Implement Google authentication and scope authorization on Breadboard Web

[dglazkov]

We really need to get Google authentication and scope authorization implemented for Breadboard web app. This would allow us build graphs that talk to Google APIs and use credentials and tokens properly.

The current credentials node is a dead end in this respect: it presumes that it runs in the browser and that is too limiting. Instead, we likely need an approach where we teach the secrets node to deal with complex secrets (like, GOOGLE_AUTH key + a list of scopes) and let the app take care of the authentication.

[Mearman]

• this could be useful for the Drive access version of this ticket https://github.com/breadboard-ai/breadboard/issues/927 and then https://github.com/breadboard-ai/breadboard/issues/939

[zeroasterisk]

Agreed, was dusting off my use cases, and I cannot really proceed without a bearer token scoped to my application or user credentials :(

I'm spoiled with colab and...

import sys

if "google.colab" in sys.modules:
    from google.colab import auth as google_auth

    google_auth.authenticate_user()

from google.auth import default

creds, _ = default()

Could we do something which is (to the user) as simple?

[Mearman]

@zeroasterisk I haven't finishing building it yet. But I have ended up using a Service Account with domain wide delegation to generate an OAuth token headlessly

[dglazkov]

We have a path with the connection server, need to get there.

cc @aomarks