为了验证Google Cloud Platform存储客户端，我不想将服务帐户JSON（您创建的凭证文件）写入磁盘。从密钥库加载它们之后，我想将它们纯粹保留在内存中。有没有一种方法可以直接传递JSON，而不是传递类似路径/文件的对象？
我了解如何使用如下所示的pathlike / file对象来执行此操作，但这是我要避免的操作（由于安全问题，我宁愿将其存储在Vault中并以这种方式访问机密，而从不编写它们到磁盘）：
from google.cloud import storage
# set an environment variable that relies on a JSON file
export GOOGLE_APPLICATION_CREDENTIALS="/path/to/service_account.json"
# create the client (assumes the environment variable is set)
client = storage.Client()
# alternately, one can create the client without the environment
# variable, but this still relies on a JSON file.
client = storage.Client.from_service_account_json("/path/to/service_account.json")
I have tried to get around this by referencing the JSON DATA (json_data) directly, but this throws the error: TypeError: expected str, bytes or os.PathLike object, not dict
json_data = {....[JSON]....}
client = storage.Client.from_service_account_json(json_data)
另外，转储到JSON，但出现错误：
with io.open(json_credentials_path, "r", encoding="utf-8") as json_fi:
OSError: [Errno 63] File name too long: '{"type": "service_account", "project_id",......
json_data = {....[JSON]....}
client = storage.Client.from_service_account_json(json.dumps(json_data))
根据@johnhanley的建议，我也尝试过：
from google.cloud import storage
from google.oauth2 import service_account
json_data = {...data loaded from keystore...}
type(json_data)
dict
credentials = service_account.Credentials.from_service_account_info(json_data)
type(credentials)
google.oauth2.service_account.Credentials
client = storage.Client(credentials=credentials)
这导致DefaultCredentialsError：
raise exceptions.DefaultCredentialsError(_HELP_MESSAGE)
google.auth.exceptions.DefaultCredentialsError: Could not automatically determine credentials. Please set GOOGLE_APPLICATION_CREDENTIALS or explicitly create credentials and re-run the application. For more information, please see https://developers.google.com/accounts/docs/application-default-credentials.
如果您对如何解决此问题有任何想法，我很想听听！
