EjJddZddlmZddlZddlmZmZddlmZm Z m Z ddl m Z ddl mZddlmZdd lmZmZmZerdd lmZdd lmZdd lmZGd deZGddZGddeZGddeZGddeZGddeZ GddeZ!GddeZ"GddeZ#y)z2Provides Authentication and Authorization classes.) annotationsN)ABCabstractmethod) TYPE_CHECKINGAnycast)Request)codes)const)InvalidInvocationOAuthExceptionResponseException)Callable)Response) RequestorcteZdZdZed dZeddZdd ddZddZ dd dd Z dd dd Z y)BaseAuthenticatorzEProvide the base authenticator object that stores OAuth2 credentials.cyNselfs K/root/workspace/ytshorts/venv/lib/python3.12/site-packages/prawcore/auth.py_authzBaseAuthenticator._auths c|jS)z;Return the :class:`.Requestor` used to issue HTTP requests.) _requestorrs r requestorzBaseAuthenticator.requestorsrN redirect_uric.||_||_||_y)a%Represent a single authentication to Reddit's API. :param client_id: The OAuth2 client ID to use with the session. :param redirect_uri: The redirect URI exactly as specified in your OAuth application settings on Reddit. This parameter is required if you want to use the :meth:`~.Authorizer.authorize_url` method, or the :meth:`~.Authorizer.authorize` method of the :class:`.Authorizer` class (default: ``None``). :param requestor: An instance of :class:`.Requestor`. N)r client_idr )rr"r rs r__init__zBaseAuthenticator.__init__#s$$"(rc |jjd||jt|j ddi}|j t dk7r t||S)Npost Connectionclose)authdataheadersok)rrequestrsorteditems status_coder r)rurlr)responses r_postzBaseAuthenticator._post9sd??**   %!7+ +    5; .#H- -rF)implicitc|j d}t||rt|ts d}t||r|dk7r d}t||j||j|rdnddj ||d}|j jtjz}td || }td |jjS) a}Return the URL used out-of-band to grant access to your application. :param duration: Either ``"permanent"`` or ``"temporary"``. ``"temporary"`` authorizations generate access tokens that last only 1 hour. ``"permanent"`` authorizations additionally generate a refresh token that can be indefinitely used to generate new hour-long access tokens. Only ``"temporary"`` can be specified if ``implicit`` is set to ``True``. :param implicit: Use the implicit grant flow (default: ``False``). This flow is only available for :class:`.UntrustedAuthenticator` instances. :param scopes: A list of OAuth scopes to request authorization for. :param state: A string that will be reflected in the callback to ``redirect_uri``. Elements must be printable ASCII characters in the range ``0x20`` through ``0x7E`` inclusive. This value should be temporarily unique to the client for whom the URL was generated. :returns: URL to be used out-of-band for granting access to your application. :raises: :class:`.InvalidInvocation` if ``redirect_uri`` is not provided, if ``implicit`` is ``True`` and an authenticator other than :class:`.UntrustedAuthenticator` is used, or ``implicit`` is ``True`` and ``duration`` is ``"permanent"``. redirect URI not providedzFOnly UntrustedAuthenticator instances can use the implicit grant flow. temporaryz>The implicit grant flow only supports temporary access tokens.tokencode )r"durationr response_typescopestateGET)paramsstr)r r isinstanceUntrustedAuthenticatorr"joinr reddit_urlr AUTHORIZATION_PATHr rpreparer0) rr:r3scopesr=msgr?r0r,s r authorize_urlzBaseAuthenticator.authorize_urlEs0    $-C#C( ( Jt-CDZC#C( ( K/RC#C( (  --(0WfXXf%  oo((5+C+CC%V4E7??,0011r token_typecd|i}|||d<|jjtjz}|jdd|i|y)a;Ask Reddit to revoke the provided token. :param token: The access or refresh token to revoke. :param token_type: When provided, hint to Reddit what the token type is for a possible efficiency gain. The value can be either ``"access_token"`` or ``"refresh_token"``. r7Ntoken_type_hintr0r)rrDr REVOKE_TOKEN_PATHr2)rr7rKr)r0s r revoke_tokenzBaseAuthenticator.revoke_tokenssO  !&0D" #oo((5+B+BB #s#d#rreturnztuple[str, str])rQr)r"r@r str | NonerrrQNone)r0r@r)rrQr) r:r@r3boolrGz list[str]r=r@rQr@)r7r@rKrRrQrS) __name__ __module__ __qualname____doc__rrpropertyrr#r2rIrOrrrrrs{O  $( ))! )  )  ), @E,2\GK $rrc^eZdZUdZeZded<ed dZd dZ dZ ddZ dZ dd Z dd Zy )BaseAuthorizerz6Superclass for OAuth2 authorization tokens and scopes.z=type[BaseAuthenticator] | tuple[type[BaseAuthenticator], ...]AUTHENTICATOR_CLASSc|jS)zEReturn the :class:`.BaseAuthenticator` used to authenticate requests.)_authenticatorrs r authenticatorzBaseAuthorizer.authenticators"""rcR||_|j|jy)zRepresent a single authorization to Reddit's API. :param authenticator: An instance of :class:`.BaseAuthenticator`. N)r^_clear_access_token_validate_authenticator)rr_s rr#zBaseAuthorizer.__init__s$ ,   " $$&rc$|d|_d|_yr) access_tokenrGrs rraz"BaseAuthorizer._clear_access_tokens (,'+ rc |jjjtjz}t j }|jjd d|i|}|j}d|vrt||d|jd||ddztjzz|_ |d|_ d|vr |d|_t|dj!d |_y) Nr0errorerror_description expires_in rd refresh_tokenr<r9r)r^rrDr ACCESS_TOKEN_PATHtime monotonic_nsr2jsonr get NANOSECONDS_expiration_timestamp_nsrdrjsetsplitrG)rr)r0pre_request_timestamp_nsr1payloads r_request_tokenzBaseAuthorizer._request_tokens!!++669P9PP#'#4#4#6 ,4&&,,===--/ g  77+;W[[I\=]^ ^(@GLDY\^D^bgbsbsCs(s%#N3 g %!(!9D ''*0056 rc`t|j|jsd}t|jtr(|d|jjdz }t ||ddj |jDcgc]}|jc}dz }t |ycc}w)Nz!Must use an authenticator of typer9.z or )rAr^r\typerUrCr )rrHis rrbz&BaseAuthorizer._validate_authenticators$--t/G/GH5C$22D9433<<=Q??$C( (6;;D\(\%(%++c*+ r) rdr@r_rBrhintr<r@rQrS)rUrVrWrXrBr\r#rrs@rrr;sH=0,,. ,  ,  , ,,rrc@eZdZdZeZdd dfdZddZxZS)ReadOnlyAuthorizerzManages authorizations that are not associated with a Reddit account. While the ``"*"`` scope will be available, some endpoints simply will not work due to the lack of an associated Reddit account. N)rGc4t||||_y)zRepresent a ReadOnly authorization to Reddit's API. :param scopes: A list of OAuth scopes to request authorization for (default: ``None``). The scope ``"*"`` is requested when the default argument is used. rN)rr#_scopes)rr_rGrs rr#zReadOnlyAuthorizer.__init__fs }5 rci}|jrdj|j|d<|jdddi|y)z#Obtain a new ReadOnly access token.r9r<rclient_credentialsNr)rrCrv)radditional_kwargss rrzReadOnlyAuthorizer.refreshusA <<),$,,)? g &Q';Q?PQr)r_rrGlist[str] | NonerQrSr rUrVrWrXrr\r#rrrs@rrr\s>/ $( ) !   RrrcNeZdZdZeZddd dfdZddZxZS)ScriptAuthorizerzManages personal-use script type authorizations. Only users who are listed as developers for the application will be granted access tokens. N)rGtwo_factor_callbackc^t||||_||_||_||_y)aRepresent a single personal-use authorization to Reddit's API. :param authenticator: An instance of :class:`.TrustedAuthenticator`. :param password: The password associated with ``username``. :param scopes: A list of OAuth scopes to request authorization for (default: ``None``). The scope ``"*"`` is requested when the default argument is used. :param two_factor_callback: A function that returns OTPs (One-Time Passcodes), also known as 2FA auth codes. If this function is provided, prawcore will call it when authenticating. :param username: The Reddit username of one of the application's developers. rN)rr# _passwordr_two_factor_callback _username)rr_passwordrGrusernamers rr#zScriptAuthorizer.__init__s2* }5! $7!!rci}|jrdj|j|d<|jxr|j}|r||d<|jdd|j|j d|y)z3Obtain a new personal-use script type access token.r9r<otpr)rrrNr)rrCrrvrr)rrtwo_factor_codes rrzScriptAuthorizer.refreshs~ <<),$,,)? g &33S8Q8Q8S '6 e $ !^^^^   r) r_rrrRrGrrzCallable[[], str] | NonerrRrQrSrrrs@rrr}s^/$(8< ")" " ! " 6 "" "6  rrcJeZdZdZeefZddd dfdZddZxZ S)DeviceIDAuthorizerzManages app-only OAuth2 for 'installed' applications. While the ``"*"`` scope will be available, some endpoints simply will not work due to the lack of an associated Reddit account. N) device_idrGcJ|d}t||||_||_y)aRepresent an app-only OAuth2 authorization for 'installed' apps. :param authenticator: An instance of :class:`.UntrustedAuthenticator` or :class:`.TrustedAuthenticator`. :param device_id: A unique ID (20-30 character ASCII string) (default: ``None``). ``device_id`` is set to ``"DO_NOT_TRACK_THIS_DEVICE"`` when the default argument is used. For more information about this parameter, see: https://github.com/reddit/reddit/wiki/OAuth2#application-only-oauth :param scopes: A list of OAuth scopes to request authorization for (default: ``None``). The scope ``"*"`` is requested when the default argument is used. NDO_NOT_TRACK_THIS_DEVICEr)rr# _device_idr)rr_rrGrs rr#zDeviceIDAuthorizer.__init__s.&  2I }5# rci}|jrdj|j|d<d}|jd||jd|y)zObtain a new access token.r9r<z0https://oauth.reddit.com/grants/installed_client)rrNr)rrCrvr)rrrs rrzDeviceIDAuthorizer.refreshsU <<),$,,)? g &G  !oo   r)r_rrrRrGrrQrSr) rUrVrWrXrrBr\r#rrrs@rrrsP01GH !%#' )  !   2  rr)$rX __future__rrlabcrrtypingrrrrequestsr requests.status_codesr prawcorer prawcore.exceptionsr r rcollections.abcrrequests.modelsrprawcore.requestorrrr[rrBrrrrrrrrrs8" #++'TT((,i$i$XA#A#H2,2@"."J&J&Z,,BRRB2 z2 j- - r