File: //lib/python3/dist-packages/oauthlib/oauth2/rfc6749/__pycache__/tokens.cpython-38.pyc
U
��I], � @ s
d Z ddlmZmZ ddlZddlZddlmZ ddlZddl m
Z
ddl m Z m
Z
mZ ddlmZ zdd lmZ W n ek
r� dd lmZ Y nX G d
d � d e�Zd!dd�Zdd� Zd"dd�Zd#dd�Zd$dd�Zdd� Zdd � Z G d d � d e �Z G d d � d e �Z dS )%z�
oauthlib.oauth2.rfc6749.tokens
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This module contains methods for adding two types of access tokens to requests.
- Bearer https://tools.ietf.org/html/rfc6750
- MAC https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01
� )�absolute_import�unicode_literalsN)�
b2a_base64)�common)�add_params_to_qs�add_params_to_uri� unicode_type� )�utils)�urlparsec sr e Zd Zd� fdd� Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z � Z S )� OAuth2TokenNc sr t t| ��|� d | _d|kr:|d r:tt�|d ��| _|d k rftt�|��| _| jd krn| j| _n| j| _d S )N�scope)�superr �__init__�
_new_scope�setr
Z
scope_to_list�
_old_scope)�selfZparams� old_scope�� __class__� �@/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/tokens.pyr s
zOAuth2Token.__init__c C s | j | jkS �N)r r �r r r r �
scope_changed, s zOAuth2Token.scope_changedc C s t �| j�S r )r
�
list_to_scoper r r r r r 0 s zOAuth2Token.old_scopec C s
t | j�S r )�listr r r r r �
old_scopes4 s zOAuth2Token.old_scopesc C s t �| j�S r )r
r r r r r r r
8 s zOAuth2Token.scopec C s
t | j�S r )r r r r r r �scopes< s zOAuth2Token.scopesc C s t | j| j �S r )r r r r r r r �missing_scopes@ s zOAuth2Token.missing_scopesc C s t | j| j �S r )r r r r r r r �additional_scopesD s z OAuth2Token.additional_scopes)N)
�__name__�
__module__� __qualname__r �propertyr r r r
r r r! �
__classcell__r r r r r s
r � �
hmac-sha-1c C s: |� � }t�|�\} } |�� dkr*tj}
n |�� dkr>tj}
ntd��|
dkrj|pfd�t� | �t
� � �}nt
� � }t
� � }t
|�\}}}}}}|r�|d | }n|}|dk r�|
dkr�|�d�}t|
|��� �dd � �d�}nd
}g }|
dkr�|�|� n|�|� |�|� |�|� � � |�|� |�| � |�| � |
dk�rN|�|� |�|�pZd
� d �|�d }t|t��r�|�d�}t�||�d�|
�}t|�� �dd � �d�}g }|�d | � |
dk�r�|�d
| � |�d| � |�r�|�d| � |�r|�d| � |�d| � |�p&i }d�|�|d< |S )a_ Add an `MAC Access Authentication`_ signature to headers.
Unlike OAuth 1, this HMAC signature does not require inclusion of the
request payload/body, neither does it use a combination of client_secret
and token_secret but rather a mac_key provided together with the access
token.
Currently two algorithms are supported, "hmac-sha-1" and "hmac-sha-256",
`extension algorithms`_ are not supported.
Example MAC Authorization header, linebreaks added for clarity
Authorization: MAC id="h480djs93hd8",
nonce="1336363200:dj83hs9s",
mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM="
.. _`MAC Access Authentication`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01
.. _`extension algorithms`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01#section-7.1
:param token:
:param uri: Request URI.
:param key: MAC given provided by token endpoint.
:param http_method: HTTP Request method.
:param nonce:
:param headers: Request headers as a dictionary.
:param body:
:param ext:
:param hash_algorithm: HMAC algorithm provided by token endpoint.
:param issue_time: Time when the MAC credentials were issued (datetime).
:param draft: MAC authentication specification version.
:return: headers dictionary with the authorization field added.
r( z hmac-sha-256zunknown hash algorithmr z{0}:{1}�?Nzutf-8���r' �
z MAC id="%s"zts="%s"z
nonce="%s"z
bodyhash="%s"zext="%s"zmac="%s"z, �
Authorization)�upperr
Z
host_from_uri�lower�hashlibZsha1Zsha256�
ValueError�formatZ generate_ager Zgenerate_nonceZgenerate_timestampr �encoder Zdigest�decode�append�join�
isinstancer �hmac�new)�token�uri�keyZ http_methodZnonce�headers�bodyZextZhash_algorithmZ
issue_timeZdraftZhostZport�hZtsZschZnet�pathZparZqueryZfraZ request_uriZbodyhash�baseZ base_stringZsign�headerr r r �prepare_mac_headerI sf ( �
rB c C s t |d| fg�S )a Add a `Bearer Token`_ to the request URI.
Not recommended, use only if client can't use authorization header or body.
http://www.example.com/path?access_token=h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param uri:
� access_token)r )r9 r: r r r �prepare_bearer_uri� s rD c C s |pi }d| |d< |S )z�Add a `Bearer Token`_ to the request URI.
Recommended method of passing bearer tokens.
Authorization: Bearer h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param headers:
z Bearer %sr, r )r9 r< r r r �prepare_bearer_headers� s rE c C s t |d| fg�S )z�Add a `Bearer Token`_ to the request body.
access_token=h480djs93hd8
.. _`Bearer Token`: https://tools.ietf.org/html/rfc6750
:param token:
:param body:
rC )r )r9 r= r r r �prepare_bearer_body� s
rF Fc C s t �� S )zp
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:param refresh_token:
)r Zgenerate_token)�request�
refresh_tokenr r r �random_token_generator� s rI c s � �fdd�}|S )z
:param private_pem:
c s � | _ t��| �S r )Zclaimsr Zgenerate_signed_token)rG ��kwargs� private_pemr r �signed_token_generator� s z6signed_token_generator.<locals>.signed_token_generatorr )rL rK rM r rJ r rM � s rM c C sN d}d| j krD| j �d��� }t|�dkrJ|d �� dkrJ|d }n| j}|S )z�
Helper function to extract a token from the request header.
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:return: Return the token or None if the Authorization header is malformed.
Nr, � r �bearerr )r< �get�split�lenr. rC )rG r9 Z split_headerr r r �get_token_from_header� s
rS c @ s& e Zd Zd dd�Zdd� Zdd� ZdS )
� TokenBaseFc C s t d��d S )N�&Subclasses must implement this method.��NotImplementedError)r rG rH r r r �__call__ s zTokenBase.__call__c C s t d��dS ��b
:param request: OAuthlib request.
:type request: oauthlib.common.Request
rU NrV �r rG r r r �validate_request s zTokenBase.validate_requestc C s t d��dS rY rV r[ r r r �
estimate_type s zTokenBase.estimate_typeN)F)r" r# r$ rX r\ r] r r r r rT s
rT c @ s4 e Zd ZdZd dd�Zd
dd�Zdd � Zd
d � ZdS )� BearerToken)�request_validator�token_generator�refresh_token_generator�
expires_inNc C s* || _ |p t| _|p| j| _|p"d| _d S )Ni )r_ rI r` ra rb )r r_ r` rb ra r r r r # s
�zBearerToken.__init__Fc K s� d|krt �dt� t| j�r*| �|�}n| j}||_| �|�|dd�}|jdk rbd�|j�|d< |r�|jr�| j �
|�s�|j|d< n| � |�|d< |� |j
p�i � t|�S ) z�
Create a BearerToken, by default without refresh token.
:param request: OAuthlib request.
:type request: oauthlib.common.Request
:param refresh_token:
Z
save_tokenzx`save_token` has been deprecated, it was not called internally.If you do, call `request_validator.save_token()` instead.ZBearer)rC rb �
token_typeN� r
rH )�warnings�warn�DeprecationWarning�callablerb r` r r5 rH r_ Zrotate_refresh_tokenra �updateZextra_credentialsr )r rG rH rK rb r9 r r r � create_token, s, �
�
� zBearerToken.create_tokenc C s t |�}| j�||j|�S )rZ )rS r_ Zvalidate_bearer_tokenr )r rG r9 r r r r\ V s �z BearerToken.validate_requestc C s: |j �dd��d�d �� dkr$dS |jdk r2dS dS dS ) rZ r, r' rd r rO � N� )r< rP rQ r. rC r[ r r r r] _ s
zBearerToken.estimate_type)NNNN)F)r" r# r$ � __slots__r rj r\ r] r r r r r^ s �
* r^ )NNNr' r( Nr )N)r' )F) �__doc__Z
__future__r r r/ r7 Zbinasciir re Zoauthlibr Zoauthlib.commonr r r r' r
r � ImportErrorZ urllib.parse�dictr rB rD rE rF rI rM rS �objectrT r^ r r r r �<module> s: . �
m