blob: b3d08813f07419432d9e4de25237b5b126f688df [file] [log] [blame]
// Copyright 2022 The Fuchsia Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
//! Information on client data.
/// For a web site, a client secret is kept locked away in a secure server. This
/// is not a web site and the value is needed, so a non-secret "secret" is used.
///
/// "Google OAuth2 clients always have a secret, even if the client is an
/// installed application/utility such as gsutil. Of course, in such cases the
/// "secret" is actually publicly known; security depends entirely on the
/// secrecy of refresh tokens, which effectively become bearer tokens."
pub(crate) const CLIENT_ID: &str =
"835841167576-3nuipp484o20to14dqt1rlm301udcf0a.apps.googleusercontent.com";
pub(crate) const CLIENT_SECRET: &str = "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";
pub(crate) const AUTH_SCOPE: &str = "https://www.googleapis.com/auth/cloud-platform";
/// URL used for gaining a new access token.
///
/// See RefreshTokenRequest, OauthTokenResponse.
pub(crate) const OAUTH_REFRESH_TOKEN_ENDPOINT: &str = "https://oauth2.googleapis.com/token";