| Server IP : 186.64.123.29 / Your IP : 216.73.217.94 Web Server : LiteSpeed System : Linux house.hostinglat.cl 5.15.0-185-generic #195-Ubuntu SMP Fri Jun 19 17:11:50 UTC 2026 x86_64 User : tuemp9827 ( 1016) PHP Version : 8.1.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/sos/policies/auth/__pycache__/ |
Upload File : |
o
O6ufT � @ sl d dl Z zd dlZdZW n ey dZY nw d dlZd dlmZmZ dZdZe � d�Z
G dd � d �Z dS )
� NTF)�datetime� timedeltaz sos-toolsz,urn:ietf:params:oauth:grant-type:device_code�sosc @ sZ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z ddd�Z dS )�DeviceAuthorizationClassz$
Device Authorization Class
c C s* d | _ d | _d | _|| _|| _| �� d S �N)�
_access_token�_access_expires_at�&_DeviceAuthorizationClass__device_code�client_identifier_url�token_endpoint�_use_device_code_grant)�selfr
r � r �</usr/lib/python3/dist-packages/sos/policies/auth/__init__.py�__init__ s z!DeviceAuthorizationClass.__init__c C s$ | � � td| j� �� | �� dS )zv
Start the device auth flow. In the future we will
store the tokens in an in-memory keyring.
z<Please visit the following URL to authenticate this device: N)�_request_device_code�print�_verification_uri_complete�poll_for_auth_completion�r
r r r r ) s �� z/DeviceAuthorizationClass._use_device_code_grantc
C s� dt � �}ddi}tstd��z2tj| j||d�}|�� |�� }|�d�| _ |�d�| _
|�d�| _ |�d �| _ |�d
�| _
W d
S tjyZ } z t�d |j� d |� ���d
}~ww )zm
Initialize new Device Authorization Grant attempt by
requesting a new device code.
z
client_id=z content-typez!application/x-www-form-urlencoded�Rpython3-requests is not installed and is required for obtaining device auth token.)�data�headers� user_code�verification_uri�interval� device_code�verification_uri_completezNHTTP request failed while attempting to acquire the tokens.Error returned was � N)�DEVICE_AUTH_CLIENT_ID�REQUESTS_LOADED� Exception�requests�postr
�raise_for_status�json�get�
_user_code�_verification_uri� _intervalr r � HTTPError� status_code)r
r r �res�response�er r r r 7 s6
� �����z-DeviceAuthorizationClass._request_device_codec
C s� t t| jd�}ts
td��| jdu rut�| j� z9t j
| j |d�}|j }|dkr4t
�d� | �|�� � |dvr>t||j��|dkrP|�� d d
vrPt||j��W n t jjym } zt
�d |� �� W Y d}~nd}~ww | jdu sdS dS ) z�
Continuously poll OIDC token endpoint until the user is successfully
authenticated or an error occurs.
)�
grant_type� client_idr r N�r �� z$The SSO authentication is successful)r2 � r3 �error)�authorization_pending� slow_downz)Error was found while posting a request: )�GRANT_TYPE_DEVICE_CODEr r r r! r �time�sleepr) r" r# r r+ �logger�info�_set_token_datar% �text�
exceptions�RequestExceptionr4 )r
�
token_data�check_auth_completionr+ r. r r r r U s: �
�
� � ���z1DeviceAuthorizationClass.poll_for_auth_completionc C sn |� d�| _t�� t|� d�d� | _|� d�| _|� d�| _| jdkr*tj| _ dS t�� t| jd� | _ dS )a@
Set the class attributes as per the input token_data received.
In the future we will persist the token data in a local,
in-memory keyring, to avoid visting the browser frequently.
:param token_data: Token data containing access_token, refresh_token
and their expiry etc.
� access_token�
expires_in��seconds�
refresh_token�refresh_expires_inr N)
r& r r �utcnowr r �_refresh_token�_refresh_expires_in�max�_refresh_expires_at)r
r@ r r r r< v s �
�z(DeviceAuthorizationClass._set_token_datac C s2 | � � r| jS | �� r| �� | jS | �� | jS )zt
Get the valid access_token at any given time.
:return: Access_token
:rtype: string
)�is_access_token_validr �is_refresh_token_valid�_use_refresh_token_grantr r r r r �get_access_token� s z)DeviceAuthorizationClass.get_access_tokenc C �$ | j o| jo| jtdd� t�� kS )z�
Check the validity of access_token. We are considering it invalid 180
sec. prior to it's exact expiry time.
:return: True/False
� rD )r r r r rH r r r r rM � s
��z.DeviceAuthorizationClass.is_access_token_validc C rQ )z�
Check the validity of refresh_token. We are considering it invalid
180 sec. prior to it's exact expiry time.
:return: True/False
rR rD )rI rL r r rH r r r r rN � s
��z/DeviceAuthorizationClass.is_refresh_token_validNc C s� t std��td|s
| jn|d�}tj| j|d�}|jdkr'| �|� � � dS |jdkrKd|� � d v rKt
� d |j� d
|� � d � d �� | � � dS td |j� d
|� � d � ���)z�
Fetch the new access_token and refresh_token using the existing
refresh_token and persist it.
:param refresh_token: optional param for refresh_token
r rF )r0 r/ rF r1 r2 r3 �invalidr4 zAProblem while fetching the new tokens from refresh token grant - r z%. New Device code will be requested !zcSomething went wrong while using the Refresh token grant for fetching tokens: Returned status code z and error N)
r r! r rI r" r# r r+ r< r% r: �warningr )r
rF �refresh_token_data�refresh_token_resr r r rO � s: ���
��
� �
��z1DeviceAuthorizationClass._use_refresh_token_grantr )
�__name__�
__module__� __qualname__�__doc__r r r r r< rP rM rN rO r r r r r s
! r ) �loggingr" r � ImportErrorr8 r r r r7 � getLoggerr: r r r r r �<module> s
�