o \h@sddlmZddlZddlZddlZddlmZmZmZm Z m Z m Z ddl m Z ddlmZddlmZmZdd lmZmZd d gZe eefZdddZGdd d eZ    dddd ZdS) ) annotationsN)Any AwaitableCallableIterableTuplecast)Headers) InvalidHeader)build_www_authenticate_basicparse_authorization_basic) HTTPResponseWebSocketServerProtocol BasicAuthWebSocketServerProtocolbasic_auth_protocol_factoryvaluerreturnboolc Cs:z|\}}Wn ttfyYdSwt|tot|tSNF) TypeError ValueError isinstancestr)rusernamepasswordrY/home/air/segue/gemini/backup/venv/lib/python3.10/site-packages/websockets/legacy/auth.pyis_credentialss  rcs`eZdZUdZdZded< dZded< ddddfddZdddZdfdd Z Z S)rzC WebSocket server protocol that enforces HTTP Basic Auth. rrealmN str | Nonerr!check_credentialsargsrr$,Callable[[str, str], Awaitable[bool]] | NonekwargsrNonecs*|dur||_||_tj|i|dSN)r!_check_credentialssuper__init__)selfr!r$r%r' __class__rrr,.sz)BasicAuthWebSocketServerProtocol.__init__rrcs"|jdur|||IdHSdS)a Check whether credentials are authorized. This coroutine may be overridden in a subclass, for example to authenticate against a database or an external service. Args: username: HTTP Basic Auth username. password: HTTP Basic Auth password. Returns: :obj:`True` if the handshake should continue; :obj:`False` if it should fail with an HTTP 401 error. NF)r*)r-rrrrrr$:s z2BasicAuthWebSocketServerProtocol.check_credentialspathrequest_headersr HTTPResponse | Nonecsz|d}Wntytjjdt|jfgdfYSwzt|\}}Wnty<tjjdt|jfgdfYSw|||IdHsStjjdt|jfgdfS||_ t ||IdHS)zS Check HTTP Basic Auth and return an HTTP 401 response if needed. AuthorizationzWWW-AuthenticatesMissing credentials sUnsupported credentials NsInvalid credentials ) KeyErrorhttp HTTPStatus UNAUTHORIZEDr r!r r r$rr+process_request)r-r0r1 authorizationrrr.rrr8Os0   z0BasicAuthWebSocketServerProtocol.process_request) r%rr!r"r$r&r'rrr(rrrrrr)r0rr1r rr2) __name__ __module__ __qualname____doc__r!__annotations__rr,r$r8 __classcell__rrr.rrs    r!r" credentials*Credentials | Iterable[Credentials] | Noner$r&create_protocol6Callable[..., BasicAuthWebSocketServerProtocol] | None/Callable[..., BasicAuthWebSocketServerProtocol]cs|du|dukr td|durLt|rtt|g}n&t|tr:tttt|}tdd|Ds9td|ntd|t|dfd d }|durRt }tt d t f|}t j |||dS)a Protocol factory that enforces HTTP Basic Auth. :func:`basic_auth_protocol_factory` is designed to integrate with :func:`~websockets.legacy.server.serve` like this:: serve( ..., create_protocol=basic_auth_protocol_factory( realm="my dev server", credentials=("hello", "iloveyou"), ) ) Args: realm: Scope of protection. It should contain only ASCII characters because the encoding of non-ASCII characters is undefined. Refer to section 2.2 of :rfc:`7235` for details. credentials: Hard coded authorized credentials. It can be a ``(username, password)`` pair or a list of such pairs. check_credentials: Coroutine that verifies credentials. It receives ``username`` and ``password`` arguments and returns a :class:`bool`. One of ``credentials`` or ``check_credentials`` must be provided but not both. create_protocol: Factory that creates the protocol. By default, this is :class:`BasicAuthWebSocketServerProtocol`. It can be replaced by a subclass. Raises: TypeError: If the ``credentials`` or ``check_credentials`` argument is wrong. Nz/provide either credentials or check_credentialscss|]}t|VqdSr))r).0itemrrr sz.basic_auth_protocol_factory..zinvalid credentials argument: rrrrrcs0z|}Wn tyYdSwt||Sr)r4hmaccompare_digest)rrexpected_passwordcredentials_dictrrr$s   z6basic_auth_protocol_factory..check_credentials.r#r:) rrr Credentialsrrlistalldictrr functoolspartial)r!rAr$rCcredentials_listrrLrrvs.&  )rrrr)NNNN) r!r"rArBr$r&rCrDrrE) __future__rrRrIr5typingrrrrrrdatastructuresr exceptionsr headersr r serverrr__all__rrNrrrrrrrs$       Z