Ë
|
Wñúh2 ã óÂ d Z ddlmZ dgZddlmZmZmZmZ ddl m
|
Z
|
m Z m Z ddl mZmZmZmZmZmZmZ ddlmZ d d
|
lmZ d d lmZmZ d d l mZ erd d l m Z G d d« Z y)z6Implementing support for MySQL Authentication Plugins.é )Ú annotationsÚMySQLAuthenticator)Ú TYPE_CHECKINGÚAnyÚDictÚOptionalé )ÚInterfaceErrorÚNotSupportedErrorÚ get_exception)ÚAUTH_SWITCH_STATUSÚDEFAULT_CHARSET_IDÚDEFAULT_MAX_ALLOWED_PACKETÚ
|
ERR_STATUSÚEXCHANGE_FURTHER_STATUSÚ
|
MFA_STATUSÚ OK_STATUS)Ú HandShakeTypeé )Úlogger)ÚMySQLAuthPluginÚget_auth_plugin)Ú MySQLProtocol)Ú MySQLSocketc óü e Zd ZdZddZedd« Zedd« ZddZ d ddZ ddZ
|
dd Z d
|
d
|
d
|
d
|
de d d e dddd ddf dd Zy)r z$Implements the authentication phase.c óX d| _ i | _ i | _ d| _ d| _ d| _ y)z Constructor.Ú FN)Ú _usernameÚ
|
_passwordsÚ_plugin_configÚ _ssl_enabledÚ_auth_strategyÚ_auth_plugin_class©Úselfs úUH:\Change_password\venv_build\Lib\site-packages\mysql/connector/aio/authentication.pyÚ__init__zMySQLAuthenticator.__init__; s0 à Ø*,Ø.0ÔØ"'ÔØ9=ÔØ15Õ ó c ó | j S )z&Signals whether or not SSL is enabled.)r! r$ s r& Ú ssl_enabledz MySQLAuthenticator.ssl_enabledD s ð × Ñ Ð r( c ó | j S )aö Custom arguments that are being provided to the authentication plugin.
|
|
The parameters defined here will override the ones defined in the
|
auth plugin itself.
|
|
The plugin config is a read-only property - the plugin configuration
|
provided when invoking `authenticate()` is recorded and can be queried
|
by accessing this property.
|
|
Returns:
|
dict: The latest plugin configuration provided when invoking
|
`authenticate()`.
|
)r r$ s r& Ú plugin_configz MySQLAuthenticator.plugin_configI s ð ×"Ñ"Ð"r( c ó: | j j |« y)z,Update the 'plugin_config' instance variableN)r Úupdate)r% Úconfigs r& Úupdate_plugin_configz'MySQLAuthenticator.update_plugin_configZ s à ×Ñ×"Ñ" 6Õ*r( Nc óæ | | j }| | j }t j d|« t ||¬« || j
|
j |d« | j ¬« | _ y)a¬ Switch the authorization plugin.
|
|
Args:
|
new_strategy_name: New authorization plugin name to switch to.
|
strategy_class: New authorization plugin class to switch to
|
(has higher precedence than the authorization plugin name).
|
username: Username to be used - if not defined, the username
|
provided when `authentication()` was invoked is used.
|
password_factor: Up to three levels of authentication (MFA) are allowed,
|
hence you can choose the password corresponding to the 1st,
|
2nd, or 3rd factor - 1st is the default.
|
NzSwitching to strategy %s)Ú plugin_nameÚauth_plugin_classr )r* ) r r# r Údebugr r Úgetr* r" )r% Únew_strategy_nameÚstrategy_classÚusernameÚpassword_factors r& Ú_switch_auth_strategyz(MySQLAuthenticator._switch_auth_strategy^ sq ð& Ð Ø~~Hà Ð !Ø !× 4Ñ 4Nä Ð/Ð1BÔCð
|
oØ)¸^ô
|
ð Ø OO× Ñ °Ó 4Ø ×(Ñ(ô
|
Õr( c óÖ K d}|d t k( r=|| j vr t d« t j |« \ }}| j ||¬« t j d|| j j « | j j ||fi | j ¤ d{ }|d t k( rEt j |« } | j j ||fi | j ¤ d{ }|d t k( rt j d« |S |d t k( r t# |« |dz }|d t k( r=t j$ d « y7 ¸7 iw)
|
a Handle MFA (Multi-Factor Authentication) response.
|
|
Up to three levels of authentication (MFA) are allowed.
|
|
Args:
|
sock: Pointer to the socket connection.
|
pkt: MFA response.
|
|
Returns:
|
ok_packet: If last server's response is an OK packet.
|
None: If last server's response isn't an OK packet and no ERROR was raised.
|
|
Raises:
|
InterfaceError: If got an invalid N factor.
|
errors.ErrorTypes: If got an ERROR response.
|
r é z5Failed Multi Factor Authentication (invalid N factor))r9 zMFA %i factor %sNzMFA completed succesfullyr z"MFA terminated with a no ok packet)r r r
|
r Úparse_auth_next_factorr: r r4 r" ÚnameÚauth_switch_responser r Úparse_auth_more_dataÚauth_more_responser r r Úwarning)r% ÚsockÚpktÚn_factorr6 Ú auth_datas r& Ú _mfa_n_factorz MySQLAuthenticator._mfa_n_factor si è ø ð* Ø!f
|
Ó"ØtÑ.Ü$ØKóð ô ,9×+OÑ+OÐPSÓ+TÑ (Ð yØ × &Ñ &Ð'8È(Ð &Ô SÜ LLÐ+¨X°t×7JÑ7J×7OÑ7OÔ Pà@×+Ñ+×@Ñ@ØiñØ#'×#6Ñ#6ñ÷ Cð 1vÔ0Ò0Ü )× >Ñ >¸sÓ C Ø BD× /Ñ /× BÑ BØ)ñ Ø'+×':Ñ':ñ ÷ ð 1vÒ"Ü Ð 8Ô9Ø
|
à1vÒ#Ü# CÓ(Ð(à MHð7 !f
|
Ô"ô: Ð;Ô<Øð)øð ús, B*E)Â,E%Â-AE)Ã=E'Ã>AE)ÅE)Å'E)c ó K |d t k( rt |« dk( r t d« |d t k( rnt j d« t j |« \ }}| j |« | j j ||fi | j ¤ d{ }|d t k( rZt j d« t j |« } | j j ||fi | j ¤ d{ }|d t k( r,t j d| j j « |S |d t k( rYt j d« t j d | j j « | j# ||« d{ S |d t$ k( r t' |« y7 7 ¼7 !w)
|
aü Handle server's response.
|
|
Args:
|
sock: Pointer to the socket connection.
|
pkt: Server's response after completing the `HandShakeResponse`.
|
|
Returns:
|
ok_packet: If last server's response is an OK packet.
|
None: If last server's response isn't an OK packet and no ERROR was raised.
|
|
Raises:
|
errors.ErrorTypes: If got an ERROR response.
|
NotSupportedError: If got Authentication with old (insecure) passwords.
|
r< é zAuthentication with old (insecure) passwords is not supported. For more information, lookup Password Hashing in the latest MySQL manualz+Server's response is an auth switch requestNzExchanging further packetsz%s completed succesfullyz$Starting multi-factor authenticationzMFA 1 factor %s)r Úlenr r r4 r Úparse_auth_switch_requestr: r" r? r r r@ rA r r> r rG r r )r% rC rD r6 rF s r& Ú_handle_server_responsez*MySQLAuthenticator._handle_server_response¶ s¢ è ø ð& q6Ô'Ò '¬C°«H¸ªMÜ#ð>óð ð q6Ô'Ò 'Ü LLÐFÔ GÜ+8×+RÑ+RÐSVÓ+WÑ (Ð yØ × &Ñ &Ð'8Ô 9Ø@×+Ñ+×@Ñ@ØiñØ#'×#6Ñ#6ñ÷ Cð q6Ô,Ò ,Ü LLÐ5Ô 6Ü%×:Ñ:¸3Ó?IØ>×+Ñ+×>Ñ>ØiñØ#'×#6Ñ#6ñ÷ Cð q6YÒ Ü LLÐ3°T×5HÑ5H×5MÑ5MÔ NØJà q6ZÒ Ü LLÐ?Ô @Ü LLÐ*¨D×,?Ñ,?×,DÑ,DÔ EØ ×+Ñ+¨D°#Ó6×6Ð 6à q6ZÒ Ü Ó$Ð $àð/ùðøð 7ús8 BG F= A%GÄG ÄB GÆ GÆ! GÇ GÇGr r Fc ó¸ K || _ |||d| _ |
|
| _ | | _ t j
|
|||||| | | | ||| j | j ¬« \ }| _ |rdd|fndd|f} |j |g|¢ d{ t |j |« d{ « }| j ||« d{ }| t d« d|S 7 P7 47 w)aä Perform the authentication phase.
|
|
During re-authentication you must set `is_change_user_request` to True.
|
|
Args:
|
sock: Pointer to the socket connection.
|
handshake: Initial handshake.
|
username: Account's username.
|
password1: Account's password factor 1.
|
password2: Account's password factor 2.
|
password3: Account's password factor 3.
|
database: Initial database name for the connection.
|
charset: Client charset (see [1]), only the lower 8-bits.
|
client_flags: Integer representing client capabilities flags.
|
ssl_enabled: Boolean indicating whether SSL is enabled,
|
max_allowed_packet: Maximum packet size.
|
auth_plugin: Authorization plugin name.
|
auth_plugin_class: Authorization plugin class (has higher precedence
|
than the authorization plugin name).
|
conn_attrs: Connection attributes.
|
is_change_user_request: Whether is a `change user request` operation or not.
|
read_timeout: Timeout in seconds upto which the connector should wait for
|
the server to reply back before raising an ReadTimeoutError.
|
write_timeout: Timeout in seconds upto which the connector should spend to
|
send data to the server before raising an WriteTimeoutError.
|
|
Returns:
|
ok_packet: OK packet.
|
|
Raises:
|
InterfaceError: If OK packet is NULL.
|
ReadTimeoutError: If the time taken for the server to reply back exceeds
|
'read_timeout' (if set).
|
WriteTimeoutError: If the time taken to send data packets to the server
|
exceeds 'write_timeout' (if set).
|
|
References:
|
[1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set
|
)r r é ) Ú handshaker8 ÚpasswordÚdatabaseÚcharsetÚ client_flagsÚmax_allowed_packetÚ auth_pluginr3 Ú
|
conn_attrsÚis_change_user_requestr* r, r NzGot a NULL ok_pkt)r r r! r# r Ú make_authr* r, r" ÚwriteÚbytesÚreadrL r
|
)r% rC rO r8 Ú password1Ú password2Ú password3rQ rR rS r* rT rU r3 rV rW Ú read_timeoutÚ write_timeoutÚresponse_payloadÚ send_argsrD Úok_pkts r& Ú authenticatez MySQLAuthenticator.authenticateí s è ø ðz "Ø '¨I¸)ÑDØ 'ÔØ"3Ô ô 1>×0GÑ0GØ Ø Ø Ø ØØ%Ø 1Ø#Ø /Ø!Ø#9Ø ×(Ñ(Ø ×,Ñ,ô1
|
Ñ-Ð$Ô-ñ& &ð =Ñ !àmÐ,ð ð
|
djjÐ)Ð6¨IÒ6×6Ð6ô $)) LÓ1×1Ó2à×3Ñ3°D¸#Ó>×>Ø >Ü Ð!4Ó5¸4Ð ?à ð 7øð 2øà>ús6 BCÂCÂ CÂ!CÂ" CÂ?CÃ CÃCÃC)ÚreturnÚNone)re Úbool)re úDict[str, Any])r/ rh re rf )NNr )
|
r6 Ústrr7 ú Optional[str]r8 rj r9 Úintre rf )rC r rD rZ re zOptional[bytes])$rC r rO r r8 ri r\ ri r] ri r^ ri rQ rj rR rk rS rk r* rg rT rk rU rj r3 rj rV zOptional[Dict[str, str]]rW rg r_ ú Optional[int]r` rl re rZ )Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__r' Úpropertyr* r, r0 r: rG rL r r rd © r( r& r r 8 sµ Ù.ó6ð ò!ó ð!ð ò#ó ð#ó +ð )-Ø"&Ø ð
|
à ð
|
ð &ð
|
ð ð
|
ð
|
ð
|
ð
|
ó
|
ðD4àð4ð ð4ð
|
ó 4ðl5àð5ð ð5ð
|
ó 5ðv ØØØØ"&Ø)Ø Ø !Ø"<Ø%)Ø+/Ø/3Ø',Ø&*Ø'+ð%bàðbð !ðbð ð bð
|
ð bð ð bð ðbð ðbð ðbð ðbð ðbð ðbð #ðbð )ð bð -ð bð !%ð!bð" $ð#bð$ %ð%bð&
|
ô'br( N) rp Ú
|
__future__r Ú__all__Útypingr r r r Úerrorsr
|
r r Úprotocolr r r r r r r Útypesr r Úpluginsr r r Únetworkr r rr r( r& ú<module>r{ sP ðñ: =å "à Ð
|
ç 5Ó 5ç EÑ E÷÷ ñ õ "Ý ß 5Ý #áÝ$÷Wò Wr(
|
