)JfhTdZgdZddlmZddlmZddlmZmZdZ dZ dZ Gd d e Z Gd d e ZGd dejZGddeZdZGddeZGddeZGddeZGddeZGddeZdS)zTImplements the OpenID Attribute Exchange specification, version 1.0. @since: 2.1.0 )AttributeRequest FetchRequest FetchResponse StoreRequest StoreResponse) extension) TrustRoot) NamespaceMap OPENID_NS unlimited cbd|vrtd|dd|vrtd|ddS)zx Check an alias for invalid characters; raise AXError if any are found. Return None if the alias is valid. ,zAlias z must not contain comma.z must not contain periodN)AXError)aliass W/home/alex/cs2snipeproduction/venv/lib/python3.11/site-packages/openid/extensions/ax.py checkAliasrsK  e||g555CDDD e||gEEEDEEE|ceZdZdZdS)rzQResults from data that does not meet the attribute exchange 1.0 specificationN)__name__ __module__ __qualname____doc__rrrr'srrceZdZdZdZdZdS) NotAXMessagez?Raised when there is no Attribute Exchange mode in the message.c|jjSN __class__rselfs r__repr__zNotAXMessage.__repr__/ ~&&rc|jjSrr r"s r__str__zNotAXMessage.__str__2r%rN)rrrrr$r'rrrrr,s8II''''''''rrc*eZdZdZdZdZdZdZdZdS) AXMessageaAbstract class containing common code for attribute exchange messages @cvar ns_alias: The preferred namespace alias for attribute exchange messages @cvar mode: The type of this attribute exchange message. This must be overridden in subclasses. axzhttp://openid.net/srv/ax/1.0Nc|d}t|trt|d}||jkr*|st t d|jd|dS)aRaise an exception if the mode in the attribute exchange arguments does not match what is expected for this class. @raises NotAXMessage: When there is no mode value in ax_args at all. @raises AXError: When mode does not match. modezutf-8)encodingzExpected mode z; got N)get isinstancebytesstrr,rr)r#ax_argsr,s r _checkModezAXMessage._checkModeIs~{{6"" dE " " /tg...D 49   N"nn$gDIIIttLMMM  rcd|jiS)zReturn a set of attribute exchange arguments containing the basic information that must be in every attribute exchange message. r,)r,r"s r_newArgszAXMessage._newArgsZs  ""r) rrrrns_aliasns_urir,r3r5rrrr)r)6sPH +F DNNN"#####rr)c eZdZdZddZdZdS)AttrInfoaRepresents a single attribute in an attribute exchange request. This should be added to an AXRequest object in order to request the attribute. @ivar required: Whether the attribute will be marked as required when presented to the subject of the attribute exchange request. @type required: bool @ivar count: How many values of this type to request from the subject. Defaults to one. @type count: int @ivar type_uri: The identifier that determines what the attribute represents and how it is serialized. For example, one type URI representing dates could represent a Unix timestamp in base 10 and another could represent a human-readable string. @type type_uri: str @ivar alias: The name that should be given to this alias in the request. If it is not supplied, a generic name will be assigned. For example, if you want to call a Unix timestamp value 'tstamp', set its alias to that value. If two attributes in the same message request to use the same alias, the request will fail to be generated. @type alias: str or NoneType FNcx||_||_||_||_|jt |jdSdSr)requiredcounttype_urirr)r#r>r=r<rs r__init__zAttrInfo.__init__sD      : ! tz " " " " " " !rc"|jtkS)a@ When processing a request for this attribute, the OP should call this method to determine whether all available attribute values were requested. If self.count == UNLIMITED_VALUES, this returns True. Otherwise this returns False, in which case self.count is an integer. )r=UNLIMITED_VALUESr"s rwantsUnlimitedValueszAttrInfo.wantsUnlimitedValuessz---r)r:FN)rrrrr?rBrrrr9r9bsBB####.....rr9cg}|rV|dD]@}||}|td|||A|S)aGiven a namespace mapping and a string containing a comma-separated list of namespace aliases, return a list of type URIs that correspond to those aliases. @param namespace_map: The mapping from namespace URI to alias @type namespace_map: openid.message.NamespaceMap @param alias_list_s: The string containing the comma-separated list of aliases. May also be None for convenience. @type alias_list_s: str or NoneType @returns: The list of namespace URIs that corresponds to the supplied list of aliases. If the string was zero-length or None, an empty list will be returned. @raise KeyError: If an alias is present in the list of aliases but is not present in the namespace map. rNz&No type is defined for attribute name )splitgetNamespaceURIKeyErrorappend) namespace_map alias_list_surisrr>s r toTypeURIsrKs& D&!'',, & &E$44U;;Hh % )*** H%%%% KrcheZdZdZdZd dZdZdZdZdZ e e Z d Z d Z d Z d ZeZdS)raAn attribute exchange 'fetch_request' message. This message is sent by a relying party when it wishes to obtain attributes about the subject of an OpenID authentication request. @ivar requested_attributes: The attributes that have been requested thus far, indexed by the type URI. @type requested_attributes: {str:AttrInfo} @ivar update_url: A URL that will accept responses for this attribute exchange request, even in the absence of the user who made this request. fetch_requestNcVt|i|_||_dSr)r)r?requested_attributes update_url)r#rPs rr?zFetchRequest.__init__s)4   $&!$rcp|j|jvrtd|jd||j|j<dS)a+Add an attribute to this attribute exchange request. @param attribute: The attribute that is being requested @type attribute: C{L{AttrInfo}} @returns: None @raise KeyError: when the requested attribute is already present in this fetch request. zThe attribute z has already been requestedN)r>rOrF)r# attributes raddzFetchRequest.addsS  !: : :(%...233 39B!)"4555rc&t}g}g}|}|jD]\}}|j||}n|||j}|jr||n|||j dkrt|j |d|z<||d|z<|rd ||d<|rd ||d<|S)zGet the serialized form of this attribute fetch request. @returns: The fetch request message parameters @rtype: {unicode:unicode} Nr:count.type.rr< if_available) r r5rOitemsrrSaddAliasr<rGr=r1join)r#aliasesr<rWr2r>rRrs rgetExtensionArgszFetchRequest.getExtensionArgss' .. --//#'#<#B#B#D#D 0 0 Hi& H-- ((9?CC! +&&&&##E***!##,/ ,@,@5()'/GGeO $ $  5"%((8"4"4GJ   =&)hh|&<&rRs rgetRequiredAttrszFetchRequest.getRequiredAttrssO#'#<#B#B#D#D * * Hi! *)))rc|j}||j}|} ||n#t$r }Yd}~dSd}~wwxYw|jr|td|td}|std|jdtj |}| |jstd|jd||S)auExtract a FetchRequest from an OpenID message @param openid_request: The OpenID authentication request containing the attribute fetch request @type openid_request: C{L{openid.server.server.CheckIDRequest}} @rtype: C{L{FetchRequest}} or C{None} @returns: The FetchRequest extracted from the message or None, if the message contained no AX extension. @raises KeyError: if the AuthRequest is not consistent in its use of namespace aliases. @raises AXError: When parseExtensionArgs would raise same. @see: L{parseExtensionArgs} Nrealm return_tozCannot validate update_url z against absent realmz Update URL z! failed validation against realm ) messagegetArgsr7parseExtensionArgsrrPgetArgr rr parse validateURL)clsopenid_requestrbr2r#errr`trs rfromOpenIDRequestzFetchRequest.fromOpenIDRequests*$!(//#*--suu   # #G , , , ,   44444  ? 0NN9g#*>>)[#I#IKKE +g*+++''B>>$/22 0g___ee/000 sA AAc||t}|D]\}}|dr|dd}|}|||d|z}||}|r^ t |} | dkrtd|d|n4#t$r%|tkrtd|d ||} YnwxYwd } | t||| t||d } | D]}d |j |_t||d} | | z} |D]}|| vrtd|d|d|_dS)aGiven attribute exchange arguments, populate this FetchRequest. @param ax_args: Attribute Exchange arguments from the request. As returned from L{Message.getArgs}. @type ax_args: dict @raises KeyError: if the message is not consistent in its use of namespace aliases. @raises NotAXMessage: If ax_args does not include an Attribute Exchange mode. @raises AXError: If the data to be parsed does not follow the attribute exchange specification. At least when 'if_available' or 'required' is not specified for a particular attribute type. rVNrUrzCount z must be greater than zero, got zInvalid count value for z: r:)rr=r<TrWz Type URI zC was in the request but not present in "required" or "if_available"rP)r3r rX startswithrYr.intr ValueErrorrArSr9rKrOr<iterNamespaceURIsrP) r#r2r[keyvaluerr> count_keycount_sr=r<rW all_type_uriss rrdzFetchRequest.parseExtensionArgsNs)&    ..!--// G GJC~~g&& GABB   5111$u, !++i00  ( #G  A::")'!*GG!7#8#88&&((("&666")'+499gg+A#B#BB ' ( E(%uEEEFFFgw{{:'>'>??  @ @H;?D %h / 8 8!'7;;~+F+FGG  </ 1133 , ,H},,g'xx+,,,- "++l33s*B<<,C+*C+cNt|jS)z\Iterate over the AttrInfo objects that are contained in this fetch_request. )iterrOvaluesr"s r iterAttrszFetchRequest.iterAttrss!D-4466777rc*t|jS)zCIterate over the attribute type URIs in this fetch_request )ryrOr"s r__iter__zFetchRequest.__iter__sD-...rc||jvS)z=Is the given type URI present in this fetch_request? )rOr#r>s rhas_keyzFetchRequest.has_keys4444rr)rrrrr,r?rSr\r^rl classmethodrdr{r}r __contains__rrrrrs   D%%%% BBB"000d   +++Z$ $566?4?4?4B888 /// 555 LLLrrcFeZdZdZdZdZdZd dZdZd dZ d Z d Z dS) AXKeyValueMessagezAn abstract class that implements a message that has attribute keys and values. It contains the common code between fetch_response and store_request. cHt|i|_dSr)r)r?datar"s rr?zAXKeyValueMessage.__init__s!4    rc |j|}n#t$rgx}|j|<YnwxYw||dS)aAdd a single value for the given attribute type to the message. If there are already values specified for this type, this value will be sent in addition to the values already specified. @param type_uri: The URI for the attribute @param value: The value to add to the response to the relying party for this attribute @type value: unicode @returns: None N)rrFrG)r#r>rtrzs raddValuezAXKeyValueMessage.addValuesa .Yx(FF . . .+- -FTYx((( .  es ))c||j|<dS)aSet the values for the given attribute type. This replaces any values that have already been set for this attribute. @param type_uri: The URI for the attribute @param values: A list of values to send for this attribute. @type values: [unicode] Nr)r#r>rzs r setValueszAXKeyValueMessage.setValuess% (rNc.|t}i}|jD]h\}}||}||d|z<t t ||d|z<t |D]\}}d||dzfz}|||<i|S)zGet the extension arguments for the key/value pairs contained in this message. @param aliases: An alias mapping. Set to None if you don't care about the aliases for this request. NrVrU value.%s.%dr:)r rrXrSr1len enumerate) r#r[r2r>rzrirtrss r_getExtensionKVArgsz%AXKeyValueMessage._getExtensionKVArgss ?"nnG $  1 1 % % HfKK))E'/GGeO $(+CKK(8(8GHu$ %%f-- % %5#ua!en4$  %rcR||t}|D]K\}}|dr1|}|dd}t ||||L|D]\}} |d|z}t |}g} td|dzD]&} d|| fz} || }| |'n'#t$r|d|z}|dkrg} n|g} YnwxYw| |j |<dS) aParse attribute exchange key/value arguments into this object. @param ax_args: The attribute exchange fetch_response arguments, with namespacing removed. @type ax_args: {unicode:unicode} @returns: None @raises ValueError: If the message has bad values for particular fields @raises KeyError: If the namespace mapping is bad or required arguments are missing rVrnNrUr:rzvalue.) r3r rXrorrYrprangerGrFr) r#r2r[rsrtr>rrvr=rzr value_keys rrdz$AXKeyValueMessage.parseExtensionArgssu    ..!--// 2 2JC~~g&& 2 ABB5!!!  5111&}} ) )OHe )!(U"23G q%!),,))A - :I#I.EMM%(((() % % %5 01B;;FF#WF  %#)DIh  % ) )s C55!DDc|j|}|s|St|dkr|dStd|)aGet a single value for an attribute. If no value was sent for this attribute, use the supplied default. If there is more than one value for this attribute, this method will fail. @type type_uri: str @param type_uri: The URI for the attribute @param default: The value to return if the attribute was not sent in the fetch_response. @returns: The value of the attribute in the fetch_response message, or the default supplied @rtype: unicode or NoneType @raises ValueError: If there is more than one value for this parameter in the fetch_response message. @raises KeyError: If the attribute was not sent in this response r:rz More than one value present for )rr.rr)r#r>defaultrzs r getSinglezAXKeyValueMessage.getSinglesU&x(( ON [[A  !9 '((MNN Nrc|j|S)aGet the list of values for this attribute in the fetch_response. XXX: what to do if the values are not present? default parameter? this is funny because it's always supposed to return a list, so the default may break that, though it's provided by the user's code, so it might be okay. If no default is supplied, should the return be None or []? @param type_uri: The URI of the attribute @returns: The list of values for this attribute in the response. May be an empty list. @rtype: [unicode] @raises KeyError: If the attribute was not sent in the response rrs rr.zAXKeyValueMessage.get4s$y""rcFt||S)azGet the number of responses for a particular attribute in this fetch_response message. @param type_uri: The URI of the attribute @returns: The number of values sent for this attribute @raises KeyError: If the attribute was not sent in the response. KeyError will not be raised if the number of values was zero. )rr.rs rr=zAXKeyValueMessage.countHs488H%%&&&rr) rrrrr?rrrrdrr.r=rrrrrs* % % %0-)-)-)^OOOO6###( ' ' ' ' 'rrcReZdZdZdZd dZdZfdZd dZe eZxZ S) rz0A fetch_response attribute exchange message fetch_responseNcVt|||_||_dS)a @param request: When supplied, I will use namespace aliases that match those in this request. I will also check to make sure I do not respond with attributes that were not requested. @type request: L{FetchRequest} @param update_url: By default, C{update_url} is taken from the request. But if you do not supply the request, you may set the C{update_url} here. @type update_url: str N)rr?rPrequest)r#rrPs rr?zFetchResponse.__init__\s* ""4((($ rcTt}g}|j|jD]}||jvrtd||jD]}|j||jn ||j|j |j|j}n'#t$rg}| |YnwxYw|j tkr/|j t|krtd|j||}|}|D]1}||j}|j|d|z<d|d|z<2|jr |jjp|j} | r| |d<|||S)zSerialize this object into arguments in the attribute exchange namespace @returns: The dictionary of unqualified attribute exchange arguments that represent this fetch_response. @rtype: {unicode;unicode} Nz+Response attribute not present in request: zrYrGr=rArrrr5getAliasrPupdate) r#r[zero_value_typesr> attr_inforzkv_argsr2rrPs rr\zFetchResponse.getExtensionArgsos .. < # !I & &4<//"(!%&&&0 "\3355 E E ?*KK 23333$$Y%7III7!Yy'9:FF777F$++I666667O'777!#f++55!'.7.@.@DEEE**733--//* , ,I$$Y%788E'0'9GGeO $(+GHu$ % %|? (?&o   /$.GL !wsB..!CCctt|||d|_dS)zS@see: {Extension.parseExtensionArgs}rPN)superrrdr.rP)r#r2r!s rrdz FetchResponse.parseExtensionArgss8 mT""55g>>>!++l33rTc|}||j|} |||S#t$r }Yd}~dSd}~wwxYw)aConstruct a FetchResponse object from an OpenID library SuccessResponse object. @param success_response: A successful id_res response object @type success_response: openid.consumer.consumer.SuccessResponse @param signed: Whether non-signed args should be processsed. If True (the default), only signed arguments will be processsed. @type signed: bool @returns: A FetchResponse containing the data from the OpenID message, or None if the SuccessResponse did not contain AX extension data. @raises AXError: when the AX data cannot be parsed. N)extensionResponser7rdr)rhsuccess_responsesignedr#r2rjs rfromSuccessResponsez!FetchResponse.fromSuccessResponsest$suu"44T[&II   # #G , , ,K   44444 s> AA)NN)T) rrrrr,r?r\rdrr __classcell__r!s@rrrWs D&BBBH44444 8&+&9::rrc.eZdZdZdZdfd ZdZxZS)rz>A store request attribute exchange message representation store_requestNcdtt|||_dS)z @param aliases: The namespace aliases to use when making this store request. Leave as None to use defaults. N)rrr?r[)r#r[r!s rr?zStoreRequest.__init__s, lD!!**,,, rc|}||j}|||S)zb @see: L{Extension.getExtensionArgs} )r5rr[r)r#r2rs rr\zStoreRequest.getExtensionArgss=--//**4<88wrr)rrrrr,r?r\rrs@rrrs[ Drrc.eZdZdZdZdZd dZdZdZdS) rz_An indication that the store request was processed along with this OpenID transaction. store_response_successstore_response_failureTNct||r|td|r |j|_n |j|_||_dS)NzAAn error message may only be included in a failing fetch response)r)r?r SUCCESS_MODEr, FAILURE_MODE error_message)r# succeededrs rr?zStoreResponse.__init__sf4    42344 4  *)DII)DI*rc"|j|jkS)z%Was this response a success response?)r,rr"s rrzStoreResponse.succeededsyD---rcx|}|s|jr |j|d<|S)zO@see: {Extension.getExtensionArgs}error)r5rr)r#r2s rr\zStoreResponse.getExtensionArgss=--//~~ 2D$6 2#1GG r)TN) rrrrrrr?rr\rrrrrs\,L+L + + + +...rrN)r__all__openidropenid.server.trustrootr openid.messager r rAMINIMUM_SUPPORTED_ALIAS_LENGTHrrqrr Extensionr)objectr9rKrrrrrrrrrs6    ------22222222"$FFFj '''''7''')#)#)#)#)# #)#)#)#X3.3.3.3.3.v3.3.3.lBfffff9fffRr'r'r'r'r' r'r'r'j};};};};};%};};};@$.Ir