Ë
|
¸^i»F ã ó& U d Z ddlZddlZddlZddlZddlZddlmZmZm Z m
|
Z
|
m Z m Z m Z mZmZ ddlmZ ddlmZ ddlmZ ddlmZ dd lmZmZ dd
|
lm Z G d d ed ¬« Z ej< ej< ej> ej> ej@ ej@ ej@ ej@ ejB ejB ejB ejB d Z"ee#ee$gdf f e%d< ejL ejN dk rdnd« Z(dZ)e e e d df e%d< e* e+e"jY « « « Z-e e e#df e%d< e.h d£« Z/e e
|
e# e%d< de#d e#fd Z0de#d e#fd Z1d e#d ee#e#f fd Z2 G d! d"« Z3y)#av
|
Digest authentication middleware for aiohttp client.
|
|
This middleware implements HTTP Digest Authentication according to RFC 7616,
|
providing a more secure alternative to Basic Authentication. It supports all
|
standard hash algorithms including MD5, SHA, SHA-256, SHA-512 and their session
|
variants, as well as both 'auth' and 'auth-int' quality of protection (qop) options.
|
é N) ÚCallableÚDictÚFinalÚ FrozenSetÚListÚLiteralÚTupleÚ TypedDictÚUnion)ÚURLé )Úhdrs)Ú ClientError)ÚClientHandlerType)Ú ClientRequestÚClientResponse)ÚPayloadc óT e Zd ZU eed< eed< eed< eed< eed< eed< eed< y) ÚDigestAuthChallengeÚrealmÚnonceÚqopÚ algorithmÚopaqueÚdomainÚstaleN)Ú__name__Ú
|
__module__Ú __qualname__ÚstrÚ__annotations__© ó õx H:\项ç®\archive\æµè¯ç»\èæ¬\Change_password\venv_build\Lib\site-packages\aiohttp/client_middleware_digest_auth.pyr r $ s%
Ø JØ JØ HØNØ KØ KØ Jr# r F)Útotal) ÚMD5zMD5-SESSÚSHAzSHA-SESSÚSHA256z SHA256-SESSzSHA-256z SHA-256-SESSÚSHA512z SHA512-SESSzSHA-512z SHA-512-SESSz hashlib._HashÚDigestFunctions)é é z:(?:^|\s|,\s*)(\w+)\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^\s,]+))z>(?:^|\s|,\s*)((?>\w+))\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^\s,]+)))r r r r r r r .ÚCHALLENGE_FIELDSÚSUPPORTED_ALGORITHMS> Úurir r Úcnoncer ÚresponseÚusernameÚQUOTED_AUTH_FIELDSÚvalueÚreturnc ó& | j dd« S )z,Escape double quotes for HTTP header values.ú"ú\"©Úreplace©r4 s r$ Ú escape_quotesr< u s à ==eÓ $Ð$r# c ó& | j dd« S )z-Unescape double quotes in HTTP header values.r8 r7 r9 r; s r$ Úunescape_quotesr> z s à == Ó $Ð$r# Úheaderc ó¦ t j | « D ci c]( \ }}}|j « x}r||r t |« n|* c}}}S c c}}}w )a
|
Parse key-value pairs from WWW-Authenticate or similar HTTP headers.
|
|
This function handles the complex format of WWW-Authenticate header values,
|
supporting both quoted and unquoted values, proper handling of commas in
|
quoted values, and whitespace variations per RFC 7616.
|
|
Examples of supported formats:
|
- key1="value1", key2=value2
|
- key1 = "value1" , key2="value, with, commas"
|
- key1=value1,key2="value2"
|
- realm="example.com", nonce="12345", qop="auth"
|
|
Args:
|
header: The header value string to parse
|
|
Returns:
|
Dictionary mapping parameter names to their values
|
)Ú_HEADER_PAIRS_PATTERNÚfindallÚstripr> )r? ÚkeyÚ
|
quoted_valÚ unquoted_valÚ stripped_keys r$ Úparse_header_pairsrH sZ ô, .C×-JÑ-JÈ6Ó-R÷ ð á )C\Ø IIKÐ 'LÐ 'ð ±Zo jÔ1À\ÑQô ð ùô s -A c ó e Zd ZdZ ddedededdfdZded ed
|
ee e
|
d f defd Z d edefd Z de defdZdedede fdZy)ÚDigestAuthMiddlewarea
|
HTTP digest authentication middleware for aiohttp client.
|
|
This middleware intercepts 401 Unauthorized responses containing a Digest
|
authentication challenge, calculates the appropriate digest credentials,
|
and automatically retries the request with the proper Authorization header.
|
|
Features:
|
- Handles all aspects of Digest authentication handshake automatically
|
- Supports all standard hash algorithms:
|
- MD5, MD5-SESS
|
- SHA, SHA-SESS
|
- SHA256, SHA256-SESS, SHA-256, SHA-256-SESS
|
- SHA512, SHA512-SESS, SHA-512, SHA-512-SESS
|
- Supports 'auth' and 'auth-int' quality of protection modes
|
- Properly handles quoted strings and parameter parsing
|
- Includes replay attack protection with client nonce count tracking
|
- Supports preemptive authentication per RFC 7616 Section 3.6
|
|
Standards compliance:
|
- RFC 7616: HTTP Digest Access Authentication (primary reference)
|
- RFC 2617: HTTP Authentication (deprecated by RFC 7616)
|
- RFC 1945: Section 11.1 (username restrictions)
|
|
Implementation notes:
|
The core digest calculation is inspired by the implementation in
|
https://github.com/requests/requests/blob/v2.18.4/requests/auth.py
|
with added support for modern digest auth features and error handling.
|
ÚloginÚpasswordÚ
|
preemptiver5 Nc ó | t d« | t d« d|v r t d« || _ |j d« | _ |j d« | _ d| _ d| _ i | _ || _ g | _ y )Nz"None is not allowed as login valuez%None is not allowed as password valueú:z8A ":" is not allowed in username (RFC 1945#section-11.1)úutf-8r# r )
|
Ú
|
ValueErrorÚ
|
_login_strÚencodeÚ _login_bytesÚ_password_bytesÚ_last_nonce_bytesÚ _nonce_countÚ
|
_challengeÚ _preemptiveÚ_protection_space)ÚselfrK rL rM s r$ Ú__init__z DigestAuthMiddleware.__init__¹ s ð =Ü Ð AÓBÐ Bà Ð Ü Ð DÓEÐ Eà %<Ü Ð WÓXÐ Xà&+Ø*/¯,©,°wÓ*?ÔØ-5¯_©_¸WÓ-EÔ à!$Ô Ø ÔØ/1Ø!+Ôà,.Õ r# ÚmethodÚurlÚbodyr# c
|
óð #$K | j }d|vr t d« d|vr t d« |d }|d }|s t d« |j dd« }|j dd « }|j « } |j d
|
d« }
|
|j d « } |j d « } t |« j } d}d }|rxd dhj |j d« D ch c]# }|j « s|j « % c}« }|st d| « d|v rdnd }|j d « }| t vr$t d| ddj t « « t | $dt dt f$fd #dt dt dt f#fd }dj | j | | j f« }|j « d| j « }|dk( rFt! |t" « r|j% « d { }n|} #|« }dj ||f« } #|« } #|« }| | j& k( r| xj( d z c_ nd | _ | | _ | j( d }|j d « }t+ j, d j t/ | j( « j d « | t1 j2 « j d « t5 j6 d « g« « j9 « d d }|j d « } | j « j; d!« r #dj || | f« « }|r dj | || ||f« } ||| « } n ||dj | |f« « } t= | j> « t= |« t= |« | | jA « |d"} |
|
rt= |
|
« | d
|
< |r|| d< || d#< || d$< g } | jC « D ]; \ }!}"|!tD v r| jG |! d%|" d&« &| jG |! d'|" « = d(dj | « S c c}w 7 `w))aÕ
|
Build digest authorization header for the current challenge.
|
|
Args:
|
method: The HTTP method (GET, POST, etc.)
|
url: The request URL
|
body: The request body (used for qop=auth-int)
|
|
Returns:
|
A fully formatted Digest authorization header string
|
|
Raises:
|
ClientError: If the challenge is missing required parameters or
|
contains unsupported values
|
|
r z:Malformed Digest auth challenge: Missing 'realm' parameterr z:Malformed Digest auth challenge: Missing 'nonce' parameterzBSecurity issue: Digest auth challenge contains empty 'nonce' valuer Ú r r& r rP r# Úauthzauth-intú,zEDigest auth error: Unsupported Quality of Protection (qop) value(s): z/Digest auth error: Unsupported hash algorithm: z. Supported algorithms: z, Úxr5 c óL | « j « j « S )z<RFC 7616 Section 3: Hash function H(data) = hex(hash(data)).)Ú hexdigestrS )rd Úhash_fns r$ ÚHz'DigestAuthMiddleware._encode.<locals>.H s ø á1:×'Ñ'Ó)×0Ñ0Ó2Ð 2r# ÚsÚdc ó6 dj | |f« « S )zDRFC 7616 Section 3: KD(secret, data) = H(concat(secret, ":", data)).ó :)Újoin)ri rj rh s r$ ÚKDz(DigestAuthMiddleware._encode.<locals>.KD s ø áTYY 1vÓ&Ó'Ð 'r# rl rO Nr Ú08xé é z-SESS)r2 r r r/ r1 r Úncr0 z="r7 ú=zDigest )$rX r ÚgetÚupperrS r Úpath_qsÚ intersectionÚsplitrC r* rm r. ÚbytesrT rU Ú
|
isinstancer Úas_bytesrV rW ÚhashlibÚsha1r ÚtimeÚctimeÚosÚurandomrf Úendswithr< rR ÚdecodeÚitemsr3 Úappend)%r[ r] r^ r_ Ú challenger r Úqop_rawÚalgorithm_originalr r Ú nonce_bytesÚ realm_bytesÚpathr Ú qop_bytesÚqÚ
|
valid_qopsrn ÚA1ÚA2Ú entity_bytesÚ entity_hashÚHA1ÚHA2ÚncvalueÚ ncvalue_bytesr0 Ú cnonce_bytesÚnoncebitÚresponse_digestÚ header_fieldsÚpairsÚfieldr4 rh rg s% @@r$ Ú_encodez DigestAuthMiddleware._encodeÓ s ùè ø ð& OO Ø )Ñ #Ü ØLóð ð )Ñ #Ü ØLóð ð
|
'Ñ"Ø'Ñ"ñ Ü ØTóð ð -- rÓ*à &]]¨;¸Ó >ÐØ&×,Ñ,Ó. Ø x¨Ó,ð ll 7Ó+ Øll 7Ó+ Ü3x× Ñ ð Ø Ù Ø *Ð-×:Ñ:Ø$+§M¡M°#Ó$6ÖDq¸!¿'¹'½)ÒDóJñ Ü!Ø[Ð\cÐ[dÐeóð ð !+¨jÑ 8*¸fCØ
|
|
7Ó+Ià OÑ +Ü ØAÀ)Àð M)Ø)-¯©Ô3GÓ)HÐ(IðKóð ô )¨Ñ3ð 3ð 35õ 3ð (%ð (Eð (¤eõ (ð
|
YY×)Ñ)¨;¸×8LÑ8LÐMÓ NØ Ð q Ð '× .Ñ .Ó 0Ø *Ò Ü$¤Ô(Ø%)§]¡]£_× 4 à # ÙL/KØB Ð,Ó-BáeÙeð $×0Ñ0Ò 0Ø × Ò Ñ "Ö à !DÔ à!,Ô Ø×&Ñ& sÐ+Ø wÓ/ ô Ø HHä×)Ñ)Ó*×1Ñ1°'Ó:Ø ÜJJL×'Ñ'¨Ó0ÜJJqMð ó ó
|
÷ )+crð ð }} WÓ- ð ??Ó × %Ñ % gÔ .ÙDIIs K° Ð >Ó?Ó@Cñ ØyyØ m¨\¸9ÀcÐJóHñ ! hÓ /Oá d§i¡i°¸cÐ0BÓ&CÓ DOô & d§o¡oÓ6Ü" 5Ó)Ü" 5Ó)ØØ'×.Ñ.Ó0Ø+ñ
|
ñ Ü&3°FÓ&;M(Ñ #ñ Ø#&M%Ñ Ø")M$Ñ Ø&,M(Ñ #ð Ø )× /Ñ /Ó 1ò 1LE5ØÔ*Ñ*Ø w b¨¨¨qÐ 1Õ2à w a¨ wÐ /Õ0ð 1ð 5Ó)Ð*Ð+Ð+ùòS Eð< 5ûs& C%Q6Ã)Q.Ã?Q.ÄDQ6ÈQ3ÈI Q6c óÈ t |« }| j D ]H }|j |« st |« t |« k( s|d dk( r y|t |« dk( sH y y)zô
|
Check if the given URL is within the current protection space.
|
|
According to RFC 7616, a URI is in the protection space if any URI
|
in the protection space is a prefix of it (after both have been made absolute).
|
éÿÿÿÿú/TF)r rZ Ú
|
startswithÚlen)r[ r^ Ú request_strÚ space_strs r$ Ú_in_protection_spacez)DigestAuthMiddleware._in_protection_spacev sk ô #h Ø ×/Ñ/ò Ià ×)Ñ)¨)Ô4Øä;Ó ¤3 y£>Ò1°Y¸r±]ÀcÒ5IÙà3y>Ñ*¨cÓ1Ùð ð r# r1 c
|
óP |j dk7 ry|j j dd« }|sy|j d« \ }}}|sy|j « dk7 ry|syt |« x}syi | _ t D ]% }|j |« x}s|| j |< ' |j j « } | j j d« x}
|
r©g | _
|
|
|
j « D ] } | j d« } | j d « r=| j j t | j! t# | « « « « b| j j t t# | « « « nt | « g| _
|
t% | j « S )
|
z
|
Takes the given response and tries digest-auth, if needed.
|
|
Returns true if the original request must be resent.
|
i Fzwww-authenticatera ú Údigestr r7 r )ÚstatusÚheadersrt Ú partitionÚlowerrH rX r- r^ ÚoriginrZ rx rC r¡ r
r rm r Úbool) r[ r1 Ú auth_headerr] Úseprª Ú header_pairsr r4 r r r/ s r$ Ú _authenticatez"DigestAuthMiddleware._authenticate s ð ??cÒ !Øà ×&Ñ&×*Ñ*Ð+=¸rÓB ÙØà *× 4Ñ 4°SÓ 9Ñ WÙàà <<>XÒ %àáàô !3°7Ó ;Ð; Ð;àð Ü%ò /EØ$×(Ñ(¨Ó/Ð/uÑ/Ø). Ò&ð /ð
|
×$Ñ$Ó&à__×(Ñ(¨Ó2Ð 26Ð 2à%'DÔ "Ø ||~ò Aàii nØ>> #Ô&à×*Ñ*×1Ñ1´#°f·k±kÄ#ÀcÃ(Ó6KÓ2LÕMð ×*Ñ*×1Ñ1´#´c¸#³h³-Õ@ñ Aô '*¨&£k ]DÔ "ô DOOÓ$Ð$r# ÚrequestÚhandlerc ó K d}t d« D ]± }|dkD s3| j r{| j ro| j |j « rT| j |j |j |j « d{ |j t j < ||« d{ }| j |« r± n |J |S 7 J7 !w)z Run the digest auth middleware.Né r ) ÚrangerY rX r¥ r^ r r] r_ rª r Ú AUTHORIZATIONr² )r[ r³ r´ r1 Ú retry_counts r$ Ú__call__z DigestAuthMiddleware.__call__Å sÀ è ø ð Ü 8ò Kð QØ× Ò ØOOØ×-Ñ-¨g¯k©kÔ:à<@¿L¹LØNN G§K¡K°· ± ó=÷ 7¤× 2Ñ 2Ñ3ñ
|
% WÓ -×-Hð ×%Ñ% hÕ/Ùð% ð* Ð#Ð#Ð#Øð7øð
|
.ús* A=CÁ?C
|
 *CÂ*C Â+CÃ
|
CÃ C)T)r r r Ú__doc__r r® r\ r r r r r r¥ r r² r r rº r" r# r$ rJ rJ sµ ñ ðD ñ /àð/ð ð/ð ð /ð
|
|
ó /ð4a,Øða,Ø #ða,Ø+0°¸'À#¹,Ð1FÑ+Gða,à óa,ðF¨ð °ó ð(9% nð 9%¸ó 9%ðvØ$ðØ/@ðà ôr# rJ )4r» r| r ÚreÚsysr~ Útypingr r r r r r r r
|
r Úyarlr ra r Úclient_exceptionsr Úclient_middlewaresr Ú client_reqrepr r Úpayloadr r Úmd5r} Úsha256Úsha512r* r ry r! ÚcompileÚ version_inforA r- ÚtupleÚsortedÚkeysr. Ú frozensetr3 r< r> rH rJ r" r# r$ ú<module>rÍ s¸ ðòó Û Û Û
|
Û ÷
|
÷
|
õ
|
õ å Ý *Ý 1ß 8Ý ô)¨5õ ð ;;Ø Ø <<Ø ØnnØ>>Ø~~ØNNØnnØ>>Ø~~ØNNñ Bc8 U G¨_Ð$<Ñ=Ð=Ñ>ó ð" #
|
|
à
|
×Ñ'Ò!ñ Bà JóÐ ð<ð %Ø ØÐQÑRÐTWÐWññó ñ 05±V¸O×<PÑ<PÓ<RÓ5SÓ/TÐ eE # s (OÑ,Ó Tñ -6ÚIó-Ð E) C.Ñ)ó ð
|
%ð % ó %ð
|
%3ð % 3ó %ð
|
sð t¨C°¨H¡~ó ÷6Fò Fr#
|
