{
  "context": "This evaluation assesses how well the engineer uses google-auth-oauthlib to work with external account authorized user credentials from third-party identity providers. The focus is on proper usage of the library's helpers module and credentials_from_session function to create external account credentials.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "Import helpers module",
      "description": "Imports google_auth_oauthlib.helpers module or imports credentials_from_session directly from google_auth_oauthlib.helpers",
      "max_score": 15
    },
    {
      "name": "Import OAuth2Session",
      "description": "Imports OAuth2Session from requests_oauthlib to create an OAuth session object",
      "max_score": 10
    },
    {
      "name": "Create OAuth2Session",
      "description": "Creates an OAuth2Session instance with client_id and token data from the input file",
      "max_score": 20
    },
    {
      "name": "Use credentials_from_session",
      "description": "Calls credentials_from_session function from google_auth_oauthlib.helpers to convert the OAuth session into credentials",
      "max_score": 35
    },
    {
      "name": "Pass client_config",
      "description": "Passes client configuration (including token_uri, client_id, client_secret) to credentials_from_session via the client_config parameter",
      "max_score": 15
    },
    {
      "name": "Handle token_info_url",
      "description": "Detects or utilizes the token_info_url field from client configuration to identify external account (3pi) configuration",
      "max_score": 5
    }
  ]
}