|
Server : LiteSpeed System : Linux server51.dnsbootclub.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : nandedex ( 1060) PHP Version : 8.1.33 Disable Function : NONE Directory : /opt/cppython/lib/python3.8/site-packages/google/oauth2/__pycache__/ |
U
O��g�( � @ s� d Z ddlZddlZddlZddlZddlmZ ddlmZ ddlm Z ddl
m Z m Z m
Z
dZdZd Zd
d � ZG d d
� d
ejd�ZG dd� de�ZG dd� de�ZG dd� de�Zdd� e� e� e� fD �ZdS )z" Challenges for reauthentication.
� N)�_helpers)�
exceptions)�webauthn_handler_factory)�$AuthenticationExtensionsClientInputs�
GetRequest� PublicKeyCredentialDescriptorzhttps://accounts.google.comzFPlease run `gcloud auth login` to complete reauthentication with SAML.i�� c C s
t � | �S )z�Get password from user.
Override this function with a different logic if you are using this library
outside a CLI.
Args:
text (str): message for the password prompt.
Returns:
str: password string.
)�getpass)�text� r
�E/opt/cppython/lib/python3.8/site-packages/google/oauth2/challenges.py�get_user_password( s r c @ sB e Zd ZdZeejdd� ��Zeejdd� ��Zejdd� �Z dS ) �ReauthChallengez!Base class for reauth challenges.c C s t d��dS )z"Returns the name of the challenge.z!name property must be implementedN��NotImplementedError��selfr
r
r �name: s zReauthChallenge.namec C s t d��dS )zAReturns true if a challenge is supported locally on this machine.z0is_locally_eligible property must be implementedNr r r
r
r �is_locally_eligible@ s z#ReauthChallenge.is_locally_eligiblec C s t d��dS )ac Performs logic required to obtain credentials and returns it.
Args:
metadata (Mapping): challenge metadata returned in the 'challenges' field in
the initial reauth request. Includes the 'challengeType' field
and other challenge-specific fields.
Returns:
response that will be send to the reauth service as the content of
the 'proposalResponse' field in the request body. Usually a dict
with the keys specific to the challenge. For example,
``{'credential': password}`` for password challenge.
z1obtain_challenge_input method must be implementedNr �r �metadatar
r
r �obtain_challenge_inputF s z&ReauthChallenge.obtain_challenge_inputN)
�__name__�
__module__� __qualname__�__doc__�property�abc�abstractmethodr r r r
r
r
r r
7 s r
)� metaclassc @ s: e Zd ZdZedd� �Zedd� �Ze�e �dd� �Z
dS ) �PasswordChallengez(Challenge that asks for user's password.c C s dS )NZPASSWORDr
r r
r
r r [ s zPasswordChallenge.namec C s dS �NTr
r r
r
r r _ s z%PasswordChallenge.is_locally_eligiblec C s t d�}|sd}d|iS )NzPlease enter your password:� Z
credential)r )r Zunused_metadata�passwdr
r
r r c s z(PasswordChallenge.obtain_challenge_inputN) r r r r r r r r �copy_docstringr
r r
r
r
r r X s
r c @ sJ e Zd ZdZedd� �Zedd� �Ze�e �dd� �Z
dd � Z d
d � Z d S )
�SecurityKeyChallengez2Challenge that asks for user's security key touch.c C s dS )NZ SECURITY_KEYr
r r
r
r r n s zSecurityKeyChallenge.namec C s dS r r
r r
r
r r r s z(SecurityKeyChallenge.is_locally_eligiblec C s` z6t �� }|�� }|d k r4tj�d� | �||�W S W n tk
rJ Y nX z dd l}dd l }dd l
}W n t k
r� t �
d��Y nX |d }|d }|d }|d }||kr�||g} n|g} g }
|D ]P} | d �d �} |j�tt�| ���}
| d
�d �}t�|�}|
�|
|d �� q�d}| D �]6}z8|d 7 }|jj�t�}|j||
tjjd
�}d|iW S |jjk
�r� } zj|j |jjj k�r�|t | �k�r�tj�d� W Y �8 d S W Y �,�q"|j |jjj k�r�tj�d� n|�W 5 d }~X Y nh |jj k
�r0 } z tj�d�!|�� W Y ��q"W 5 d }~X Y n& |jj"k
�rT tj�d� Y nX d S d S )Nz*Please insert and touch your security key
r z�pyu2f dependency is required to use Security key reauth feature. It can be installed via `pip install pyu2f` or `pip install google-auth[reauth]`.� securityKey�
challenges�
applicationId�relyingPartyId� keyHandle�ascii� challenge)�keyr+ � )Zprint_callbackzIneligible security key.
z0Timed out while waiting for security key touch.
zPlugin error: {}.
zNo security key found.
)#r ZWebauthnHandlerFactoryZ get_handler�sys�stderr�write� _obtain_challenge_input_webauthn� ExceptionZ pyu2f.convenience.authenticatorZ pyu2f.errorsZ pyu2f.model� ImportErrorr ZReauthFailError�encode�modelZ
RegisteredKey� bytearray�base64�urlsafe_b64decode�appendZ convenienceZ
authenticatorZ CreateCompositeAuthenticator�
REAUTH_ORIGINZ Authenticate�errorsZU2FError�codeZDEVICE_INELIGIBLE�len�TIMEOUTZ PluginError�formatZNoDeviceFoundError)r r �factory�webauthn_handlerZpyu2f�skr& �application_id�relying_party_idZapplication_parametersZchallenge_data�c�khr, r+ �triesZapp_id�api�response�er
r
r r v sx �
� �
�z+SecurityKeyChallenge.obtain_challenge_inputc
C sx |� d�}|d kr t�d��|� d�}|� d�}|� d�}|d ksNt|�dk rXt�d��|d krjt�d��|d kr|t�d ��g }|D ]:}|� d
�} | d kr�t�d ��| �| �}
|�t|
d �� q�t|d
�} |d � d�}|d kr�t�d��tt || �|�t
|d| d�} z|� | �}
W n: t k
�rN } zt j
�d�|�� |�W 5 d }~X Y nX |
jj|
jj|
jj||
jdd�}d|iS )Nr% zsecurityKey is Noner& r' r( r- zchallenges is None or emptyzapplication_id is Nonezrelying_party_id is Noner) zkeyHandle is None)�id)Zappidr r+ zchallenge is None�required)�originZrpidr+ Z
timeout_ms�allow_credentialsZuser_verification�
extensionszWebauthn Error: {}.
� )Z
clientDataZauthenticatorDataZ
signatureDatar' r) ZsecurityKeyReplyType)�getr Z InvalidValuer= �_unpadded_urlsafe_b64recoder9 r r r r: �WEBAUTHN_TIMEOUT_MSr2 r. r/ r0 r? rI Zclient_data_jsonZauthenticator_data� signaturerK )r r rA rB r& rC rD rN r+ rF Z
key_handle� extension� get_requestZ get_responserJ rI r
r
r r1 � sZ
�
�z5SecurityKeyChallenge._obtain_challenge_input_webauthnc C s t �|�}t �|��� �d�S )z\Converts standard b64 encoded string to url safe b64 encoded string
with no padding.�=)r7 r8 �urlsafe_b64encode�decode�rstrip)r �s�br
r
r rR � s
z0SecurityKeyChallenge._unpadded_urlsafe_b64recodeN)
r r r r r r r r r# r
r r1 rR r
r
r
r r$ k s
K6r$ c @ s0 e Zd ZdZedd� �Zedd� �Zdd� ZdS ) �
SamlChallengez�Challenge that asks the users to browse to their ID Providers.
Currently SAML challenge is not supported. When obtaining the challenge
input, exception will be raised to instruct the users to run
`gcloud auth login` for reauthentication.
c C s dS )NZSAMLr
r r
r
r r s zSamlChallenge.namec C s dS r r
r r
r
r r s z!SamlChallenge.is_locally_eligiblec C s t �t��d S )N)r Z ReauthSamlChallengeFailError�SAML_CHALLENGE_MESSAGEr r
r
r r s z$SamlChallenge.obtain_challenge_inputN)r r r r r r r r r
r
r
r r] � s
r] c C s i | ] }|j |�qS r
)r )�.0r+ r
r
r �
<dictcomp> s � r` )r r r7 r r. Z google.authr r Z
google.oauth2r Z google.oauth2.webauthn_typesr r r r: r^ rS r �ABCMetar
r r$ r] ZAVAILABLE_CHALLENGESr
r
r
r �<module> s* �! �