o _c0H@s&ddlmZddlZddlZddlZddlZddlmZm Z m Z m Z m Z m Z ddlmZmZmZmZmZddlmZmZddlmZmZmZmZmZmZmZddlm Z m!Z!dd l"m#Z#m$Z$m%Z%m&Z&m'Z'dd l(m)Z)m*Z*dd lm+Z+m,Z,m-Z-m.Z.m/Z/m0Z0dd l1m2Z2dd l3TdgZ4GdddeZ5dS)) annotationsN) GeneratorListOptionalSequenceTuplecast) CONNECTINGOPENSERVER ConnectionState)HeadersMultipleValuesError)InvalidHandshake InvalidHeaderInvalidHeaderValue InvalidOrigin InvalidStatusInvalidUpgradeNegotiationError) ExtensionServerExtensionFactory)build_extensionparse_connectionparse_extensionparse_subprotocol parse_upgrade)RequestResponse)ConnectionOptionExtensionHeader LoggerLikeOrigin SubprotocolUpgradeProtocol) accept_key)*ServerConnectioncseZdZdZdddeddfd8fdd Zd9ddZd:ddZd;ddZdd)d*Z d?d/d0Z d@d3d4Z dAfd6d7 ZZS)Br)ap Sans-I/O implementation of a WebSocket server connection. Args: origins: acceptable values of the ``Origin`` header; include :obj:`None` in the list if the lack of an origin is acceptable. This is useful for defending against Cross-Site WebSocket Hijacking attacks. extensions: list of supported extensions, in order in which they should be tried. subprotocols: list of supported subprotocols, in order of decreasing preference. state: initial state of the WebSocket connection. max_size: maximum size of incoming messages in bytes; :obj:`None` to disable the limit. logger: logger for this connection; defaults to ``logging.getLogger("websockets.client")``; see the :doc:`logging guide <../topics/logging>` for details. Niorigins$Optional[Sequence[Optional[Origin]]] extensions*Optional[Sequence[ServerExtensionFactory]] subprotocolsOptional[Sequence[Subprotocol]]statermax_size Optional[int]loggerOptional[LoggerLike]cs*tjt|||d||_||_||_dS)N)Zsider0r1r3)super__init__r r*available_extensionsavailable_subprotocols)selfr*r,r.r0r1r3 __class__ accept_headerextensions_headerprotocol_headerexcresponserRr<r<r=acceptXsv       zServerConnection.accept(Tuple[str, Optional[str], Optional[str]]c Cs|j}tdd|dDg}tdd|Ds&td|r#d|dtdd|d Dg}t|d krA|d d ksNtd |rKd|dz|d }Wn"tye}zt d |d}~wt yv}zt d d|d}~wwz t j | dd}Wntjy}ztd ||d}~wwt|dkrtd |z|d}Wn"ty}zt d|d}~wt y}zt dd|d}~ww|dkrtd|t|} |||_||\} |_||} |_| | | fS)a7 Check a handshake request and negotiate extensions and subprotocol. This function doesn't verify that the request is an HTTP/1.1 or higher GET request and doesn't check the ``Host`` header. These controls are usually performed earlier in the HTTP request handling code. They're the responsibility of the caller. Args: request: WebSocket handshake request received from the client. Returns: Tuple[str, Optional[str], Optional[str]]: ``Sec-WebSocket-Accept``, ``Sec-WebSocket-Extensions``, and ``Sec-WebSocket-Protocol`` headers for the handshake response. Raises: InvalidHandshake: if the handshake request is invalid; then the server must return 400 Bad Request error. cSg|]}t|qSr<)r.0valuer<r<r= z4ServerConnection.process_request..r css|] }|dkVqdS)upgradeN)lowerrcr<r<r= sz3ServerConnection.process_request..z, NcSrbr<)rrcr<r<r=rfrgrBr rrAzSec-WebSocket-Keyz,more than one Sec-WebSocket-Key header foundT)validatezSec-WebSocket-Versionz0more than one Sec-WebSocket-Version header foundZ13)rRsumget_allanyrjoinlenriKeyErrorrrbase64 b64decodeencodebinasciiErrorrr'process_originoriginprocess_extensionsr,process_subprotocol subprotocol) r9r>rR connectionrhkeyr^Zraw_keyversionr[r\r]r<r<r=rIsx         z ServerConnection.process_requestrRrOptional[Origin]c Cs^z ttt|d}Wnty}ztdd|d}~ww|jdur-||jvr-t||S)a Handle the Origin HTTP request header. Args: headers: WebSocket handshake request headers. Returns: Optional[Origin]: origin, if it is acceptable. Raises: InvalidOrigin: if the origin isn't acceptable. r$z!more than one Origin header foundN)rrr$getrrr*r)r9rRryr^r<r<r=rxs   zServerConnection.process_origin%Tuple[Optional[str], List[Extension]]c Csd}g}g}|d}|rM|jrMtdd|Dg}|D]0\}}|jD](} | j|kr+q#z | ||\} } Wn ty>Yq#w||| f|| q|rSt|}||fS)a Handle the Sec-WebSocket-Extensions HTTP request header. Accept or reject each extension proposed in the client request. Negotiate parameters for accepted extensions. :rfc:`6455` leaves the rules up to the specification of each :extension. To provide this level of flexibility, for each extension proposed by the client, we check for a match with each extension available in the server configuration. If no match is found, the extension is ignored. If several variants of the same extension are proposed by the client, it may be accepted several times, which won't make sense in general. Extensions must implement their own requirements. For this purpose, the list of previously accepted extensions is provided. This process doesn't allow the server to reorder extensions. It can only select a subset of the extensions proposed by the client. Other requirements, for example related to mandatory extensions or the order of extensions, may be implemented by overriding this method. Args: headers: WebSocket handshake request headers. Returns: Tuple[Optional[str], List[Extension]]: ``Sec-WebSocket-Extensions`` HTTP response header and list of accepted extensions. Raises: InvalidHandshake: to abort the handshake with an HTTP 400 error. NrFcSrbr<)rrd header_valuer<r<r=rfQrgz7ServerConnection.process_extensions..)rnr7rmnameZprocess_request_paramsrappendr) r9rRZresponse_header_valueZextension_headersZaccepted_extensions header_valuesparsed_header_valuesrZrequest_paramsZ ext_factoryZresponse_params extensionr<r<r=rz s4'       z#ServerConnection.process_extensionsOptional[Subprotocol]cCs>d}|d}|r|jrtdd|Dg}|||j}|S)a Handle the Sec-WebSocket-Protocol HTTP request header. Args: headers: WebSocket handshake request headers. Returns: Optional[Subprotocol]: Subprotocol, if one was selected; this is also the value of the ``Sec-WebSocket-Protocol`` response header. Raises: InvalidHandshake: to abort the handshake with an HTTP 400 error. NrGcSrbr<)rrr<r<r=rfrgz8ServerConnection.process_subprotocol..)rnr8rmselect_subprotocol)r9rRr|rrr<r<r=r{ts  z$ServerConnection.process_subprotocolclient_subprotocolsSequence[Subprotocol]server_subprotocolscs6tt@}|s dSfdd}t||ddS)au Pick a subprotocol among those offered by the client. If several subprotocols are supported by the client and the server, the default implementation selects the preferred subprotocols by giving equal value to the priorities of the client and the server. If no common subprotocol is supported by the client and the server, it proceeds without a subprotocol. This is unlikely to be the most useful implementation in practice, as many servers providing a subprotocol will require that the client uses that subprotocol. Args: client_subprotocols: list of subprotocols offered by the client. server_subprotocols: list of subprotocols available on the server. Returns: Optional[Subprotocol]: Subprotocol, if a common subprotocol was found. Ncs||S)N)index)prrr<r=sz5ServerConnection.select_subprotocol..)r~r)setsorted)r9rrr.priorityr<rr=rs z#ServerConnection.select_subprotocolstatushttp.HTTPStatustextstrcCsp|}tdtjjddfddtt|fdg}t|j|j ||}|j dur,t ||_ |j d|j|j |S) a. Create a handshake response to reject the connection. A short plain text response is the best fallback when failing to establish a WebSocket connection. You must send the handshake response with :meth:`send_response`. You can modify it before sending it, for example to alter HTTP headers. Args: status: HTTP status code. text: HTTP response body; will be encoded to UTF-8. Returns: Response: WebSocket handshake response event to send to the client. rETrC)r closezContent-Length)z Content-Typeztext/plain; charset=utf-8Nzconnection failed (%d %s))rurrWrXrYrrqr rephraserKrr3rZ)r9rrbodyrRr_r<r<r=rMs  zServerConnection.rejectr_NonecCs|jr3|j|j}}|jd|||jD] \}}|jd||q|jdur3|jdt|j|j | |jdkrL|j t usGJt |_ dS|||_t|jdS)z Send a handshake response to the client. Args: response: WebSocket handshake response event to send. z> HTTP/1.1 %d %sz> %s: %sNz> [body] (%d bytes)rH)rL status_codeZ reason_phraser3rR raw_itemsrrqZwritesr serializer0r r Zsend_eofdiscardparsernext)r9r_coderr~rer<r<r= send_responses    zServerConnection.send_responseGenerator[None, None, None]c#sz|jtur3t|jjEdH}|jr-|jd|j|j D] \}}|jd||q |j |t EdHdS)Nz< GET %s HTTP/1.1z< %s: %s)r0r rparsereaderZ read_linerLr3pathrRreventsrr5)r9r>r~rer:r<r=rs  zServerConnection.parse) r*r+r,r-r.r/r0rr1r2r3r4)r>rr?r )r>rr?ra)rRrr?r)rRrr?r)rRrr?r)rrrrr?r)rrrrr?r )r_r r?r)r?r)__name__ __module__ __qualname____doc__r r6r`rIrxrzr{rrMrr __classcell__r<r<r:r=r)/s$  W X  T  $ ))6 __future__rrsrv email.utilsrWrNtypingrrrrrrr}r r r r rZdatastructuresrr exceptionsrrrrrrrr,rrrRrrrrrZhttp11rr r!r"r#r$r%r&rXr'Z legacy.server__all__r)r<r<r<r=s"  $