o ^[2h;@sddlZddlZddlZddlmZddlmZddlmZddlm Z ddl m Z ddl m Z d d l mZd d lmZd d lmZd d lmZGdddZdS)Ngenerate_token)default_json_headers) JoseError) JsonWebToken)AccessDeniedError)InvalidRequestError)ClientMetadataClaims)InvalidClientMetadataError)InvalidSoftwareStatementError) UnapprovedSoftwareStatementErrorc@seZdZdZdZdZd ddZddZdd Zd d Z d d Z ddZ ddZ ddZ ddZddZddZddZddZddZdS)!ClientRegistrationEndpointzThe client registration endpoint is an OAuth 2.0 endpoint designed to allow a client to be registered with the authorization server. client_registrationNcCs||_|ptg|_dSN)serverr claims_classes)selfrrrp/home/skpark/git/infrasmart_work/infrasmart/venv/lib/python3.10/site-packages/authlib/oauth2/rfc7591/endpoint.py__init__sz#ClientRegistrationEndpoint.__init__cCs ||Sr)create_registration_responserrequestrrr__call__!s z#ClientRegistrationEndpoint.__call__cCsv||}|s t||_||}|}i}||||||||}|||}|r6||d|tfS)N) authenticate_tokenr credentialextract_client_metadatagenerate_client_infoupdate save_client!generate_client_registration_infor)rrtokenclient_metadata client_infobodyclientregistration_inforrrr$s       z7ClientRegistrationEndpoint.create_registration_responsec Cs|jjst|jj}|dd}|r#|jr#|||}||i}|}|j D]:}t |dr:|r:| |ni}||i||} z| Wnt y[} zt| j| d} ~ ww|jdi| q,|S)Nsoftware_statementget_claims_optionsr)payloaddatar copypop'software_statement_alg_values_supportedextract_software_statementr!get_server_metadatarhasattrr+validaterr descriptionget_registered_claims) rr json_datar*r-r%server_metadata claims_classoptionsclaimserrorrrrr6s2         z2ClientRegistrationEndpoint.extract_client_metadatac CsR||}|s tzt|j}|||}|WSty(}zt|d}~wwr)resolve_public_keyrrr0decoderr )rr*rkeyjwtr;excrrrr1Qs   z5ClientRegistrationEndpoint.extract_software_statementcCs0|}|}tt}d}t||||dS)Nr) client_id client_secretclient_id_issued_atclient_secret_expires_at)generate_client_idgenerate_client_secretinttimedict)rrBrCrDrErrrr ^s z/ClientRegistrationEndpoint.generate_client_infocCsdS)zGenerate ```registration_client_uri`` and ``registration_access_token`` for RFC7592. This method returns ``None`` by default. Developers MAY rewrite this method to return registration information. Nr)rr(rrrrr#kszrNrrrrG{sz1ClientRegistrationEndpoint.generate_client_secretcCt)zeReturn server metadata which includes supported grant types, response types and etc. NotImplementedErrorrNrrrr2sz.ClientRegistrationEndpoint.get_server_metadatacCrU)aLAuthenticate current credential who is requesting to register a client. Developers MUST implement this method in subclass:: def authenticate_token(self, request): auth = request.headers.get("Authorization") return get_token_by_auth(auth) :return: token instance rVrrrrr z-ClientRegistrationEndpoint.authenticate_tokencCrU)aIResolve a public key for decoding ``software_statement``. If ``enable_software_statement=True``, developers MUST implement this method in subclass:: def resolve_public_key(self, request): return get_public_key_from_user(request.credential) :return: JWK or Key string rVrrrrr=rXz-ClientRegistrationEndpoint.resolve_public_keycCrU)aSave client into database. Developers MUST implement this method in subclass:: def save_client(self, client_info, client_metadata, request): client = OAuthClient( client_id=client_info['client_id'], client_secret=client_info['client_secret'], ... ) client.save() return client rV)rr&r%rrrrr"s z&ClientRegistrationEndpoint.save_client)NN)__name__ __module__ __qualname____doc__ ENDPOINT_NAMEr0rrrrr1r r#rLrFrGr2rr=r"rrrrrs$    r)rQrSrIauthlib.common.securityrauthlib.constsr authlib.joserrrfc6749rr r;r errorsr r rrrrrrs