3
,[E$ @ s^ d Z ddlmZmZ ddlZddlmZ ddlmZ ddl m
Z
ej e Z
G d d
d
e
ZdS ) aV
oauthlib.oauth1.rfc5849.endpoints.request_token
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This module is an implementation of the request token provider logic of
OAuth 1.0 RFC 5849. It validates the correctness of request token requests,
creates and persists tokens as well as create the proper response to be
returned to the client.
)absolute_importunicode_literalsN) urlencode )errors ) BaseEndpointc @ s* e Zd ZdZdd Zd
ddZdd ZdS ) RequestTokenEndpointa An endpoint responsible for providing OAuth 1 request tokens.
Typical use is to instantiate with a request validator and invoke the
``create_request_token_response`` from a view function. The tuple returned
has all information necessary (body, status, headers) to quickly form
and return a proper response. See :doc:`/oauth1/validator` for details on which
validator methods to implement for this endpoint.
c C s8 | j | j dd}|j| | jj|| t|j S )zCreate and save a new request token.
:param request: An oauthlib.common.Request object.
:param credentials: A dict of extra token credentials.
:returns: The token as an urlencoded string.
true)Z oauth_tokenZoauth_token_secretZoauth_callback_confirmed)Ztoken_generatorupdaterequest_validatorZsave_request_tokenr items)selfrequest credentialstoken r #/usr/lib/python3.6/request_token.pycreate_request_token" s
z)RequestTokenEndpoint.create_request_tokenGETNc C s ddi}yJ| j ||||}| j|\}} |rF| j||p8i }
||
dfS i ddfS W n, tjk
r~ } z|| j| jfS d} ~ X nX dS )a Create a request token response, with a new request token if valid.
:param uri: The full URI of the token request.
:param http_method: A valid HTTP verb, i.e. GET, POST, PUT, HEAD, etc.
:param body: The request body as a string.
:param headers: The request headers as a dict.
:param credentials: A list of extra credentials to include in the token.
:returns: A tuple of 3 elements.
1. A dict of headers to set on the response.
2. The response body as a string.
3. The response status code as an integer.
An example of a valid request::
>>> from your_validator import your_validator
>>> from oauthlib.oauth1 import RequestTokenEndpoint
>>> endpoint = RequestTokenEndpoint(your_validator)
>>> h, b, s = endpoint.create_request_token_response(
... 'https://your.provider/request_token?foo=bar',
... headers={
... 'Authorization': 'OAuth realm=movies user, oauth_....'
... },
... credentials={
... 'my_specific': 'argument',
... })
>>> h
{'Content-Type': 'application/x-www-form-urlencoded'}
>>> b
'oauth_token=lsdkfol23w54jlksdef&oauth_token_secret=qwe089234lkjsdf&oauth_callback_confirmed=true&my_specific=argument'
>>> s
200
An response to invalid request would have a different body and status::
>>> b
'error=invalid_request&description=missing+callback+uri'
>>> s
400
The same goes for an an unauthorized request:
>>> b
''
>>> s
401
z Content-Typez!application/x-www-form-urlencoded Ni )Z_create_request validate_request_token_requestr r Z OAuth1ErrorZ
urlencodedZ status_code) r ZuriZ http_methodZbodyZheadersr Z resp_headersr ZvalidZprocessed_requestr er r r create_request_token_response2 s 0
z2RequestTokenEndpoint.create_request_token_responsec C sz | j | | j| |jr*|jjd|_n| jj|j||_| jj|jsdt j
d|j| jjf d|j svt j
dd| jj |j|j
|j||jdsd|fS | jj|j|}|s| jj|_| jj|j|j|}| jj|j|j |}|j std| j|}||jd< ||jd < ||jd
< ||jd < t||||f}|srtjd tjd
| tjd| tjd| tjd| ||fS )a, Validate a request token request.
:param request: An oauthlib.common.Request object.
:raises: OAuth1Error if the request is invalid.
:returns: A tuple of 2 elements.
1. The validation result (True or False).
2. The request object.
z!Invalid realm %s. Allowed are %r.) descriptionzMissing callback URI.)Z
request_tokenFzKRedirect URI must either be provided or set to a default during validation.ZclientrealmcallbackZ signaturez&[Failure] request verification failed.zValid client: %s.zValid realm: %s.zValid callback: %s.zValid signature: %s.)Z_check_transport_securityZ_check_mandatory_parametersr splitZrealmsr Zget_default_realmsZ
client_keyZ check_realmsr ZInvalidRequestErrorZ redirect_uriZ validate_timestamp_and_nonceZ timestampZnonceZresource_owner_keyZvalidate_client_keyZ dummy_clientZvalidate_requested_realmsZvalidate_redirect_uriNotImplementedErrorZ_check_signatureZ
validator_logallloginfo)r r Z valid_clientZ valid_realmZvalid_redirectZvalid_signaturevr r r r o sP
z3RequestTokenEndpoint.validate_request_token_request)r NNN)__name__
__module__ __qualname____doc__r r r r r r r r s
s