3 deI@sdZddlZddlZddlZddlZddlmZddlZddlZy4ddl m Z m Z ddl m Z mZmZddlmZWnLek rddlm Z m Z ddl m Z mZddlmZddlmZYnXejeZdEd d Zd d Zd dZdFddZddZddZddZGddde Z Gddde e!Z"Gddde"Z#Gddde!Z$edkrddl%Z%ddl&Z&d d!l'm(Z(ej)ej*d"e%j+e%j,ed#d$Z-Z.e-j/d%d&d'd(e-j/d)d*d+e-j/d,e0dd-d.e-j/d/e0d0d1d.e-j/d2d3d4d5e-j/d6dd7d5e.j1Z2e(d8e2j3ie2j4Z5e$e2j6d9dZ7e5j8e2j9r6e2j9j:ndd:j;e2je?e&j@e7jAe>d=d>d?d@e2jBe>dAdBdCdDWdQRXdS)Ga$A one-stop helper for desktop app to acquire an authorization code. It starts a web server to listen redirect_uri, waiting for auth code. It optionally opens a browser window to guide a human user to manually login. After obtaining an auth code, the web server will automatically shut down. N)Template) HTTPServerBaseHTTPRequestHandler)urlparseparse_qs urlencode)escape)rr)rc Cs*t|d}|j|ddjdSQRXdS)N)portz Open this link to Sign In (You may want to use incognito window)
Abort )auth_uriwelcome_templatecode)AuthCodeReceiverget_auth_responseget)Z listen_portr receiverrN/var/www/agendate/envp3/lib/python3.6/site-packages/msal/oauth2cli/authcode.pyobtain_auth_codes  rcCspyNtd<}x4|jD](}|jdddj}|jdkrdSqWWdQRXWntk rbYnXtjjdS)Nz/proc/1/cgroup:/Tz /.dockerenv)open readlinessplitstripIOErrorospathexists)flineZ cgroup_pathrrr_is_inside_docker*s  r!cCsHddl}|j}t|d|dj}t|d|dj}|dkoFd|kS)NrsystemreleaserlinuxZ microsoft)platformunamegetattrlower)r%r&Z platform_namer#rrris_wsl8s r)c Cszddl}|r|j|j|}n |j|}| rvtrvy,ddl}|jddddj|g}|dk}Wntk rtYnX|S)zJBrowse uri with named browser. Default browser is customizable by $BROWSERrNzpowershell.exez -NoProfilez-CommandzStart-Process "{}") webbrowserrrr) subprocesscallformatFileNotFoundError)r browser_namer*browser_openedr+Z exit_coderrr_browseDs   r1cCsdd|jDS)z;Flatten parse_qs()'s single-item lists into the item itselfcSs4i|],\}}t|tr*t|dkr*|dn||qS)r) isinstancelistlen).0kvrrr ]sz_qs2kv..)items)qsrrr_qs2kv[sr<cCs |jdS)N<) startswith)textrrr_is_htmlasr@cCsdd|jDS)NcSsi|]\}}t||qSr)r)r6r7r8rrrr9fsz_escape..)r:)Zkey_value_pairsrrr_escapeesrAc@s&eZdZddZd ddZddZdS) _AuthCodeHandlercCstt|jj}|jds$|jdrt|}tjd||jj r^|jj |jdkr^|j dqd|krn|jj n|jj }t |jrt|}n|}|j |jf|||j_n|j |jjdS)Nr errorzGot auth response: %sstatezState mismatch)rrrqueryrr<loggerdebugserver auth_state_send_full_responsesuccess_templateerror_templater@templaterAsafe_substitute auth_response welcome_page)selfr;rOrMZ safe_datarrrdo_GETjs     z_AuthCodeHandler.do_GETTcCsL|j|r dndt|rdnd}|jd||j|jj|jddS)Niz text/htmlz text/plainz Content-typezutf-8)Z send_responser@Z send_headerZ end_headerswfilewriteencode)rQbodyZis_ok content_typerrrrJs  z$_AuthCodeHandler._send_full_responsecGstj|f|dS)N)rFrG)rQr-argsrrr log_messagesz_AuthCodeHandler.log_messageN)T)__name__ __module__ __qualname__rRrJrZrrrrrBis rBcs$eZdZfddZddZZS)_AuthCodeHttpServercs>|\}}|r"tjdkstr"d|_tt|j|f||dS)Nwin32F)sysr%r)allow_reuse_addresssuperr^__init__)rQserver_addressrYkwargs_r ) __class__rrrcsz_AuthCodeHttpServer.__init__cCs tddS)Nz"Timeout. No auth response arrived.) RuntimeError)rQrrrhandle_timeoutsz"_AuthCodeHttpServer.handle_timeout)r[r\r]rcri __classcell__rr)rgrr^s r^c@seZdZejZdS)_AuthCodeHttpServer6N)r[r\r]socketAF_INET6address_familyrrrrrksrkc@sJeZdZdddZddZdddZddd Zd d Zd d ZddZ dS)r NcCsJtr dnd}t|pg|_d|kr(tnt}|||p6dft|_d|_dS)aCreate a Receiver waiting for incoming auth response. :param port: The local web server will listen at http://...: You need to use the same port when you register with your app. If your Identity Provider supports dynamic port, you can use port=0 here. Port 0 means to use an arbitrary unused port, per this official example: https://docs.python.org/2.7/library/socketserver.html#asynchronous-mixins :param scheduled_actions: For example, if the input is ``[(10, lambda: print("Got stuck during sign in? Call 800-000-0000"))]`` then the receiver would call that lambda function after waiting the response for 10 seconds. z0.0.0.0z 127.0.0.1rrFN)r!sorted_scheduled_actionsrkr^rB_server_closing)rQr Zscheduled_actionsaddressServerrrrrcs  zAuthCodeReceiver.__init__cCs |jjdS)z*The port this server actually listening tor2)rqrd)rQrrrget_portszAuthCodeReceiver.get_portcKsi}tj|j|f|d}d|_|jtj}xl|rDtj||kndrtjd|js\Px:|jrtj||jddkr|jj d\}}|q^Wq0W|pdS)aWait and return the auth response. Raise RuntimeError when timeout. :param str auth_uri: If provided, this function will try to open a local browser. :param int timeout: In seconds. None means wait indefinitely. :param str state: You may provide the state you used in auth_uri, then we will use it to validate incoming response. :param str welcome_template: If provided, your end user will see it instead of the auth_uri. When present, it shall be a plaintext or html template following `Python Template string syntax `_, and include some of these placeholders: $auth_uri and $abort_uri. :param str success_template: The page will be displayed when authentication was largely successful. Placeholders can be any of these: https://tools.ietf.org/html/rfc6749#section-5.1 :param str error_template: The page will be displayed when authentication encountered error. Placeholders can be any of these: https://tools.ietf.org/html/rfc6749#section-5.2 :param callable auth_uri_callback: A function with the shape of lambda auth_uri: ... When a browser was unable to be launch, this function will be called, so that the app could tell user to manually visit the auth_uri. :param str browser_name: If you did ``webbrowser.register("xyz", None, BackgroundBrowser("/path/to/browser"))`` beforehand, you can pass in the name "xyz" to use that browser. The default value ``None`` means using default browser, which is customizable by env var $BROWSER. :return: The auth response of the first leg of Auth Code flow, typically {"code": "...", "state": "..."} or {"error": "...", ...} See https://tools.ietf.org/html/rfc6749#section-4.1.2 and https://openid.net/specs/openid-connect-core-1_0.html#AuthResponse Returns None when the state was mismatched, or when timeout occurred. )targetrYreTr2rN) threadingThread_get_auth_responsedaemonstarttimesleepis_aliverppop)rQtimeoutreresulttbeginrfcallbackrrrrs5 z"AuthCodeReceiver.get_auth_responsec  Cs$dj|jd} dj| d} tjd| t|p0dj|| d|j_|r|rN| n|} tjd| d } yt | | d } Wntj d YnX| s|stj d j| ||jd n|| t|pd|j_ t|pd|j_ ||j_i|j_||j_x |js|jj|jjrPqW|j|jjdS)Nzhttp://localhost:{p})pz{loc}?error=abort)loczAbort by visit %s)r abort_uriz*Open a browser on this device to visit: %sF)r/z_browse(...) unsuccessfulaFound no browser in current environment. If this program is being run inside a container which either (1) has access to host network (i.e. started by `docker run --net=host -it ...`), or (2) published port {port} to host network (i.e. started by `docker run -p 127.0.0.1:{port}:{port} -it ...`), you can use browser on host to visit the following link. Otherwise, this auth attempt would either timeout (current timeout setting is {timeout}) or be aborted by CTRL+C. Auth URI: {auth_uri})r rr z8Authentication completed. You can close this window now.z?Authentication failed. $error: $error_description. ($error_uri))r-rurFrGrrNrqrPinfor1 exceptionwarningrKrLrrOrIrrhandle_requestupdate)rQrr rrDr rKrLZauth_uri_callbackr/Z welcome_urirZ_urir0rrrrys>         z#AuthCodeReceiver._get_auth_responsecCsd|_|jjdS)zGEither call this eventually; or use the entire class as context managerTN)rrrq server_close)rQrrrcloseJszAuthCodeReceiver.closecCs|S)Nr)rQrrr __enter__OszAuthCodeReceiver.__enter__cCs |jdS)N)r)rQexc_typeexc_valexc_tbrrr__exit__RszAuthCodeReceiver.__exit__)NN)N)NNNNNNNN) r[r\r]rcrurryrrrrrrrr s # E 3r __main__r2)Client)levelz/The auth code received will be shown at stdout.)formatter_class descriptionz --endpointzThe auth endpoint for your app.z>https://login.microsoftonline.com/common/oauth2/v2.0/authorize)helpdefault client_idz!The client_id of your application)rz--portzThe port in redirect_uri)typerrz --timeout<zTimeout value, in secondz--hostz 127.0.0.1zThe host of redirect_uri)rrz--scopezThe scope listZauthorization_endpoint)r zhttp://{h}:{p})hr)scopeZ redirect_urir zASign In, or AbortOh no. $errorzOh yeah. Got $coderD)r r rLrKrrD)indent)N)N)C__doc__loggingrrlr`stringrrwr|Z http.serverrr urllib.parserrrhtmlr ImportErrorBaseHTTPServerurllibcgi getLoggerr[rFrr!r)r1r<r@rArBobjectr^rkr argparsejsonZoauth2r basicConfigINFOArgumentParserArgumentDefaultsHelpFormatterrparser add_argumentint parse_argsrYZendpointrclientr rZinitiate_auth_code_flowrrr-hostruZflowprintdumpsrrrrrrst     $3