o
˷e.? @ s2 d Z g dZddlZddlZddlmZmZ ddlmZ ddl m
Z
m Z m Z ddl
mZ ddlmZ dd lmZ dd
lmZmZ dd lmZ dd lmZ d
ZdZdZ dZ dZ ddl m Z! ddl m"Z# e$e%Z&G dd de'Z(dd Z)dd Z*dd Z+d d Z,d d Z-d d! Z.d"d# Z/d$d% Z0d&d' Z1d(d) ZdS )*z9Functions to discover OpenID endpoints from identifiers.
)DiscoveryFailure
OPENID_1_0_NSOPENID_1_0_TYPEOPENID_1_1_TYPEOPENID_2_0_TYPEOPENID_IDP_2_0_TYPEOpenIDServiceEndpointdiscover N)fetchersurinorm)yadis)nsTag XRDSError
XRD_NS_2_0) applyFilter)r )r )xriresfiltersxri)
html_parsezhttp://openid.net/xmlns/1.0z'http://specs.openid.net/auth/2.0/serverz'http://specs.openid.net/auth/2.0/signonz http://openid.net/signon/1.1z http://openid.net/signon/1.0)
OPENID1_NS)
OPENID2_NSc @ s e Zd ZdZeeeegZdd Z dd Z
dd Z dd Z d
d Z
d d
Zdd Zdd Zdd Zdd ZeeZdd ZeeZdd ZeeZdd ZeeZd d ZeeZd d Zd S )!r zObject representing an OpenID service endpoint.
@ivar identity_url: the verified identifier.
@ivar canonicalID: For XRI, the persistent identifier.
c C s. d | _ d | _g | _d | _d | _d| _d | _d S )NF)
claimed_id
server_url type_urislocal_id canonicalID
used_yadisdisplay_identifierself r! O/var/www/ideatree/venv/lib/python3.10/site-packages/openid/consumer/discover.py__init__; s
z OpenIDServiceEndpoint.__init__c C s
|| j v S N)r )r
extension_urir! r! r"
usesExtensionD
z#OpenIDServiceEndpoint.usesExtensionc C s t | jv s
t| jv r tS tS r$ )r r r OPENID_2_0_MESSAGE_NSOPENID_1_0_MESSAGE_NSr r! r! r" preferredNamespaceG s
z(OpenIDServiceEndpoint.preferredNamespacec C s || j v p |tko | S )zyDoes this endpoint support this type?
I consider C{/server} endpoints to implicitly support C{/signon}.
)r r isOPIdentifier)r type_urir! r! r" supportsTypeN s
z"OpenIDServiceEndpoint.supportsTypec C s0 | j dur| j S | jdu rdS tj| jd S )zJReturn the display_identifier if set, else return the claimed_id.
Nr )r r urllibparse urldefragr r! r! r" getDisplayIdentifierV s
z*OpenIDServiceEndpoint.getDisplayIdentifierc C s | tkS r$ )r* r( r r! r! r" compatibilityMode` s z'OpenIDServiceEndpoint.compatibilityModec C s
t | jv S r$ )r r r r! r! r" r+ c r' z$OpenIDServiceEndpoint.isOPIdentifierc C s6 || _ || _d| _| st|| j | _|| _dS dS )zRSet the state of this object based on the contents of the
service element.TN)r r r r+ findOPLocalIdentifierr r )r yadis_urlurir service_elementr! r! r" parseServicef s
z"OpenIDServiceEndpoint.parseServicec C s* | j | j u rdu r| jS | j p| jS )zaReturn the identifier that should be sent as the
openid.identity parameter to the server.N)r r r r r! r! r"
getLocalIDv s z OpenIDServiceEndpoint.getLocalIDc C sD | | j}|r |jdur | }||j|j|j|j |S d}|S )zCreate a new instance of this class from the endpoint
object passed in.
@return: None or OpenIDServiceEndpoint for this endpoint objectN)
matchTypesopenid_type_urisr5 r7 r4 r r6 )clsendpointr openid_endpointr! r! r" fromBasicServiceEndpoint s z.OpenIDServiceEndpoint.fromBasicServiceEndpointc C s~ t ddftddfg}t|}g }|D ])\}}}t||} | du r#q| }
||
_t|||
_| |
_|g|
_| |
q|S )zParse the given document as HTML looking for an OpenID
@rtype: [OpenIDServiceEndpoint]
zopenid2.providerzopenid2.local_idz
openid.serverzopenid.delegateN)
r r r parseLinkAttrs
findFirstHrefr r r r append) r; r5 htmldiscovery_types
link_attrsservicesr, op_endpoint_rel local_id_relop_endpoint_urlservicer! r! r" fromHTML s(
z OpenIDServiceEndpoint.fromHTMLc C s t ||| S )zParse the given document as XRDS looking for OpenID services.
@rtype: [OpenIDServiceEndpoint]
@raises XRDSError: When the XRDS does not parse.
@since: 2.1.0
)extractServices)r; r5 xrdsr! r! r" fromXRDS s z OpenIDServiceEndpoint.fromXRDSc C s$ | r| j}n| j}||j|jS )zCreate endpoints from a DiscoveryResult.
@type discoveryResult: L{DiscoveryResult}
@rtype: list of L{OpenIDServiceEndpoint}
@raises XRDSError: When the XRDS does not parse.
@since: 2.1.0
)isXRDSrM rJ normalized_uri
response_text)r; discoveryResultmethodr! r! r" fromDiscoveryResult s z)OpenIDServiceEndpoint.fromDiscoveryResultc C s | }||_ tg|_|S )zConstruct an OP-Identifier OpenIDServiceEndpoint object for
a given OP Endpoint URL
@param op_endpoint_url: The URL of the endpoint
@rtype: OpenIDServiceEndpoint
)r r r )r; rH rI r! r! r" fromOPEndpointURL s z'OpenIDServiceEndpoint.fromOPEndpointURLc C s( d| j j| j j| j| j| j| j| jf S )NzM<%s.%s server_url=%r claimed_id=%r local_id=%r canonicalID=%r used_yadis=%s >) __class__
__module____name__r r r r r r r! r! r" __str__ s z OpenIDServiceEndpoint.__str__N)rW rV __qualname____doc__r r r r r: r# r& r* r- r1 r2 r+ r7 r8 r> classmethodrJ rM rS rT rX r! r! r! r" r + s6
r c C s g }t |v s
t|v r|ttd t|v r |ttd d}|D ]#}| |D ]}|du r3|j}q)||jkrDd}||f }t |dq)q"|S )a Find the OP-Local Identifier for this xrd:Service element.
This considers openid:Delegate to be a synonym for xrd:LocalID if
both OpenID 1.X and OpenID 2.0 types are present. If only OpenID
1.X is present, it returns the value of openid:Delegate. If only
OpenID 2.0 is present, it returns the value of xrd:LocalID. If
there is more than one LocalID tag and the values are different,
it raises a DiscoveryFailure. This is also triggered when the
xrd:LocalID and openid:Delegate tags are different.
@param service_element: The xrd:Service element
@type service_element: ElementTree.Node
@param type_uris: The xrd:Type values present in this service
element. This function could extract them, but higher level
code needs to do that anyway.
@type type_uris: [str]
@raises DiscoveryFailure: when discovery fails.
@returns: The OP-Local Identifier for this service element, if one
is present, or None otherwise.
@rtype: str or unicode or NoneType
DelegateLocalIDNz1More than one %r tag found in one service element)
r r rA r
r r r findalltextr )r6 r
local_id_tagsr local_id_taglocal_id_elementformatmessager! r! r" r3 s"
r3 c
C sH zt | }W n ty } ztd|f dd}~ww tj|d S )zJNormalize a URL, converting normalization failures to
DiscoveryFailurezNormalizing identifier: %sNr )r
ValueErrorr r. r/ r0 )url
normalizedwhyr! r! r" normalizeURL$ s ri c C s | dr | dd } | S )z1Normalize an XRI, stripping its scheme if presentzxri:// N)
startswithr r! r! r" normalizeXRI/ s
rl c sZ dd fdd fdd| D }| tt|D ]
}|| d ||< q |S )zzRearrange service_list in a new list so services are ordered by
types listed in preferred_types. Return the new list.c S s t tt tt| | S )zvReturn an iterable that pairs the index of an element with
that element.
For Python 2.2 compatibility)listziprangelen)eltsr! r! r" enumerate: s z arrangeByType..enumeratec s0 D ]\}}| | j v r| S qtS )au Return the index of the first matching type, or something
higher if no type matches.
This provides an ordering in which service elements that
contain a type that comes earlier in the preferred types list
come before service elements that come later. If a service
element has more than one type, the most preferred one wins.
)r rp )rI it)rr preferred_typesr! r" bestMatchingServiceA s
z*arrangeByType..bestMatchingServicec s g | ] \}} |||fqS r! r! ).0
orig_indexs)rv r! r"
R s z!arrangeByType.. )sortro rp ) service_listru
prio_servicesrs r! )rv rr ru r"
arrangeByType6 s
r c C s t | tg}t | tj} |p| S )a Extract OP Identifier services. If none found, return the
rest, sorted with most preferred first according to
OpenIDServiceEndpoint.openid_type_uris.
openid_services is a list of OpenIDServiceEndpoint objects.
Returns a list of OpenIDServiceEndpoint objects.)r r r r: )openid_services op_servicesr! r! r" getOPOrUserServices^ s
r c C sh t | }|j}|j}zt||}W n ty g }Y nw |s.| r(t| S t||}|t |fS )aD Discover OpenID services for a URI. Tries Yadis and falls back
on old-style discovery if Yadis fails.
@param uri: normalized identity URL
@type uri: str
@return: (claimed_id, services)
@rtype: (str, list(OpenIDServiceEndpoint))
@raises DiscoveryFailure: when discovery fails.
)
yadisDiscoverrO rP r rM r rN discoverNoYadisrJ r )r5 responser4 bodyr r! r! r"
discoverYadiso s r c C s g }t | } z+t | tj\}}|d u r td| f tt}|D ] }| |
| | q$W n tyA t d| Y nw |D ] }||_
||_| |_qD| t|fS )Nz No CanonicalID found for XRI %rzxrds error on )rl r
ProxyResolverqueryr r: r r mkFilterextendgetServiceEndpointslogger exceptionr r r r )iname endpointsr rE fltr6 r< r! r! r" discoverXRI s(
r c C sB t | }|jdvrtd|jf ||j}t||j}||fS )N) zEHTTP Response status from identity URL host is not 200. Got status %r)r
fetchstatusr final_urlr rJ r )r5 http_respr r r! r! r" r s
r c C s` t j| }|d r|d r|d dvrtdd nd| } t| } t| \}}t|}||fS )Nr )httphttpsz URI scheme is not HTTP or HTTPSzhttp://)r. r/ urlparser ri r )r5 parsedr r r! r! r" discoverURI s
r c C s t | dkr t| S t| S )NXRI)r identifierSchemer r )
identifierr! r! r" r s r )2rZ __all__ urllib.parser. loggingopenidr
r r openid.yadis.etxrdr
r r openid.yadis.servicesr rK openid.yadis.discoverr r r openid.yadisr r r openid.consumerr r r r r r openid.messager r) r r( getLoggerrW r objectr r3 ri rl r r r r r r r! r! r! r" sB
H2 (*