GCLOUD_OAUTH_CREDS.md b/.GCLOUD_OAUTH_CREDS.md
diff --git a/.gitignore b/.gitignore
 *.pyc
 __pycache__
 env
 tmp
diff --git a/create_google_project.py b/create_google_project.py
 import argparse
 import google.auth
 from google.auth.transport.requests import Request
 from googleapiclient.discovery import build
 from googleapiclient.errors import HttpError
 import uuid
 import time

 def create_google_project(project_name):
    try:
        credentials, project = google.auth.default()
        service = build('cloudresourcemanager', 'v1', credentials=credentials)

        unique_id = str(uuid.uuid4())[:8]
        base_project_id = project_name.lower().replace(' ', '-')[:21]
        project_id = f"{base_project_id}-{unique_id}"

        project_body = {
            'projectId': project_id,
            'name': project_name
        }
        request = service.projects().create(body=project_body)
        operation = request.execute()

        print('Project creation operation:')
        print(operation)

        # Poll the operation until it completes
        operations_service = service.operations()
        while not operation.get('done', False):
            print('Waiting for operation to complete...')
            time.sleep(5)
            operation = operations_service.get(name=operation['name']).execute()

        if 'error' in operation:
            raise Exception(f"Error creating project: {operation['error']}")

        print('Project created successfully.')
        print(f'Project ID: {project_id}')
        return project_id

    except HttpError as err:
        print(f'HTTP error occurred: {err}')
        if err.resp.status == 400:
            print('Details:', err.resp)
        return None
    except KeyError as key_err:
        print(f'Key error: {key_err}')
        return None
    except Exception as ex:
        print(f'Error: {ex}')
        return None

 def enable_service_api(project_id, service_name):
    try:
        credentials, project = google.auth.default()
        service = build('serviceusage', 'v1', credentials=credentials)

        request = service.services().enable(
            name=f'projects/{project_id}/services/{service_name}'
        )
        response = request.execute()

        print(f'Service {service_name} enabled:')
        print(response)
        return response

    except HttpError as err:
        print(f'HTTP error occurred while enabling {service_name}: {err}')
        return None

 def create_oauth_credentials(project_id, callback_urls):
    try:
        credentials, project = google.auth.default()
        service = build('iam', 'v1', credentials=credentials)

        oauth_body = {
            'client_type': 'web',
            'redirect_uris': callback_urls
        }

        request = service.projects().oauth2Clients().create(parent=f'projects/{project_id}', body=oauth_body)
        response = request.execute()
        return response

    except HttpError as err:
        print(f'HTTP error occurred: {err}')
        return None

 if __name__ == '__main__':
    parser = argparse.ArgumentParser(description='Create a Google Cloud project and set up OAuth 2.0 credentials.')
    parser.add_argument('project_name', type=str, help='The name of the Google Cloud project to create')
    parser.add_argument('cognito_domain', type=str, help='The domain prefix of your AWS Cognito User Pool')
    parser.add_argument('region', type=str, help='The AWS region where your Cognito User Pool is hosted')
    args = parser.parse_args()

    project_id = create_google_project(args.project_name)
    if not project_id:
        print('Failed to create Google Cloud project')
        exit(1)

    print('--- Project created successfully ---')
    print(f'Project ID: {project_id}')

    callback_url = f"https://{args.cognito_domain}.auth.{args.region}.amazoncognito.com/oauth2/idpresponse"
    callback_urls = [callback_url]

    # Enable necessary APIs
    enable_service_api(project_id, 'cloudresourcemanager.googleapis.com')
    enable_service_api(project_id, 'iam.googleapis.com')

    oauth_response = create_oauth_credentials(project_id, callback_urls)
    if not oauth_response:
        print('Failed to create OAuth 2.0 credentials')
        exit(1)

    print('--- OAuth 2.0 credentials created successfully ---')
    print('OAuth2 credentials:')
    print(oauth_response)
    print("\n---- OAuth Configuration for AWS Cognito ----")
    print(f"Cognito Callback URL: {callback_url}")
    print(f"Google Client ID: {oauth_response['client_id']}")
    print(f"Google Client Secret: {oauth_response['client_secret']}")
    print(f"Google Project ID: {project_id}")
    print(f"Google Project Name: {args.project_name}")
diff --git a/MANUAL.md b/MANUAL.md
diff --git a/NOTES.md b/NOTES.md
diff --git a/requirements.txt b/requirements.txt
 google-api-python-client
 google-auth
 google-auth-oauthlib
 google-auth-httplib2

diff --git a/TODO.md b/TODO.md
	import argparse
	import google.auth
	from google.auth.transport.requests import Request
	from googleapiclient.discovery import build
	from googleapiclient.errors import HttpError
	import uuid
	import time

	def create_google_project(project_name):
	try:
	credentials, project = google.auth.default()
	service = build('cloudresourcemanager', 'v1', credentials=credentials)

	unique_id = str(uuid.uuid4())[:8]
	base_project_id = project_name.lower().replace(' ', '-')[:21]
	project_id = f"{base_project_id}-{unique_id}"

	project_body = {
	'projectId': project_id,
	'name': project_name
	}
	request = service.projects().create(body=project_body)
	operation = request.execute()

	print('Project creation operation:')
	print(operation)

	# Poll the operation until it completes
	operations_service = service.operations()
	while not operation.get('done', False):
	print('Waiting for operation to complete...')
	time.sleep(5)
	operation = operations_service.get(name=operation['name']).execute()

	if 'error' in operation:
	raise Exception(f"Error creating project: {operation['error']}")

	print('Project created successfully.')
	print(f'Project ID: {project_id}')
	return project_id

	except HttpError as err:
	print(f'HTTP error occurred: {err}')
	if err.resp.status == 400:
	print('Details:', err.resp)
	return None
	except KeyError as key_err:
	print(f'Key error: {key_err}')
	return None
	except Exception as ex:
	print(f'Error: {ex}')
	return None

	def enable_service_api(project_id, service_name):
	try:
	credentials, project = google.auth.default()
	service = build('serviceusage', 'v1', credentials=credentials)

	request = service.services().enable(
	name=f'projects/{project_id}/services/{service_name}'
	)
	response = request.execute()

	print(f'Service {service_name} enabled:')
	print(response)
	return response

	except HttpError as err:
	print(f'HTTP error occurred while enabling {service_name}: {err}')
	return None

	def create_oauth_credentials(project_id, callback_urls):
	try:
	credentials, project = google.auth.default()
	service = build('iam', 'v1', credentials=credentials)

	oauth_body = {
	'client_type': 'web',
	'redirect_uris': callback_urls
	}

	request = service.projects().oauth2Clients().create(parent=f'projects/{project_id}', body=oauth_body)
	response = request.execute()
	return response

	except HttpError as err:
	print(f'HTTP error occurred: {err}')
	return None

	if __name__ == '__main__':
	parser = argparse.ArgumentParser(description='Create a Google Cloud project and set up OAuth 2.0 credentials.')
	parser.add_argument('project_name', type=str, help='The name of the Google Cloud project to create')
	parser.add_argument('cognito_domain', type=str, help='The domain prefix of your AWS Cognito User Pool')
	parser.add_argument('region', type=str, help='The AWS region where your Cognito User Pool is hosted')
	args = parser.parse_args()

	project_id = create_google_project(args.project_name)
	if not project_id:
	print('Failed to create Google Cloud project')
	exit(1)

	print('--- Project created successfully ---')
	print(f'Project ID: {project_id}')

	callback_url = f"https://{args.cognito_domain}.auth.{args.region}.amazoncognito.com/oauth2/idpresponse"
	callback_urls = [callback_url]

	# Enable necessary APIs
	enable_service_api(project_id, 'cloudresourcemanager.googleapis.com')
	enable_service_api(project_id, 'iam.googleapis.com')

	oauth_response = create_oauth_credentials(project_id, callback_urls)
	if not oauth_response:
	print('Failed to create OAuth 2.0 credentials')
	exit(1)

	print('--- OAuth 2.0 credentials created successfully ---')
	print('OAuth2 credentials:')
	print(oauth_response)
	print("\n---- OAuth Configuration for AWS Cognito ----")
	print(f"Cognito Callback URL: {callback_url}")
	print(f"Google Client ID: {oauth_response['client_id']}")
	print(f"Google Client Secret: {oauth_response['client_secret']}")
	print(f"Google Project ID: {project_id}")
	print(f"Google Project Name: {args.project_name}")
	google-api-python-client
	google-auth
	google-auth-oauthlib
	google-auth-httplib2