code: def _GetApplicationDefaultCredentials(
          client_info, skip_application_default_credentials=False,
          **unused_kwds):
      
      scopes = client_info['scope'].split()
      if skip_application_default_credentials:
          return None
      gc = oauth2client.client.GoogleCredentials
      with cache_file_lock:
          try:
              # pylint: disable=protected-access
              # We've already done our own check for GAE/GCE
              # credentials, we don't want to pay for checking again.
              credentials = gc._implicit_credentials_from_files()
          except oauth2client.client.ApplicationDefaultCredentialsError:
              return None
      # If we got back a non-service account credential, we need to use
      # a heuristic to decide whether or not the application default
      # credential will work for us. We assume that if we're requesting
      # cloud-platform, our scopes are a subset of cloud scopes, and the
      # ADC will work.
      cp = 'https://www.googleapis.com/auth/cloud-platform'
      if credentials is None:
          return None
      if not isinstance(credentials, gc) or cp in scopes:
          return credentials.create_scoped(scopes)
      return None
docs: Returns ADC with right scopes.