관리-도구
편집 파일: tokens.cpython-39.opt-1.pyc
a \��`Y+ � @ s� d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl m Z m Z ddl mZ G d d � d e�Zd d d�Zdd� Zd!dd�Zd"dd�Zd#dd�Zdd� Zdd� ZG d d � d �ZG d d � d e�ZdS )$z� oauthlib.oauth2.rfc6749.tokens ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This module contains methods for adding two types of access tokens to requests. - Bearer https://tools.ietf.org/html/rfc6750 - MAC https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01 � N)� b2a_base64)�urlparse)�common)�add_params_to_qs�add_params_to_uri� )�utilsc sr e Zd Zd� fdd� Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Z edd� �Z edd� �Z � Z S )� OAuth2TokenNc sn t � �|� d | _d|v r6|d r6tt�|d ��| _|d urbtt�|��| _| jd u rj| j| _n| j| _d S )N�scope)�super�__init__� _new_scope�setr Z scope_to_list� _old_scope)�self�params� old_scope�� __class__� �B/usr/lib/python3.9/site-packages/oauthlib/oauth2/rfc6749/tokens.pyr s zOAuth2Token.__init__c C s | j | jkS �N)r r �r r r r � scope_changed& s zOAuth2Token.scope_changedc C s t �| j�S r )r � list_to_scoper r r r r r * s zOAuth2Token.old_scopec C s t | j�S r )�listr r r r r � old_scopes. s zOAuth2Token.old_scopesc C s t �| j�S r )r r r r r r r r 2 s zOAuth2Token.scopec C s t | j�S r )r r r r r r �scopes6 s zOAuth2Token.scopesc C s t | j| j �S r )r r r r r r r �missing_scopes: s zOAuth2Token.missing_scopesc C s t | j| j �S r )r r r r r r r �additional_scopes> s z OAuth2Token.additional_scopes)N) �__name__� __module__� __qualname__r �propertyr r r r r r r � __classcell__r r r r r s r � � hmac-sha-1c C s: |� � }t�|�\} } |�� dkr*tj} n |�� dkr>tj} ntd��| dkrj|pfd�t� | �t � � �}nt � � }t � � }t |�\}}}}}}|r�|d | }n|}|dur�| dkr�|�d�}t| |��� �dd � �d�}nd }g }| dkr�|�|� n|�|� |�|� |�|� � � |�|� |�| � |�| � | dk�rN|�|� |�|�pZd � d �|�d }t|t��r�|�d�}t�||�d�| �}t|�� �dd � �d�}g }|�d | � | dk�r�|�d | � |�d| � |�r�|�d| � |�r|�d| � |�d| � |�p&i }d�|�|d< |S )a_ Add an `MAC Access Authentication`_ signature to headers. Unlike OAuth 1, this HMAC signature does not require inclusion of the request payload/body, neither does it use a combination of client_secret and token_secret but rather a mac_key provided together with the access token. Currently two algorithms are supported, "hmac-sha-1" and "hmac-sha-256", `extension algorithms`_ are not supported. Example MAC Authorization header, linebreaks added for clarity Authorization: MAC id="h480djs93hd8", nonce="1336363200:dj83hs9s", mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM=" .. _`MAC Access Authentication`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01 .. _`extension algorithms`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01#section-7.1 :param token: :param uri: Request URI. :param key: MAC given provided by token endpoint. :param http_method: HTTP Request method. :param nonce: :param headers: Request headers as a dictionary. :param body: :param ext: :param hash_algorithm: HMAC algorithm provided by token endpoint. :param issue_time: Time when the MAC credentials were issued (datetime). :param draft: MAC authentication specification version. :return: headers dictionary with the authorization field added. r& z hmac-sha-256zunknown hash algorithmr z{}:{}�?Nzutf-8���r% � z MAC id="%s"zts="%s"z nonce="%s"z bodyhash="%s"zext="%s"zmac="%s"z, � Authorization)�upperr Z host_from_uri�lower�hashlibZsha1Zsha256� ValueError�formatZ generate_ager Zgenerate_nonceZgenerate_timestampr �encoder �digest�decode�append�join� isinstance�str�hmac�new)�token�uri�keyZ http_methodZnonce�headers�body�extZhash_algorithmZ issue_timeZdraft�host�port�h�tsZschZnet�pathZpar�queryZfraZ request_uriZbodyhash�baseZ base_string�sign�headerr r r �prepare_mac_headerC sf ( � rH c C s t |d| fg�S )a Add a `Bearer Token`_ to the request URI. Not recommended, use only if client can't use authorization header or body. http://www.example.com/path?access_token=h480djs93hd8 .. _`Bearer Token`: https://tools.ietf.org/html/rfc6750 :param token: :param uri: � access_token)r )r9 r: r r r �prepare_bearer_uri� s rJ c C s |pi }d| |d< |S )z�Add a `Bearer Token`_ to the request URI. Recommended method of passing bearer tokens. Authorization: Bearer h480djs93hd8 .. _`Bearer Token`: https://tools.ietf.org/html/rfc6750 :param token: :param headers: z Bearer %sr* r )r9 r< r r r �prepare_bearer_headers� s rK c C s t |d| fg�S )z�Add a `Bearer Token`_ to the request body. access_token=h480djs93hd8 .. _`Bearer Token`: https://tools.ietf.org/html/rfc6750 :param token: :param body: rI )r )r9 r= r r r �prepare_bearer_body� s rL Fc C s t �� S )zp :param request: OAuthlib request. :type request: oauthlib.common.Request :param refresh_token: )r Zgenerate_token)�request� refresh_tokenr r r �random_token_generator� s rO c s � �fdd�}|S )z :param private_pem: c s � | _ t��| �S r )Zclaimsr Zgenerate_signed_token)rM ��kwargs� private_pemr r �signed_token_generator� s z6signed_token_generator.<locals>.signed_token_generatorr )rR rQ rS r rP r rS � s rS c C sN d}d| j v rD| j �d��� }t|�dkrJ|d �� dkrJ|d }n| j}|S )z� Helper function to extract a token from the request header. :param request: OAuthlib request. :type request: oauthlib.common.Request :return: Return the token or None if the Authorization header is malformed. Nr* � r �bearerr )r< �get�split�lenr, rI )rM r9 Z split_headerr r r �get_token_from_header� s rY c @ s& e Zd Zd dd�Zdd� Zdd� ZdS ) � TokenBaseFc C s t d��d S )N�&Subclasses must implement this method.��NotImplementedError)r rM rN r r r �__call__ s zTokenBase.__call__c C s t d��dS ��b :param request: OAuthlib request. :type request: oauthlib.common.Request r[ Nr\ �r rM r r r �validate_request s zTokenBase.validate_requestc C s t d��dS r_ r\ ra r r r � estimate_type s zTokenBase.estimate_typeN)F)r r! r" r^ rb rc r r r r rZ s rZ c @ s4 e Zd ZdZd dd�Zd dd�Zdd � Zd d � ZdS )� BearerToken)�request_validator�token_generator�refresh_token_generator� expires_inNc C s* || _ |p t| _|p| j| _|p"d| _d S )Ni )re rO rf rg rh )r re rf rh rg r r r r s �zBearerToken.__init__Fc K s� d|v rt �dt� t| j�r*| �|�}n| j}||_| �|�|dd�}|jdurbd�|j�|d< |r�|jr�| j � |�s�|j|d< n| � |�|d< |� |j p�i � t|�S ) z� Create a BearerToken, by default without refresh token. :param request: OAuthlib request. :type request: oauthlib.common.Request :param refresh_token: Z save_tokenzx`save_token` has been deprecated, it was not called internally.If you do, call `request_validator.save_token()` instead.ZBearer)rI rh � token_typeN� r rN )�warnings�warn�DeprecationWarning�callablerh rf r r4 rN re Zrotate_refresh_tokenrg �updateZextra_credentialsr )r rM rN rQ rh r9 r r r � create_token& s, � � � zBearerToken.create_tokenc C s t |�}| j�||j|�S )r` )rY re Zvalidate_bearer_tokenr )r rM r9 r r r rb P s �z BearerToken.validate_requestc C s: |j �dd��d�d �� dkr$dS |jdur2dS dS dS ) r` r* r% rj r rU � N� )r< rV rW r, rI ra r r r rc Y s zBearerToken.estimate_type)NNNN)F)r r! r" � __slots__r rp rb rc r r r r rd s � * rd )NNNr% r& Nr )N)r% )F)�__doc__r- r7 rk Zbinasciir � urllib.parser Zoauthlibr Zoauthlib.commonr r r% r �dictr rH rJ rK rL rO rS rY rZ rd r r r r �<module> s2 . � m