
    l8'hB                    \   U d Z ddlmZ ddlZddlZddlZddlZddlmZm	Z	 ddl
mZmZmZmZmZmZmZmZ ddlmZ ddlmZ ddlmZ dd	lmZmZ dd
lmZmZmZm Z  ddl!m"Z"m#Z# ddl$m%Z% erddl&m'Z' ddl(m)Z) dZ*dZ+	 ddl,Z- e. e/e0e-jb                  je                  d      dd             dk\  rdZ+dZ4	 	 	 	 	 	 	 	 d/dZ5d0dZ6d1dZ7d2dZ8d3dZ9d3dZ:d3dZ;d3dZ<d3dZ=e9e<e;eee: ej|                  e5d       ej|                  e5d      e=d 	Z?d!e@d"<    G d# d$      ZA G d% d&eA      ZB G d' d(eA      ZC G d) d*eA      ZDeC ej|                  eBd       ej|                  eBd      eD ej|                  eBd      d+ZEd,e@d-<   	 d4	 	 	 	 	 	 	 d5d.ZFy# e3$ r 	 ddl-Z-n# e3$ r dZ*Y nw xY wY w xY w)6zAuthentication helpers.    )annotationsN)standard_b64decodestandard_b64encode)TYPE_CHECKINGAnyCallable	CoroutineMappingMutableMappingOptionalcast)quote)Binary)_authenticate_aws)_authenticate_oidc_get_authenticator)MongoCredential_authenticate_scram_start_parse_scram_response_xor)ConfigurationErrorOperationFailure)saslprep)AsyncConnection)HelloTF.   )r      c                  K   | j                   }|dk(  r7d}t        j                  }t        | j                        j                  d      }n7d}t        j                  }t        || j                        j                  d      }| j                  }| j                  }t        j                  }	|j                  }
|
rL|
j                         r<t        |
t              sJ |
j                   J |
j                   \  }}|
j"                  }n*t%        | |      \  }}}|j'                  ||       d{   }|J |d   }t)        |      }t+        |d         }|dk  rt-        d	      |d
   }|d   }|j/                  |      st-        d      d|z   }|j0                  r|j0                  \  }}}}nd\  }}}}|r
||k7  s||k7  r\t        j2                  ||t5        |      |      } |	|d|      j7                         } |	|d|      j7                         }||||f|_         ||      j7                         }dj9                  |||f      } |	|||      j7                         }dt;        t=        ||            z   }dj9                  ||f      }t;         |	|||      j7                               }d|d   t?        |      d}|j'                  ||       d{   }t)        |d         }t        j@                  |d   |      st-        d      |d   s=d|d   t?        d      d}|j'                  ||       d{   }|d   st-        d      yy7 7 |7 w)zAuthenticate using SCRAM.SCRAM-SHA-256sha256utf-8sha1Npayload   ii   z+Server returned an invalid iteration count.   s   rz!Server returned an invalid nonce.s	   c=biws,r=)NNNNs
   Client Keys
   Server Key   ,s   p=   conversationIdsaslContinuer*   r$      vz%Server returned an invalid signature.done    z%SASL conversation failed to complete.)!usernamehashlibr!   r   passwordencoder#   _password_digestsourcecachehmacHMACauth_ctxspeculate_succeeded
isinstance_ScramContext
scram_dataspeculative_authenticater   commandr   intr   
startswithdatapbkdf2_hmacr   digestjoinr   r   r   compare_digest) credentialsconn	mechanismr0   rD   	digestmodrB   r5   r6   _hmacctxnonce
first_barerescmdserver_firstparsed
iterationssaltrnoncewithout_proof
client_key
server_keycsaltciterationssalted_pass
stored_keyauth_msg
client_sigclient_proofclient_final
server_sigs                                    U/var/www/html/trade_iq/venv/lib/python3.12/site-packages/pymongo/asynchronous/auth.py_authenticate_scramrc   G   s\     ##HO#NN	,,-44W=LL	+*>*>?FFwOFE IIE
--C
s&&(#}---~~)))NNz**!:;	!Rz3LL--??y>L"<0FVD\"JDLMM$<DD\FU#BCC 6)Mzz5:ZZ2
J{5K2
J{ **C))&$8J48PR\];yAHHJ
;yAHHJ
 *dJ?
:&--/Jyy*lMBCHz8Y7>>@J-d:z.JKKL99m\:;L#E*h	$J$Q$Q$STJ ./,'C
 VS)
)C"3y>2Fvd|Z8FGG v;!"23c{

 LL--6{"#JKK  _ .N * .s8   D'M)M*F#MM
A"M0M1M
MMc                6   t        |t              st        d      t        |      dk(  rt	        d      t        | t              st        d      t        j                         }|  d| }|j                  |j                  d             |j                         S )z0Get a password digest to use for authentication.z#password must be an instance of strr   zpassword can't be emptyz#username must be an instance of strz:mongo:r"   )
r;   str	TypeErrorlen
ValueErrorr1   md5updater3   	hexdigest)r0   r2   md5hashrB   s       rb   r4   r4      s    h$=>>
8}233h$=>>kkmGZwxj)DNN4;;w'(r/   c                    t        ||      }t        j                         }|  | | }|j                  |j	                  d             |j                         S )z*Get an auth key to use for authentication.r"   )r4   r1   ri   rj   r3   rk   )rM   r0   r2   rD   rl   rB   s         rb   	_auth_keyrn      sO    h1FkkmGWXJvh'DNN4;;w'(r/   c                B   t        j                  | dddt         j                  t         j                        d   \  }}}}}	 t        j                  |t         j
                        }|d   j                         S # t         j                  $ r |j                         cY S w xY w)z2Canonicalize hostname following MIT-krb5 behavior.Nr   )socketgetaddrinfoIPPROTO_TCPAI_CANONNAMEgetnameinfoNI_NAMEREQDgaierrorlower)hostnameafsocktypeproto	canonnamesockaddrnames          rb   _canonicalize_hostnamer      s     06/A/A$1f00&2E2E00	,B%H!!!(F,>,>? 7==? ?? !  !s   $A8 8#BBc                  K   t         st        d      	 | j                  }| j                  }| j                  }|j
                  d   }|j                  rt        |      }|j                  dz   |z   }|j                  |dz   |j                  z   }|t        rOdj                  t        |      t        |      f      }t        j                  ||t        j                        \  }}	nrd|v r|j!                  dd      \  }
}n|d}}
t        j                  |t        j                  |
||      \  }}	n(t        j                  |t        j                        \  }}	|t        j"                  k7  rt%        d	      	 t        j&                  |	d
      dk7  rt%        d      t        j(                  |	      }dd|dd}|j+                  d|       d{   }t-        d      D ]  }t        j&                  |	t/        |d               }|dk(  rt%        d      t        j(                  |	      xs d
}d|d   |d}|j+                  d|       d{   }|t        j"                  k(  s n t%        d      t        j0                  |	t/        |d               dk7  rt%        d      t        j2                  |	t        j(                  |	      |      dk7  rt%        d      t        j(                  |	      }d|d   |d}|j+                  d|       d{    t        j4                  |	       y7 Y7 7 # t        j4                  |	       w xY w# t        j6                  $ r}t%        t/        |            dd}~ww xY ww)zAuthenticate using GSSAPI.zEThe "kerberos" module must be installed to use GSSAPI authentication.r   @N:)gssflagsr)   )r   userdomainr2   z&Kerberos context failed to initialize. z*Unknown kerberos failure in step function.GSSAPI	saslStartrI   r$   autoAuthorize	$external
   r$   r*   r+   z+Kerberos authentication failed to complete.z0Unknown kerberos failure during GSS_Unwrap step.z.Unknown kerberos failure during GSS_Wrap step.)HAVE_KERBEROSr   r0   r2   mechanism_propertiesaddresscanonicalize_host_namer   service_nameservice_realm_USE_PRINCIPALrE   r   kerberosauthGSSClientInitGSS_C_MUTUAL_FLAGsplitAUTH_GSS_COMPLETEr   authGSSClientStepauthGSSClientResponser?   rangere   authGSSClientUnwrapauthGSSClientWrapauthGSSClientCleanKrbError)rG   rH   r0   r2   propshostservice	principalresultrL   r   r   r$   rP   response_excs                    rb   _authenticate_gssapir      sa     S
 	
e3''''00 ||A'')$/D$$s*T1*me&9&99G  HHeHouX%GH	&88Y1K1K (?#+>>#q#9LD&#+T&D&88%77!% #44WxGaGabKFCX///"#KLL:	-
 ))#r2a7&'STT 44S9G%"!"	C "\\+s;;H 2Y V!33CXi=P9QRR<*+WXX"88=C %&&./?&@&
 "&k3!??X777V" ''TUU ++CXi5H1IJaO&'YZZ))#x/M/Mc/RT\]abb&'WXX44S9G !"*+;"<"C
 ,,{C000 '',O < @* 1 '', 3s3x(d23s   M6E!M 7AL, L%A;L, L(	L, !B)L, 
L*L, M $M6%L, (L, *L, ,MM M3M..M33M6c                   K   | j                   }| j                  }| j                  }d| d| j                         }ddt	        |      dd}|j                  ||       d{    y7 w)z(Authenticate using SASL PLAIN (RFC 4616) r)   PLAINr   N)r5   r0   r2   r3   r   r?   )rG   rH   r5   r0   r2   r$   rP   s          rb   _authenticate_plainr   2  so     F##H##HhZtH:.668G'?	C ,,vs
###s   A A*"A(#A*c                   K   |j                   }|r|j                         ryt        | |j                        j	                         }|j                  d|       d{    y7 w)z Authenticate using MONGODB-X509.Nr   )r9   r:   _X509Contextr   speculate_commandr?   )rG   rH   rL   rP   s       rb   _authenticate_x509r   A  sM     
--C
s&&(
{DLL
1
C
C
EC
,,{C
(((s   AA#A!A#c                   K   | j                   }| j                  }| j                  }|j                  |ddi       d{   }|d   }t	        |||      }d|||d}|j                  ||       d{    y7 87 w)zAuthenticate using MONGODB-CR.getnoncer)   NrM   )authenticater   rM   key)r5   r0   r2   r?   rn   )	rG   rH   r5   r0   r2   r   rM   r   querys	            rb   _authenticate_mongo_crr   L  s     F##H##H\\&:q/::HWE
E8X
.C 5ME
,,vu
%%% ; &s!   <A;A72A;1A92A;9A;c                  K   |j                   dk\  r|j                  r|j                  }n]| j                  }|j                         }|dz   | j                  z   |d<   |j                  ||d       d {   j                  dg       }d|v rt        | |d       d {   S t        | |d       d {   S t        | |d       d {   S 7 W7 07 7 
w)N   r   saslSupportedMechsF)publish_eventsr    SCRAM-SHA-1)max_wire_versionnegotiated_mechsr5   	hello_cmdr0   r?   getrc   )rG   rH   mechsr5   rP   s        rb   _authenticate_defaultr   [  s     !  ))E ''F.."C(.{7K7K(KC$%<<E<JJOO$bE e#,[$PPP,[$NNN(dMJJJ K QNJsH   A1C3C4(CCC1C2CCCCCCr   )rI   r    )	r   z
MONGODB-CRMONGODB-X509zMONGODB-AWSMONGODB-OIDCr   r   r    DEFAULTz6Mapping[str, Callable[..., Coroutine[Any, Any, None]]]	_AUTH_MAPc                  J    e Zd ZddZe	 	 	 	 	 	 dd       Zd	dZd
dZddZy)_AuthContextc                .    || _         d | _        || _        y N)rG   r>   r   )selfrG   r   s      rb   __init__z_AuthContext.__init__|  s    &EI%r/   c                t    t         j                  | j                        }|rt        t         || |            S y r   )_SPECULATIVE_AUTH_MAPr   rI   r   r   )credsr   spec_clss      rb   from_credentialsz_AuthContext.from_credentials  s2     ),,U__=hug&>??r/   c                    t         r   )NotImplementedErrorr   s    rb   r   z_AuthContext.speculate_command  s    !!r/   c                &    |j                   | _         y r   )r>   )r   hellos     rb   parse_responsez_AuthContext.parse_response  s    (-(F(F%r/   c                ,    t        | j                        S r   )boolr>   r   s    rb   r:   z _AuthContext.speculate_succeeded  s    D1122r/   N)rG   r   r   tuple[str, int]returnNone)r   r   r   r   r   zOptional[_AuthContext]r   z"Optional[MutableMapping[str, Any]])r   zHello[Mapping[str, Any]]r   r   )r   r   )	__name__
__module____qualname__r   staticmethodr   r   r   r:    r/   rb   r   r   {  sC    
 )8	 "G3r/   r   c                  8     e Zd Z	 	 	 	 	 	 	 	 d fdZddZ xZS )r<   c                B    t         |   ||       d | _        || _        y r   )superr   r=   rI   )r   rG   r   rI   	__class__s       rb   r   z_ScramContext.__init__  s"     	g.9="r/   c                    t        | j                  | j                        \  }}}| j                  j                  |d<   ||f| _        |S Ndb)r   rG   rI   r5   r=   )r   rM   rN   rP   s       rb   r   z_ScramContext.speculate_command  sE    !:4;K;KT^^!\z3$$++D	 *-
r/   )rG   r   r   r   rI   re   r   r   r   )r   r   r   r   r   __classcell__)r   s   @rb   r<   r<     s-    #*#5D#QT#	#r/   r<   c                      e Zd ZddZy)r   c                n    ddd}| j                   j                  | j                   j                  |d<   |S )Nr)   r   )r   rI   r   )rG   r0   )r   rP   s     rb   r   z_X509Context.speculate_command  s8     ~>$$0**33CK
r/   N)r   zMutableMapping[str, Any]r   r   r   r   r   r/   rb   r   r     s    r/   r   c                      e Zd ZddZy)_OIDCContextc                    t        | j                  | j                        }|j                         }|y | j                  j                  |d<   |S r   )r   rG   r   get_spec_auth_cmdr5   )r   authenticatorrP   s      rb   r   z_OIDCContext.speculate_command  sH    *4+;+;T\\J--/;$$++D	
r/   Nr   r   r   r/   rb   r   r     s    r/   r   )r   r   r    r   r   zMapping[str, Any]r   c                   K   | j                   }t        |   }|dk(  rt        | ||       d{    y || |       d{    y7 7 w)zAuthenticate connection.r   N)rI   r   r   )rG   rH   reauthenticaterI   	auth_funcs        rb   r   r     sQ      %%I)$IN" dNCCCT*** 	D*s    +A	AA	A A	A	)rG   r   rH   r   rI   re   r   r   )r0   re   r2   re   r   re   )rM   re   r0   re   r2   re   r   re   )rx   re   r   re   )rG   r   rH   r   r   r   )F)rG   r   rH   r   r   r   r   r   )G__doc__
__future__r   	functoolsr1   r7   rp   base64r   r   typingr   r   r   r	   r
   r   r   r   urllib.parser   bson.binaryr   pymongo.asynchronous.auth_awsr   pymongo.asynchronous.auth_oidcr   r   pymongo.auth_sharedr   r   r   r   pymongo.errorsr   r   pymongo.saslprepr   pymongo.asynchronous.poolr   pymongo.hellor   r   r   winkerberosr   tuplemapr@   __version__r   ImportError_IS_SYNCrc   r4   rn   r   r   r   r   r   r   partialr   __annotations__r   r<   r   r   r   r   r   r/   rb   <module>r     s    "     9	 	 	   ;  @ %9#	"Sh**005bq9:;vE RL RL(7RLDGRL	RLjl3^$)&K( #(&$& $9$$%8MR&Y&&':oV$
E	A 
3 32L "< <  !$9$$]mL&Y&&}P  y  /J, (  QV	+ 	+(7	+IM	+		+G   s6   =4F F+FF+F%"F+$F%%F+*F+