o bD$@sLddlmZddlmZmZmZmZddlmZGddde Z ddZ dS) )ClientAuthentication) OAuth2ErrorInvalidGrantErrorInvalidScopeErrorUnsupportedGrantTypeError) scope_to_listc@seZdZdZd'ddZddZddZd d Zd d Zd dZ ddZ ddZ ddZ d(ddZ d(ddZddZddZddZd(dd Zd'd!d"Zd(d#d$Zd%d&ZdS))AuthorizationServeraAuthorization server that handles Authorization Endpoint and Token Endpoint. :param query_client: A function to get client by client_id. The client model class MUST implement the methods described by :class:`~authlib.oauth2.rfc6749.ClientMixin`. :param save_token: A method to save tokens. :param generate_token: A method to generate tokens. :param metadata: A dict of Authorization Server Metadata NcCs4||_||_||_||_d|_g|_g|_i|_dSN) query_client save_tokengenerate_tokenmetadata _client_auth_authorization_grants _token_grants _endpoints)selfr r r r rj/var/www/secure340b-portal/env/lib/python3.10/site-packages/authlib/oauth2/rfc6749/authorization_server.py__init__s zAuthorizationServer.__init__cCs(|jdur|jrt|j|_|||S)zAuthenticate client via HTTP request information with the given methods, such as ``client_secret_basic``, ``client_secret_post``. N)rr r)rrequestmethodsrrrauthenticate_client!s  z'AuthorizationServer.authenticate_clientcCs.|jdur|jrt|j|_|j||dS)afAdd more client auth method. The default methods are: * none: The client is a public client and does not have a client secret * client_secret_post: The client uses the HTTP POST parameters * client_secret_basic: The client uses HTTP Basic :param method: Name of the Auth method :param func: Function to authenticate the client The auth method accept two parameters: ``query_client`` and ``request``, an example for this method:: def authenticate_client_via_custom(query_client, request): client_id = request.headers['X-Client-Id'] client = query_client(client_id) do_some_validation(client) return client authorization_server.register_client_auth_method( 'custom', authenticate_client_via_custom) N)rr rregister)rmethodfuncrrrregister_client_auth_method)s z/AuthorizationServer.register_client_auth_methodcCdS)zwReturn a translations instance used for i18n error messages. Framework SHOULD implement this function. Nrrrrrrget_translationsDz$AuthorizationServer.get_translationscCr)z_Return a dict of error uris mapping. Framework SHOULD implement this function. Nrrrrrget_error_urisJr z"AuthorizationServer.get_error_uriscOr)z]Framework integration can re-implement this method to support signal system. Nr)rnameargskwargsrrr send_signalPr zAuthorizationServer.send_signalcCt)zThis method MUST be implemented in framework integrations. It is used to create an OAuth2Request instance. :param request: the "request" instance in framework :return: OAuth2Request instance NotImplementedErrorrrrrcreate_oauth2_requestVz)AuthorizationServer.create_oauth2_requestcCr&)zThis method MUST be implemented in framework integrations. It is used to create an HttpRequest instance. :param request: the "request" instance in framework :return: HttpRequest instance r'rrrrcreate_json_request_r*z'AuthorizationServer.create_json_requestcCr&)z=Return HTTP response. Framework MUST implement this function.r')rstatusbodyheadersrrrhandle_responsehsz#AuthorizationServer.handle_responsecCsN|r|jr!|jd}tt|}|r#t||s%t|ddSdSdSdS)zValidate if requested scope is supported by Authorization Server. Developers CAN re-write this method to meet your needs. scopes_supported)stateN)r getsetr issupersetr)rscoper1r0Zscopesrrrvalidate_requested_scopels    z,AuthorizationServer.validate_requested_scopecCs<t|dr |j||ft|dr|j||fdSdS)aRegister a grant class into the endpoint registry. Developers can implement the grants in ``authlib.oauth2.rfc6749.grants`` and register with this method:: class AuthorizationCodeGrant(grants.AuthorizationCodeGrant): def authenticate_user(self, credential): # ... authorization_server.register_grant(AuthorizationCodeGrant) :param grant_cls: a grant class. :param extensions: extensions for the grant class. check_authorization_endpointcheck_token_endpointN)hasattrrappendr)r grant_cls extensionsrrrregister_grantvs  z"AuthorizationServer.register_grantcCs|||j|j<dS)zAdd extra endpoint to authorization server. e.g. RevocationEndpoint:: authorization_server.register_endpoint(RevocationEndpoint) :param endpoint_cls: A endpoint class N)rZ ENDPOINT_NAME)rZ endpoint_clsrrrregister_endpointsz%AuthorizationServer.register_endpointcCs<|jD]\}}||rt||||Sqtd|j)zFind the authorization grant for current request. :param request: OAuth2Request instance. :return: grant instance z#Response type {!r} is not supported)rr7 _create_grantrformatZ response_typerrr;r<rrrget_authorization_grants  z+AuthorizationServer.get_authorization_grantcCsH|jD]\}}||r|j|jvrt||||Sqtd|j)zFind the token grant for current request. :param request: OAuth2Request instance. :return: grant instance z Grant type {!r} is not supported)rr8rZTOKEN_ENDPOINT_HTTP_METHODSr?rr@Z grant_typerArrrget_token_grants   z#AuthorizationServer.get_token_grantc Csn||jvr td||j|}||}z|j||WSty6}z |||WYd}~Sd}~ww)zValidate endpoint request and create endpoint response. :param name: Endpoint name :param request: HTTP request instance. :return: Response zThere is no "{}" endpoint.N)r RuntimeErrorr@Zcreate_endpoint_requestr/rhandle_error_response)rr"rZendpointerrorrrrcreate_endpoint_responses   z,AuthorizationServer.create_endpoint_responsec Cs||}z||}Wnty$}z |||WYd}~Sd}~wwz|}|||}|j|WStyM}z |||WYd}~Sd}~ww)zValidate authorization request and create authorization response. :param request: HTTP request instance. :param grant_user: if granted, it is resource owner. If denied, it is None. :returns: Response N)r)rBrrEZvalidate_authorization_requestcreate_authorization_responser/r)rrZ grant_usergrantrFZ redirect_urir#rrrrHs   z1AuthorizationServer.create_authorization_responsec Cs||}z||}Wnty$}z |||WYd}~Sd}~wwz||}|j|WStyK}z |||WYd}~Sd}~ww)ziValidate token request and create token response. :param request: HTTP request instance N)r)rCrrEZvalidate_token_requestcreate_token_responser/r)rrrIrFr#rrrrJs  z)AuthorizationServer.create_token_responsecCs|j|||||dS)N)Z translationsZ error_uris)r/rr!)rrrFrrrrEsz)AuthorizationServer.handle_error_response)NNr )__name__ __module__ __qualname____doc__rrrrr!r%r)r+r/r6r=r>rBrCrGrHrJrErrrrr s(         rcCs$|||}|r|D]}||q |Sr r)r;r<rserverrIextrrrr?s  r?N) rrerrorsrrrrutilrobjectrr?rrrrs   a