o b @s@dZddlZddlmZddlmZmZmZGdddeZ dS) z authlib.oauth2.rfc6750.validator ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Validate Bearer Token for in request, scope and token. N) scope_to_list)InvalidRequestErrorInvalidTokenErrorInsufficientScopeErrorc@sNeZdZdZdddZddZddZd d Zd d ZdddZ dddZ dS)BearerTokenValidatorZbearerNcCs ||_dSNrealm)selfr r _/var/www/secure340b-portal/env/lib/python3.10/site-packages/authlib/oauth2/rfc6750/validator.py__init__s zBearerTokenValidator.__init__cCt)a_A method to query token from database with the given token string. Developers MUST re-implement this method. For instance:: def authenticate_token(self, token_string): return get_token_from_database(token_string) :param token_string: A string to represent the access_token. :return: token NotImplementedError)r token_stringr r rauthenticate_token z'BearerTokenValidator.authenticate_tokencCr)aCheck if the HTTP request is valid or not. Developers MUST re-implement this method. For instance, your server requires a "X-Device-Version" in the header:: def request_invalid(self, request): return 'X-Device-Version' in request.headers Usually, you don't have to detect if the request is valid or not, you can just return a ``False``. :param request: instance of HttpRequest :return: Boolean r)r requestr r rrequest_invalid#sz$BearerTokenValidator.request_invalidcCr)a(Check if this token is revoked. Developers MUST re-implement this method. If there is a column called ``revoked`` on the token table:: def token_revoked(self, token): return token.revoked :param token: token instance :return: Boolean r)r tokenr r r token_revoked3rz"BearerTokenValidator.token_revokedcCs|}|sdS|tkS)NF)Zget_expires_attime)r rZ expires_atr r r token_expired?s z"BearerTokenValidator.token_expiredANDcCsr|sdSt|}|sdSt|}tt|}|dkr"|| S|dkr+||@ St|r5||| Std)NFTrORzInvalid operator value)r get_scopeset issupersetcallable ValueError)r rscopeoperatorZ token_scopesZresource_scopesr r rscope_insufficientEs     z'BearerTokenValidator.scope_insufficientcCsv||rt||}|st|jd||r t|jd||r+t|jd||||r9t| ||S)Nr ) rrrrr rrr%rr)r rr#rZscope_operatorrr r r__call__Ws       zBearerTokenValidator.__call__r )r) __name__ __module__ __qualname__Z TOKEN_TYPErrrrrr%r&r r r rrs   r) __doc__rZ rfc6749.utilrerrorsrrrobjectrr r r rs