Ë
|
Wñúh9 ã ó´ d Z ddlmZ ddlmZmZmZmZ ddlm Z m
|
Z
|
m Z ddl m Z ddl mZmZ ddlmZmZmZmZmZmZmZmZ dd lmZ erdd
|
lm Z G d d « Z y )z5Implementing support for MySQL Authentication Pluginsé )Ú annotations)Ú TYPE_CHECKINGÚAnyÚDictÚOptionalé )ÚInterfaceErrorÚNotSupportedErrorÚ get_exception)Úlogger)ÚMySQLAuthPluginÚget_auth_plugin)ÚAUTH_SWITCH_STATUSÚDEFAULT_CHARSET_IDÚDEFAULT_MAX_ALLOWED_PACKETÚ
|
ERR_STATUSÚEXCHANGE_FURTHER_STATUSÚ
|
MFA_STATUSÚ OK_STATUSÚ MySQLProtocol)Ú HandShakeType)Ú MySQLSocketc ó e Zd ZdZddZedd« Zedd« ZddZe de
|
f ddZ d dd Z dd
|
Z dd Zd d d d de de
|
dddd ddf ddZy)ÚMySQLAuthenticatorz$Implements the authentication phase.c óX d| _ i | _ i | _ d| _ d| _ d| _ y)z Constructor.Ú FN)Ú _usernameÚ
|
_passwordsÚ_plugin_configÚ _ssl_enabledÚ_auth_strategyÚ_auth_plugin_class©Úselfs úQH:\Change_password\venv_build\Lib\site-packages\mysql/connector/authentication.pyÚ__init__zMySQLAuthenticator.__init__8 s0 à Ø*,Ø.0ÔØ"'ÔØ9=ÔØ15Õ ó c ó | j S )z&Signals whether or not SSL is enabled.)r r# s r% Ú ssl_enabledz MySQLAuthenticator.ssl_enabledA s ð × Ñ Ð r' c ó | j S )a Custom arguments that are being provided to the authentication plugin when called.
|
|
The parameters defined here will override the ones defined in the
|
auth plugin itself.
|
|
The plugin config is a read-only property - the plugin configuration
|
provided when invoking `authenticate()` is recorded and can be queried
|
by accessing this property.
|
|
Returns:
|
dict: The latest plugin configuration provided when invoking
|
`authenticate()`.
|
)r r# s r% Ú plugin_configz MySQLAuthenticator.plugin_configF s ð ×"Ñ"Ð"r' c ó: | j j |« y)z,Update the 'plugin_config' instance variableN)r Úupdate)r$ Úconfigs r% Úupdate_plugin_configz'MySQLAuthenticator.update_plugin_configW s à ×Ñ×"Ñ" 6Õ*r' r c ó |i }t j |||¬« }|j |« t j d« |j |j d« |j d« |j d« |j dd« |j dd« |j d « |j d
|
« ¬ « }t j d « |j ||« t j d « d| _ |S )aã Sets up an SSL communication channel.
|
|
Args:
|
sock: Pointer to the socket connection.
|
host: Server host name.
|
ssl_options: SSL and TLS connection options (see
|
`network.MySQLSocket.build_ssl_context`).
|
charset: Client charset (see [1]), only the lower 8-bits.
|
client_flags: Integer representing client capabilities flags.
|
max_allowed_packet: Maximum packet size.
|
|
Returns:
|
ssl_request_payload: Payload used to carry out SSL authentication.
|
|
References:
|
[1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set
|
)ÚcharsetÚ client_flagsÚmax_allowed_packetzBuilding SSL contextÚcaÚcertÚkeyÚ verify_certFÚverify_identityÚ tls_versionsÚtls_ciphersuites)Ússl_caÚssl_certÚssl_keyÚssl_verify_certÚssl_verify_identityr9 Útls_cipher_suiteszSwitching to SSLzSSL has been enabledT) r Ú make_auth_sslÚsendr ÚdebugÚbuild_ssl_contextÚgetÚ switch_to_sslr ) r$ ÚsockÚhostÚ ssl_optionsr1 r2 r3 Ússl_request_payloadÚ ssl_contexts r% Ú setup_sslz MySQLAuthenticator.setup_ssl[ sð ð6 Ð Ø Kô ,× 9Ñ 9ØØ%Ø 1ô
|
Ðð
|
Ð%Ô&ä Ð+Ô,Ø×,Ñ,Ø ?? 4Ó(Ø __ VÓ,Ø OO EÓ*Ø 'OO¨M¸5Ó AØ +§¡Ð0AÀ5Ó IØ$ ¨ Ó8Ø )ooÐ.@Ó Að -ó
|
ô Ð'Ô(Ø ×Ñ;¨Ô-ä Ð+Ô,Ø Ôà"Ð"r' Nc óæ | | j }| | j }t j d|« t ||¬« || j
|
j |d« | j ¬« | _ y)a® Switches the authorization plugin.
|
|
Args:
|
new_strategy_name: New authorization plugin name to switch to.
|
strategy_class: New authorization plugin class to switch to
|
(has higher precedence than the authorization plugin name).
|
username: Username to be used - if not defined, the username
|
provided when `authentication()` was invoked is used.
|
password_factor: Up to three levels of authentication (MFA) are allowed,
|
hence you can choose the password corresponding to the 1st,
|
2nd, or 3rd factor - 1st is the default.
|
NzSwitching to strategy %s)Ú plugin_nameÚauth_plugin_classr )r) ) r r" r rC r r rE r) r! )r$ Únew_strategy_nameÚstrategy_classÚusernameÚpassword_factors r% Ú_switch_auth_strategyz(MySQLAuthenticator._switch_auth_strategy sq ð& Ð Ø~~Hà Ð !Ø !× 4Ñ 4Nä Ð/Ð1BÔCð
|
oØ)¸^ô
|
ð Ø OO× Ñ °Ó 4Ø ×(Ñ(ô
|
Õr' c ó¦ d}|d t k( r-|| j vr t d« t j |« \ }}| j ||¬« t j d|| j j « | j j ||fi | j ¤}|d t k( r=t j |« } | j j ||fi | j ¤}|d t k( rt j d« |S |d t k( r t# |« |dz }|d t k( r-t j$ d« y )
|
a Handles MFA (Multi-Factor Authentication) response.
|
|
Up to three levels of authentication (MFA) are allowed.
|
|
Args:
|
sock: Pointer to the socket connection.
|
pkt: MFA response.
|
|
Returns:
|
ok_packet: If last server's response is an OK packet.
|
None: If last server's response isn't an OK packet and no ERROR was raised.
|
|
Raises:
|
InterfaceError: If got an invalid N factor.
|
errors.ErrorTypes: If got an ERROR response.
|
é é z5Failed Multi Factor Authentication (invalid N factor))rS zMFA %i factor %szMFA completed succesfullyr z"MFA terminated with a no ok packetN)r r r r Úparse_auth_next_factorrT r rC r! ÚnameÚauth_switch_responser r Úparse_auth_more_dataÚauth_more_responser r r Úwarning)r$ rG ÚpktÚn_factorrP Ú auth_datas r% Ú _mfa_n_factorz MySQLAuthenticator._mfa_n_factor¶ sP ð* Ø!f
|
Ó"ØtÑ.Ü$ØKóð ô ,9×+OÑ+OÐPSÓ+TÑ (Ð yØ × &Ñ &Ð'8È(Ð &Ô SÜ LLÐ+¨X°t×7JÑ7J×7OÑ7OÔ Pà:$×%Ñ%×:Ñ:ØiñØ#'×#6Ñ#6ñCð 1vÔ0Ò0Ü )× >Ñ >¸sÓ C Ø<d×)Ñ)×<Ñ<Ø)ñØ'+×':Ñ':ñð 1vÒ"Ü Ð 8Ô9Ø
|
à1vÒ#Ü# CÓ(Ð(à MHð7 !f
|
Ô"ô: Ð;Ô<Ør' c óF |d t k( rt |« dk( r t d« |d t k( rft j d« t j |« \ }}| j |« | j j ||fi | j ¤}|d t k( rRt j d« t j |« } | j j ||fi | j ¤}|d t k( r,t j d| j j « |S |d t k( rQt j d« t j d| j j « | j# ||« S |d t$ k( r t' |« y )
|
aý Handles server's response.
|
|
Args:
|
sock: Pointer to the socket connection.
|
pkt: Server's response after completing the `HandShakeResponse`.
|
|
Returns:
|
ok_packet: If last server's response is an OK packet.
|
None: If last server's response isn't an OK packet and no ERROR was raised.
|
|
Raises:
|
errors.ErrorTypes: If got an ERROR response.
|
NotSupportedError: If got Authentication with old (insecure) passwords.
|
rW é zAuthentication with old (insecure) passwords is not supported. For more information, lookup Password Hashing in the latest MySQL manualz+Server's response is an auth switch requestzExchanging further packetsz%s completed succesfullyz$Starting multi-factor authenticationzMFA 1 factor %sN)r Úlenr
|
r rC r Úparse_auth_switch_requestrT r! rZ r r r[ r\ r rY r ra r r )r$ rG r^ rP r` s r% Ú_handle_server_responsez*MySQLAuthenticator._handle_server_responseì s ð& q6Ô'Ò '¬C°«H¸ªMÜ#ð>óð ð q6Ô'Ò 'Ü LLÐFÔ GÜ+8×+RÑ+RÐSVÓ+WÑ (Ð yØ × &Ñ &Ð'8Ô 9Ø:$×%Ñ%×:Ñ:ØiñØ#'×#6Ñ#6ñCð q6Ô,Ò ,Ü LLÐ5Ô 6Ü%×:Ñ:¸3Ó?IØ8$×%Ñ%×8Ñ8ØiñØ#'×#6Ñ#6ñCð q6YÒ Ü LLÐ3°T×5HÑ5H×5MÑ5MÔ NØJà q6ZÒ Ü LLÐ?Ô @Ü LLÐ*¨D×,?Ñ,?×,DÑ,DÔ EØ×%Ñ% d¨CÓ0Ð 0à q6ZÒ Ü Ó$Ð $àr' r Fc óf || _ |||d| _ | | _ t j |||||| |
|
| | | || j
|
| j ¬« \ }| _ |rdd|fndd|f} |j |g|¢ t |j |« « }| j ||« }| t d« d|S )a Performs the authentication phase.
|
|
During re-authentication you must set `is_change_user_request` to True.
|
|
Args:
|
sock: Pointer to the socket connection.
|
handshake: Initial handshake.
|
username: Account's username.
|
password1: Account's password factor 1.
|
password2: Account's password factor 2.
|
password3: Account's password factor 3.
|
database: Initial database name for the connection.
|
charset: Client charset (see [1]), only the lower 8-bits.
|
client_flags: Integer representing client capabilities flags.
|
max_allowed_packet: Maximum packet size.
|
auth_plugin: Authorization plugin name.
|
auth_plugin_class: Authorization plugin class (has higher precedence
|
than the authorization plugin name).
|
conn_attrs: Connection attributes.
|
is_change_user_request: Whether is a `change user request` operation or not.
|
read_timeout: Timeout in seconds upto which the connector should wait for
|
the server to reply back before raising an ReadTimeoutError.
|
write_timeout: Timeout in seconds upto which the connector should spend to
|
send data to the server before raising an WriteTimeoutError.
|
Returns:
|
ok_packet: OK packet.
|
|
Raises:
|
InterfaceError: If OK packet is NULL.
|
ReadTimeoutError: If the time taken for the server to reply back exceeds
|
'read_timeout' (if set).
|
WriteTimeoutError: If the time taken to send data packets to the server
|
exceeds 'write_timeout' (if set).
|
|
References:
|
[1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set
|
)r rV é ) Ú handshakerR ÚpasswordÚdatabaser1 r2 r3 Ú auth_pluginrO Ú
|
conn_attrsÚis_change_user_requestr) r+ r NzGot a NULL ok_pkt) r r r" r Ú make_authr) r+ r! rB ÚbytesÚrecvrf r )r$ rG ri rR Ú password1Ú password2Ú password3rk r1 r2 r3 rl rO rm rn Ú read_timeoutÚ write_timeoutÚresponse_payloadÚ send_argsr^ Úok_pkts r% Ú authenticatez MySQLAuthenticator.authenticate# så ðt "Ø '¨I¸)ÑDØ"3Ô ô 1>×0GÑ0GØ Ø Ø Ø ØØ%Ø 1Ø#Ø /Ø!Ø#9Ø ×(Ñ(Ø ×,Ñ,ô1
|
Ñ-Ð$Ô-ñ& &ð =Ñ !àmÐ,ð ð
|
Ð"Ð/ YÓ/ô DIIlÓ+Ó,à×-Ñ-¨d°CÓ8Ø >Ü Ð!4Ó5¸4Ð ?à r' )ÚreturnÚNone)r{ Úbool)r{ úDict[str, Any])r. r~ r{ r| )rG r rH ÚstrrI zOptional[Dict[str, Any]]r1 Úintr2 r r3 r r{ rp )NNr )
|
rP r rQ ú Optional[str]rR r rS r r{ r| )rG r r^ rp r{ zOptional[bytes])"rG r ri r rR r rr r rs r rt r rk r r1 r r2 r r3 r rl r rO r rm zOptional[Dict[str, str]]rn r} ru ú Optional[int]rv r r{ rp )Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__r& Úpropertyr) r+ r/ r r rL rT ra rf rz © r' r% r r 5 sü Ù.ó6ð ò!ó ð!ð ò#ó ð#ó +ð *Ø Ø"<ð7#àð7#ð ð7#ð .ð 7#ð
|
ð 7#ð ð 7#ð ð7#ð
|
ó7#ðx )-Ø"&Ø ð
|
à ð
|
ð &ð
|
ð ð
|
ð
|
ð
|
ð
|
ó
|
ðD4àð4ð ð4ð
|
ó 4ðl5àð5ð ð5ð
|
ó 5ðv ØØØØ"&Ø)Ø Ø"<Ø%)Ø+/Ø/3Ø',Ø&*Ø'+ð#^àð^ð !ð^ð ð ^ð
|
ð ^ð ð ^ð ð^ð ð^ð ð^ð ð^ð ð^ð #ð^ð )ð^ð -ð ^ð !%ð ^ð $ð!^ð" %ð#^ð$
|
ô%^r' r N) r Ú
|
__future__r Útypingr r r r Úerrorsr r
|
r r Úpluginsr r Úprotocolr r r r r r r r Útypesr Únetworkr r r r' r% ú<module>r sE ðñ: <Ý "ç 5Ó 5ç DÑ DÝ ß 5÷ ÷ ó õ !áÝ$÷Lò Lr'
|
