| Server IP : 209.38.156.173 / Your IP : 216.73.216.122 [ Web Server : Apache/2.4.52 (Ubuntu) System : Linux lakekumayuhotel 5.15.0-136-generic #147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x86_64 User : root ( 0) PHP Version : 8.1.2-1ubuntu2.22 Disable Function : NONE Domains : 2 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/oauthlib/oauth2/rfc6749/__pycache__/ |
Upload File : |
o
���aY+ � @ s� d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl
m Z m Z ddl
mZ G d d
� d
e�Z d d
d�Zdd� Zd!dd�Zd"dd�Zd#dd�Zdd� Zdd� ZG d d � d �ZG d d � d e�ZdS )$z�
oauthlib.oauth2.rfc6749.tokens
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This module contains methods for adding two types of access tokens to requests.
- Bearer https://tools.ietf.org/html/rfc6750
- MAC https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01
� N)�
b2a_base64)�urlparse)�common)�add_params_to_qs�add_params_to_uri� )�utilsc sr e Zd Zd� fdd� Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z � Z S )� OAuth2TokenNc st t � �|� d | _d|v r|d rtt�|d ��| _|d ur4tt�|��| _| jd u r2| j| _d S d S | j| _d S )N�scope)�super�__init__�
_new_scope�setr �
scope_to_list�
_old_scope)�self�params� old_scope�� __class__� �@/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/tokens.pyr s
� zOAuth2Token.__init__c C s | j | jkS �N)r
r �r r r r �
scope_changed& � zOAuth2Token.scope_changedc C � t �| j�S r )r �
list_to_scoper r r r r r * r zOAuth2Token.old_scopec C �
t | j�S r )�listr r r r r �
old_scopes. �
zOAuth2Token.old_scopesc C r r )r r r
r r r r r
2 r zOAuth2Token.scopec C r r )r r
r r r r �scopes6 r! zOAuth2Token.scopesc C � t | j| j �S r )r r r
r r r r �missing_scopes: � zOAuth2Token.missing_scopesc C r# r )r r
r r r r r �additional_scopes> r% z OAuth2Token.additional_scopesr )
�__name__�
__module__� __qualname__r �propertyr r r r
r" r$ r& �
__classcell__r r r r r s
r � �
hmac-sha-1c C s0 |� � }t�|�\} } |�� dkrtj}
n|�� dkr tj}
ntd��|
dkr5|p3d�t� | �t
� � �}nt
� � }t
� � }t
|�\}}}}}}|rP|d | }n|}|duro|
dkro|�d�}t|
|��� �dd � �d�}nd
}g }|
dkr}|�|� n
|�|� |�|� |�|� � � |�|� |�| � |�| � |
dkr�|�|� |�|p�d
� d �|�d }t|t�r�|�d�}t�||�d�|
�}t|�� �dd � �d�}g }|�d | � |
dkr�|�d
| � |�d| � |r�|�d| � |�r|�d| � |�d| � |�pi }d�|�|d< |S )a_ Add an `MAC Access Authentication`_ signature to headers.
Unlike OAuth 1, this HMAC signature does not require inclusion of the
request payload/body, neither does it use a combination of client_secret
and token_secret but rather a mac_key provided together with the access
token.
Currently two algorithms are supported, "hmac-sha-1" and "hmac-sha-256",
`extension algorithms`_ are not supported.
Example MAC Authorization header, linebreaks added for clarity
Authorization: MAC id="h480djs93hd8",
nonce="1336363200:dj83hs9s",
mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM="
.. _`MAC Access Authentication`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01
.. _`extension algorithms`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01#section-7.1
:param token:
:param uri: Request URI.
:param key: MAC given provided by token endpoint.
:param http_method: HTTP Request method.
:param nonce:
:param headers: Request headers as a dictionary.
:param body:
:param ext:
:param hash_algorithm: HMAC algorithm provided by token endpoint.
:param issue_time: Time when the MAC credentials were issued (datetime).
:param draft: MAC authentication specification version.
:return: headers dictionary with the authorization field added.
r- z hmac-sha-256zunknown hash algorithmr z{}:{}�?Nzutf-8���r, �
z MAC id="%s"zts="%s"z
nonce="%s"z
bodyhash="%s"zext="%s"zmac="%s"z, �
Authorization)�upperr �
host_from_uri�lower�hashlib�sha1�sha256�
ValueError�format� generate_ager �generate_nonce�generate_timestampr �encoder �digest�decode�append�join�
isinstance�str�hmac�new)�token�uri�key� http_method�nonce�headers�body�ext�hash_algorithm�
issue_time�draft�host�port�h�ts�sch�net�path�par�query�fra� request_uri�bodyhash�base� base_string�sign�headerr r r �prepare_mac_headerC sf ( �
ra c C � t |d| fg�S )a Add a `Bearer Token`_ to the request URI.
Not recommended, use only if client can't use authorization header or body.
http://www.example.com/path?access_token=h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param uri:
� access_token)r )rF rG r r r �prepare_bearer_uri� s rd c C s |pi }d| |d< |S )z�Add a `Bearer Token`_ to the request URI.
Recommended method of passing bearer tokens.
Authorization: Bearer h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param headers:
z Bearer %sr1 r )rF rK r r r �prepare_bearer_headers� s re c C rb )z�Add a `Bearer Token`_ to the request body.
access_token=h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param body:
rc )r )rF rL r r r �prepare_bearer_body� s
rf Fc C s t �� S )zp
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:param refresh_token:
)r �generate_token)�request�
refresh_tokenr r r �random_token_generator� s rj c s � �fdd�}|S )z
:param private_pem:
c s � | _ t��| �S r )�claimsr �generate_signed_token)rh ��kwargs� private_pemr r �signed_token_generator� s z6signed_token_generator.<locals>.signed_token_generatorr )ro rn rp r rm r rp � s rp c C sP d}d| j v r#| j �d��� }t|�dkr!|d �� dkr!|d }|S | j}|S )z�
Helper function to extract a token from the request header.
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:return: Return the token or None if the Authorization header is malformed.
Nr1 � r �bearerr )rK �get�split�lenr4 rc )rh rF � split_headerr r r �get_token_from_header� s
�rw c @ s& e Zd Zd dd�Zdd� Zdd� ZdS )
� TokenBaseFc C � t d��)N�&Subclasses must implement this method.��NotImplementedError)r rh ri r r r �__call__ s zTokenBase.__call__c C ry ��b
:param request: OAuthlib request.
:type request: oauthlib.common.Request
rz r{ �r rh r r r �validate_request � zTokenBase.validate_requestc C ry r~ r{ r� r r r �
estimate_type r� zTokenBase.estimate_typeN�F)r' r( r) r} r� r� r r r r rx s
rx c @ s8 e Zd ZdZ d dd�Zd
dd�Zdd � Zd
d � ZdS )� BearerToken)�request_validator�token_generator�refresh_token_generator�
expires_inNc C s* || _ |pt| _|p | j| _|pd| _d S )Ni )r� rj r� r� r� )r r� r� r� r� r r r r s
�zBearerToken.__init__Fc K s� d|v r
t �dt� t| j�r| �|�}n| j}||_| �|�|dd�}|jdur1d�|j�|d< |rI|jrB| j �
|�sB|j|d< n| � |�|d< |� |j
pOi � t|�S ) z�
Create a BearerToken, by default without refresh token.
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:param refresh_token:
�
save_tokenzx`save_token` has been deprecated, it was not called internally.If you do, call `request_validator.save_token()` instead.�Bearer)rc r� �
token_typeN� r
ri )�warnings�warn�DeprecationWarning�callabler� r� r" rA ri r� �rotate_refresh_tokenr� �update�extra_credentialsr )r rh ri rn r� rF r r r � create_token& s, �
�
� zBearerToken.create_tokenc C s t |�}| j�||j|�S )r )rw r� �validate_bearer_tokenr" )r rh rF r r r r� P s �z BearerToken.validate_requestc C s6 |j �dd��d�d �� dkrdS |jdurdS dS ) r r1 r, r� r rr � N� )rK rs rt r4 rc r� r r r r� Y s
zBearerToken.estimate_type)NNNNr� )r' r( r) � __slots__r r� r� r� r r r r r� s
�
* r� )NNNr, r- Nr r )r, r� )�__doc__r5 rD r� �binasciir � urllib.parser �oauthlibr �oauthlib.commonr r r, r �dictr ra rd re rf rj rp rw rx r� r r r r �<module> s4 .
�m