using google.auth

[martindurant]

Use new purpose-built package to generate sessions and handle refresh,
simplifying our code.

Follows from #58
Fixes #59
Fixes #60
May help with #61

[mrocklin]

cc @asford, whenever you're around

[martindurant]

One outstanding question: if you use the google default credentials, you get the default project too, but I think every other method requires you to provide a project if you want to be able to list buckets. anon, of course, makes no use of the project.
Second: passing a token explicitly is now broken. Do we still want to allow a dict as input, or should it be a Credentials object (reminder, there is now a conversion function for the particularl dict style used in the previous version).

Naturally, documentation etc will need to be updated.

[mrocklin]

Using a default if available makes sense to me? I'm not sure I fully understand. On the second question I'm pretty sure I don't have enough experience here to comment intelligently.

…

On Mon, Jan 8, 2018 at 2:43 PM, Martin Durant ***@***.***> wrote: One outstanding question: if you use the google default credentials, you get the default project too, but I think every other method requires you to provide a project *if* you want to be able to list buckets. anon, of course, makes no use of the project. Second: passing a token explicitly is now broken. Do we still want to allow a dict as input, or should it be a Credentials object (reminder, there is now a conversion function for the particularl dict style used in the previous version). Naturally, documentation etc will need to be updated. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#62 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AASszKGwkI6W-YBG8-F6hGO-VshV8NUzks5tIn3egaJpZM4RWxIX> .

[asford]

Picking up the default project along with default credentials would be ideal, if possible. This would allow zero-configuration use of gcsfs in cases when someone is already using google-cloud-sdk, which seems like the most common user scenario.

In my opinion I would be best to just converge on using the google.auth API and accept an explicit Credentials object. Does google.auth have support for reading credentials objects from files in the json format generated by gcloud auth?

Thanks for moving quickly on this!