3
,[$ @ s^ d Z ddlmZmZ ddlZddlmZ ddlmZ ddl m
Z
ej e Z
G d d
d
e
ZdS ) aR
oauthlib.oauth1.rfc5849.endpoints.access_token
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This module is an implementation of the access token provider logic of
OAuth 1.0 RFC 5849. It validates the correctness of access token requests,
creates and persists tokens as well as create the proper response to be
returned to the client.
)absolute_importunicode_literalsN) urlencode )errors ) BaseEndpointc @ s* e Zd ZdZdd Zd
ddZdd ZdS ) AccessTokenEndpointa An endpoint responsible for providing OAuth 1 access tokens.
Typical use is to instantiate with a request validator and invoke the
``create_access_token_response`` from a view function. The tuple returned
has all information necessary (body, status, headers) to quickly form
and return a proper response. See :doc:`/oauth1/validator` for details on which
validator methods to implement for this endpoint.
c C sR | j j|j||_| j | j dj|jd}|j| | j j|| t|j S )a* Create and save a new access token.
Similar to OAuth 2, indication of granted scopes will be included as a
space separated list in ``oauth_authorized_realms``.
:param request: An oauthlib.common.Request object.
:returns: The token as an urlencoded string.
)Z oauth_tokenZoauth_token_secretZoauth_authorized_realms)
request_validatorZ
get_realmsresource_owner_keyZrealmsZtoken_generatorjoinupdateZsave_access_tokenr items)selfrequest credentialstoken r "/usr/lib/python3.6/access_token.pycreate_access_token" s
z'AccessTokenEndpoint.create_access_tokenGETNc C s ddi}y^| j ||||}| j|\}} |rZ| j||p8i }
| jj|j|j| ||
dfS i ddfS W n, tjk
r } z|| j | j
fS d} ~ X nX dS )a Create an access token response, with a new request token if valid.
:param uri: The full URI of the token request.
:param http_method: A valid HTTP verb, i.e. GET, POST, PUT, HEAD, etc.
:param body: The request body as a string.
:param headers: The request headers as a dict.
:param credentials: A list of extra credentials to include in the token.
:returns: A tuple of 3 elements.
1. A dict of headers to set on the response.
2. The response body as a string.
3. The response status code as an integer.
An example of a valid request::
>>> from your_validator import your_validator
>>> from oauthlib.oauth1 import AccessTokenEndpoint
>>> endpoint = AccessTokenEndpoint(your_validator)
>>> h, b, s = endpoint.create_access_token_response(
... 'https://your.provider/access_token?foo=bar',
... headers={
... 'Authorization': 'OAuth oauth_token=234lsdkf....'
... },
... credentials={
... 'my_specific': 'argument',
... })
>>> h
{'Content-Type': 'application/x-www-form-urlencoded'}
>>> b
'oauth_token=lsdkfol23w54jlksdef&oauth_token_secret=qwe089234lkjsdf&oauth_authorized_realms=movies+pics&my_specific=argument'
>>> s
200
An response to invalid request would have a different body and status::
>>> b
'error=invalid_request&description=missing+resource+owner+key'
>>> s
400
The same goes for an an unauthorized request:
>>> b
''
>>> s
401
z Content-Typez!application/x-www-form-urlencoded Ni ) Z_create_request validate_access_token_requestr r Zinvalidate_request_token
client_keyr r Z OAuth1ErrorZ
urlencodedZ status_code) r ZuriZ http_methodZbodyZheadersr Z resp_headersr ZvalidZprocessed_requestr er r r create_access_token_response7 s 0
z0AccessTokenEndpoint.create_access_token_responsec C sx | j | | j| |js&tjdd| jj|js@tjdd|jsRtjdd| jj|jsltjdd| jj |j
|j |j ||jdsd|fS | jj
|j
|}|s| jj|_
| jj|j
|j|}|s| jj|_| jj|j
|j|j|}| j|dd }||jd
< ||jd < ||jd < ||jd
< t||||f}|sptjd tjd| tjd| tjd| tjd| ||fS )a, Validate an access token request.
:param request: An oauthlib.common.Request object.
:raises: OAuth1Error if the request is invalid.
:returns: A tuple of 2 elements.
1. The validation result (True or False).
2. The request object.
zMissing resource owner.) descriptionz"Invalid resource owner key format.zMissing verifier.zInvalid verifier format.)Z
request_tokenFT)Zis_token_requestZclientZresource_ownerverifierZ signaturez&[Failure] request verification failed.zValid client:, %szValid token:, %szValid verifier:, %szValid signature:, %s)Z_check_transport_securityZ_check_mandatory_parametersr r ZInvalidRequestErrorr Zcheck_request_tokenr Zcheck_verifierZ validate_timestamp_and_noncer Z timestampZnonceZvalidate_client_keyZ dummy_clientZvalidate_request_tokenZdummy_request_tokenZvalidate_verifierZ_check_signatureZ
validator_logallloginfo)r r Z valid_clientZvalid_resource_ownerZvalid_verifierZvalid_signaturevr r r r x s\
z1AccessTokenEndpoint.validate_access_token_request)r NNN)__name__
__module__ __qualname____doc__r r r r r r r r s
@r )r& Z
__future__r r ZloggingZoauthlib.commonr r baser Z getLoggerr# r r r r r r
s