⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.30
Server IP:
45.79.8.107
Server:
Linux localhost 5.15.0-140-generic #150-Ubuntu SMP Sat Apr 12 06:00:09 UTC 2025 x86_64
Server Software:
nginx/1.18.0
PHP Version:
8.1.2-1ubuntu2.21
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
oauthlib
/
__pycache__
/
View File Name :
common.cpython-310.pyc
o an4 @ s d Z ddlZddlZddlZddlZddlZddlmZ ddlm Z m Z m Z ddlmZ zddlmZ ddlmZ W n eyO ddlmZ ddlmZ Y nw d Zd Zed ejZed Z d Z e dZ d:ddZ dd Z dd Z dd Z dd Z!e"e e"dB Z#dd Z$d d Z%d d Z&d!d" Z'd#efd$d%Z(d&d' Z)d(d) Z*d#efd*d+Z+d,d- Z,d;d/d0Z-d1d2 Z.d<d4d5Z/G d6d7 d7e0Z1G d8d9 d9Z2dS )=z| oauthlib.common ~~~~~~~~~~~~~~ This module provides data structures and utilities common to all implementations of OAuth. N)quoteunquote urlencode ) get_debug)randbits) SystemRandom) getrandbits>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789z_ !"#$%&\'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}z&([^&;]*(?:password|token)[^=]*=)[^&;]+z&%[^0-9A-Fa-f]|%[0-9A-Fa-f][^0-9A-Fa-f]zAABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_.-oauthlib /c C s: t | tr | dn| } t| |} t | tr| d} | S Nutf-8) isinstancestrencode_quotebytesdecode)ssafe r 1/usr/lib/python3/dist-packages/oauthlib/common.pyr - s r c C s t | } t| tr| d} | S r )_unquoter r r )r r r r r 7 s r c C s( t | }t|}t|tr|S |dS r )encode_params_utf8 _urlencoder r r )params utf8_params urlencodedr r r r A s r c C L g }| D ] \}}| t|tr|dn|t|tr |dn|f q|S )ziEnsures that all parameters in a list of 2-element tuples are encoded to bytestrings using UTF-8 r )appendr r r )r encodedkvr r r r J r c C r )zfEnsures that all parameters in a list of 2-element tuples are decoded to unicode using UTF-8. r )r r r r )r decodedr" r# r r r decode_params_utf8V r$ r& z=&;:%+~,*@!()/?'$c C sT | rt | tksd}t|t | t | f t| r tdtj| dd}t|S )a Decode a query string in x-www-form-urlencoded format into a sequence of two-element tuples. Unlike urlparse.parse_qsl(..., strict_parsing=True) urldecode will enforce correct formatting of the query string by validation. If validation fails a ValueError will be raised. urllib.parse_qsl will only raise errors if any of name-value pairs omits the equals sign. zError trying to decode a non urlencoded string. Found invalid characters: %s in the string: '%s'. Please ensure the request/response body is x-www-form-urlencoded.z%Invalid hex encoding in query string.Tkeep_blank_values)setr ValueErrorINVALID_HEX_PATTERNsearchurlparse parse_qslr& )queryerrorr r r r urldecodee s r1 c C s t | ttfrzt| }W |S ty d}Y |S w t| drQzt| W n ty2 d}Y |S ty= d}Y |S w tt | trH| n| }t |}|S d}|S )a* Extract parameters and return them as a list of 2-tuples. Will successfully extract parameters from urlencoded query strings, dicts, or lists of 2-tuples. Empty strings/dicts/lists will return an empty list of parameters. Any other input will result in a return value of None. N__iter__) r r r r1 r* hasattrdict TypeErrorlistitemsr& )rawr r r r extract_params s. r9 c C s t t tdt S )a Generate pseudorandom nonce that is unlikely to repeat. Per `section 3.3`_ of the OAuth 1 RFC 5849 spec. Per `section 3.2.1`_ of the MAC Access Authentication spec. A random 64-bit number is appended to the epoch timestamp for both randomness and to decrease the likelihood of collisions. .. _`section 3.2.1`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01#section-3.2.1 .. _`section 3.3`: https://tools.ietf.org/html/rfc5849#section-3.3 @ )r r generate_timestampr r r r generate_nonce s r< c C s t tt S )aD Get seconds since epoch (UTC). Per `section 3.3`_ of the OAuth 1 RFC 5849 spec. Per `section 3.2.1`_ of the MAC Access Authentication spec. .. _`section 3.2.1`: https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01#section-3.2.1 .. _`section 3.3`: https://tools.ietf.org/html/rfc5849#section-3.3 )r inttimer r r r r; s r; c s$ t d fddt| D S )aX Generates a non-guessable OAuth token OAuth (1 and 2) does not specify the format of tokens except that they should be strings of random characters. Tokens should not be guessable and entropy when generating the random characters is important. Which is why SystemRandom is used instead of the default random.choice method. c 3 s | ]} V qd S N)choice).0xcharsrandr r <genexpr> z!generate_token.<locals>.<genexpr>)r joinrangelengthrF r rE r generate_token s rN c C sT dd l }tj }|j|tj|jd d}||j ||| d}t |d}|S )Nr )seconds)scopeexpRS256UTF-8) jwtdatetimeutcnowrP timedelta expires_inupdateclaimsr to_unicode) private_pemrequestrT nowrZ tokenr r r generate_signed_token s r` c C s dd l }|j|| dgdS )Nr rR ) algorithms)rT r ) public_pemr_ rT r r r verify_signed_token s rc c C s t | |S )zGenerates an OAuth client_id OAuth 2 specify the format of client_id in https://tools.ietf.org/html/rfc6749#appendix-A. )rN rL r r r generate_client_id s rd c C s2 t |tr | }tj| dd}|| t|S )z)Extend a query with a list of two-tuples.Tr' )r r4 r7 r- r. extendr )r/ r queryparamsr r r add_params_to_qs s rg Fc C sF t | \}}}}}}|rt||}nt||}t ||||||fS )z5Add a list of two-tuples to the uri query components.)r- rg urlunparse) urir fragmentschnetpathparr/ frar r r add_params_to_uri s rp c C sH t | t |kr dS d}t| |D ]\}}|t|t|A O }q|dkS )a Near-constant time string comparison. Used in order to avoid timing attacks on sensitive information such as secret keys during request verification (`rootLabs`_). .. _`rootLabs`: http://rdist.root.org/2010/01/07/timing-independent-array-comparison/ Fr )lenzipord)abresultrD yr r r safe_string_equals s rx rS c s t | tr| S t | trt| dS t| drKzt| W n ty' Y | S ty8 fdd| D Y S w t| drB| } fdd| D S | S )z:Convert a number of different types of objects to unicode.encodingr2 c 3 s | ]}t | V qd S rA r[ )rC iry r r rH rI z to_unicode.<locals>.<genexpr>r7 c s" i | ] \}}t | t | qS r r{ )rC r" r# ry r r <dictcomp>$ s " z to_unicode.<locals>.<dictcomp>)r r r r3 r4 r5 r* r7 )datarz r ry r r[ s" r[ c sb e Zd ZdZi Zdd Zdd Z fddZ fdd Zdd d Z fd dZ fddZ Z S )CaseInsensitiveDictz3Basic case insensitive dict with strings only keys.c C s* dd |D | _ |D ]}|| | |< q d S )Nc S s i | ]}| |qS r )lower)rC r" r r r r} 0 s z0CaseInsensitiveDict.__init__.<locals>.<dictcomp>)proxy)selfr~ r" r r r __init__/ s z CaseInsensitiveDict.__init__c C s | | jv S rA )r r )r r" r r r __contains__4 s z CaseInsensitiveDict.__contains__c s* | j | }t | | j | = d S rA )r r super __delitem__r r" key __class__r r r 7 s z CaseInsensitiveDict.__delitem__c s | j | }t |S rA )r r r __getitem__r r r r r < s z CaseInsensitiveDict.__getitem__Nc C s || v r| | S |S rA r )r r" defaultr r r get@ s zCaseInsensitiveDict.getc s t || || j| < d S rA )r __setitem__r r )r r" r# r r r r C s z CaseInsensitiveDict.__setitem__c s8 t j|i | t|i |D ] }|| j| < qd S rA )r rY r4 r r )r argskwargsr" r r r rY G s zCaseInsensitiveDict.updaterA ) __name__ __module__ __qualname____doc__r r r r r r r rY __classcell__r r r r r ) s r c @ sR e Zd ZdZ dddZdd Zd d Zed d Zed d Z edd Z dS )Requesta: A malleable representation of a signable HTTP request. Body argument may contain any data, but parameters will only be decoded if they are one of: * urlencoded query string * dict * list of 2-tuples Anything else will be treated as raw body data to be passed through unmolested. GETNr c s fdd}||| _ ||| _t||pi | _||| _t| j| _g | _i | _i dd dd dd dd dd dd d d d d d d d d d d dd dd dd dd dd dd d d d d d d d d d d d d d d | _ | j t t | j | j t | jpg d S )Nc s rt | S | S rA r{ )rD ry r r <lambda>_ s z"Request.__init__.<locals>.<lambda> access_tokenclient client_id client_secretcodecode_challengecode_challenge_method code_verifierextra_credentials grant_type redirect_uri refresh_token request_token response_typerP scopesstate) r_ usertoken_type_hint response_modenoncedisplaypromptrZ max_age ui_locales id_token_hint login_hint acr_values)ri http_methodr headersbodyr9 decoded_body oauth_params validator_log_paramsrY r4 r1 uri_query)r ri r r r rz r r ry r r \ sv "zRequest.__init__c C s || j v r | j | S t|rA )r AttributeError)r namer r r __getattr__ s zRequest.__getattr__c C sR t sdS | j}| j }|rtdt|}d|v r d|d< d| j| j ||S )Nz <oauthlib.Request SANITIZED>z <SANITIZED> Authorizationz <SANITIZED>zF<oauthlib.Request url="{}", http_method="{}", headers="{}", body="{}">) r r r copySANITIZE_PATTERNsubr formatri r )r r r r r r __repr__ s zRequest.__repr__c C s t | jjS rA )r- ri r/ r r r r r s zRequest.uri_queryc C s | j sg S tj| j dddS )NT)r( strict_parsing)r r- r. r r r r uri_query_params s zRequest.uri_query_paramsc C sP t t}dd | jp g | j D }|D ] }|| d7 < qdd | D S )Nc s s | ]}|d V qdS )r Nr )rC pr r r rH s z+Request.duplicate_params.<locals>.<genexpr>r c S s g | ] \}}|d kr|qS )r r )rC r" cr r r <listcomp> s z,Request.duplicate_params.<locals>.<listcomp>) collections defaultdictr= r r r7 )r seen_keysall_keysr" r r r duplicate_params s zRequest.duplicate_params)r NNr ) r r r r r r r propertyr r r r r r r r M s 2 r )r )F)rS )3r r rU loggingrer> urllib.parseparser- r r r r r r r@ r secretsr r ImportErrorrandomr UNICODE_ASCII_CHARACTER_SETCLIENT_ID_CHARACTER_SETcompile IGNORECASEr r+ always_safe getLoggerlogr r& r) r r1 r9 r< r; rN r` rc rd rg rp rx r[ r4 r r r r r r <module> sT ! $