File: //usr/lib/python3/dist-packages/sos/policies/auth/__pycache__/__init__.cpython-310.pyc
o
([Qh,! � @ s| d dl Z zd dlZdZW n ey dZY nw d dlZd dlmZmZmZ d dlm Z dZ
dZ e � d�Z
G d d
� d
�ZdS ) � NTF)�datetime� timedelta�timezone)�TIMEOUT_DEFAULTz sos-toolsz,urn:ietf:params:oauth:grant-type:device_code�sosc @ sZ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z ddd�Z dS )�DeviceAuthorizationClassz$
Device Authorization Class
c C s* d | _ d | _d | _|| _|| _| �� d S �N)�
_access_token�_access_expires_at�&_DeviceAuthorizationClass__device_code�client_identifier_url�token_endpoint�_use_device_code_grant)�selfr r
� r �</usr/lib/python3/dist-packages/sos/policies/auth/__init__.py�__init__! s z!DeviceAuthorizationClass.__init__c C s$ | � � td| j� �� | �� dS )zv
Start the device auth flow. In the future we will
store the tokens in an in-memory keyring.
z<Please visit the following URL to authenticate this device: N)�_request_device_code�print�_verification_uri_complete�poll_for_auth_completion�r r r r r + s �� z/DeviceAuthorizationClass._use_device_code_grantc
C s� dt � �}ddi}tstd��z3tj| j||td�}|�� |�� }|� d�| _
|� d�| _ |� d�| _ |� d �| _
|� d
�| _W d
S tjy[ } z t�d |j� d |� ���d
}~ww )zm
Initialize new Device Authorization Grant attempt by
requesting a new device code.
z
client_id=z content-typez!application/x-www-form-urlencoded�Rpython3-requests is not installed and is required for obtaining device auth token.)�data�headers�timeout� user_code�verification_uri�interval� device_code�verification_uri_completezNHTTP request failed while attempting to acquire the tokens.Error returned was � N)�DEVICE_AUTH_CLIENT_ID�REQUESTS_LOADED� Exception�requests�postr r �raise_for_status�json�get�
_user_code�_verification_uri� _intervalr r � HTTPError� status_code)r r r �res�response�er r r r 9 s8
� �����z-DeviceAuthorizationClass._request_device_codec
C s� t t| jd�}ts
td��| jdu rvt�| j� z:t j
| j |t d�}|j
}|dkr5t�d� | �|�� � |dvr?t||j��|dkrQ|�� d d
vrQt||j��W n t jjyn } zt�d |� �� W Y d}~nd}~ww | jdu sdS dS ) z�
Continuously poll OIDC token endpoint until the user is successfully
authenticated or an error occurs.
)�
grant_type� client_idr r N�r r �� z$The SSO authentication is successful)r5 � r6 �error)�authorization_pending� slow_downz)Error was found while posting a request: )�GRANT_TYPE_DEVICE_CODEr" r r# r$ r �time�sleepr, r% r& r
r r. �logger�info�_set_token_datar( �text�
exceptions�RequestExceptionr7 )r �
token_data�check_auth_completionr. r1 r r r r X s< �
�
� � ���z1DeviceAuthorizationClass.poll_for_auth_completionc C sv |� d�| _t�tj�t|� d�d� | _|� d�| _|� d�| _ | j dkr,tj
| _ dS t�tj�t| j d� | _ dS )a@
Set the class attributes as per the input token_data received.
In the future we will persist the token data in a local,
in-memory keyring, to avoid visting the browser frequently.
:param token_data: Token data containing access_token, refresh_token
and their expiry etc.
� access_token�
expires_in��seconds�
refresh_token�refresh_expires_inr N) r) r r �nowr �utcr r
�_refresh_token�_refresh_expires_in�max�_refresh_expires_at)r rC r r r r? z s
�
�z(DeviceAuthorizationClass._set_token_datac C s2 | � � r| jS | �� r| �� | jS | �� | jS )zt
Get the valid access_token at any given time.
:return: Access_token
:rtype: string
)�is_access_token_validr �is_refresh_token_valid�_use_refresh_token_grantr r r r r �get_access_token� s z)DeviceAuthorizationClass.get_access_tokenc C �( | j o| jo| jtdd� t�tj�kS )z�
Check the validity of access_token. We are considering it invalid 180
sec. prior to it's exact expiry time.
:return: True/False
� rG )r r
r r rK r rL r r r r rQ � s
��z.DeviceAuthorizationClass.is_access_token_validc C rU )z�
Check the validity of refresh_token. We are considering it invalid
180 sec. prior to it's exact expiry time.
:return: True/False
rV rG )rM rP r r rK r rL r r r r rR � s
��z/DeviceAuthorizationClass.is_refresh_token_validNc C s� t std��td|s
| jn|d�}tj| j|td�}|jdkr(| � |�
� � dS |jdkrLd|�
� d v rLt � d |j� d
|�
� d � d �� | �
� dS td |j� d
|�
� d � ���)z�
Fetch the new access_token and refresh_token using the existing
refresh_token and persist it.
:param refresh_token: optional param for refresh_token
r rI )r3 r2 rI r4 r5 r6 �invalidr7 zAProblem while fetching the new tokens from refresh token grant - r! z%. New Device code will be requested !zcSomething went wrong while using the Refresh token grant for fetching tokens: Returned status code z and error N)r# r$ r" rM r% r& r
r r. r? r( r= �warningr )r rI �refresh_token_data�refresh_token_resr r r rS � s< ���
��
� �
��z1DeviceAuthorizationClass._use_refresh_token_grantr )
�__name__�
__module__� __qualname__�__doc__r r r r r? rT rQ rR rS r r r r r s
" r )�loggingr% r# � ImportErrorr; r r r �
sos.utilitiesr r" r: � getLoggerr= r r r r r �<module> s
�