U

��I]��@sfdZd
dl
mZmZ
d
dlZd
dlmZ
ddlmZm	Z	
ddl
mZmZ
e�
e�
ZGd	d
�d
e�ZdS)z�
oauthlib.oauth2.rfc6749.endpoint.revocation
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

An implementation of the OAuth 2 `Token Revocation`_ spec (draft 11).

.. _`Token Revocation`: https://tools.ietf.org/html/draft-ietf-oauth-revocation-11
�)�absolute_import�unicode_literalsN)
�Request�)�OAuth2Error�UnsupportedTokenTypeError�
)�BaseEndpoint�catch_errors_and_unavailabilityc@s8eZ
dZd
ZdZdZd
dd�
Zedd	d
�
�
Zdd�Z	dS)�RevocationEndpointz�Token revocation endpoint.

    Endpoint used by authenticated clients to revoke access and refresh tokens.
    Commonly this will be part of the Authorization Endpoint.
    )Zaccess_tokenZ
refresh_token)
�POSTNFcCs&t�
|�

|
|_|p|j|_||_dS)
N)r	�__init__�request_validator�valid_token_types�supported_token_types�enable_jsonp)�selfrrr�r�N/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/revocation.pyr
!s


�zRevocationEndpoint.__init__rc	
Cs�d
ddd�}t|
|||d�}z|�
|�

t�d|�
Wnltk
r�
}
zNt�d||�
|j}|jrv|jrvd|j|f}|�|j	�

|||j
fWY�Sd	}~XYnX|j�|j
|j|�
d
}|jr�|jr�|jd}i|dfS)
a�Revoke supplied access or refresh token.


        The authorization server responds with HTTP status code 200 if the
        token has been revoked sucessfully or if the client submitted an
        invalid token.

        Note: invalid tokens do not cause an error response since the client
        cannot handle such an error in a reasonable way.  Moreover, the purpose
        of the revocation request, invalidating the particular token, is
        already achieved.

        The content of the response body is ignored by the client as all
        necessary information is conveyed in the response code.

        An invalid token type hint value is ignored by the authorization server
        and does not influence the revocation response.
        zapplication/jsonzno-storezno-cache)zContent-Typez
Cache-ControlZPragma)�http_method�body�headerszToken revocation valid for %r.z)Client error during validation of %r. %r.z%s(%s);N�z();��)r�validate_revocation_request�log�debugrZjsonr�callback�updaterZstatus_coderZrevoke_token�tokenZtoken_type_hint)	rZurirrrZresp_headers�request�
eZ
response_bodyrrr�create_revocation_response)s8

�
�









"

�



z-RevocationEndpoint.create_revocation_responsecCs6|�|
�

|�
|
�

|�|
�

|�|
�

|�|
�

d
S)aEnsure the request is valid.

        The client constructs the request by including the following parameters
        using the "application/x-www-form-urlencoded" format in the HTTP
        request entity-body:

        token (REQUIRED).  The token that the client wants to get revoked.

        token_type_hint (OPTIONAL).  A hint about the type of the token
        submitted for revocation.  Clients MAY pass this parameter in order to
        help the authorization server to optimize the token lookup.  If the
        server is unable to locate the token using the given hint, it MUST
        extend its search accross all of its supported token types.  An
        authorization server MAY ignore this parameter, particularly if it is
        able to detect the token type automatically.  This specification
        defines two such values:

                *  access_token: An Access Token as defined in [RFC6749],
                    `section 1.4`_

                *  refresh_token: A Refresh Token as defined in [RFC6749],
                    `section 1.5`_

                Specific implementations, profiles, and extensions of this
                specification MAY define other values for this parameter using
                the registry defined in `Section 4.1.2`_.

        The client also includes its authentication credentials as described in
        `Section 2.3`_. of [`RFC6749`_].

        .. _`section 1.4`: https://tools.ietf.org/html/rfc6749#section-1.4
        .. _`section 1.5`: https://tools.ietf.org/html/rfc6749#section-1.5
        .. _`section 2.3`: https://tools.ietf.org/html/rfc6749#section-2.3
        .. _`Section 4.1.2`: https://tools.ietf.org/html/draft-ietf-oauth-revocation-11#section-4.1.2
        .. _`RFC6749`: https://tools.ietf.org/html/rfc6749
        N)Z_raise_on_bad_methodZ_raise_on_bad_post_requestZ_raise_on_missing_tokenZ_raise_on_invalid_clientZ_raise_on_unsupported_token)rr rrrrXs
%







z.RevocationEndpoint.validate_revocation_request)NF)rNN)
�__name__�
__module__�__qualname__�__doc__rZvalid_request_methodsr
r
r"rrrrrrs

�


�.r)r&Z
__future__rrZloggingZoauthlib.commonr�errorsrr�baser	r
Z	getLoggerr#rrrrrr�<module>s