/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/__pycache__
Edit: /usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/__pycache__/tokens.cpython-310.pyc (9875B)
o
‘¸õaY+ ã @ sÜ d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl
m Z m Z ddl
mZ G d d
„ d
eƒZ d d
d„Zdd„ Zd!dd„Zd"dd„Zd#dd„Zdd„ Zdd„ ZG d d „ d ƒZG d d „ d eƒZdS )$zÿ
oauthlib.oauth2.rfc6749.tokens
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This module contains methods for adding two types of access tokens to requests.
- Bearer https://tools.ietf.org/html/rfc6750
- MAC https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01
é N)Ú
b2a_base64)Úurlparse)Úcommon)Úadd_params_to_qsÚadd_params_to_urié )Úutilsc sr e Zd Zd‡ fdd„ Zedd„ ƒZedd„ ƒZedd „ ƒZed
d „ ƒZed d
„ ƒZ edd„ ƒZ
edd„ ƒZ ‡ Z S )Ú OAuth2TokenNc st t ƒ |¡ d | _d|v r|d rtt |d ¡ƒ| _|d ur4tt |¡ƒ| _| jd u r2| j| _d S d S | j| _d S )NÚscope)ÚsuperÚ__init__Ú
_new_scopeÚsetr Ú
scope_to_listÚ
_old_scope)ÚselfÚparamsÚ old_scope©Ú __class__© ú@/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/tokens.pyr s
ý zOAuth2Token.__init__c C s | j | jkS ©N)r
r ©r r r r Ú
scope_changed& ó zOAuth2Token.scope_changedc C ó t | j¡S r )r Ú
list_to_scoper r r r r r * r zOAuth2Token.old_scopec C ó
t | jƒS r )Úlistr r r r r Ú
old_scopes. ó
zOAuth2Token.old_scopesc C r r )r r r
r r r r r
2 r zOAuth2Token.scopec C r r )r r
r r r r Úscopes6 r! zOAuth2Token.scopesc C ó t | j| j ƒS r )r r r
r r r r Úmissing_scopes: ó zOAuth2Token.missing_scopesc C r# r )r r
r r r r r Úadditional_scopes> r% z OAuth2Token.additional_scopesr )
Ú__name__Ú
__module__Ú __qualname__r Úpropertyr r r r
r" r$ r& Ú
__classcell__r r r r r s
r Ú ú
hmac-sha-1c C s0 | ¡ }t |¡\} } | ¡ dkrtj}
n| ¡ dkr tj}
ntdƒ‚|
dkr5|p3d t | ¡t
¡ ¡}nt
¡ }t
¡ }t
|ƒ\}}}}}}|rP|d | }n|}|duro|
dkro| d¡}t|
|ƒ ¡ ƒdd … d¡}nd
}g }|
dkr}| |¡ n
| |¡ | |¡ | | ¡ ¡ | |¡ | | ¡ | | ¡ |
dkr¦| |¡ | |p«d
¡ d |¡d }t|tƒr¾| d¡}t || d¡|
¡}t| ¡ ƒdd … d¡}g }| d | ¡ |
dkré| d
| ¡ | d| ¡ |rù| d| ¡ |r| d| ¡ | d| ¡ |pi }d |¡|d< |S )a_ Add an `MAC Access Authentication`_ signature to headers.
Unlike OAuth 1, this HMAC signature does not require inclusion of the
request payload/body, neither does it use a combination of client_secret
and token_secret but rather a mac_key provided together with the access
token.
Currently two algorithms are supported, "hmac-sha-1" and "hmac-sha-256",
`extension algorithms`_ are not supported.
Example MAC Authorization header, linebreaks added for clarity
Authorization: MAC id="h480djs93hd8",
nonce="1336363200:dj83hs9s",
mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM="
.. _`MAC Access Authentication`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01
.. _`extension algorithms`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01#section-7.1
:param token:
:param uri: Request URI.
:param key: MAC given provided by token endpoint.
:param http_method: HTTP Request method.
:param nonce:
:param headers: Request headers as a dictionary.
:param body:
:param ext:
:param hash_algorithm: HMAC algorithm provided by token endpoint.
:param issue_time: Time when the MAC credentials were issued (datetime).
:param draft: MAC authentication specification version.
:return: headers dictionary with the authorization field added.
r- z hmac-sha-256zunknown hash algorithmr z{}:{}ú?Nzutf-8éÿÿÿÿr, Ú
z MAC id="%s"zts="%s"z
nonce="%s"z
bodyhash="%s"zext="%s"zmac="%s"z, Ú
Authorization)Úupperr Ú
host_from_uriÚlowerÚhashlibÚsha1Úsha256Ú
ValueErrorÚformatÚ generate_ager Úgenerate_nonceÚgenerate_timestampr Úencoder ÚdigestÚdecodeÚappendÚjoinÚ
isinstanceÚstrÚhmacÚnew)ÚtokenÚuriÚkeyÚ http_methodÚnonceÚheadersÚbodyÚextÚhash_algorithmÚ
issue_timeÚdraftÚhostÚportÚhÚtsÚschÚnetÚpathÚparÚqueryÚfraÚ request_uriÚbodyhashÚbaseÚ base_stringÚsignÚheaderr r r Úprepare_mac_headerC sf ( ÿ
ra c C ó t |d| fgƒS )a Add a `Bearer Token`_ to the request URI.
Not recommended, use only if client can't use authorization header or body.
http://www.example.com/path?access_token=h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param uri:
Ú access_token)r )rF rG r r r Úprepare_bearer_uri° s rd c C s |pi }d| |d< |S )zëAdd a `Bearer Token`_ to the request URI.
Recommended method of passing bearer tokens.
Authorization: Bearer h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param headers:
z Bearer %sr1 r )rF rK r r r Úprepare_bearer_headers¾ s re c C rb )z¯Add a `Bearer Token`_ to the request body.
access_token=h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param body:
rc )r )rF rL r r r Úprepare_bearer_bodyÎ s
rf Fc C s t ¡ S )zp
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:param refresh_token:
)r Úgenerate_token)ÚrequestÚ
refresh_tokenr r r Úrandom_token_generatorÛ s rj c s ‡ ‡fdd„}|S )z
:param private_pem:
c s ˆ | _ t ˆ| ¡S r )Úclaimsr Úgenerate_signed_token)rh ©ÚkwargsÚ private_pemr r Úsigned_token_generatorè s z6signed_token_generator.
.signed_token_generatorr )ro rn rp r rm r rp ä s rp c C sP d}d| j v r#| j d¡ ¡ }t|ƒdkr!|d ¡ dkr!|d }|S | j}|S )zç
Helper function to extract a token from the request header.
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:return: Return the token or None if the Authorization header is malformed.
Nr1 é r Úbearerr )rK ÚgetÚsplitÚlenr4 rc )rh rF Ú split_headerr r r Úget_token_from_headerï s
þrw c @ s& e Zd Zd dd„Zdd„ Zdd„ ZdS )
Ú TokenBaseFc C ó t dƒ‚)Nú&Subclasses must implement this method.©ÚNotImplementedError)r rh ri r r r Ú__call__ s zTokenBase.__call__c C ry ©úb
:param request: OAuthlib request.
:type request: oauthlib.common.Request
rz r{ ©r rh r r r Úvalidate_request ó zTokenBase.validate_requestc C ry r~ r{ r€ r r r Ú
estimate_type r‚ zTokenBase.estimate_typeN©F)r' r( r) r} r rƒ r r r r rx s
rx c @ s8 e Zd ZdZ d dd„Zd
dd„Zdd „ Zd
d „ ZdS )Ú BearerToken)Úrequest_validatorÚtoken_generatorÚrefresh_token_generatorÚ
expires_inNc C s* || _ |pt| _|p | j| _|pd| _d S )Ni )r† rj r‡ rˆ r‰ )r r† r‡ r‰ rˆ r r r r s
ÿzBearerToken.__init__Fc K sª d|v r
t dt¡ t| jƒr| |¡}n| j}||_| |¡|ddœ}|jdur1d |j¡|d< |rI|jrB| j
|¡sB|j|d< n| |¡|d< | |j
pOi ¡ t|ƒS ) zÁ
Create a BearerToken, by default without refresh token.
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:param refresh_token:
Ú
save_tokenzx`save_token` has been deprecated, it was not called internally.If you do, call `request_validator.save_token()` instead.ÚBearer)rc r‰ Ú
token_typeNú r
ri )ÚwarningsÚwarnÚDeprecationWarningÚcallabler‰ r‡ r" rA ri r† Úrotate_refresh_tokenrˆ ÚupdateÚextra_credentialsr )r rh ri rn r‰ rF r r r Ú create_token& s, þ
ý
ÿ zBearerToken.create_tokenc C s t |ƒ}| j ||j|¡S )r )rw r† Úvalidate_bearer_tokenr" )r rh rF r r r r P s ÿz BearerToken.validate_requestc C s6 |j dd¡ d¡d ¡ dkrdS |jdurdS dS ) r r1 r, r r rr é Né )rK rs rt r4 rc r€ r r r rƒ Y s
zBearerToken.estimate_type)NNNNr„ )r' r( r) Ú __slots__r r• r rƒ r r r r r… s
ÿ
* r… )NNNr, r- Nr r )r, r„ )Ú__doc__r5 rD rŽ Úbinasciir Ú urllib.parser Úoauthlibr Úoauthlib.commonr r r, r Údictr ra rd re rf rj rp rw rx r… r r r r Ú s4 .
ùm