3 deE% @sddlZyddlmZWn ek r8ddlmZYnXddlZejeZdZdZ dZ dZ e e e degZ ddd d d gZd ZGd ddeZGdddeZddZddZddZdS)N)urlparsezlogin.microsoftonline.uszlogin.chinacloudapi.cnzlogin.microsoftonline.comzlogin-us.microsoftonline.comz b2clogin.comz b2clogin.cnz b2clogin.usz b2clogin.dez ciamlogin.comz.ciamlogin.comc@seZdZddZddZdS)AuthorityBuildercCs|jd|_|jd|_dS)zA helper to save caller from doing string concatenation. Usage is documented in :func:`application.ClientApplication.__init__`. /N)rstrip _instancestrip_tenant)selfinstancetenantr E/var/www/agendate/envp3/lib/python3.6/site-packages/msal/authority.py__init__#s zAuthorityBuilder.__init__cCsdj|j|jS)Nz https://{}/{})formatrr)r r r r __str__+szAuthorityBuilder.__str__N)__name__ __module__ __qualname__rrr r r r r"src@s,eZdZdZegZdddZd ddZdS) AuthorityzThis class represents an (already-validated) authority. Once constructed, it contains members named "*_endpoint" for this instance. TODO: It will also cache the previously-validated authority instances. TNc s|_t|trt|}t|\}_}jjt}|jdkoD| _ |j j d}t fddt Dpt|dko|djjd_j pjp| _jtk} |dkrd jtn|} | o| pʈj rtd jj|j j| } | jd d krtd|| d} nB|jdj|r2t|j dkr2|n|j j rBdndddj} yt| j} Wn$tk rtdj|YnXtjd| | d_| d_| jd_tj\}}_ dS)a`Creates an authority instance, and also validates it. :param validate_authority: The Authority validation process actually checks two parts: instance (a.k.a. host) and tenant. We always do a tenant discovery. This parameter only controls whether an instance discovery will be performed. Zadfsrc3s|]}jjd|VqdS).N)r endswith).0d)r r r Qsz%Authority.__init__..Zb2c_NTz$https://{}/common/discovery/instancez"https://{}{}/oauth2/v2.0/authorizeerrorZinvalid_instancezinvalid_instance: The authority you provided, %s, is not whitelisted. If it is indeed your legit customized domain name, you can turn off this check by passing in validate_authority=Falsetenant_discovery_endpointz2{prefix}{version}/.well-known/openid-configurationz/v2.0)prefixversion)pathzUnable to get authority configuration for {}. Authority would typically be in a format of https://login.microsoftonline.com/your_tenant Also please double check your tenant name or GUID is correct.zopenid_config = %sauthorization_endpointtoken_endpointdevice_authorization_endpoint)NT)! _http_client isinstancerstr canonicalizer r_CIAM_DOMAIN_SUFFIXlowerZis_adfsr"splitanyWELL_KNOWN_B2C_HOSTSlen startswithZ_is_b2cZ_is_known_to_developerWELL_KNOWN_AUTHORITY_HOSTSr WORLD_WIDE_instance_discoveryget ValueError_replacegeturltenant_discoveryloggerdebugr#r$r%r )r Z authority_url http_clientZvalidate_authorityZinstance_discovery authorityr Zis_ciampartsZis_known_to_microsoftinstance_discovery_endpointpayloadrZ openid_config_r )r r r7sV            zAuthority.__init__cCsf|j|jjkrb|p2|jjdj|j|dd|dd}|jdkrR|jtj |j S|jjj |jiS)NzkwargsrNr r r r3s  r3cKst|j|f|}|jdkr$tj|jSd|jko8dknrTtdj||j|j|jtd|j|jfdS)Niiz7OIDC Discovery failed on {}. HTTP status: {}, Error: {}z)Unable to complete OIDC Discovery: %d, %s) r4rGrIrJrKr5rrH RuntimeError)rr;rXrNr r r r8s   r8)rI urllib.parser ImportErrorlogging getLoggerrr9ZAZURE_US_GOVERNMENTZ AZURE_CHINAZ AZURE_PUBLICr2rQr1r.r*objectrrr)r3r8r r r r s4  e