관리-도구
편집 파일: introspect.cpython-39.pyc
a \��`w � @ sZ d Z ddlZddlZddlmZ ddlmZ ddlmZm Z e� e �Z G dd � d e�Z dS ) z� oauthlib.oauth2.rfc6749.endpoint.introspect ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ An implementation of the OAuth 2.0 `Token Introspection`. .. _`Token Introspection`: https://tools.ietf.org/html/rfc7662 � N)�Request� )� OAuth2Error� )� BaseEndpoint� catch_errors_and_unavailabilityc @ s8 e Zd ZdZdZdZd dd�Zed dd ��Zd d � Z dS )�IntrospectEndpointa� Introspect token endpoint. This endpoint defines a method to query an OAuth 2.0 authorization server to determine the active state of an OAuth 2.0 token and to determine meta-information about this token. OAuth 2.0 deployments can use this method to convey information about the authorization context of the token from the authorization server to the protected resource. To prevent the values of access tokens from leaking into server-side logs via query parameters, an authorization server offering token introspection MAY disallow the use of HTTP GET on the introspection endpoint and instead require the HTTP POST method to be used at the introspection endpoint. )Z access_tokenZ refresh_token)�POSTNc C s t �| � || _|p| j| _d S )N)r �__init__�request_validator�valid_token_types�supported_token_types)�selfr r � r �P/usr/lib/python3.9/site-packages/oauthlib/oauth2/rfc6749/endpoints/introspect.pyr ) s �zIntrospectEndpoint.__init__r c C s� dddd�}t ||||�}z| �|� t�d|� W nL ty� } z4t�d||� |�|j� ||j|jfW Y d}~S d}~0 0 | j � |j |j |�}|du r�|t� tdd ��d fS d |v r�|�d � |t� tf d d i|���d fS ) a* Create introspect valid or invalid response If the authorization server is unable to determine the state of the token without additional information, it SHOULD return an introspection response indicating the token is not active as described in Section 2.2. zapplication/jsonzno-storezno-cache)z Content-Typez Cache-ControlZPragmaz Token introspect valid for %r.z)Client error during validation of %r. %r.NF)�active�� r T)r �validate_introspect_request�log�debugr �update�headers�jsonZ status_coder Zintrospect_token�tokenZtoken_type_hint�dumps�dict�pop) r ZuriZ http_method�bodyr Z resp_headers�request�eZclaimsr r r �create_introspect_response/ s, � $� z-IntrospectEndpoint.create_introspect_responsec C s6 | � |� | �|� | �|� | �|� | �|� dS )a� Ensure the request is valid. The protected resource calls the introspection endpoint using an HTTP POST request with parameters sent as "application/x-www-form-urlencoded". token REQUIRED. The string value of the token. token_type_hint OPTIONAL. A hint about the type of the token submitted for introspection. The protected resource MAY pass this parameter to help the authorization server optimize the token lookup. If the server is unable to locate the token using the given hint, it MUST extend its search across all of its supported token types. An authorization server MAY ignore this parameter, particularly if it is able to detect the token type automatically. * access_token: An Access Token as defined in [`RFC6749`], `section 1.4`_ * refresh_token: A Refresh Token as defined in [`RFC6749`], `section 1.5`_ The introspection endpoint MAY accept other OPTIONAL parameters to provide further context to the query. For instance, an authorization server may desire to know the IP address of the client accessing the protected resource to determine if the correct client is likely to be presenting the token. The definition of this or any other parameters are outside the scope of this specification, to be defined by service documentation or extensions to this specification. .. _`section 1.4`: http://tools.ietf.org/html/rfc6749#section-1.4 .. _`section 1.5`: http://tools.ietf.org/html/rfc6749#section-1.5 .. _`RFC6749`: http://tools.ietf.org/html/rfc6749 N)Z_raise_on_bad_methodZ_raise_on_bad_post_requestZ_raise_on_missing_tokenZ_raise_on_invalid_clientZ_raise_on_unsupported_token)r r r r r r R s $ z.IntrospectEndpoint.validate_introspect_request)N)r NN) �__name__� __module__� __qualname__�__doc__r Zvalid_request_methodsr r r r r r r r r s � "r )r$ r ZloggingZoauthlib.commonr �errorsr �baser r Z getLoggerr! r r r r r r �<module> s