o

�
b7�@s�dd
lm
Z
mZmZ
ddlmZ
ddlmZmZm	Z	
dZ
dZdZdZ
e	�d�
Ze	�d	�
Zd
d�ZGdd
�d
ej�ZGdd�d�ZGdd�dej�ZGdd�d�ZGdd�dej�ZGdd�dej�Zddd�
ZGdd�dej�ZdS)�)�error�sasl�	xmlstream)
�JID)�domish�utility�xpathz#urn:ietf:params:xml:ns:xmpp-streamsz urn:ietf:params:xml:ns:xmpp-bindz#urn:ietf:params:xml:ns:xmpp-sessionz"http://jabber.org/features/iq-authz/iq/query/digestz/iq/query/passwordcCst||
�}t
�|�
S�
N)�BasicAuthenticatorr�XmlStreamFactory)�jid�secret�
a�r�G/usr/lib/python3/dist-packages/twisted/words/protocols/jabber/client.py�basicClientFactorys



rc@s4eZ
dZd
Zddd�
Zdd�Zd
dd	�
Zd
d�ZdS)�IQa�

    Wrapper for a Info/Query packet.

    This provides the necessary functionality to send IQs and get notified when
    a result comes back. It's a subclass from L{domish.Element}, so you can use
    the standard DOM manipulation calls to add data to the outbound request.

    @type callbacks: L{utility.CallbackList}
    @cvar callbacks: Callback list to be notified when response comes back

    �setcCs2tj
�|d
�
|��
||d<|
|_t��|_dS)z�
        @type xmlstream: L{xmlstream.XmlStream}
        @param xmlstream: XmlStream to use for transmission of this IQ

        @type type: C{str}
        @param type: IQ type identifier ('get' or 'set')
        )�
jabber:client�iq�typeN)r�Element�__init__�addUniqueId�
_xmlstreamr�CallbackList�	callbacks)�selfrrrrrr&s
	



zIQ.__init__cOs |jj
d
|
g|�
Ri|�
�

dS)zW
        Register a callback for notification when the IQ result is available.
        TN)r�addCallback)r�fn�args�kwargsrrrr5s zIQ.addCallbackNcCs8|
d
kr|
|d<|j�
d|d|j�
|j�|�

d
S)a?

        Call this method to send this IQ request via the associated XmlStream.

        @param to: Jabber ID of the entity to send the request to
        @type to: C{str}

        @returns: Callback list for this IQ. Any callbacks added to this list
                  will be fired when the result comes back.
        N�toz
/iq[@id='%s']�id)r�addOnetimeObserver�_resultEvent�send)rr"rrrr&<s



�zIQ.sendcCs|j�
|
�

d|_dSr	)r�callback�rrrrrr%Ms


zIQ._resultEvent)
rr	)�__name__�
__module__�__qualname__�__doc__rrr&r%rrrrrs


rc@sHeZ
dZd
ZdZdZdd�Zdd�Zdd	�Zd
d�Z	dd
�Z
dd�ZdS)�IQAuthInitializera
    Non-SASL Authentication initializer for the initiating entity.

    This protocol is defined in
    U{JEP-0078<http://www.jabber.org/jeps/jep-0078.html>} and mainly serves for
    compatibility with pre-XMPP-1.0 server implementations.

    @cvar INVALID_USER_EVENT: Token to signal that authentication failed, due
        to invalid username.
    @type INVALID_USER_EVENT: L{str}

    @cvar AUTH_FAILED_EVENT: Token to signal that authentication failed, due to
        invalid password.
    @type AUTH_FAILED_EVENT: L{str}
    z$//event/client/basicauth/invaliduserz#//event/client/basicauth/authfailedcC�
|
|_dSr	�
r�r�xsrrrrf�

zIQAuthInitializer.__init__c
CsPt�
|jd
�}
|
�d�

|jjj}|
jjd|jd�
|
��}|�|j	|j
�
|S)N�get�zjabber:iq:auth�query�username�
�content)rr�
addElement�
authenticatorrr5�userr&�addCallbacks�_cbAuthQuery�_ebAuthQuery)rrr�
drrr�
initializeis






zIQAuthInitializer.initializecCs�|jj
j}|jj
j}t�|jd
�}|�d�

|jjd|jd�
|jjd|jd�
t	�
|
�
r@t�|jj|�}|jjdt
|�
d�
n|jjd|d�
|��}|�|j|j�
|S)Nrr4r6r7�resource�digest�password)rr:rrCrr9r5r;rA�
DigestAuthQry�matches�hashPassword�sid�strr&r<�_cbAuth�_ebAuth)rrrrC�replyrBr?rrrr=ts












zIQAuthInitializer._cbAuthQuerycCsH|
�t
j�

|
j}|jd
kr|j�|j|j�
|
S|j�|j|j	�
|
S)Nznot-authorized)
�trapr�StanzaError�value�	conditionr�dispatch�stanza�INVALID_USER_EVENT�AUTH_FAILED_EVENT)r�failure�
errrr>�s




�zIQAuthInitializer._ebAuthQueryc
CsdSr	rr(rrrrI�s
zIQAuthInitializer._cbAuthcCs$|
�t
j�

|j�|
jj|j�
|
Sr	)rLrrMrrPrNrQrS)rrTrrrrJ�s


zIQAuthInitializer._ebAuthN)r)r*r+r,rRrSrr@r=r>rIrJrrrrr-Rs


r-c@sFeZ
dZd
ZdZejZejZdZdd�Z	dd�Z
d
d	d
�
Zdd�ZdS)r
aO
    Authenticates an XmlStream against a Jabber server as a Client.

    This only implements non-SASL authentication, per
    U{JEP-0078<http://www.jabber.org/jeps/jep-0078.html>}. Additionally, this
    authenticator provides the ability to perform inline registration, per
    U{JEP-0077<http://www.jabber.org/jeps/jep-0077.html>}.

    Under normal circumstances, the BasicAuthenticator generates the
    L{xmlstream.STREAM_AUTHD_EVENT} once the stream has authenticated. However,
    it can also generate other events, such as:
      - L{INVALID_USER_EVENT} : Authentication failed, due to invalid username
      - L{AUTH_FAILED_EVENT} : Authentication failed, due to invalid password
      - L{REGISTER_FAILED_EVENT} : Registration failed

    If authentication fails for any reason, you can attempt to register by
    calling the L{registerAccount} method. If the registration succeeds, a
    L{xmlstream.STREAM_AUTHD_EVENT} will be fired. Otherwise, one of the above
    errors will be generated (again).


    @cvar INVALID_USER_EVENT: See L{IQAuthInitializer.INVALID_USER_EVENT}.
    @type INVALID_USER_EVENT: L{str}

    @cvar AUTH_FAILED_EVENT: See L{IQAuthInitializer.AUTH_FAILED_EVENT}.
    @type AUTH_FAILED_EVENT: L{str}

    @cvar REGISTER_FAILED_EVENT: Token to signal that registration failed.
    @type REGISTER_FAILED_EVENT: L{str}

    rz'//event/client/basicauth/registerfailedcCs tj
�||
j�
|
|_||_dSr	)r�ConnectAuthenticatorr�hostrrC)rrrCrrrr�s



zBasicAuthenticator.__init__cCs0d
|
_t
j�||
�
t
j|
dd�t|
�
g|
_dS)N)r
r
F�
�required)�versionrrV�associateWithStream�TLSInitiatingInitializerr-�initializersr0rrrr[�s




�z&BasicAuthenticator.associateWithStreamNcCsj|
r|
|j_
|r||_t|jd
�}|�d�

|jjd|jj
d�
|jjd|jd�
|�|j�

|�	�
dS)Nr)zjabber:iq:registerr5r6r7rC)
rr;rCrrr9r5r�_registerResultEventr&)rr6rCrrrr�registerAccount�s







z"BasicAuthenticator.registerAccountcCs,|
d
dkr|��
dS|j
�|
|j�
dS)Nr�result)�
streamStartedrrP�REGISTER_FAILED_EVENTr(rrrr^�s
z'BasicAuthenticator._registerResultEvent)NN)
r)r*r+r,�	namespacer-rRrSrbrr[r_r^rrrrr
�s
 


r
c@s eZ
dZd
Zdd�Zdd�ZdS)�CheckVersionInitializerzU
    Initializer that checks if the minimum common stream version number is 1.0.
    cCr.r	r/r0rrrr�r2z CheckVersionInitializer.__init__c

Cs|jj
d
krt�d�
�
dS)N)�
r
zunsupported-version)rrZr�StreamError)
rrrrr@�s


�z"CheckVersionInitializer.initializeN)r)r*r+r,rr@rrrrrd�s
rdc@s(eZ
dZd
ZedfZdd�Zdd�ZdS)�BindInitializerz�
    Initializer that implements Resource Binding for the initiating entity.

    This protocol is documented in U{RFC 3920, section
    7<http://www.xmpp.org/specs/rfc3920.html#bind>}.
    �bindc
CsRt�
|jd
�}
|
�tdf�
}|jjjj}|r|jd|d�
|
��}|�|j	�

|S)NrrhrAr7)
rrr9�NS_XMPP_BINDr:rrAr&r�onBind)rrrhrAr?rrr�start
s







zBindInitializer.startcCs$|
jrt
t|
jj�
�
|jj_dSdSr	)rhrrHrrr:r(rrrrj
s

�zBindInitializer.onBindN)r)r*r+r,ri�featurerkrjrrrrrg�s


rgc@s eZ
dZd
ZedfZdd�ZdS)�SessionInitializerz�
    Initializer that implements session establishment for the initiating
    entity.

    This protocol is defined in U{RFC 3921, section
    3<http://www.xmpp.org/specs/rfc3921.html#session>}.
    �sessionc
Cs$t�
|jd
�}
|
�tdf�

|
��S)Nrrn)rrr9�NS_XMPP_SESSIONr&r(rrrrk
s


zSessionInitializer.startN)r)r*r+r,rorlrkrrrrrm
s
rmNcCst||
|d
�}t
�|�
S)a
    Client factory for XMPP 1.0 (only).

    This returns a L{xmlstream.XmlStreamFactory} with an L{XMPPAuthenticator}
    object to perform the stream initialization steps (such as authentication).

    @see: The notes at L{XMPPAuthenticator} describe how the C{jid} and
    C{password} parameters are to be used.

    @param jid: Jabber ID to connect with.
    @type jid: L{jid.JID}

    @param password: password to authenticate with.
    @type password: L{unicode}

    @param configurationForTLS: An object which creates appropriately
        configured TLS connections. This is passed to C{startTLS} on the
        transport and is preferably created using
        L{twisted.internet.ssl.optionsForClientTLS}. If L{None}, the default is
        to verify the server certificate against the trust roots as provided by
        the platform. See L{twisted.internet._sslverify.platformTrust}.
    @type configurationForTLS: L{IOpenSSLClientConnectionCreator} or L{None}

    @return: XML stream factory.
    @rtype: L{xmlstream.XmlStreamFactory}
    )
�configurationForTLS)�XMPPAuthenticatorrr)rrCrprrrr�XMPPClientFactory"
s

rrc@s&eZ
dZd
ZdZddd�
Zdd�ZdS)	rqa�
    Initializes an XmlStream connecting to an XMPP server as a Client.

    This authenticator performs the initialization steps needed to start
    exchanging XML stanzas with an XMPP server as an XMPP client. It checks if
    the server advertises XML stream version 1.0, negotiates TLS (when
    available), performs SASL authentication, binds a resource and establishes
    a session.

    Upon successful stream initialization, the L{xmlstream.STREAM_AUTHD_EVENT}
    event will be dispatched through the XML stream object. Otherwise, the
    L{xmlstream.INIT_FAILED_EVENT} event will be dispatched with a failure
    object.

    After inspection of the failure, initialization can then be restarted by
    calling L{ConnectAuthenticator.initializeStream}. For example, in case of
    authentication failure, a user may be given the opportunity to input the
    correct password.  By setting the L{password} instance variable and restarting
    initialization, the stream authentication step is then retried, and subsequent
    steps are performed if successful.

    @ivar jid: Jabber ID to authenticate with. This may contain a resource
               part, as a suggestion to the server for resource binding. A
               server may override this, though. If the resource part is left
               off, the server will generate a unique resource identifier.
               The server will always return the full Jabber ID in the
               resource binding step, and this is stored in this instance
               variable.
    @type jid: L{jid.JID}

    @ivar password: password to be used during SASL authentication.
    @type password: L{unicode}
    rNcCs&tj
�||
j�
|
|_||_||_d
S)a3
        @param configurationForTLS: An object which creates appropriately
            configured TLS connections. This is passed to C{startTLS} on the
            transport and is preferably created using
            L{twisted.internet.ssl.optionsForClientTLS}. If C{None}, the
            default is to verify the server certificate against the trust roots
            as provided by the platform. See
            L{twisted.internet._sslverify.platformTrust}.
        @type configurationForTLS: L{IOpenSSLClientConnectionCreator} or
            C{None}
        N)rrVrrWrrC�_configurationForTLS)rrrCrprrrrf
s



zXMPPAuthenticator.__init__cCsNtj
�||
�
t|
�
tj|
d
|jd�tj|
d
d�t|
d
d�t	|
dd�g|
_
dS)z�
        Register with the XML stream.

        Populates stream's list of initializers, along with their
        requiredness. This list is used by
        L{ConnectAuthenticator.initializeStream} to perform the initialization
        steps.
        T)rYrprXFN)rrVr[rdr\rsr�SASLInitiatingInitializerrgrmr]r0rrrr[w
s	

�




�z%XMPPAuthenticator.associateWithStreamr	)r)r*r+r,rcrr[rrrrrqA
s

"
rqr	)�twisted.words.protocols.jabberrrr�"twisted.words.protocols.jabber.jidr�twisted.words.xishrrr�NS_XMPP_STREAMSriro�NS_IQ_AUTH_FEATURE�internQueryrD�PlaintextAuthQryrrrr-rVr
rd� BaseFeatureInitiatingInitializerrgrmrrrqrrrr�<module>
s$







9JO