File: //usr/lib/python3.6/site-packages/sos/policies/auth/__pycache__/__init__.cpython-36.pyc
3
-�_g� � @ sz d dl Z yd dlZdZW n ek
r0 dZY nX d dlZd dlmZmZ d dlmZ dZ dZ
e j d�Z G d d
� d
�Z
dS ) � NTF)�datetime� timedelta)�TIMEOUT_DEFAULTz sos-toolsz,urn:ietf:params:oauth:grant-type:device_codeZsosc @ sZ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z ddd�Z dS )�DeviceAuthorizationClassz$
Device Authorization Class
c C s* d | _ d | _d | _|| _|| _| j� d S )N)�
_access_token�_access_expires_at�&_DeviceAuthorizationClass__device_code�client_identifier_url�token_endpoint�_use_device_code_grant)�selfr r
� r
� /usr/lib/python3.6/__init__.py�__init__! s z!DeviceAuthorizationClass.__init__c C s$ | j � td| j� �� | j� dS )zv
Start the device auth flow. In the future we will
store the tokens in an in-memory keyring.
z<Please visit the following URL to authenticate this device: N)�_request_device_code�print�_verification_uri_complete�poll_for_auth_completion)r r
r
r r + s z/DeviceAuthorizationClass._use_device_code_grantc C s� dt � �}ddi}ts td��ydtj| j||td�}|j� |j� }|j d�| _
|j d�| _ |j d�| _ |j d �| _
|j d
�| _W n< tjk
r� } z tjd |j� d |� ���W Y d
d
}~X nX d
S )zm
Initialize new Device Authorization Grant attempt by
requesting a new device code.
z
client_id=z content-typez!application/x-www-form-urlencodedzRpython3-requests is not installed and is required for obtaining device auth token.)�data�headers�timeoutZ user_codeZverification_uriZinterval� device_codeZverification_uri_completezNHTTP request failed while attempting to acquire the tokens.Error returned was � N)�DEVICE_AUTH_CLIENT_ID�REQUESTS_LOADED� Exception�requests�postr r Zraise_for_status�json�getZ
_user_codeZ_verification_uri� _intervalr r Z HTTPError� status_code)r r r �resZresponse�er
r
r r 9 s(
z-DeviceAuthorizationClass._request_device_codec C s� t t| jd�}tstd��x�| jdkr�tj| j� ytt j
| j |t d�}|j
}|dkrltjd� | j|j� � |d kr�t||j��|dkr�|j� d d
kr�t||j��W q t jjk
r� } ztjd |� �� W Y dd}~X q X q W dS )z�
Continuously poll OIDC token endpoint until the user is successfully
authenticated or an error occurs.
)�
grant_type� client_idr zRpython3-requests is not installed and is required for obtaining device auth token.N)r r �� z$The SSO authentication is successful� �error�authorization_pending� slow_downz)Error was found while posting a request: )r& r' )r) r* )�GRANT_TYPE_DEVICE_CODEr r r r r �timeZsleepr r r r
r r! �logger�info�_set_token_datar �text�
exceptionsZRequestExceptionr( )r �
token_dataZcheck_auth_completionr! r# r
r
r r X s.
z1DeviceAuthorizationClass.poll_for_auth_completionc C sl |j d�| _tj� t|j d�d� | _|j d�| _|j d�| _| jdkrRtj| _ ntj� t| jd� | _ dS )a@
Set the class attributes as per the input token_data received.
In the future we will persist the token data in a local,
in-memory keyring, to avoid visting the browser frequently.
:param token_data: Token data containing access_token, refresh_token
and their expiry etc.
Z access_tokenZ
expires_in)�seconds�
refresh_tokenZrefresh_expires_inr N)
r r r �utcnowr r �_refresh_tokenZ_refresh_expires_in�max�_refresh_expires_at)r r2 r
r
r r/ z s
z(DeviceAuthorizationClass._set_token_datac C s2 | j � r| jS | j� r$| j� | jS | j� | jS )zt
Get the valid access_token at any given time.
:return: Access_token
:rtype: string
)�is_access_token_validr �is_refresh_token_valid�_use_refresh_token_grantr )r r
r
r �get_access_token� s z)DeviceAuthorizationClass.get_access_tokenc C s$ | j o"| jo"| jtdd� tj� kS )z�
Check the validity of access_token. We are considering it invalid 180
sec. prior to it's exact expiry time.
:return: True/False
� )r3 )r r r r r5 )r r
r
r r9 � s z.DeviceAuthorizationClass.is_access_token_validc C s$ | j o"| jo"| jtdd� tj� kS )z�
Check the validity of refresh_token. We are considering it invalid
180 sec. prior to it's exact expiry time.
:return: True/False
r= )r3 )r6 r8 r r r5 )r r
r
r r: � s z/DeviceAuthorizationClass.is_refresh_token_validNc C s� t s td��td|s| jn|d�}tj| j|td�}|jdkrN| j |j
� � nd|jdkr�d|j
� d kr�t j d |j� d
|j
� d � d �� | j
� n td |j� d
|j
� d � ���dS )z�
Fetch the new access_token and refresh_token using the existing
refresh_token and persist it.
:param refresh_token: optional param for refresh_token
zRpython3-requests is not installed and is required for obtaining device auth token.r4 )r% r$ r4 )r r r& i� Zinvalidr( zAProblem while fetching the new tokens from refresh token grant - r z%. New Device code will be requested !zcSomething went wrong while using the Refresh token grant for fetching tokens: Returned status code z and error N)r r r r6 r r r
r r! r/ r r- Zwarningr )r r4 Zrefresh_token_dataZrefresh_token_resr
r
r r; � s
"
z1DeviceAuthorizationClass._use_refresh_token_grant)N)
�__name__�
__module__� __qualname__�__doc__r r r r r/ r< r9 r: r; r
r
r
r r s
" r )Zloggingr r � ImportErrorr, r r Z
sos.utilitiesr r r+ Z getLoggerr- r r
r
r
r �<module> s