0x1949 Team - FAZEMRX - MANAGER
Edit File: credentials.cpython-310.pyc
o �ΔaZy � @ s� d dl mZ eZg d�Zzd dlmZ W n ey$ d dlmZ Y nw d dl Z d dl Z d dl Z d dl m Z d dl Z d dlmZ d dlZzd dlmZ W n ey\ d dlmZ Y nw zd dlmZ W n eyt d dlmZ Y nw d dlZd d lmZmZ d d lmZ e e u r�e Z ne Z d d l m!Z! d d l"m#Z$m%Z%m&Z&m'Z' d d l(m)Z) dZ*dZ+dZ,dZ-dZ.e/e0e1fZ2dd� Z3dd� Z4G dd� de&�Z5G dd� de$�Z#G dd � d e$�Z6G d d � d e7�Z8G d d � d e8�Z9G d!d"� d"e8�Z:G d#d$� d$e8�Z;G d%d&� d&e7�Z<G d'd(� d(e<�Z=G d)d*� d*e=�Z>G d+d,� d,e?�Z@G d-d.� d.e@�ZAG d/d0� d0e@�ZBG d1d2� d2eB�ZCG d3d4� d4eB�ZDG d5d6� d6eD�ZEG d7d8� d8e@�ZFG d9d:� d:e@�ZGG d;d<� d<e@�ZHG d=d>� d>e@�ZIdS )?� )�print_function)� AccessToken�AnonymousAccessToken� AuthorizeRequestTokenWithBrowser�CredentialStore� RequestTokenAuthorizationEngine�Consumer� Credentials)�StringION)�select)�stdin)� urlencode)�urljoin)� b64decode� b64encode)�parse_qs)� HTTPError)r r �OAuthAuthorizer�SystemWideConsumer)�urisz+request-tokenz +access-tokenz+authorize-token� i� c C s t tj�dd��S )z�Whether the user has disabled SSL certificate connection. Some testing servers have broken certificates. Rather than raising an error, we allow an environment variable, ``LP_DISABLE_SSL_CERTIFICATE_VALIDATION`` to disable the check. �%LP_DISABLE_SSL_CERTIFICATE_VALIDATIONF)�bool�os�environ�get� r r �:/usr/lib/python3/dist-packages/launchpadlib/credentials.py�$_ssl_certificate_validation_disabledV s r c C sD t � }tj|d�j| d|t|�d�\}}|jdkr t||��||fS )z�POST to ``url`` with ``headers`` and a body of urlencoded ``params``. Wraps it up to make sure we avoid the SSL certificate validation if our environment tells us to. Also, raises an error on non-200 statuses. )�"disable_ssl_certificate_validation�POST)�method�headers�body�� )r �httplib2�Http�requestr �statusr )�urlr" �params� cert_disabled�response�contentr r r � _http_postc s � � r. c @ sX e Zd ZdZdZdZdZdZdZdd� Z e d d � �Z de j efd d �Ze j fd d�ZdS )r z�Standard credentials storage and usage class. :ivar consumer: The consumer (application) :type consumer: `Consumer` :ivar access_token: Access information on behalf of the user :type access_token: `AccessToken` N�uri�dictz<BR>� c C s0 t � }| �|� |�� }t|t�r|�d�}|S )zeTurn this object into a string. This should probably be moved into OAuthAuthorizer. �utf-8)r �save�getvalue� isinstance� unicode_type�encode)�self�sio� serializedr r r � serialize� s zCredentials.serializec C s, | � }t |t�s |�d�}|�t|�� |S )z}Create a `Credentials` object from a serialized string. This should probably be moved into OAuthAuthorizer. r2 )r5 r6 �decode�loadr )�cls�value� credentialsr r r � from_string� s zCredentials.from_stringc C s� | j dus J d��| jdu sJ d��t�|�}t| j jddd�}|t }d|i}|| jkr1d|d < t|||�\}}t |t �rC|� d �}|| jkr]t � |�}|durU||d < t�|�| _|S t�|�| _d |t| jjf }|durz|| j_|d | 7 }|S )a� Request an OAuth token to Launchpad. Also store the token in self._request_token. This method must not be called on an object with no consumer specified or if an access token has already been obtained. :param context: The context of this token, that is, its scope of validity within Launchpad. :param web_root: The URL of the website on which the token should be requested. :token_format: How the token should be presented. URI_TOKEN_FORMAT means just return the URL to the page that authorizes the token. DICT_TOKEN_FORMAT means return a dictionary describing the token and the site's authentication policy. :return: If token_format is URI_TOKEN_FORMAT, the URL for the user to authorize the `AccessToken` provided by Launchpad. If token_format is DICT_TOKEN_FORMAT, a dict of information about the new access token. NzConsumer not specified.z Access token already obtained.� PLAINTEXT�&)�oauth_consumer_key�oauth_signature_method�oauth_signature�Refererzapplication/json�Acceptr2 � lp.contextz%s%s?oauth_token=%sz&lp.context=%s)�consumer� access_tokenr �lookup_web_rootr0 �key�request_token_page�DICT_TOKEN_FORMATr. r5 �bytesr< �json�loadsr � from_params�_request_tokenrA �authorize_token_page�context) r8 rV �web_root� token_formatr* r) r" r, r- r r r �get_request_token� s> � � z Credentials.get_request_tokenc C sl | j dus J d��t�|�}t| jjd| j jd| j j d�}|t }d|i}t|||�\}}t � |�| _ dS )ad Exchange the previously obtained request token for an access token. This method must not be called unless get_request_token() has been called and completed successfully. The access token will be stored as self.access_token. :param web_root: The base URL of the website that granted the request token. Nz5get_request_token() doesn't seem to have been called.rB z&%s)rD rE � oauth_tokenrF rG ) rT r rL r0 rJ rM �secret�access_token_pager. r rA rK )r8 rW r* r) r" r, r- r r r �'exchange_request_token_for_access_token� s � �z3Credentials.exchange_request_token_for_access_token)�__name__� __module__� __qualname__�__doc__rT �URI_TOKEN_FORMATrO �ITEM_SEPARATOR�NEWLINEr; � classmethodrA r �STAGING_WEB_ROOTrY r] r r r r r r s �>�r c @ s( e Zd ZdZedd� �Zedd� �ZdS )r zAn OAuth access token.c C s& |d }|d }|� d�}| |||�S )z:Create and return a new `AccessToken` from the given dict.rZ �oauth_token_secretrI )r )r> r* rM r[ rV r r r rS � s zAccessToken.from_paramsc C s� t |t�s |�d�}t|dd�}|d }t|�dks J d��|d }|d }t|�dks0J d ��|d }|�d �}|d urKt|�dksGJ d ��|d }| |||�S ) z<Create and return a new `AccessToken` from the given string.r2 F)�keep_blank_valuesrZ r z/Query string must have exactly one oauth_token.r rg z*Query string must have exactly one secret.rI Nz*Query string must have exactly one context)r5 r6 r< r �lenr )r> � query_stringr* rM r[ rV r r r rA � s � zAccessToken.from_stringN)r^ r_ r` ra re rS rA r r r r r � s r c s e Zd ZdZ� fdd�Z� ZS )r zoAn OAuth access token that doesn't authenticate anybody. This token can be used for anonymous access. c s t t| ��dd� d S )N� )�superr �__init__�r8 �� __class__r r rm s z AnonymousAccessToken.__init__)r^ r_ r` ra rm � __classcell__r r ro r r s r c @ s: e Zd ZdZd dd�Zdd� Zdd� Zd d � Zd d � ZdS )r z�Store OAuth credentials locally. This is a generic superclass. To implement a specific way of storing credentials locally you'll need to subclass this class, and implement `do_save` and `do_load`. Nc C s || _ dS )a Constructor. :param credential_save_failed: A callback to be invoked if the save to local storage fails. You should never invoke this callback yourself! Instead, you should raise an exception from do_save(). N)�credential_save_failed�r8 rr r r r rm & s zCredentialStore.__init__c C s^ z | � ||� W |S ty � ty. } z| jdu r |�| �� W Y d}~|S d}~ww )z�Save the credentials and invoke the callback on failure. Do not override this method when subclassing. Override do_save() instead. N)�do_save�EXPLOSIVE_ERRORS� Exceptionrr )r8 r@ �unique_consumer_id�er r r r3 0 s � ��zCredentialStore.savec C � t � �)z�Store newly-authorized credentials locally for later use. :param credentials: A Credentials object to save. :param unique_consumer_id: A string uniquely identifying an OAuth consumer on a Launchpad instance. ��NotImplementedError)r8 r@ rw r r r rt @ s zCredentialStore.do_savec C s | � |�S )a0 Retrieve credentials from a local store. This method is the inverse of `save`. There's no special behavior in this method--it just calls `do_load`. There _is_ special behavior in `save`, and this way, developers can remember to implement `do_save` and `do_load`, not `do_save` and `load`. :param unique_key: A string uniquely identifying an OAuth consumer on a Launchpad instance. :return: A `Credentials` object if one is found in the local store, and None otherise. )�do_load�r8 � unique_keyr r r r= I s zCredentialStore.loadc C ry )a@ Retrieve credentials from a local store. This method is the inverse of `do_save`. :param unique_key: A string uniquely identifying an OAuth consumer on a Launchpad instance. :return: A `Credentials` object if one is found in the local store, and None otherise. rz r} r r r r| [ s zCredentialStore.do_load�N) r^ r_ r` ra rm r3 rt r= r| r r r r r s r c sB e Zd ZdZdZd � fdd� Zedd� �Zd d � Zd d � Z � Z S )�KeyringCredentialStorez�Store credentials in the GNOME keyring or KDE wallet. This is a good solution for desktop applications and interactive scripts. It doesn't work for non-interactive scripts, or for integrating third-party websites into Launchpad. s <B64>NFc s, t t| ��|� d | _|rt|�| _d S d S r )rl r� rm � _fallback�MemoryCredentialStore)r8 rr �fallbackro r r rm s s �z KeyringCredentialStore.__init__c C sL dt � vr ddladt � vr$z ddlma W dS ty# taY dS w dS )aG Ensure the keyring module is imported (postponing side effects). The keyring module initializes the environment-dependent backend at import time (nasty). We want to avoid that initialization because it may do things like prompt the user to unlock their password store (e.g., KWallet). �keyringr N�NoKeyringError)r� )�globalsr� �keyring.errorsr� � ImportError� RuntimeErrorr r r r �_ensure_keyring_importedy s ��z/KeyringCredentialStore._ensure_keyring_importedc C s� | � � |�� }| jt|� }z t�d||�d�� W dS tyF } z ttkr/dt |�vr/� | j r:| j � ||� n� W Y d}~dS d}~ww )z2Store newly-authorized credentials in the keyring.� launchpadlibr2 �$No recommended backend was availableN) r� r; � B64MARKERr r� � set_passwordr< r� r� �strr� r3 )r8 r@ r~ r: rx r r r rt � s" � ���z KeyringCredentialStore.do_savec C s� | � � zt�d|�}W n' ty3 } zttkr dt|�vr � | jr.| j�|�W Y d}~S � d}~ww |durst|t �rB|� d�}|� | j �r`z t |t| j �d� �}W n ty_ Y dS w zt�|�}|W S tyr Y dS w dS )z&Retrieve credentials from the keyring.r� r� N�utf8)r� r� � get_passwordr� r� r� r� r= r5 r6 r7 � startswithr� r ri � TypeErrorr rA rv )r8 r~ �credential_stringrx r@ r r r r| � s@ � �� � � �z KeyringCredentialStore.do_load)NF) r^ r_ r` ra r� rm � staticmethodr� rt r| rq r r ro r r� i s r� c �2 e Zd ZdZd � fdd� Zdd� Zdd� Z� ZS ) � UnencryptedFileCredentialStorez�Store credentials unencrypted in a file on disk. This is a good solution for scripts that need to run without any user interaction. Nc s t t| ��|� || _d S r )rl r� rm �filename)r8 r� rr ro r r rm � s � z'UnencryptedFileCredentialStore.__init__c C s |� | j� dS )z Save the credentials to disk.N)� save_to_pathr� �r8 r@ r~ r r r rt � s z&UnencryptedFileCredentialStore.do_savec C s4 t j�| j�rt �| j�tj dkst�| j�S dS )z Load the credentials from disk.r N)r �path�existsr� �stat�ST_SIZEr �load_from_pathr} r r r r| � s � z&UnencryptedFileCredentialStore.do_loadr �r^ r_ r` ra rm rt r| rq r r ro r r� � s r� c r� ) r� z�CredentialStore that stores keys only in memory. This can be used to provide a CredentialStore instance without actually saving any key to persistent storage. Nc s t t| ��|� i | _d S r )rl r� rm � _credentialsrs ro r r rm � s z MemoryCredentialStore.__init__c C s || j |< dS )z!Store the credentials in our dictN)r� r� r r r rt � s z MemoryCredentialStore.do_savec C s | j �|�S )z&Retrieve the credentials from our dict)r� r r} r r r r| � s z MemoryCredentialStore.do_loadr r� r r ro r r� � s r� c @ sP e Zd ZdZdZ ddd�Zedd� �Zdd � Zd d � Z d d � Z dd� Z dS )r a/ The superclass of all request token authorizers. This base class does not implement request token authorization, since that varies depending on how you want the end-user to authorize a request token. You'll need to subclass this class and implement `make_end_user_authorize_token`. � UNAUTHORIZEDNc C s� t �|�| _t �|�| _|du r|du rtd��|dur(|dur(td||f ��|du r4dg}t|�}nt|�}|}|| _|| _ |pCg | _ dS )aD Base class initialization. :param service_root: The root of the Launchpad instance being used. :param application_name: The name of the application that wants to use launchpadlib. This is used in conjunction with a desktop-wide integration. If you specify this argument, your values for consumer_name and allow_access_levels are ignored. :param consumer_name: The OAuth consumer name, for an application that wants its own point of integration into Launchpad. In almost all cases, you want to specify application_name instead and do a desktop-wide integration. The exception is when you're integrating a third-party website into Launchpad. :param allow_access_levels: A list of the Launchpad access levels to present to the user. ('READ_PUBLIC' and so on.) Your value for this argument will be ignored during a desktop-wide integration. :type allow_access_levels: A list of strings. Nz:You must provide either application_name or consumer_name.zZYou must provide only one of application_name and consumer_name. (You provided %r and %r.)�DESKTOP_INTEGRATION) r �lookup_service_root� service_root�web_root_for_service_rootrW � ValueErrorr r rJ �application_name�allow_access_levels)r8 r� r� � consumer_namer� rJ r r r rm s( ��� z(RequestTokenAuthorizationEngine.__init__c C s | j jd | j S )z7Return a string identifying this consumer on this host.�@)rJ rM r� rn r r r rw I s z2RequestTokenAuthorizationEngine.unique_consumer_idc C s> dt |f }d}t| j�dkr|||�| j� 7 }t| j|�S )z�Return the authorization URL for a request token. This is the URL the end-user must visit to authorize the token. How exactly does this happen? That depends on the subclass implementation. z%s?oauth_token=%sz&allow_permission=r )rU ri r� �joinr rW )r8 � request_token�page�allow_permissionr r r �authorization_urlN s � z1RequestTokenAuthorizationEngine.authorization_urlc C s6 | � |�}| �||� |jdu rdS |�|| j� |S )ad Authorize a token and associate it with the given credentials. If the credential store runs into a problem storing the credential locally, the `credential_save_failed` callback will be invoked. The callback will not be invoked if there's a problem authorizing the credentials. :param credentials: A `Credentials` object. If the end-user authorizes these credentials, this object will have its .access_token property set. :param credential_store: A `CredentialStore` object. If the end-user authorizes the credentials, they will be persisted locally using this object. :return: If the credentials are successfully authorized, the return value is the `Credentials` object originally passed in. Otherwise the return value is None. N)rY � make_end_user_authorize_tokenrK r3 rw )r8 r@ �credential_store�request_token_stringr r r �__call__] s z(RequestTokenAuthorizationEngine.__call__c C s |j | jtjd�}|d S )z\Get a new request token from the server. :param return: The request token. )rW rX rZ )rY rW r rO )r8 r@ �authorization_jsonr r r rY { s �z1RequestTokenAuthorizationEngine.get_request_tokenc C ry )a5 Authorize the given request token using the given credentials. Your subclass must implement this method: it has no default implementation. Because an access token may expire or be revoked in the middle of a session, this method may be called at arbitrary points in a launchpadlib session, or even multiple times during a single session (with a different request token each time). In most cases, however, this method will be called at the beginning of a launchpadlib session, or not at all. rz )r8 r@ r� r r r r� � s z=RequestTokenAuthorizationEngine.make_end_user_authorize_token�NNN) r^ r_ r` ra �UNAUTHORIZED_ACCESS_LEVELrm �propertyrw r� r� rY r� r r r r r � s �@ r c @ s@ e Zd ZdZdZdZdd� Zdd� Zdd � Zd d � Z d d � Z dS )� AuthorizeRequestTokenWithURLz�Authorize using a URL. This authorizer simply shows the URL for the user to open for authorization, and waits until the server responds. z�Please open this authorization page: (%s) in your browser. Use your browser to authorize this program to access Launchpad on your behalf.z.Press Enter after authorizing in your browser.c C s t |� dS )z�Display a message. By default, prints the message to standard output. The message does not require any user interaction--it's solely informative. N)�print)r8 �messager r r �output� s z#AuthorizeRequestTokenWithURL.outputc C s | � | j| � dS )� Notify the end-user of the URL.N)r� �WAITING_FOR_USER)r8 r� r r r �!notify_end_user_authorization_url� s z>AuthorizeRequestTokenWithURL.notify_end_user_authorization_urlc C sp z|� | j� W n* ty2 } z |jjdkrt|j��|jjdkr)td� t|� t|j��d}~ww |j duS )z Check if the end-user authorizedi� i� z#Unexpected response from Launchpad:N) r] rW r r, r( � EndUserDeclinedAuthorizationr- r� �EndUserNoAuthorizationrK )r8 r@ rx r r r � check_end_user_authorization� s �� z9AuthorizeRequestTokenWithURL.check_end_user_authorizationc C s" | � | j� t�� | �|� dS )�"Wait for the end-user to authorizeN)r� �WAITING_FOR_LAUNCHPADr �readliner� )r8 r@ r r r � wait_for_end_user_authorization� s z<AuthorizeRequestTokenWithURL.wait_for_end_user_authorizationc C s" | � |�}| �|� | �|� dS )z2Have the end-user authorize the token using a URL.N)r� r� r� )r8 r@ r� r� r r r r� � s z:AuthorizeRequestTokenWithURL.make_end_user_authorize_tokenN) r^ r_ r` ra r� r� r� r� r� r� r� r r r r r� � s � r� c sP e Zd ZdZdZdZdZdZdZ d� fdd � Z � fd d �Z d d � Z � Z S )r aS Authorize using a URL that pops-up automatically in a browser. This authorizer simply opens up the end-user's web browser to a Launchpad URL and lets the end-user authorize the request token themselves. This is the same as its superclass, except this class also performs the browser automatic opening of the URL. z�The authorization page: (%s) should be opening in your browser. Use your browser to authorize this program to access Launchpad on your behalf.z/Press Enter to continue or wait (%d) seconds...� )z www-browser�links�links2�lynx�elinksz elinks-lite�netrik�w3mz5Waiting to hear from Launchpad about your decision...Nc s t t| ��||d|� dS )ao Constructor. :param service_root: See `RequestTokenAuthorizationEngine`. :param application_name: See `RequestTokenAuthorizationEngine`. :param consumer_name: The value of this argument is ignored. If we have the capability to open the end-user's web browser, we must be running on the end-user's computer, so we should do a full desktop integration. :param credential_save_failed: See `RequestTokenAuthorizationEngine`. :param allow_access_levels: The value of this argument is ignored, for the same reason as consumer_name. N)rl r rm )r8 r� r� r� rr r� ro r r rm � s �z)AuthorizeRequestTokenWithBrowser.__init__c s� t t| ��|� zt�� }t|dd�}|| jv }W n tjy' d}d}Y nw |rE| �| j | j � t t gg g | j �\}}}|rEt � � |durPt�|� dS dS )r� �basenameNF)rl r r� � webbrowserr �getattr�TERMINAL_BROWSERS�Errorr� �TIMEOUT_MESSAGE�TIMEOUTr r r� �open)r8 r� � browser_obj�browser�console_browser�rlist�_ro r r r� s( � ��zBAuthorizeRequestTokenWithBrowser.notify_end_user_authorization_urlc C s~ | � | j� t�� }|jdu r=t�t� z | �|�r W dS W n ty' Y nw t�� |t kr6t dt ��|jdu sdS dS )r� NzTimed out after %d seconds.) r� r� �timerK �sleep�access_token_poll_timer� r� �access_token_poll_timeout�TokenAuthorizationTimedOut)r8 r@ � start_timer r r r� & s � ���z@AuthorizeRequestTokenWithBrowser.wait_for_end_user_authorizationr� ) r^ r_ r` ra r� r� r� r� r� rm r� r� rq r r ro r r � s � �� r c @ � e Zd ZdS )�TokenAuthorizationExceptionN�r^ r_ r` r r r r r� 7 � r� c @ r� )� RequestTokenAlreadyAuthorizedNr� r r r r r� ; r� r� c @ � e Zd ZdZdS )�EndUserAuthorizationFailedz?Superclass exception for all failures of end-user authorizationN�r^ r_ r` ra r r r r r� ? � r� c @ r� )r� z End-user declined authorizationNr� r r r r r� E r� r� c @ r� )r� z*End-user did not perform any authorizationNr� r r r r r� K r� r� c @ r� )r� z<End-user did not perform any authorization in timeout periodNr� r r r r r� Q r� r� c @ r� )� ClientErrorNr� r r r r r� W r� r� c @ r� )� ServerErrorNr� r r r r r� [ r� r� c @ r� )�NoLaunchpadAccountNr� r r r r r� _ r� r� c @ r� )� TooManyAuthenticationFailuresNr� r r r r r� c r� r� )J� __future__r �type� __metaclass__�__all__� cStringIOr r� �ior% rQ r r r� �sysr r� � urllib.parser �urllibr �urlparser� �base64r r �six.moves.urllib.parser rP r� �unicoder6 �lazr.restfulclient.errorsr �"lazr.restfulclient.authorize.oauthr � _AccessTokenr r r r� r rN r\ rU r� r� � MemoryError�KeyboardInterrupt� SystemExitru r r. r r �objectr r� r� r� r r� r rv r� r� r� r� r� r� r� r� r� r� r r r r �<module> s� � � � Kf ;f