+ Dfj!Rt^RIHt^RIHt^RIHt^RIHt^RI H t ^RI H t ^RI HtHt]!]4!RR 44t]!]4!R R 44tR #) a A guard implementation which supports HTTP header-based authentication schemes. If no I{Authorization} header is supplied, an anonymous login will be attempted by using a L{Anonymous} credentials object. If such a header is supplied and does not contain allowed credentials, or if anonymous login is denied, a 401 will be sent in the response along with I{WWW-Authenticate} headers for each of the allowed authentication schemes. ) implementer)error) Anonymous)Logger)proxyForInterface)util) IResource_UnsafeErrorPagec@a]tRt^toRtRtRtRtRtRt Rt Vt R#) UnauthorizedResourcez. Simple IResource to escape Resource dispatch TcWnR#N_credentialFactories)self factoriess&&;/usr/lib/python3/dist-packages/twisted/web/_auth/wrapper.py__init__UnauthorizedResource.__init__#s$-!c aaRoVV3RlpRoVPR4VPFApVPV4pVPP RV!VP V44KC VP R8XdR#R#) z- Send www-authenticate headers to the client cT\V\4'dVPR4#T#)ascii) isinstancestrencodess&r ensureBytes0UnauthorizedResource.render..ensureBytes+s"(21c(:(:188G$ A Arc<.pVP4F:wr4S!V4pS!V4pVPVR,S!V4,4K< RPVRPV4.4#)= s, )itemsappendjoin)scheme challengelstkvr quoteStrings&& rgenerateWWWAuthenticate.generateWWWAuthenticate.sdC!)NN 1t8k!n45*99fejjo67 7rcbRVPRR4PRR4,R,#)"\s\\s\")replacers&rr+0UnauthorizedResource.render..quoteString6s*!))E62::4HH4O Oriswww-authenticatesHEADrs Unauthorized)setResponseCoder getChallengeresponseHeaders addRawHeaderr&method)rrequestr,factr'rr+s&& @@rrenderUnauthorizedResource.render&s}  B 8 P $--D))'2I  # # 0 0#%>W $rc V#)z Disable resource dispatch rpathr8s&&&rgetChildWithDefault(UnauthorizedResource.getChildWithDefaultCs  rc\4hr NotImplementedErrorrr?childs&&&rputChildUnauthorizedResource.putChildI !##rrN) __name__ __module__ __qualname____firstlineno____doc__isLeafrr:r@rG__static_attributes____classdictcell__ __classdict__s@rr r s*F.: $$rr cla]tRt^NtoRtRt]!4tRtRt Rt Rt Rt Rt R tR tR tR tVtR #)HTTPAuthSessionWrapperaE Wrap a portal, enforcing supported header-based authentication schemes. @ivar _portal: The L{Portal} which will be used to retrieve L{IResource} avatars. @ivar _credentialFactories: A list of L{ICredentialFactory} providers which will be used to decode I{Authorization} headers into L{ICredentials} providers. Fc WnW nR#)a# Initialize a session wrapper @type portal: C{Portal} @param portal: The portal that will authenticate the remote client @type credentialFactories: C{Iterable} @param credentialFactories: The portal that will authenticate the remote client based on one submitted C{ICredentialFactory} N)_portalr)rportalcredentialFactoriess&&&rrHTTPAuthSessionWrapper.__init__^s $7!rc VPR4pV'g.\P!VP\ 444#VP V4wr4Vf\ VP4#VPWA4p\P!VPV44# \Pd\ TP4u#\d,TPPR4\RRR4u#i;i)z Get the L{IResource} which the given request is authorized to receive. If the proper authorization headers are present, the resource will be requested from the portal. If not, an anonymous login attempt will be made. s authorizationz+Unexpected failure from credentials factoryInternal Error) getHeaderrDeferredResource_loginr_selectParseHeaderr rdecoder LoginFailed BaseException_logfailurer )rr8 authheaderfactory respString credentialss&& r_authorizedResource*HTTPAuthSessionWrapper._authorizedResourcels&&'78 ((Y[)AB B"55jA ?'(A(AB B C!..=K(([)AB B    C'(A(AB B ? II  K L#C)92> > ?s4B***D D )D  D c BVPV4PV4#)z Find the L{IResource} avatar suitable for the given request, if possible, and render it. Otherwise, perhaps render an error page requiring authorization or describing an internal server failure. )rlr:)rr8s&&rr:HTTPAuthSessionWrapper.renders ''077@@rc VPP^VPP44VP V4#)a, Inspect the Authorization HTTP header, and return a deferred which, when fired after successful authentication, will return an authorized C{Avatar}. On authentication failure, an C{UnauthorizedResource} will be returned, essentially halting further dispatch on the wrapped resource and all children )postpathinsertprepathpoprlr>s&&&rr@*HTTPAuthSessionWrapper.getChildWithDefaults8 7??#6#6#89''00rc VPPVR\4pVPVPVP 4V#)z Get the L{IResource} avatar for the given credentials. @return: A L{Deferred} which will be called back with an L{IResource} avatar or which will errback if authentication fails. N)rWloginr addCallbacks_loginSucceeded _loginFailed)rrkds&& rraHTTPAuthSessionWrapper._logins; LL  {D) < t++T->->?rc ZaaVwr#o!VV3RlR\\R44oS!V4#)z Handle login success by wrapping the resulting L{IResource} avatar so that the C{logout} callback will be invoked when rendering is complete. cF<aa]tRt^toRtV3RltVV3RltRtVtV;t #)?HTTPAuthSessionWrapper._loginSucceeded..ResourceWrapperaZ Wrap an L{IResource} so that whenever it or a child of it completes rendering, the cred logout hook will be invoked. An assumption is made here that exactly one L{IResource} from among C{avatar} and all of its children will be rendered. If more than one is rendered, C{logout} will be invoked multiple times and probably earlier than desired. c F<S!VPPW44#)z Pass through the lookup to the wrapped resource, wrapping the result in L{ResourceWrapper} to ensure C{logout} is called when rendering of the child is complete. )resourcer@)rnamer8ResourceWrappers&&&rr@SHTTPAuthSessionWrapper._loginSucceeded..ResourceWrapper.getChildWithDefaults 't}}'H'H'WXXrc h<VP4PV3Rl4\SV` V4#)z| Hook into response generation so that when rendering has finished completely (with or without error), C{logout} is called. c<S!4#r r=)ignlogouts&rXHTTPAuthSessionWrapper._loginSucceeded..ResourceWrapper.render..s68r) notifyFinishaddBothsuperr:)rr8 __class__rs&&rr:FHTTPAuthSessionWrapper._loginSucceeded..ResourceWrapper.renders, $$&../CDw~g..rr=) rJrKrLrMrNr@r:rPrQ __classcell__)rrSrrs@@rrrs  Y / /rrr)rr)rargs interfaceavatarrrs&& @@rry&HTTPAuthSessionWrapper._loginSucceededs5 %)! 6 / // :F /8v&&rc VP\P\P4'd\ VP 4#VP PRVR7\RRR4#)z Handle login failure by presenting either another challenge (for expected authentication/authorization-related failures) or a server error page (for anything else). zGHTTPAuthSessionWrapper.getChildWithDefault encountered unexpected error)rgr\r]r^) checkr Unauthorizedrdr rrfrgr )rresults&&rrz#HTTPAuthSessionWrapper._loginFailedsc <<**E,=,= > >'(A(AB B II  #   $C)92> >rc VPR4pV^,P4pVPF0pVPV8XgKVRP VR,43u# R#)a& Choose an C{ICredentialFactory} from C{_credentialFactories} suitable to use to decode the given I{Authenticate} header. @return: A two-tuple of a factory and the remaining portion of the header value to be decoded or a two-tuple of L{None} if no factory can decode the header value. r":NN)NN)splitlowerrr&r%)rheaderelementsr&r9s&& rrb)HTTPAuthSessionWrapper._selectParseHeaders`<<%!""$--D{{f$dii 566.rc\4hr rCrEs&&&rrGHTTPAuthSessionWrapper.putChildrIr)rrWN)rJrKrLrMrNrOrrfrrlr:r@raryrzrbrGrPrQrRs@rrUrUNsM F 8D 8C0A 1 $'L?  $$rrUN)rNzope.interfacer twisted.credrtwisted.cred.credentialsrtwisted.loggerrtwisted.python.componentsr twisted.webrtwisted.web.resourcerr r rUr=rrrsa '.!7< Y/$/$/$d Y]$]$]$r