Ë
|
Wñúhµ* ã ó* d Z ddlmZmZmZmZ ddlmZmZ ddl m Z ddlm
|
Z
|
erddl m Z dd l mZ dd
|
lmZmZ dd lmZ dd lmZ ddlmZ dZ dZ G d de« Z G d de
|
« Z y# e$ rZ ej2 d « edZ[ww xY w# e $ r dZ Y Bw xY w)z WebAuthn Authentication Plugin.é )Ú TYPE_CHECKINGÚAnyÚCallableÚOptionalé )ÚerrorsÚutils)Úloggeré )ÚMySQLAuthPlugin)Ú MySQLSocket)Ú
|
dump_bytes)Ú Fido2ClientÚUserInteraction)Ú CtapHidDevice)Ú!PublicKeyCredentialRequestOptionszxModule fido2 is required for WebAuthn authentication mechanism but was not found. Unable to authenticate with the serverN)ÚCtapPcscDeviceTFÚMySQLWebAuthnAuthPluginc ó, e Zd ZdZddee fdZddZy)ÚClientInteractionz(Provides user interaction to the Client.NÚcallbackc ó || _ d| _ y )NzTPlease insert FIDO device and perform gesture action for authentication to complete.)r Úmsg)Úselfr s úiH:\Change_password\venv_build\Lib\site-packages\mysql/connector/plugins/authentication_webauthn_client.pyÚ__init__zClientInteraction.__init__B s Ø ð ð ó c ó~ | j t | j « y| j | j « y)z=Prompt message for the user interaction with the FIDO device.N)r Úprintr ©r s r Ú prompt_upzClientInteraction.prompt_upI s' à ==Ð Ü $((Oà MM$((Õ #r ©N)ÚreturnN)Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__r r r r! © r r r r ? s Ù2ñ
|
¨(Ñ!3ó
|
ô$r r c óà e Zd ZU dZdZee ed< dZee ed< ddg dZ
|
e ed< e de fd« Ze defd « Z dd
|
ee defd Zd ed edee fdZddd ed edefdZddd ed edefdZy)r z<Class implementing the MySQL WebAuthn authentication plugin.NÚclientr )ÚrpIdÚ challengeÚallowCredentialsÚoptionsr# c ó y)zPlugin official name.Ú authentication_webauthn_clientr( r s r Únamez MySQLWebAuthnAuthPlugin.nameX s ð 0r c ó y)z'Signals whether or not SSL is required.Fr( r s r Ú requires_sslz$MySQLWebAuthnAuthPlugin.requires_ssl] s ð r Ú credential_idc ó | j t j d« ||ddg| j d< | j j t j | j « « }t |j « « }d}t j d« }|t j |« z }t |« D ] }|j |« }t |j « }|j } |t j t |« « z }||z }|t j t | « « z }|| z }|j } |t j t |« « z }||z }t# j$ d|« |S )zôGet assertion from authenticator and return the response.
|
|
Args:
|
credential_id (Optional[bytearray]): The credential ID.
|
|
Returns:
|
bytearray: The response packet with the data from the assertion.
|
zNo WebAuthn client foundz
|
public-key)ÚidÚtyper- r r z&WebAuthn - payload response packet: %s)r* r ÚInterfaceErrorr. Ú get_assertionr Ú from_dictÚlenÚget_assertionsr Úlc_intÚrangeÚ get_responseÚcbor_dump_bytesÚauthenticator_dataÚ signatureÚ client_datar
|
Údebug)
|
r r4 Ú assertionÚnumber_of_assertionsÚclient_data_jsonÚpacketÚiÚassertion_responserA rB s
|
r Úget_assertion_responsez.MySQLWebAuthnAuthPlugin.get_assertion_responseb s ð ;;Ð Ü×'Ñ'Ð(BÓCÐ Cà Ð $ð
|
(Ø (ñð0DLLÐ+Ñ ,ð KK×-Ñ-Ü -× 7Ñ 7¸¿ ¹ Ó Eó
|
ô # 9×#;Ñ#;Ó#=Ó >Ð Ø Ðô a Ø%,,Ð 3Ó4Ñ4ô Ð+Ó,ò >AØ!*×!7Ñ!7¸Ó!:Ð ô "1Ð1C×1VÑ1VÓ!WÐ ð +×4Ñ4Ià ell¤3Ð'9Ó#:Ó;Ñ ;FØ Ð(Ñ (FØ ell¤3 y£>Ó2Ñ 2FØ iÑ Fð 2× =Ñ =Ñ ð >ð" %,,sÐ#3Ó 4Ó5Ñ5ØÐ"Ñ"ä Ð=¸vÔFØ r Ú auth_dataÚkwargsc óÈ t j |d« \ }}t j |« \ }}|| j d< |j « | j d< t j d|« t j d| j d « t j d| j d « t t j « d« }|t j d « n$t r t t j « d« }|t j d
|
« t |d | j d t! | j" « ¬ « | _ | j$ j& j j) d « st j d« yt j d« y# t $ r}t j d« |d}~ww xY w)aE Find authenticator device and check if supports resident keys.
|
|
It also creates a Fido2Client using the relying party ID from the server.
|
|
Raises:
|
InterfaceError: When the FIDO device is not found.
|
|
Returns:
|
bytes: 2 if the authenticator supports resident keys else 1.
|
r r, r+ zWebAuthn - capability: %dzWebAuthn - challenge: %sz WebAuthn - relying party id: %sz2Unable to parse MySQL WebAuthn authentication dataNz WebAuthn - Use USB HID channelzNo FIDO device foundzhttps://)Úuser_interactionÚrkz6WebAuthn - Authenticator doesn't support resident keysó 1z<WebAuthn - Authenticator with support for resident key foundó 2)r Úread_intÚread_lc_string_listr. Údecoder
|
rD Ú
|
ValueErrorr r8 Únextr Ú list_devicesÚCTAP_PCSC_DEVICE_AVAILABLEr r r r r* ÚinfoÚget) r rL rM ÚpacketsÚ
|
capabilityr, Úrp_idÚerrÚdevices r Ú auth_responsez%MySQLWebAuthnAuthPlugin.auth_response¨ s ð Ü"'§.¡.°¸AÓ">Ñ GZÜ $× 8Ñ 8¸Ó AÑ IuØ(1DLLÑ %Ø#(§<¡<£>DLLÑ Ü LLÐ4°jÔ AÜ LLÐ3°T·\±\À+Ñ5NÔ OÜ LLÐ:¸D¿L¹LÈÑ<PÔ Qô m×0Ñ0Ó2°DÓ9Ø Ð Ü LLÐ9Õ :Ý 'Ü.×5Ñ5Ó7¸Ó>Fà >Ü×'Ñ'Ð(>Ó?Ð ?ô "Ø Øt|| FÑ+Ð,Ð -Ü .¨t¯}©}Ó =ô
|
ð {{× Ñ ×'Ñ'×+Ñ+¨DÔ1Ü LLÐQÔ RØä ÐSÔTØøô7 ò Ü×'Ñ'ØDóàð ûð ús B9F= Æ= G!ÇG Ç G!Úsockr c ó t j |« \ }}| j |« }t j d|t |« « |j |« t |j « « }t j d|« |S )aE Handles server's `auth more data` response.
|
|
Args:
|
sock: Pointer to the socket connection.
|
auth_data: Authentication method data (from a packet representing
|
an `auth more data` response).
|
kwargs: Custom configuration to be passed to the auth plugin
|
when invoked. The parameters defined here will override the ones
|
defined in the auth plugin itself.
|
|
Returns:
|
packet: Last server's response after back-and-forth
|
communication.
|
ú WebAuthn - request: %s size: %sú%WebAuthn - server response packet: %s) r Úread_lc_stringrK r
|
rD r; ÚsendÚbytesÚrecv)r rb rL rM Ú_r4 ÚresponseÚpkts r Úauth_more_responsez*MySQLWebAuthnAuthPlugin.auth_more_responseØ sn ô" !×/Ñ/° Ó:Ñ=à×.Ñ.¨}Ó=ä Ð6¸Ä#ÀhÃ-ÔPØ (ÔäDIIKÓ Ü Ð<¸cÔBà
|
r c ón |j d« xs |j d« }t |t « rt j |« n|| _ | j |« }d}|dk( r[t j d« |j t j t |« « « t |j « « S | j |« }t j d|t |« « |j |« t |j « « }t j d|« |S )aS Handles server's `auth switch request` response.
|
|
Args:
|
sock: Pointer to the socket connection.
|
auth_data: Plugin provided data (extracted from a packet
|
representing an `auth switch request` response).
|
kwargs: Custom configuration to be passed to the auth plugin
|
when invoked. The parameters defined here will override the ones
|
defined in the auth plugin itself.
|
|
Returns:
|
packet: Last server's response after back-and-forth
|
communication.
|
Úwebauthn_callbackÚ fido_callbackNrQ z WebAuthn - request credential_idrd re )r[ Ú
|
isinstanceÚstrr Ú import_objectr ra r
|
rD rg r= Úintrh ri rK r; )r rb rL rM Úwebauth_callbackrk r4 rl s r Úauth_switch_responsez,MySQLWebAuthnAuthPlugin.auth_switch_responseõ sü ð" "::Ð&9Ó:ò
|
¸f¿j¹jØ ó?
|
Ðô
|
Ð*¬CÔ0ô × Ñ Ð 0Ô 1à!ð ð ×%Ñ% iÓ0Ø à tÒ ä LLÐ;Ô <Ø IIell¤3 x£=Ó1Ô 2ô Ó%Ð %à×.Ñ.¨}Ó=ä Ð6¸Ä#ÀhÃ-ÔPØ (ÔäDIIKÓ Ü Ð<¸cÔBà
|
r r" )r$ r% r& r' r* r r Ú__annotations__r r r. ÚdictÚpropertyrr r1 Úboolr3 Ú bytearrayrh rK r ra rm rv r( r r r r Q sô
ÙFà$(FH[Ñ !Ó(Ø#'HhxÑ Ó'Ø !°È"ÑMGTÓMà ð0cò 0ó ð0ð ðdò ó ðð
|
48ñDØ % iÑ 0ðDà óDðL. uð .¸ð .ÀÈÁó .ð`Ø!ðØ.3ðØ?Bðà óð:-Ø!ð-Ø.3ð-Ø?Bð-à ô-r )!r' Útypingr r r r Ú r r r
|
r Únetworkr Ú
|
fido2.cborr r@ Ú fido2.clientr r Ú fido2.hidr Úfido2.webauthnr Ú ImportErrorÚ
|
import_errÚProgrammingErrorÚ
|
fido2.pcscr rY ÚModuleNotFoundErrorÚAUTHENTICATION_PLUGIN_CLASSr r r( r r ú<module>r sª ðñ: &÷ :Ó 9ç Ý Ý áÝ%ð Ý8ß9Ý'Ý@ð'Ý)à!%Ð ð
|
8Ð ô$ô $ô$Qoõ QøðG ò Ø
|
!&×
|
!Ñ
|
!ð <ó ð ðûðûð ò 'Ø!&Ò ð'ús) ¬A( ÁB Á(BÁ-B Â BÂBÂB
|
