hrA^SrSSKJr SSKrSSKrSSKrSSKrSSKrSSKJ r SSK J r SSK J r JrJr SSKJr SSKJrJrJr SS KJr SS KJrJr SS KJr SS KJr SS KJ r "SS\5r!"SS\!5r""SS\!5r#"SS\!5r$"SS\!5r%\"\#\"5"SS55r&"SS5r'\"\#5"SS55r(\"\#5"SS55r)\"\$5"S S!55r*\"\%5"S"S#55r+"S$S%\!5r,\"\,5"S&S'55r-g)(z This module defines L{ICredentials}, an interface for objects that represent authentication credentials to provide, and also includes a number of useful implementations of that interface. ) annotationsN)hexlify)md5) Attribute Interface implementer)error)calcHA1calcHA2 calcResponse)Deferred) nativeString networkString)deprecatedModuleAttribute) secureRandom)Versionc\rSrSrSrSrg) ICredentialsz I check credentials. Implementors I{must} specify the sub-interfaces of ICredentials to which it conforms, using L{zope.interface.implementer}. N__name__ __module__ __qualname____firstlineno____doc____static_attributes__r_/root/1688_scrapy/alibaba-scraper/venv/lib/python3.13/site-packages/twisted/cred/credentials.pyrrsrrc\rSrSrSrSrSrg)IUsernameDigestHash(z This credential is used when a CredentialChecker has access to the hash of the username:realm:password as in an Apache .htdigest file. cg)a @param digestHash: The hashed username:realm:password to check against. @return: C{True} if the credentials represented by this object match the given hash, C{False} if they do not, or a L{Deferred} which will be called back with one of these values. Nr) digestHashs r checkHashIUsernameDigestHash.checkHash.rrN)rrrrrr%rrrrr!r!(s   rr!c:\rSrSr%Sr\"S5rS\S'SrSr g) IUsernameHashedPassword8av I encapsulate a username and a hashed password. This credential is used when a hashed password is received from the party requesting authentication. CredentialCheckers which check this kind of credential must store the passwords in plaintext (or as password-equivalent hashes) form so that they can be hashed in a manner appropriate for the particular credentials class. zA The username associated with these credentials. bytesusernamecg)a| Validate these credentials against the correct password. @type password: L{bytes} @param password: The correct, plaintext password against which to check. @rtype: C{bool} or L{Deferred} @return: C{True} if the credentials represented by this object match the given password, C{False} if they do not, or a L{Deferred} which will be called back with one of these values. Nrpasswords r checkPassword%IUsernameHashedPassword.checkPasswordIr'rrN) rrrrrrr,__annotations__r0rrrrr)r)8s$  He  rr)c8\rSrSr%SrS\S'S\S'S SjrSrg) IUsernamePasswordXa I encapsulate a username and a plaintext password. This encapsulates the case where the password received over the network has been hashed with the identity function (That is, not at all). The CredentialsChecker may store the password in whatever format it desires, it need only transform the stored password in a similar way before performing the comparison. @type username: L{bytes} @ivar username: The username associated with these credentials. @type password: L{bytes} @ivar password: The password associated with these credentials. r+r,r/cg)aH Validate these credentials against the correct password. @param password: The correct, plaintext password against which to check. @return: C{True} if the credentials represented by this object match the given password, C{False} if they do not, or a L{Deferred} which will be called back with one of these values. Nrr.s rr0IUsernamePassword.checkPasswordlr'rrN)r/r+returnzbool | Deferred[bool])rrrrrr2r0rrrrr4r4Xs OO  rr4c\rSrSrSrSrg) IAnonymousyzg I am an explicitly anonymous request for access. @see: L{twisted.cred.checkers.AllowAnonymousAccess} rNrrrrr:r:ysrr:c*\rSrSrSrSrSrSrSrg)DigestedCredentialsz7 Yet Another Simple HTTP Digest authentication scheme. c4XlX lX0lX@lgN)r,methodrealmfields)selfr,rArBrCs r__init__DigestedCredentials.__init__s    rc 0URRS5nURRS5nURRS5nURRS5nURRS5nURRSS5R5nURRSS 5n[[ XpR UR XU5[XpRX8S 5UUUUU5n X:H$) z Verify that the credentials represented by this object agree with the given plaintext C{password} by hashing C{password} in the same way the response hash represented by this object was generated and comparing the results. responseurinoncecnoncenc algorithmmd5qopauthN) rCgetlowerr r r,rBr rA) rDr/rHrIrJrKrLalgorOexpecteds rr0!DigestedCredentials.checkPasswords;;??:.kkooe$ (* [[__T "{{{F399;kkooeW- D--Xf M D++s 6      ##rc URRS5nURRS5nURRS5nURRS5nURRS5nURRSS5R5nURRSS 5n[[ US S S XEUS 9[ XpR X8S 5UUUUU5n X:H$) a  Verify that the credentials represented by this object agree with the credentials represented by the I{H(A1)} given in C{digestHash}. @param digestHash: A precomputed H(A1) value based on the username, realm, and password associate with this credentials object. rHrIrJrKrLrMrNrOrPN)preHA1)rCrQrRr r r rA) rDr$rHrIrJrKrLrSrOrTs rr%DigestedCredentials.checkHashs;;??:.kkooe$ (* [[__T "{{{F399;kkooeW- D$dE* M D++s 6      ##r)rCrArBr,N) rrrrrrEr0r%rrrrr=r=s $6$rr=cn\rSrSrSr\R "S5rSrSr Sr Sr Sr S r S rS rS rS rg)DigestCredentialFactorya> Support for RFC2617 HTTP Digest Authentication @cvar CHALLENGE_LIFETIME_SECS: The number of seconds for which an opaque should be valid. @type privateKey: L{bytes} @ivar privateKey: A random string used for generating the secure opaque. @type algorithm: L{bytes} @param algorithm: Case insensitive string specifying the hash algorithm to use. Must be either C{'md5'} or C{'sha'}. C{'md5-sess'} is B{not} supported. @type authenticationRealm: L{bytes} @param authenticationRealm: case sensitive string that specifies the realm portion of the challenge s ([^= ]+)=(?:"([^"]*)"|([^,]+)),?isdigestc<XlX l[S5Ulg)N )rMauthenticationRealmr privateKey)rDrMr^s rrE DigestCredentialFactory.__init__s"#6 &r*rc|UR5nURX!5nUUSURURS.$)z Generate the challenge for use in the WWW-Authenticate header. @param address: The client address to which this challenge is being sent. @return: The L{dict} that can be used to generate a WWW-Authenticate header. rP)rJopaquerOrMrB)_generateNonce_generateOpaquerMr^)rDaddresscos r getChallenge$DigestCredentialFactory.getChallengesG    !   ,--   rc*[[S55$)zr Create a random value suitable for use as the nonce parameter of a WWW-Authenticate challenge. @rtype: L{bytes} r])rrrDs rrc&DigestCredentialFactory._generateNonces|B'((rc,[R"5$)zq Parameterize the time based seed used in C{_generateOpaque} so we can deterministically unittest it's behavior. )timerks r_getTime DigestCredentialFactory._getTime s yy{rcS[UR554-nU(dSnO&[U[5(aUR S5nSR XU45n[ [X@R-5R55n[R"U5nSR XVRSS545$)zt Generate an opaque to be returned to the client. This is a unique string that can be returned to us and verified. s%drascii,- ) intro isinstancestrencodejoinrrr_digestbase64 b64encodereplace)rDrJclientipnowkeyr{ekeys rrd'DigestCredentialFactory._generateOpaquess4==?+--H # & &w/Hii#./S??23::<=$yy&,,uc":;<##E  S??23::<= ^ ###$LM M! T##$RS S Ts 5F!F5cbSRUR55nURRU5n0nUH:upgnU=(d UR 5n X[ UR 55'M< UR S5n U (d[R"S5eSU;a[R"S5eSU;a[R"S5eURUR S5UR S5U5(a[XURU5$g) a Decode the given response and attempt to generate a L{DigestedCredentials} from it. @type response: L{bytes} @param response: A string of comma separated key=value pairs @type method: L{bytes} @param method: The action requested to which this response is addressed (GET, POST, INVITE, OPTIONS, etc). @type host: L{bytes} @param host: The address the request was sent from. @raise error.LoginFailed: If the response does not contain a username, a nonce, an opaque, or if the opaque is invalid. @return: L{DigestedCredentials}  r,z$Invalid response, no username given.rbz"Invalid response, no opaque given.rJz!Invalid response, no nonce given.N) rz splitlines _parsepartsfindallstriprrQr rrr=r^) rDrHrAhostpartsauthrbarequotedvaluer,s rdecodeDigestCredentialFactory.decodees(99X0023  ((2!& Cv^t**,E.3ciik* +"'88J'##$JK K 4 ##$HI I $ ##$GH H   dhhx0$((72CT J J&x9Q9QSWX X Kr)rMr^r_N)rrrrrrecompilerrschemerErhrcrordrrrrrrrZrZsN&**  K& F+  *)=&>@'YrrZcF\rSrSrSrSrSrSrS SjrSr Sr Sr S r S r g) CramMD5CredentialsiaS An encapsulation of some CramMD5 hashed credentials. @ivar challenge: The challenge to be sent to the client. @type challenge: L{bytes} @ivar response: The hashed response from the client. @type response: L{bytes} @ivar username: The username from the response from the client. @type username: L{bytes} or L{None} if not yet provided. NrcXlgr@)r)rDrs rrECramMD5Credentials.__init__s rc UR(a UR$[R"S5n[R"5n[ SXUR (a[ UR 5OS4-5UlUR$)Niz <%d.%d@%s>) challengerandom randrangernrrr)rDrts rrhCramMD5Credentials.getChallengesf >>>> !   Z ( IIK& ATYY,tyy"9DQ Q ~~rcBURSS5uUlUlg)Nr)rr,rH)rDrHs r setResponseCramMD5Credentials.setResponses'/~~dA'>$ t}rcg)NFrrks rmoreChallenges!CramMD5Credentials.moreChallengessrc[[R"XR[S9R 55nX R :H$)N) digestmod)rhmacHMACrrr{rH)rDr/verifys rr0 CramMD5Credentials.checkPasswords18^^sKRRTU&&r)rrrHr,r@)rrrrrr,rrHrErhrrr0rrrrrrs1 HIH ?'rrcH\rSrSr\"\"SSSS5SSS5 SrS rS rg ) UsernameHashedPasswordiTwistedrrz6Use twisted.cred.credentials.UsernamePassword instead.ztwisted.cred.credentialscXlX lgr@)r,hashed)rDr,rs rrEUsernameHashedPassword.__init__s   rc URU:H$r@)rrDr/s rr0$UsernameHashedPassword.checkPasswords{{h&&r)rr,N) rrrrrrrEr0rrrrrrs+ 2q!$@" 'rrcB\rSrSr%SrS\S'S\S'S SjrS SjrSrg ) UsernamePasswordizY A trivial implementation of L{IUsernamePassword}, containing a username and a password. r+r,r/cXlX lgr@)r,r/)rDr,r/s rrEUsernamePassword.__init__s   rc URU:H$r@r.rs rr0UsernamePassword.checkPasswords}}((r)r/r,N)r,r+r/r+r8None)r/r+r8bool) rrrrrr2rEr0rrrrrrs OO!)rrc\rSrSrSrg) AnonymousirN)rrrrrrrrrrsrrc\rSrSrSrSrg)ISSHPrivateKeyia2 L{ISSHPrivateKey} credentials encapsulate an SSH public key to be checked against a user's private key. @ivar username: The username associated with these credentials. @type username: L{bytes} @ivar algName: The algorithm name for the blob. @type algName: L{bytes} @ivar blob: The public key blob as sent by the client. @type blob: L{bytes} @ivar sigData: The data the signature was made from. @type sigData: L{bytes} @ivar signature: The signed data. This is checked to verify that the user owns the private key. @type signature: L{bytes} or L{None} rNrrrrrrsrrc\rSrSrSrSrg) SSHPrivateKeyic@XlX lX0lX@lXPlgr@)r,algNameblobsigData signature)rDr,rrrrs rrESSHPrivateKey.__init__s    "r)rrrrr,N)rrrrrErrrrrrs#rr).r __future__rr|rrrrnbinasciirhashlibrzope.interfacerrr twisted.credr twisted.cred._digestr r r twisted.internet.deferr twisted.python.compatrrtwisted.python.deprecatertwisted.python.randbytesrtwisted.python.versionsrrr!r)r4r:r=rZrrrrrrrrrrs[  # <<??+=>1+9  ,   l @  B $&9:@$@$;@$FGYGYT $%-'-'&-'` $% ' '& '  )) )" Z   \. ^###r