3
,[q9 @ s@ d Z ddlmZmZ ddlZddlZddlZddlZddlZddl Z y ddl
m Z ddl
m Z W n, e
k
r ddlmZ ddlm Z Y nX y(ddlmZ ddlmZ dd lmZ W n8 e
k
r ddlmZ ddlmZ dd lmZ Y nX y ddlZW n e
k
r ddljZY nX d
Zd Zej d ej Z ej d
Z dZ ej!dZ"ej#d dkZ$e$rje%Z&e'Z(ne)Z&e%Z(dd6d7Z9G d8d9 d9e:Z;G d:d; d;e<Z=dS )?z|
oauthlib.common
~~~~~~~~~~~~~~
This module provides data structures and utilities common
to all implementations of OAuth.
)absolute_importunicode_literalsN)randbits) SystemRandom) getrandbits)quote)unquote) urlencodeZ>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789z_ !"#$%&\'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}z&([^&;]*(?:password|token)[^=]*=)[^&;]+z&%[^0-9A-Fa-f]|%[0-9A-Fa-f][^0-9A-Fa-f]zAABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_.-Zoauthlib /c C s: t | tr| jdn| } t| |} t | tr6| jd} | S )Nzutf-8)
isinstance unicode_typeencode_quote
bytes_typedecode)sZsafe r /usr/lib/python3.6/common.pyr @ s
r c C s t | } t| tr | jd} | S )Nzutf-8)_unquoter r r )r r r r r J s
r c C s, t | }t|}t|tr |S |jdS d S )Nzutf-8)encode_params_utf8
_urlencoder r
r )paramsZ utf8_params
urlencodedr r r r T s
r c C sP g }xF| D ]>\}}|j t|tr*|jdn|t|tr@|jdn|f q
W |S )ziEnsures that all parameters in a list of 2-element tuples are encoded to
bytestrings using UTF-8
zutf-8)appendr r
r )r Zencodedkvr r r r ] s r c C sP g }xF| D ]>\}}|j t|tr*|jdn|t|tr@|jdn|f q
W |S )zfEnsures that all parameters in a list of 2-element tuples are decoded to
unicode using UTF-8.
zutf-8)r r r r )r Zdecodedr r r r r decode_params_utf8i s r z=&;:%+~,*@!()/?c C st | r.t | tk r.d}t|t | t | f tj| r@tdt rZt| trZ| jdn| } t j
| dd}t |S )a Decode a query string in x-www-form-urlencoded format into a sequence
of two-element tuples.
Unlike urlparse.parse_qsl(..., strict_parsing=True) urldecode will enforce
correct formatting of the query string by validation. If validation fails
a ValueError will be raised. urllib.parse_qsl will only raise errors if
any of name-value pairs omits the equals sign.
zError trying to decode a non urlencoded string. Found invalid characters: %s in the string: '%s'. Please ensure the request/response body is x-www-form-urlencoded.z%Invalid hex encoding in query string.zutf-8T)keep_blank_values) setr
ValueErrorINVALID_HEX_PATTERNsearchPY3r r
r urlparse parse_qslr )queryerrorr r r r urldecodex s
r( c C s t | tst | tr s z!generate_token..)r joinrange)lengthr: r )r: r; r generate_token s r@ c C sT dd l }tjj }|j|tj|jd d}|j|j |j|| d}t |d}|S )Nr )Zseconds)scopeZexpRS256zUTF-8)
jwtdatetimeZutcnowrA Z timedeltaZ
expires_inupdateclaimsr
to_unicode)Z private_pemZrequestrC ZnowrF tokenr r r generate_signed_token s
rI c C s dd l }|j|| dgdS )Nr rB )Z
algorithms)rC r )Z
public_pemrH rC r r r verify_signed_token s rJ c C s
t | |S )zGenerates an OAuth client_id
OAuth 2 specify the format of client_id in
https://tools.ietf.org/html/rfc6749#appendix-A.
)r@ )r? r: r r r generate_client_id s rK c C s2 t |tr|j }tj| dd}|j| t|S )z)Extend a query with a list of two-tuples.T)r )r r+ r. r$ r% extendr )r& r Z queryparamsr r r add_params_to_qs s
rM Fc C sF t j | \}}}}}}|r&t||}n
t||}t j||||||fS )z5Add a list of two-tuples to the uri query components.)r$ rM Z
urlunparse) urir ZfragmentZschZnetpathZparr& Zfrar r r add_params_to_uri s
rP c C sL t | t |krdS d}x*t| |D ] \}}|t|t|A O }q$W |dkS )a Near-constant time string comparison.
Used in order to avoid timing attacks on sensitive information such
as secret keys during request verification (`rootLabs`_).
.. _`rootLabs`: http://rdist.root.org/2010/01/07/timing-independent-array-comparison/
Fr )lenzipord)abresultr9 yr r r safe_string_equals! s rX UTF-8c s t | tr| S t | tr$t| dS t| dry t| W n4 tk
rN Y nJ tk
rn fdd| D S X t| dr| j } t fdd| D S | S )z:Convert a number of different types of objects to unicode.)encodingr) c 3 s | ]}t | V qd S )N)rG )r8 i)rZ r r r< B s z to_unicode..r. c 3 s& | ] \}}t | t | fV qd S )N)rG )r8 r r )rZ r r r< G s )r r
r r* r+ r, r r. )datarZ r )rZ r rG 3 s
rG c sb e Zd ZdZi Zdd Zdd Z fddZ fdd Zdd d Z fd
dZ
fddZ Z S )CaseInsensitiveDictz3Basic case insensitive dict with strings only keys.c C s2 t dd |D | _x|D ]}|| | |< qW d S )Nc s s | ]}|j |fV qd S )N)lower)r8 r r r r r< S s z/CaseInsensitiveDict.__init__..)r+ proxy)selfr\ r r r r __init__R s
z CaseInsensitiveDict.__init__c C s |j | jkS )N)r^ r_ )r` r r r r __contains__W s z CaseInsensitiveDict.__contains__c s. | j |j }tt| j| | j |j = d S )N)r_ r^ superr] __delitem__)r` r key) __class__r r rd Z s z CaseInsensitiveDict.__delitem__c s | j |j }tt| j|S )N)r_ r^ rc r] __getitem__)r` r re )rf r r rg _ s z CaseInsensitiveDict.__getitem__Nc C s || kr| | S |S )Nr )r` r defaultr r r getc s zCaseInsensitiveDict.getc s$ t t| j|| || j|j < d S )N)rc r] __setitem__r_ r^ )r` r r )rf r r rj f s z CaseInsensitiveDict.__setitem__c s8 t t| j|| x t||D ]}|| j|j < q W d S )N)rc r] rE r+ r_ r^ )r` argskwargsr )rf r r rE j s zCaseInsensitiveDict.update)N)
__name__
__module__ __qualname____doc__r_ ra rb rd rg ri rj rE
__classcell__r r )rf r r] L s
r] c @ sN e Zd ZdZdddZdd Zd d
Zed d Zed
d Z edd Z
dS )Requesta: A malleable representation of a signable HTTP request.
Body argument may contain any data, but parameters will only be decoded if
they are one of:
* urlencoded query string
* dict
* list of 2-tuples
Anything else will be treated as raw body data to be passed through
unmolested.
GETNutf-8c s fdd}||| _ ||| _t||p*i | _||| _t| j| _g | _i | _d d d d d d d d d d d d d d d d d d d d d d d d d d d d| _ | j j
t t | j
| j j
t | jpg | j j
| j d S )Nc s rt | S | S )N)rG )r9 )rZ r r s z"Request.__init__..)Z access_tokenZclientZ client_idZ
client_secretcodeZextra_credentialsZ
grant_typeZ redirect_uriZ
refresh_tokenZ
request_tokenZ
response_typerA ZscopesstaterH userZtoken_type_hintZ
response_modeZnonceZdisplaypromptrF Zmax_ageZ
ui_localesZ
id_token_hintZ
login_hintZ
acr_values)rN http_methodr] headersbodyr0 decoded_bodyZ oauth_paramsZ
validator_log_paramsrE r+ r( uri_query)r` rN rz r| r{ rZ r r )rZ r ra sL
zRequest.__init__c C s || j kr| j | S t|d S )N)r~ AttributeError)r` namer r r __getattr__ s
zRequest.__getattr__c C sH | j }| jj }|r$tjdt|}d|kr4d|d< d| j| j||f S )Nz Z
Authorizationz zF)r| r{ copySANITIZE_PATTERNsubstrrN rz )r` r| r{ r r r __repr__ s
zRequest.__repr__c C s t j | jjS )N)r$ rN r& )r` r r r r s zRequest.uri_queryc C s | j s
g S tj| j dddS )NT)r Zstrict_parsing)r r$ r% )r` r r r uri_query_params s
zRequest.uri_query_paramsc C sT t jt}dd | jpg | j D }x |D ]}|| d7 < q*W dd |j D S )Nc s s | ]}|d V qdS )r Nr )r8 pr r r r< s z+Request.duplicate_params.. c S s g | ]\}}|d kr|qS )r r )r8 r cr r r
s z,Request.duplicate_params..) collections defaultdictr4 r} r r. )r` Z seen_keysZall_keysr r r r duplicate_params s
zRequest.duplicate_params)rs NNrt ) rm rn ro rp ra r r propertyr r r r r r r rr p s
/
rr )r )F)rY )>rp Z
__future__r r r rD Zloggingresysr5 Zsecretsr r ImportErrorZrandomr Zurllibr r r r r r Z urllib.parser$ parseZUNICODE_ASCII_CHARACTER_SETZCLIENT_ID_CHARACTER_SETcompile
IGNORECASEr r! Z always_safeZ getLoggerlog version_infor# r r
bytesr Zunicoder r r r r( r0 r3 r2 r@ rI rJ rK rM rP rX rG r+ r] objectrr r r r r sr
1
$