|
Server : Apache System : Linux server.mata-lashes.com 3.10.0-1160.90.1.el7.x86_64 #1 SMP Thu May 4 15:21:22 UTC 2023 x86_64 User : matalashes ( 1004) PHP Version : 8.1.29 Disable Function : NONE Directory : /usr/local/lib/python3.6/site-packages/oauthlib/oauth2/rfc6749/__pycache__/ |
Upload File : |
3
F�Kdl+ � @ s� d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl
m Z m Z ddl
mZ G d d
� d
e�Zd d
d�Zdd� Zd!dd�Zd"dd�Zd#dd�Zdd� Zdd� ZG d d � d �ZG d d � d e�ZdS )$z�
oauthlib.oauth2.rfc6749.tokens
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This module contains methods for adding two types of access tokens to requests.
- Bearer https://tools.ietf.org/html/rfc6750
- MAC https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01
� N)�
b2a_base64)�urlparse)�common)�add_params_to_qs�add_params_to_uri� )�utilsc sr e Zd Zd� fdd� Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z � Z S )� OAuth2TokenNc sn t � j|� d | _d|kr6|d r6ttj|d ��| _|d k rbttj|��| _| jd krj| j| _n| j| _d S )N�scope)�super�__init__�
_new_scope�setr Z
scope_to_list�
_old_scope)�self�params� old_scope)� __class__� �B/tmp/pip-build-8nxjc3nm/oauthlib/oauthlib/oauth2/rfc6749/tokens.pyr s
zOAuth2Token.__init__c C s | j | jkS )N)r
r )r r r r �
scope_changed& s zOAuth2Token.scope_changedc C s t j| j�S )N)r �
list_to_scoper )r r r r r * s zOAuth2Token.old_scopec C s
t | j�S )N)�listr )r r r r �
old_scopes. s zOAuth2Token.old_scopesc C s t j| j�S )N)r r r
)r r r r r
2 s zOAuth2Token.scopec C s
t | j�S )N)r r
)r r r r �scopes6 s zOAuth2Token.scopesc C s t | j| j �S )N)r r r
)r r r r �missing_scopes: s zOAuth2Token.missing_scopesc C s t | j| j �S )N)r r
r )r r r r �additional_scopes> s z OAuth2Token.additional_scopes)N)
�__name__�
__module__� __qualname__r �propertyr r r r
r r r �
__classcell__r r )r r r s r � �
hmac-sha-1c C s: |j � }tj|�\} } |j� dkr*tj}
n |j� dkr>tj}
ntd��|
dkrj|pfdjtj | �t
j � �}nt
j � }t
j � }t
|�\}}}}}}|r�|d | }n|}|dk r�|
dkr�|jd�}t|
|�j� �dd� jd�}nd
}g }|
dkr�|j|� n|j|� |j|� |j|j � � |j|� |j| � |j| � |
dk�rN|j|� |j|�pZd
� d j|�d }t|t��r�|jd�}tj||jd�|
�}t|j� �dd� jd�}g }|jd | � |
dk�r�|jd
| � |jd| � |�r�|jd| � |�r|jd| � |jd| � |�p&i }dj|�|d< |S )a_ Add an `MAC Access Authentication`_ signature to headers.
Unlike OAuth 1, this HMAC signature does not require inclusion of the
request payload/body, neither does it use a combination of client_secret
and token_secret but rather a mac_key provided together with the access
token.
Currently two algorithms are supported, "hmac-sha-1" and "hmac-sha-256",
`extension algorithms`_ are not supported.
Example MAC Authorization header, linebreaks added for clarity
Authorization: MAC id="h480djs93hd8",
nonce="1336363200:dj83hs9s",
mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM="
.. _`MAC Access Authentication`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01
.. _`extension algorithms`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01#section-7.1
:param token:
:param uri: Request URI.
:param key: MAC given provided by token endpoint.
:param http_method: HTTP Request method.
:param nonce:
:param headers: Request headers as a dictionary.
:param body:
:param ext:
:param hash_algorithm: HMAC algorithm provided by token endpoint.
:param issue_time: Time when the MAC credentials were issued (datetime).
:param draft: MAC authentication specification version.
:return: headers dictionary with the authorization field added.
z
hmac-sha-1z hmac-sha-256zunknown hash algorithmr z{}:{}�?Nzutf-8r r" �
z MAC id="%s"zts="%s"z
nonce="%s"z
bodyhash="%s"zext="%s"zmac="%s"z, �
Authorization���r' )�upperr Z
host_from_uri�lower�hashlib�sha1�sha256�
ValueError�formatZ generate_ager Zgenerate_nonceZgenerate_timestampr �encoder �digest�decode�append�join�
isinstance�str�hmac�new)�token�uri�keyZ http_method�nonce�headers�body�extZhash_algorithmZ
issue_timeZdraft�host�port�h�tsZsch�net�path�par�queryZfra� request_uriZbodyhash�baseZ base_string�sign�headerr r r �prepare_mac_headerC sd (
rK c C s t |d| fg�S )a Add a `Bearer Token`_ to the request URI.
Not recommended, use only if client can't use authorization header or body.
http://www.example.com/path?access_token=h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param uri:
� access_token)r )r8 r9 r r r �prepare_bearer_uri� s rM c C s |pi }d| |d< |S )z�Add a `Bearer Token`_ to the request URI.
Recommended method of passing bearer tokens.
Authorization: Bearer h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param headers:
z Bearer %sr& r )r8 r< r r r �prepare_bearer_headers� s rN c C s t |d| fg�S )z�Add a `Bearer Token`_ to the request body.
access_token=h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param body:
rL )r )r8 r= r r r �prepare_bearer_body� s
rO Fc C s t j� S )zp
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:param refresh_token:
)r Zgenerate_token)�request�
refresh_tokenr r r �random_token_generator� s rR c s � �fdd�}|S )z
:param private_pem:
c s � | _ tj�| �S )N)Zclaimsr Zgenerate_signed_token)rP )�kwargs� private_pemr r �signed_token_generator� s z6signed_token_generator.<locals>.signed_token_generatorr )rT rS rU r )rS rT r rU � s rU c C sN d}d| j krD| j jd�j� }t|�dkrJ|d j� dkrJ|d }n| j}|S )z�
Helper function to extract a token from the request header.
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:return: Return the token or None if the Authorization header is malformed.
Nr& � r �bearerr )r< �get�split�lenr) rL )rP r8 Z split_headerr r r �get_token_from_header� s
r[ c @ s* e Zd Zf Zd dd�Zdd� Zdd� ZdS )
� TokenBaseFc C s t d��d S )Nz&Subclasses must implement this method.)�NotImplementedError)r rP rQ r r r �__call__ s zTokenBase.__call__c C s t d��dS )zb
:param request: OAuthlib request.
:type request: oauthlib.common.Request
z&Subclasses must implement this method.N)r] )r rP r r r �validate_request s zTokenBase.validate_requestc C s t d��dS )zb
:param request: OAuthlib request.
:type request: oauthlib.common.Request
z&Subclasses must implement this method.N)r] )r rP r r r �
estimate_type s zTokenBase.estimate_typeN)F)r r r � __slots__r^ r_ r` r r r r r\ s
r\ c @ s4 e Zd ZdZddd�Zdd d
�Zd d � Zd
d� ZdS )� BearerToken�request_validator�token_generator�refresh_token_generator�
expires_inNc C s* || _ |p t| _|p| j| _|p"d| _d S )Ni )rc rR rd re rf )r rc rd rf re r r r r s
zBearerToken.__init__Fc K s� d|krt jdt� t| j�r*| j|�}n| j}||_| j|�|dd�}|jdk rbdj|j�|d< |r�|jr�| j j
|� r�|j|d< n| j |�|d< |j |j
p�i � t|�S ) z�
Create a BearerToken, by default without refresh token.
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:param refresh_token:
Z
save_tokenzx`save_token` has been deprecated, it was not called internally.If you do, call `request_validator.save_token()` instead.ZBearer)rL rf �
token_typeN� r
rQ )�warnings�warn�DeprecationWarning�callablerf rd r r3 rQ rc Zrotate_refresh_tokenre �updateZextra_credentialsr )r rP rQ rS rf r8 r r r � create_token' s&
zBearerToken.create_tokenc C s t |�}| jj||j|�S )zb
:param request: OAuthlib request.
:type request: oauthlib.common.Request
)r[ rc Zvalidate_bearer_tokenr )r rP r8 r r r r_ Q s z BearerToken.validate_requestc C s: |j jdd�jd�d j� dkr$dS |jdk r2dS dS dS ) zb
:param request: OAuthlib request.
:type request: oauthlib.common.Request
r& r" rh r rW � N� )r< rX rY r) rL )r rP r r r r` Z s
zBearerToken.estimate_type)rc rd re rf )NNNN)F)r r r ra r rn r_ r` r r r r rb s
* rb )NNNr" r# Nr )N)r" )F)�__doc__r* r6 ri �binasciir � urllib.parser Zoauthlibr Zoauthlib.commonr r r" r �dictr rK rM rN rO rR rU r[ r\ rb r r r r �<module> s0 .
f