|
Server IP : 184.107.3.203 / Your IP : 216.73.216.51 Web Server : Apache System : Linux dedicated2.avenfashion.com.ph 4.18.0-553.40.1.el8_10.x86_64 #1 SMP Mon Feb 10 12:11:18 EST 2025 x86_64 User : adminteladeoro ( 1015) PHP Version : 8.2.28 Disable Function : exec,passthru,shell_exec,system MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0755) : /usr/lib/python3.6/site-packages/sos/policies/auth/__pycache__/ |
| [ Home ] | [ C0mmand ] | [ Upload File ] |
|---|
3
~ �g,! � @ s~ d dl Z yd dlZdZW n ek
r0 dZY nX d dlZd dlmZmZmZ d dlm Z dZ
dZ e j d�Z
G d d
� d
�ZdS ) � NTF)�datetime� timedelta�timezone)�TIMEOUT_DEFAULTz sos-toolsz,urn:ietf:params:oauth:grant-type:device_codeZsosc @ sZ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z ddd�Z dS )�DeviceAuthorizationClassz$
Device Authorization Class
c C s* d | _ d | _d | _|| _|| _| j� d S )N)�
_access_token�_access_expires_at�&_DeviceAuthorizationClass__device_code�client_identifier_url�token_endpoint�_use_device_code_grant)�selfr
r � r � /usr/lib/python3.6/__init__.py�__init__! s z!DeviceAuthorizationClass.__init__c C s$ | j � td| j� �� | j� dS )zv
Start the device auth flow. In the future we will
store the tokens in an in-memory keyring.
z<Please visit the following URL to authenticate this device: N)�_request_device_code�print�_verification_uri_complete�poll_for_auth_completion)r
r r r r + s z/DeviceAuthorizationClass._use_device_code_grantc C s� dt � �}ddi}ts td��ydtj| j||td�}|j� |j� }|j d�| _
|j d�| _ |j d�| _ |j d �| _
|j d
�| _W n< tjk
r� } z tjd |j� d |� ���W Y d
d
}~X nX d
S )zm
Initialize new Device Authorization Grant attempt by
requesting a new device code.
z
client_id=z content-typez!application/x-www-form-urlencodedzRpython3-requests is not installed and is required for obtaining device auth token.)�data�headers�timeoutZ user_codeZverification_uriZinterval� device_codeZverification_uri_completezNHTTP request failed while attempting to acquire the tokens.Error returned was � N)�DEVICE_AUTH_CLIENT_ID�REQUESTS_LOADED� Exception�requests�postr
r Zraise_for_status�json�getZ
_user_codeZ_verification_uri� _intervalr r Z HTTPError� status_code)r
r r �resZresponse�er r r r 9 s(
z-DeviceAuthorizationClass._request_device_codec C s� t t| jd�}tstd��x�| jdkr�tj| j� ytt j
| j |t d�}|j
}|dkrltjd� | j|j� � |d kr�t||j��|dkr�|j� d d
kr�t||j��W q t jjk
r� } ztjd |� �� W Y dd}~X q X q W dS )z�
Continuously poll OIDC token endpoint until the user is successfully
authenticated or an error occurs.
)�
grant_type� client_idr zRpython3-requests is not installed and is required for obtaining device auth token.N)r r �� z$The SSO authentication is successful� �error�authorization_pending� slow_downz)Error was found while posting a request: )r' r( )r* r+ )�GRANT_TYPE_DEVICE_CODEr r r r r �timeZsleepr! r r r r r" �logger�info�_set_token_datar �text�
exceptionsZRequestExceptionr) )r
�
token_dataZcheck_auth_completionr" r$ r r r r X s.
z1DeviceAuthorizationClass.poll_for_auth_completionc C st |j d�| _tjtj�t|j d�d� | _|j d�| _|j d�| _ | j dkrVtj
| _ ntjtj�t| j d� | _ dS )a@
Set the class attributes as per the input token_data received.
In the future we will persist the token data in a local,
in-memory keyring, to avoid visting the browser frequently.
:param token_data: Token data containing access_token, refresh_token
and their expiry etc.
Z access_tokenZ
expires_in)�seconds�
refresh_tokenZrefresh_expires_inr N) r r r �nowr �utcr r �_refresh_tokenZ_refresh_expires_in�max�_refresh_expires_at)r
r3 r r r r0 z s
z(DeviceAuthorizationClass._set_token_datac C s2 | j � r| jS | j� r$| j� | jS | j� | jS )zt
Get the valid access_token at any given time.
:return: Access_token
:rtype: string
)�is_access_token_validr �is_refresh_token_valid�_use_refresh_token_grantr )r
r r r �get_access_token� s z)DeviceAuthorizationClass.get_access_tokenc C s( | j o&| jo&| jtdd� tjtj�kS )z�
Check the validity of access_token. We are considering it invalid 180
sec. prior to it's exact expiry time.
:return: True/False
� )r4 )r r r r r6 r r7 )r
r r r r; � s z.DeviceAuthorizationClass.is_access_token_validc C s( | j o&| jo&| jtdd� tjtj�kS )z�
Check the validity of refresh_token. We are considering it invalid
180 sec. prior to it's exact expiry time.
:return: True/False
r? )r4 )r8 r: r r r6 r r7 )r
r r r r< � s z/DeviceAuthorizationClass.is_refresh_token_validNc C s� t s td��td|s| jn|d�}tj| j|td�}|jdkrN| j |j
� � nd|jdkr�d|j
� d kr�t j d |j� d
|j
� d � d �� | j
� n td |j� d
|j
� d � ���dS )z�
Fetch the new access_token and refresh_token using the existing
refresh_token and persist it.
:param refresh_token: optional param for refresh_token
zRpython3-requests is not installed and is required for obtaining device auth token.r5 )r& r% r5 )r r r' i� Zinvalidr) zAProblem while fetching the new tokens from refresh token grant - r z%. New Device code will be requested !zcSomething went wrong while using the Refresh token grant for fetching tokens: Returned status code z and error N)r r r r8 r r r r r" r0 r r. Zwarningr )r
r5 Zrefresh_token_dataZrefresh_token_resr r r r= � s
"
z1DeviceAuthorizationClass._use_refresh_token_grant)N)
�__name__�
__module__� __qualname__�__doc__r r r r r0 r> r; r< r= r r r r r s
" r )Zloggingr r � ImportErrorr- r r r Z
sos.utilitiesr r r, Z getLoggerr. r r r r r �<module> s