Update firebase sample to use google-auth (#665)

Author: Jon Wayne Parrott

appengine/standard/bigquery/main.py

@@ -25,7 +25,7 @@
 import os
 
 from googleapiclient.discovery import build
-from oauth2client.appengine import OAuth2DecoratorFromClientSecrets
+from oauth2client.contrib.appengine import OAuth2DecoratorFromClientSecrets
 import webapp2
 
 

appengine/standard/firebase/firenotes/README.md

@@ -25,13 +25,6 @@ this sample.
 1. Within a virtualenv, install the dependencies to the backend service:
 
         pip install -r requirements.txt -t lib
-        pip install pycrypto
-
-    Although the pycrypto library is built in to the App Engine standard
-    environment, it will not be bundled until deployment since it is 
-    platform-dependent. Thus, the app.yaml file includes the bundled version of
-    pycrypto at runtime, but you still need to install it manually to run the 
-    application on the App Engine local development server.
 
 1. [Add Firebase to your app.](https://firebase.google.com/docs/web/setup#add_firebase_to_your_app)
 1. Add your Firebase project ID to the backend’s `app.yaml` file as an

appengine/standard/firebase/firenotes/backend/app.yaml

@@ -7,12 +7,6 @@ handlers:
 - url: /.*
   script: main.app
 
-libraries:
-- name: ssl
-  version: 2.7.11
-- name: pycrypto
-  version: 2.6
-
 env_variables:
   # Replace with your Firebase project ID.
   FIREBASE_PROJECT_ID: '<PROJECT_ID>'

appengine/standard/firebase/firenotes/backend/firebase_helper.py

@@ -18,9 +18,14 @@
 from flask import Flask, jsonify, request
 import flask_cors
 from google.appengine.ext import ndb
+import google.auth.transport.requests
+import google.oauth2.id_token
+import requests_toolbelt.adapters.appengine
 
-import firebase_helper
-
+# Use the App Engine Requests adapter. This makes sure that Requests uses
+# URLFetch.
+requests_toolbelt.adapters.appengine.monkeypatch()
+HTTP_REQUEST = google.auth.transport.requests.Request()
 
 app = Flask(__name__)
 flask_cors.CORS(app)
@@ -68,7 +73,9 @@ def list_notes():
     """Returns a list of notes added by the current Firebase user."""
 
     # Verify Firebase auth.
-    claims = firebase_helper.verify_auth_token(request)
+    id_token = request.headers['Authorization'].split(' ').pop()
+    claims = google.oauth2.id_token.verify_firebase_token(
+        id_token, HTTP_REQUEST)
     if not claims:
         return 'Unauthorized', 401
 
@@ -90,7 +97,9 @@ def add_note():
     """
 
     # Verify Firebase auth.
-    claims = firebase_helper.verify_auth_token(request)
+    id_token = request.headers['Authorization'].split(' ').pop()
+    claims = google.oauth2.id_token.verify_firebase_token(
+        id_token, HTTP_REQUEST)
     if not claims:
         return 'Unauthorized', 401