File: //home/arjun/projects/env/lib/python3.10/site-packages/botocore/__pycache__/tokens.cpython-310.pyc
o
*we�* � @ s d dl Z d dlZd dlZd dlZd dlmZmZ d dlmZmZ d dl Z
d dl m Z d dl
mZ d dlmZ d dlmZ d dlmZmZmZ d d lmZmZmZ e�e �Z d
d � Z d d
� Z dd� Z dd� Z!G dd� de�Z"G dd� d�Z#G dd� d�Z$G dd� d�Z%dS )� N)�datetime� timedelta)�
NamedTuple�Optional)�tzutc)�UNSIGNED)�
total_seconds)�Config)� ClientError�InvalidConfigError�TokenRetrievalError)�CachedProperty�
JSONFileCache�SSOTokenLoaderc C s t �t� �S �N)r �nowr � r r �H/home/arjun/projects/env/lib/python3.10/site-packages/botocore/tokens.py�_utc_now$ s r c C s t | �g}t|d�S )N)� providers)�SSOTokenProvider�TokenProviderChain)�sessionr r r r �create_token_resolver( s �
r c C s t | t�r
| �d�S | S )Nz%Y-%m-%dT%H:%M:%SZ)�
isinstancer �strftime��objr r r �_serialize_utc_timestamp/ s
r c C s t j| td�S )N)�default)�json�dumpsr r r r r �_sso_json_dumps5 s r" c @ s& e Zd ZU eed< dZee ed< dS )�FrozenAuthToken�tokenN�
expiration)�__name__�
__module__� __qualname__�str�__annotations__r% r r r r r r r# 9 s
r# c @ sL e Zd ZdZdZdZefdd�Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dS )�DeferredRefreshableToken� iX �< c C s, || _ || _|| _t�� | _d | _d | _d S r )�
_time_fetcher�_refresh_using�method� threading�Lock�
_refresh_lock�
_frozen_token�
_next_refresh)�selfr0 �
refresh_using� time_fetcherr r r �__init__G s
z!DeferredRefreshableToken.__init__c C s | � � | jS r )�_refreshr4 �r6 r r r �get_frozen_tokenQ s z)DeferredRefreshableToken.get_frozen_tokenc C sN | � � }|sd S |dk}| j�|�r%z | �� W | j�� d S | j�� w d S )N� mandatory)�_should_refreshr3 �acquire�_protected_refresh�release)r6 � refresh_type�block_for_refreshr r r r: U s
�z!DeferredRefreshableToken._refreshc C s� | � � }|sd S z| �� }|t| jd� | _| �� | _W n ty2 tj d|dd� |dkr0� Y nw | �
� r>t | j dd��d S )N��secondsz5Refreshing token failed during the %s refresh period.T��exc_infor= z$Token has expired and refresh failed)�provider� error_msg)
r> r. r �_attempt_timeoutr5 r/ r4 � Exception�logger�warning� _is_expiredr r0 )r6 rB r r r r r@ c s. ���
��z+DeferredRefreshableToken._protected_refreshc C s. | j d u rdS | j j}t|| �� �}|dkS )NFr )r4 r% r r. )r6 r% � remainingr r r rN s
z$DeferredRefreshableToken._is_expiredc C sd | j d u rdS | j j}|d u rd S | �� }|| jk r d S t|| �}|| jk r)dS || jk r0dS d S )Nr= �advisory)r4 r% r. r5 r �_mandatory_refresh_timeout�_advisory_refresh_timeout)r6 r% r rO r r r r> � s
z(DeferredRefreshableToken._should_refreshN)
r& r' r( rR rQ rJ r r9 r< r: r@ rN r> r r r r r+ > s
r+ c @ s e Zd Zddd�Zdd� ZdS )r Nc C s |d u rg }|| _ d S r )�
_providers)r6 r r r r r9 � s
zTokenProviderChain.__init__c C s( | j D ]}|�� }|d ur| S qd S r )rS �
load_token)r6 rH r$ r r r rT � s
�z TokenProviderChain.load_tokenr )r& r' r( r9 rT r r r r r � s
r c @ s� e Zd ZdZdZej�ej�dddd��Z ddgZ
dZ e Z
d ed fd
d �Zd d
� Zedd� �Zedd� �Zdd� Zdd� Zdd� Zdd� Zd S )r �ssor, �~z.aws�cache�
sso_start_url�
sso_region�
refresh_tokenNc C sR || _ |d u r| j| jtd�}|| _|| _t| jd�| _|p%| j �d�p%d| _ d S )N)�
dumps_func)rW �profiler )
�_session�DEFAULT_CACHE_CLS�_SSO_TOKEN_CACHE_DIRr" �_now�_cacher �
_token_loader�get_config_variable�
_profile_name)r6 r rW r8 � profile_namer r r r9 � s �
��zSSOTokenProvider.__init__c
C s� | j j}|�di �}|�di �}|�| ji �}d|vr d S |d }|�|d �}|s8d| j� d|� d�}t|d��g }| jD ] } | |vrH|�| � q=|rZd| j� d|� d �}t|d��||d
|d d �S )
N�profiles� sso_sessions� sso_sessionz
The profile "z7" is configured to use the SSO token provider but the "z+" sso_session configuration does not exist.)rI zZ" is configured to use the SSO token provider but is missing the following configuration: �.rY rX )� session_namerY rX )r] � full_config�getrd r �_SSO_CONFIG_VARS�append)
r6 �
loaded_configrf rg �profile_config�sso_session_name�
sso_configrI �missing_configs�varr r r �_load_sso_config� s:
��
�
��
�z!SSOTokenProvider._load_sso_configc C s | � � S r )ru r; r r r � _sso_config� s z SSOTokenProvider._sso_configc C s" t | jd td�}| jjd|d�S )NrY )� region_name�signature_versionzsso-oidc)�config)r rv r r] �
create_client)r6 ry r r r �_client� s
�zSSOTokenProvider._clientc C s� | j j| j|d |d |d d�}t|d d�}| jd | jd |d | �� | |d |d |d
d �}d|v r>|d |d< t�d � |S )
N�clientId� clientSecret� refreshToken)� grantTyper| r} r~ � expiresInrD rX rY � accessToken�registrationExpiresAt)�startUrl�regionr� � expiresAtr| r} r� zSSO Token refresh succeeded)r{ � create_token� _GRANT_TYPEr rv r` rL �info)r6 r$ �response�
expires_in� new_tokenr r r �_attempt_create_token� s& �
�
z&SSOTokenProvider._attempt_create_tokenc s� d}� fdd�|D �}|rd|� �}t �|� d S tj�� d �}t|| �� �dkr5t �d|� �� d S z| �� �W S tyL t j dd d
� Y d S w ) N)r~ r| r} r� c s g | ]}|� vr|�qS r r )�.0�k�r$ r r �
<listcomp> s z:SSOTokenProvider._refresh_access_token.<locals>.<listcomp>z+Unable to refresh SSO token: missing keys: r� r z"SSO token registration expired at z SSO token refresh attempt failedTrF )
rL r� �dateutil�parser�parser r` r� r
rM )r6 r$ �keys� missing_keys�msg�expiryr r� r �_refresh_access_token s
�z&SSOTokenProvider._refresh_access_tokenc C s� | j d }| j d }t�d|� �� | j||d�}tj�|d �}t�d|� �� t|| � � �}|| j
k rN| � |�}|d urN|}|d }| jj |||d� t
|d |d�S ) NrX rj z Loading cached SSO token for )rj r� z Cached SSO token expires at r� )r% )rv rL r� rb r� r� r� �debugr r` �_REFRESH_WINDOWr� �
save_tokenr# )r6 � start_urlrj �
token_dictr% rO �new_token_dictr r r �
_refresher. s$
��zSSOTokenProvider._refresherc C s" | j d u rd S t| j| j| jd�S )N)r8 )rv r+ �METHODr� r` r; r r r rT D s
�zSSOTokenProvider.load_token)r& r' r( r� r� �os�path�
expanduser�joinr_ rm r� r r^ r r9 ru r
rv r{ r� r� r� rT r r r r r � s, ��
�'
r )&r �loggingr� r1 r r �typingr r �dateutil.parserr� � dateutil.tzr �botocorer �botocore.compatr �botocore.configr �botocore.exceptionsr
r r �botocore.utilsr
r r � getLoggerr& rL r r r r" r# r+ r r r r r r �<module> s,
a