PHP WebShell

Текущая директория: /usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/__pycache__

Просмотр файла: access_token.cpython-310.pyc

o

���a�$�@sNdZddlZddlmZddlmZddlmZe�e	�Z
Gdd	�d	e�ZdS)
aR
oauthlib.oauth1.rfc5849.endpoints.access_token
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This module is an implementation of the access token provider logic of
OAuth 1.0 RFC 5849. It validates the correctness of access token requests,
creates and persists tokens as well as create the proper response to be
returned to the client.
�N)�	urlencode�)�errors�)�BaseEndpointc@s.eZdZdZdd�Z		d
dd�Zdd	�ZdS)�AccessTokenEndpointa�An endpoint responsible for providing OAuth 1 access tokens.

    Typical use is to instantiate with a request validator and invoke the
    ``create_access_token_response`` from a view function. The tuple returned
    has all information necessary (body, status, headers) to quickly form
    and return a proper response. See :doc:`/oauth1/validator` for details on which
    validator methods to implement for this endpoint.
    cCsR|j�|j|�|_|��|��d�|j�d�}|�|�|j�||�t|�	��S)aHCreate and save a new access token.

        Similar to OAuth 2, indication of granted scopes will be included as a
        space separated list in ``oauth_authorized_realms``.

        :param request: OAuthlib request.
        :type request: oauthlib.common.Request
        :returns: The token as an urlencoded string.
        � )�oauth_token�oauth_token_secret�oauth_authorized_realms)
�request_validator�
get_realms�resource_owner_key�realms�token_generator�join�update�save_access_tokenr�items)�self�request�credentials�token�r�P/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/access_token.py�create_access_token s
�
�
z'AccessTokenEndpoint.create_access_token�GETNc
Cs�ddi}z/|�||||�}|�|�\}}	|r.|�||pi�}
|j�|j|j|�||
dfWSiddfWStjyM}z
||j	|j
fWYd}~Sd}~ww)aCreate an access token response, with a new request token if valid.

        :param uri: The full URI of the token request.
        :param http_method: A valid HTTP verb, i.e. GET, POST, PUT, HEAD, etc.
        :param body: The request body as a string.
        :param headers: The request headers as a dict.
        :param credentials: A list of extra credentials to include in the token.
        :returns: A tuple of 3 elements.
                  1. A dict of headers to set on the response.
                  2. The response body as a string.
                  3. The response status code as an integer.

        An example of a valid request::

            >>> from your_validator import your_validator
            >>> from oauthlib.oauth1 import AccessTokenEndpoint
            >>> endpoint = AccessTokenEndpoint(your_validator)
            >>> h, b, s = endpoint.create_access_token_response(
            ...     'https://your.provider/access_token?foo=bar',
            ...     headers={
            ...         'Authorization': 'OAuth oauth_token=234lsdkf....'
            ...     },
            ...     credentials={
            ...         'my_specific': 'argument',
            ...     })
            >>> h
            {'Content-Type': 'application/x-www-form-urlencoded'}
            >>> b
            'oauth_token=lsdkfol23w54jlksdef&oauth_token_secret=qwe089234lkjsdf&oauth_authorized_realms=movies+pics&my_specific=argument'
            >>> s
            200

        An response to invalid request would have a different body and status::

            >>> b
            'error=invalid_request&description=missing+resource+owner+key'
            >>> s
            400

        The same goes for an an unauthorized request:

            >>> b
            ''
            >>> s
            401
        zContent-Typez!application/x-www-form-urlencoded��Ni�)�_create_request�validate_access_token_requestrr�invalidate_request_token�
client_keyrr�OAuth1Error�
urlencoded�status_code)r�uri�http_method�body�headersr�resp_headersr�valid�processed_requestr�errr�create_access_token_response6s&0����z0AccessTokenEndpoint.create_access_token_responsecCsv|�|�|�|�|jstjdd��|j�|j�s tjdd��|js)tjdd��|j�|j�s6tjdd��|jj	|j
|j|j||jd�sId|fS|j�
|j
|�}|sX|jj|_
|j�|j
|j|�}|si|jj|_|j�|j
|j|j|�}|j|dd	�}||jd
<||jd<||jd<||jd
<t||||f�}|s�t�d�t�d|�t�d|�t�d|�t�d|�||fS)aJValidate an access token request.

        :param request: OAuthlib request.
        :type request: oauthlib.common.Request
        :raises: OAuth1Error if the request is invalid.
        :returns: A tuple of 2 elements.
                  1. The validation result (True or False).
                  2. The request object.
        zMissing resource owner.)�descriptionz"Invalid resource owner key format.zMissing verifier.zInvalid verifier format.)�
request_tokenFT)�is_token_request�client�resource_owner�verifier�	signaturez&[Failure] request verification failed.zValid client:, %szValid token:, %szValid verifier:, %szValid signature:, %s)�_check_transport_security�_check_mandatory_parametersrr�InvalidRequestErrorr�check_request_tokenr3�check_verifier�validate_timestamp_and_noncer!�	timestamp�nonce�validate_client_key�dummy_client�validate_request_token�dummy_request_token�validate_verifier�_check_signature�
validator_log�all�log�info)rr�valid_client�valid_resource_owner�valid_verifier�valid_signature�vrrrrwsp


������	�
	
�
�



�
z1AccessTokenEndpoint.validate_access_token_request)rNNN)�__name__�
__module__�__qualname__�__doc__rr-rrrrrrs	
�Ar)rO�logging�oauthlib.commonr�r�baser�	getLoggerrLrErrrrr�<module>s	


Выполнить команду

Для локальной разработки. Не используйте в интернете!