File: //opt/cppython/lib/python3.8/site-packages/botocore/__pycache__/tokens.cpython-38.pyc
U
KD�g�* � @ s d dl Z d dlZd dlZd dlZd dlmZmZ d dlmZmZ d dl Z
d dl m Z d dl
mZ d dlmZ d dlmZ d dlmZmZmZ d d lmZmZmZ e�e �Z d
d � Z d d
� Z dd� Z dd� Z!G dd� de�Z"G dd� d�Z#G dd� d�Z$G dd� d�Z%dS )� N)�datetime� timedelta)�
NamedTuple�Optional)�tzutc)�UNSIGNED)�
total_seconds)�Config)� ClientError�InvalidConfigError�TokenRetrievalError)�CachedProperty�
JSONFileCache�SSOTokenLoaderc C s t �t� �S �N)r �nowr � r r �</opt/cppython/lib/python3.8/site-packages/botocore/tokens.py�_utc_now$ s r c C s t | �g}t|d�S )N)� providers)�SSOTokenProvider�TokenProviderChain)�sessionr r r r �create_token_resolver( s �r c C s t | t�r| �d�S | S )Nz%Y-%m-%dT%H:%M:%SZ)�
isinstancer �strftime��objr r r �_serialize_utc_timestamp/ s
r c C s t j| td�S )N)�default)�json�dumpsr r r r r �_sso_json_dumps5 s r" c @ s& e Zd ZU eed< dZee ed< dS )�FrozenAuthToken�tokenN�
expiration)�__name__�
__module__� __qualname__�str�__annotations__r% r r r r r r r# 9 s
r# c @ sL e Zd ZdZdZdZefdd�Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dS )�DeferredRefreshableToken� iX �< c C s, || _ || _|| _t�� | _d | _d | _d S r )�
_time_fetcher�_refresh_using�method� threading�Lock�
_refresh_lock�
_frozen_token�
_next_refresh)�selfr0 Z
refresh_using� time_fetcherr r r �__init__G s
z!DeferredRefreshableToken.__init__c C s | � � | jS r )�_refreshr4 �r6 r r r �get_frozen_tokenQ s z)DeferredRefreshableToken.get_frozen_tokenc C sB | � � }|sd S |dk}| j�|�r>z | �� W 5 | j�� X d S )N� mandatory)�_should_refreshr3 �acquire�release�_protected_refresh)r6 � refresh_typeZblock_for_refreshr r r r9 U s z!DeferredRefreshableToken._refreshc C s� | � � }|sd S z(| �� }|t| jd� | _| �� | _W n. tk
rf tj d|dd� |dkrb� Y nX | �
� r~t | j dd��d S )N��secondsz5Refreshing token failed during the %s refresh period.T��exc_infor< z$Token has expired and refresh failed)�provider� error_msg)
r= r. r �_attempt_timeoutr5 r/ r4 � Exception�logger�warning� _is_expiredr r0 )r6 rA r r r r r@ c s( ��z+DeferredRefreshableToken._protected_refreshc C s. | j d krdS | j j}t|| �� �}|dkS )NFr )r4 r% r r. )r6 r% � remainingr r r rL s
z$DeferredRefreshableToken._is_expiredc C sd | j d krdS | j j}|d kr"d S | �� }|| jk r8d S t|| �}|| jk rRdS || jk r`dS d S )Nr< Zadvisory)r4 r% r. r5 r �_mandatory_refresh_timeout�_advisory_refresh_timeout)r6 r% r rM r r r r= � s
z(DeferredRefreshableToken._should_refreshN)
r& r' r( rO rN rH r r8 r; r9 r@ rL r= r r r r r+ > s
r+ c @ s e Zd Zddd�Zdd� ZdS )r Nc C s |d kr g }|| _ d S r )�
_providers)r6 r r r r r8 � s zTokenProviderChain.__init__c C s( | j D ] }|�� }|d k r| S qd S r )rP �
load_token)r6 rF r$ r r r rQ � s
z TokenProviderChain.load_token)N)r& r' r( r8 rQ r r r r r � s
r c @ s� e Zd ZdZdZej�ej�dddd��Z ddgZ
dZ e Z
d ed fd
d �Zd d
� Zedd� �Zedd� �Zdd� Zdd� Zdd� Zdd� Zd S )r Zssor, �~z.aws�cache�
sso_start_url�
sso_regionZ
refresh_tokenNc C sR || _ |d kr | j| jtd�}|| _|| _t| jd�| _|pJ| j �d�pJd| _ d S )N)Z
dumps_func)rS Zprofiler )
�_session�DEFAULT_CACHE_CLS�_SSO_TOKEN_CACHE_DIRr" �_now�_cacher �
_token_loaderZget_config_variable�
_profile_name)r6 r rS r7 Z profile_namer r r r8 � s �
��zSSOTokenProvider.__init__c
C s� | j j}|�di �}|�di �}|�| ji �}d|kr:d S |d }|�|d �}|spd| j� d|� d�}t|d��g }| jD ]} | |krz|�| � qz|r�d| j� d|� d �}t|d��||d
|d d �S )
N�profiles� sso_sessionsZ sso_sessionz
The profile "z7" is configured to use the SSO token provider but the "z+" sso_session configuration does not exist.)rG zZ" is configured to use the SSO token provider but is missing the following configuration: �.rU rT )� session_namerU rT )rV Z full_config�getr\ r �_SSO_CONFIG_VARS�append)
r6 Z
loaded_configr] r^ Zprofile_configZsso_session_nameZ
sso_configrG Zmissing_configs�varr r r �_load_sso_config� s0 �
�
�z!SSOTokenProvider._load_sso_configc C s | � � S r )re r: r r r � _sso_config� s z SSOTokenProvider._sso_configc C s" t | jd td�}| jjd|d�S )NrU )Z region_nameZsignature_versionzsso-oidc)�config)r rf r rV Z
create_client)r6 rg r r r �_client� s
�zSSOTokenProvider._clientc C s� | j j| j|d |d |d d�}t|d d�}| jd | jd |d | �� | |d |d |d
d �}d|kr||d |d< t�d � |S )
N�clientId� clientSecret� refreshToken)Z grantTyperi rj rk Z expiresInrB rT rU � accessToken�registrationExpiresAt)ZstartUrl�regionrl � expiresAtri rj rm zSSO Token refresh succeeded)rh Z create_token� _GRANT_TYPEr rf rY rJ �info)r6 r$ �responseZ
expires_inZ new_tokenr r r �_attempt_create_token� s& �
�
z&SSOTokenProvider._attempt_create_tokenc s� d}� fdd�|D �}|r2d|� �}t �|� d S tj�� d �}t|| �� �dkrjt �d|� �� d S z | �� �W S tk
r� t j dd d
� Y d S X d S ) N)rk ri rj rm c s g | ]}|� kr|�qS r r )�.0�k�r$ r r �
<listcomp> s z:SSOTokenProvider._refresh_access_token.<locals>.<listcomp>z+Unable to refresh SSO token: missing keys: rm r z"SSO token registration expired at z SSO token refresh attempt failedTrD )
rJ rq �dateutil�parser�parser rY rs r
rK )r6 r$ �keysZ missing_keys�msgZexpiryr rv r �_refresh_access_token s
z&SSOTokenProvider._refresh_access_tokenc C s� | j d }| j d }t�d|� �� | j||d�}tj�|d �}t�d|� �� t|| � � �}|| j
k r�| � |�}|d k r�|}|d }| jj |||d� t
|d |d�S ) NrT r` z Loading cached SSO token for )r` ro z Cached SSO token expires at rl )r% )rf rJ rq r[ rx ry rz �debugr rY �_REFRESH_WINDOWr} Z
save_tokenr# )r6 Z start_urlr` Z
token_dictr% rM Znew_token_dictr r r �
_refresher. s*
� �zSSOTokenProvider._refresherc C s" | j d krd S t| j| j| jd�S )N)r7 )rf r+ �METHODr� rY r: r r r rQ D s
�zSSOTokenProvider.load_token)r& r' r( r� r �os�path�
expanduser�joinrX rb rp r rW r r8 re r
rf rh rs r} r� rQ r r r r r � s. �� �
'
r )&r �loggingr� r1 r r �typingr r Zdateutil.parserrx Z dateutil.tzr Zbotocorer Zbotocore.compatr Zbotocore.configr Zbotocore.exceptionsr
r r Zbotocore.utilsr
r r � getLoggerr& rJ r r r r" r# r+ r r r r r r �<module>
s*
a