| Current File : //proc/self/root/usr/lib/python3/dist-packages/twisted/cred/__pycache__/checkers.cpython-312.pyc |
�
Ϫ�f�, � �> � U d Z ddlZddlmZmZmZmZmZ ddlm Z m
Z
m Z ddl m
Z
ddlmZmZmZ ddlmZ ddlmZ dd lmZ dd
lmZ d Zed ed < G d
� de
� Z e e � G d� d� � Z e e � G d� d� � Z e e � G d� d� � Z e Z y)zf
Basic credential checkers
@var ANONYMOUS: An empty tuple used to represent the anonymous avatar ID.
� N)�Any�Dict�Optional�Tuple�Union)� Attribute� Interface� implementer)�error)�
IAnonymous�IUsernameHashedPassword�IUsernamePassword)�defer)�Deferred)�Logger)�failure� � ANONYMOUSc �F � e Zd ZdZ ed� Zdedeee e
d f fd�Z y)�ICredentialsCheckerzE
An object that can check sub-interfaces of L{ICredentials}.
zNA list of sub-interfaces of L{ICredentials} which specifies which I may check.� credentials�returnr c � � y)a
Validate credentials and produce an avatar ID.
@param credentials: something which implements one of the interfaces in
C{credentialInterfaces}.
@return: a L{Deferred} which will fire with a L{bytes} that identifies
an avatar, an empty tuple to specify an authenticated anonymous
user (provided as L{twisted.cred.checkers.ANONYMOUS}) or fail with
L{UnauthorizedLogin}. Alternatively, return the result itself.
@see: L{twisted.cred.credentials}
Nr )r s �7/usr/lib/python3/dist-packages/twisted/cred/checkers.py�requestAvatarIdz#ICredentialsChecker.requestAvatarId3 s � � N) �__name__�
__module__� __qualname__�__doc__r �credentialInterfacesr r r �bytesr r r r r r r ) s? � �� %� � ��
�S�
�X�e�E�5��9�<L�6M�-N�
r r c � � e Zd ZdZefZd� Zy)�AllowAnonymousAccessz�
A credentials checker that unconditionally grants anonymous access.
@cvar credentialInterfaces: Tuple containing L{IAnonymous}.
c �4 � t j t � S )z�
Succeed with the L{ANONYMOUS} avatar ID.
@return: L{Deferred} that fires with L{twisted.cred.checkers.ANONYMOUS}
)r �succeedr ��selfr s r r z$AllowAnonymousAccess.requestAvatarIdM s � � �}�}�Y�'�'r N)r r r r r r! r r r r r$ r$ C s � �� '�=��(r r$ c �H � e Zd ZdZeefZdeddfd�Zdededdfd�Z d � Z
d
� Z y) �'InMemoryUsernamePasswordDatabaseDontUsea9
An extremely simple credentials checker.
This is only of use in one-off test programs or examples which don't
want to focus too much on how credentials are verified.
You really don't want to use this for anything else. It is, at best, a
toy. If you need a simple credentials checker for a real application,
see L{FilePasswordDB}.
@cvar credentialInterfaces: Tuple of L{IUsernamePassword} and
L{IUsernameHashedPassword}.
@ivar users: Mapping of usernames to passwords.
@type users: L{dict} mapping L{bytes} to L{bytes}
�usersr Nc � � |j � D ��ci c] \ }}|j d� |�� c}}| _ yc c}}w )a�
Initialize the in-memory database.
For example::
db = InMemoryUsernamePasswordDatabaseDontUse(
user1=b'sesame',
user2=b'hunter2',
)
@param users: Usernames and passwords to seed the database with.
Each username given as a keyword is encoded to L{bytes} as ASCII.
Passwords must be given as L{bytes}.
@type users: L{dict} of L{str} to L{bytes}
�asciiN)�items�encoder+ )r( r+ �x�ys r �__init__z0InMemoryUsernamePasswordDatabaseDontUse.__init__n s1 � � 8=�{�{�}�E�t�q�!�a�h�h�w�'��*�E��
��Es � :�username�passwordc �" � || j |< y)z�
Set a user's password.
@param username: Name of the user.
@type username: L{bytes}
@param password: Password to associate with the username.
@type password: L{bytes}
N)r+ )r( r3 r4 s r �addUserz/InMemoryUsernamePasswordDatabaseDontUse.addUser� s � � (��
�
�8� r c �X � |r|S t j t j � � S �N�r �Failurer �UnauthorizedLogin�r( �matchedr3 s r �_cbPasswordMatchz8InMemoryUsernamePasswordDatabaseDontUse._cbPasswordMatch� �" � � ��O��?�?�5�#:�#:�#<�=� =r c �6 � |j | j v r[t j |j | j |j � j | j |j � S t j t j � � S r8 )
r3 r+ r �
maybeDeferred�
checkPassword� addCallbackr> �failr r; r' s r r z7InMemoryUsernamePasswordDatabaseDontUse.requestAvatarId� st � � � � �4�:�:� -��&�&��)�)�4�:�:�k�6J�6J�+K���k�$�/�/��1E�1E�F�
G� �:�:�e� 5� 5� 7�8� 8r ) r r r r r r
r! r" r2 r6 r> r r r r r* r* V sQ � ��$ � � ��
F�� F�$� F�$
(��
(��
(�4�
(�>� 9r r* c � � e Zd ZU dZdZdZeeeef e d< dZ
e e d< e � Z
dd�Zd� Zd � Zd
� Zd ed eeef fd
�Zded eeeed f fd�Zy)�FilePasswordDBaz
A file-based, text-based username/password database.
Records in the datafile for this class are delimited by a particular
string. The username appears in a fixed field of the columns delimited
by this string, as does the password. Both fields are specifiable. If
the passwords are not stored plaintext, a hash function must be supplied
to convert plaintext passwords to the form stored on disk and this
CredentialsChecker will only be able to check L{IUsernamePassword}
credentials. If the passwords are stored plaintext,
L{IUsernameHashedPassword} credentials will be checkable as well.
FN�
_credCacher �_cacheTimestampc � � || _ || _ || _ || _ || _ || _ || _ | j
�t t f| _ yt f| _ y)a�
@type filename: L{str}
@param filename: The name of the file from which to read username and
password information.
@type delim: L{bytes}
@param delim: The field delimiter used in the file.
@type usernameField: L{int}
@param usernameField: The index of the username after splitting a
line on the delimiter.
@type passwordField: L{int}
@param passwordField: The index of the password after splitting a
line on the delimiter.
@type caseSensitive: L{bool}
@param caseSensitive: If true, consider the case of the username when
performing a lookup. Ignore it otherwise.
@type hash: Three-argument callable or L{None}
@param hash: A function used to transform the plaintext password
received over the network to a format suitable for comparison
against the version stored on disk. The arguments to the callable
are the username, the network-supplied password, and the in-file
version of the password. If the return value compares equal to the
version stored on disk, the credentials are accepted.
@type cache: L{bool}
@param cache: If true, maintain an in-memory cache of the
contents of the password file. On lookups, the mtime of the
file will be checked, and the file will only be re-parsed if
the mtime is newer than when the cache was generated.
N)
�filename�delim�ufield�pfield�
caseSensitive�hash�cacher r
r! )r( rJ rK �
usernameField�
passwordFieldrN rO rP s r r2 zFilePasswordDB.__init__� s` � �X !��
���
�#�� �#�� � *����� ���
� �9�9� � "�'�)�D� %� *;�(<�D� %r c �b � t t | � � }dD ] } ||= � |S # t $ r Y �w xY w)N)rG rH )�dict�vars�KeyError)r( �d�ks r � __getstate__zFilePasswordDB.__getstate__� sF � � ��d�� ��0� �A�
��a�D� �
��� �
��
�s �"� .�.c �X � |r|S t j t j � � S r8 r9 r< s r r> z FilePasswordDB._cbPasswordMatch� r? r c # �f K � t | j d� 5 }|D ]� }|j � }|j | j � }| j
t
|� k\ s| j t
|� k\ r�_| j r!|| j
|| j f�� ��|| j
j � || j f�� �� ddd� y# 1 sw Y yxY w# t $ r6}| j j d|�� t j � �d}~ww xY w�w)a
Loads the credentials from the configured file.
@return: An iterable of C{username, password} couples.
@rtype: C{iterable}
@raise UnauthorizedLogin: when failing to read the credentials from the
file.
�rbNz$Unable to load credentials db: {e!r})�e)�openrJ �rstrip�splitrK rL �lenrM rN �lower�OSError�_logr r; )r( �f�line�partsr] s r �_loadCredentialsz FilePasswordDB._loadCredentials� s � �� � ,��d�m�m�T�*�
M�a� � M�D� �;�;�=�D� �J�J�t�z�z� 2�E��{�{�c�%�j�0�D�K�K�3�u�:�4M� ��)�)� #�D�K�K� 0�%�� � �2D� D�D� #�D�K�K� 0� 6� 6� 8�%�� � �:L� L�L� M�
M�
M�
M�� � ,� �I�I�O�O� B�a�O� H��)�)�+� +�� ,�sL �D1�C/ �B?C#�C/ �"D1�#C,�(C/ �+D1�,C/ �/ D.�81D)�)D.�.D1r3 r c �� � | j s|j � }| j r�| j �6t j
j
| j � | j kD rLt j
j
| j � | _ t | j � � | _ || j | fS | j � D ] \ }}||k( s� ||fc S t |� �)a�
Look up the credentials for a username.
@param username: The username to look up.
@type username: L{bytes}
@returns: Two-tuple of the canonicalicalized username (i.e. lowercase
if the database is not case sensitive) and the associated password
value, both L{bytes}.
@rtype: L{tuple}
@raises KeyError: When lookup of the username fails.
) rN rb rP rG �os�path�getmtimerJ rH rT rh rV )r( r3 �u�ps r �getUserzFilePasswordDB.getUser s� � � �!�!� �~�~�'�H� �:�:����'��7�7�#�#�D�M�M�2�T�5I�5I�I�')�w�w�'7�'7��
�
�'F��$�"&�t�'<�'<�'>�"?����T�_�_�X� 6�6� 6� �-�-�/�
���1���=� �a�4�K�
� �8�$� $r r r c �$ � | j |j � \ }}t |d � }| j rj|�A| j |j |j |� }||k( rt j |� S t j t j � � S t j |j |� j | j |� S # t $ r* t j t j � � cY S w xY wr8 )ro r3 r rO r4 r r& rD r r; rA rB rC r> rV )r( r rm rn �up�hs r r z FilePasswordDB.requestAvatarId7 s� � � ��<�<� � 4� 4�5�D�A�q� #�;��5�B��y�y��>� � � �"�+�+�r�{�{�A�>�A��A�v� $�}�}�Q� /�/� �z�z�%�"9�"9�";�<�<� �*�*�;�+D�+D�a�H�T�T��)�)�1�� �� � 9��:�:�e� 5� 5� 7�8� 8� 9�s � C � 0D�D)� :r � TNF)r r r r rP rG r r r" �__annotations__rH �floatr rd r2 rY r> rh r ro r r r r r r r rF rF � s� � � �
�E�/3�J���e�U�l�+�,�3� �O�U� � �8�D�
����
��>=�@�>� ,�4 %�� %�%��u� �*=� %�>�,�� �%��u�R�y�(�)� *�r rF )!r rj �typingr r r r r �zope.interfacer r r
� twisted.credr �twisted.cred.credentialsr r
r �twisted.internetr �twisted.internet.deferr �twisted.loggerr �twisted.pythonr r ru r r$ r* rF � OnDiskUsernamePasswordDatabaser r r �<module>r� s� ��
�
� 4� 4� <� <� �� �
#� +� !� "� � �5��9� � �)� �4
�
�!�(� (� "�(�$
�
�!�A9� A9� "�A9�H
�
�!�m� m� "�m�d "0� r