ruạṛ
a �u:j � @ s� d dl mZmZmZmZmZ d dlmZ d dlm Z d dlm Z d dl mZ d dlmZ d dlmZ d dlmZ d d lmZmZ G d d � d �ZG d d � d e�ZG dd� de�Z G dd� de �ZG dd� de �ZG dd� d�Z dS )� )�Any�Dict�List�Optional�Union)� HTTPException)�OAuth2)� OAuthFlows)�Form)� SecurityBase)� get_authorization_scheme_param)�Request)�HTTP_401_UNAUTHORIZED�HTTP_403_FORBIDDENc @ s\ e Zd ZdZeddd�e� e� edd�edd�edd�feeeeee ee d�dd �ZdS ) �OAuth2PasswordRequestForma� This is a dependency class, use it like: @app.post("/login") def login(form_data: OAuth2PasswordRequestForm = Depends()): data = form_data.parse() print(data.username) print(data.password) for scope in data.scopes: print(scope) if data.client_id: print(data.client_id) if data.client_secret: print(data.client_secret) return data It creates the following Form request parameters in your endpoint: grant_type: the OAuth2 spec says it is required and MUST be the fixed string "password". Nevertheless, this dependency class is permissive and allows not passing it. If you want to enforce it, use instead the OAuth2PasswordRequestFormStrict dependency. username: username string. The OAuth2 spec requires the exact field name "username". password: password string. The OAuth2 spec requires the exact field name "password". scope: Optional string. Several scopes (each one a string) separated by spaces. E.g. "items:read items:write users:read profile openid" client_id: optional string. OAuth2 recommends sending the client_id and client_secret (if any) using HTTP Basic auth, as: client_id:client_secret client_secret: optional string. OAuth2 recommends sending the client_id and client_secret (if any) using HTTP Basic auth, as: client_id:client_secret N�password)�default�regex� �r �� grant_type�usernamer �scope� client_id� client_secretc C s, || _ || _|| _|�� | _|| _|| _d S )N)r r r �split�scopesr r ��selfr r r r r r � r �J/opt/bart/bart_venv/lib/python3.9/site-packages/fastapi/security/oauth2.py�__init__. s z"OAuth2PasswordRequestForm.__init__)�__name__� __module__� __qualname__�__doc__r �strr r" r r r r! r s " ��r c sb e Zd ZdZedd�e� e� edd�edd�edd�feeeeee ee d�� fdd � Z� ZS ) � OAuth2PasswordRequestFormStricta� This is a dependency class, use it like: @app.post("/login") def login(form_data: OAuth2PasswordRequestFormStrict = Depends()): data = form_data.parse() print(data.username) print(data.password) for scope in data.scopes: print(scope) if data.client_id: print(data.client_id) if data.client_secret: print(data.client_secret) return data It creates the following Form request parameters in your endpoint: grant_type: the OAuth2 spec says it is required and MUST be the fixed string "password". This dependency is strict about it. If you want to be permissive, use instead the OAuth2PasswordRequestForm dependency class. username: username string. The OAuth2 spec requires the exact field name "username". password: password string. The OAuth2 spec requires the exact field name "password". scope: Optional string. Several scopes (each one a string) separated by spaces. E.g. "items:read items:write users:read profile openid" client_id: optional string. OAuth2 recommends sending the client_id and client_secret (if any) using HTTP Basic auth, as: client_id:client_secret client_secret: optional string. OAuth2 recommends sending the client_id and client_secret (if any) using HTTP Basic auth, as: client_id:client_secret r )r r r Nr c s t � j||||||d� d S )Nr )�superr" r �� __class__r r! r" ` s �z(OAuth2PasswordRequestFormStrict.__init__) r# r$ r% r& r r' r r" � __classcell__r r r* r! r( ? s "��r( c @ sb e Zd Ze� dddd�eeeeeeef f f ee ee e d�dd�Z e ee d�dd�Z dS ) r NT��flows� scheme_name� description� auto_errorc C s& t ||d�| _|p| jj| _|| _d S )N)r. r0 )� OAuth2Model�modelr+ r# r/ r1 )r r. r/ r0 r1 r r r! r" t s zOAuth2.__init__��request�returnc � s, |j �d�}|s(| jr$ttdd��nd S |S )N� Authorization�Not authenticated)� status_code�detail)�headers�getr1 r r )r r5 � authorizationr r r! �__call__� s �zOAuth2.__call__) r# r$ r% �OAuthFlowsModelr r r' r r �boolr" r r> r r r r! r s s �� r c sT e Zd Zd eee eeeef ee ed�� fdd� Zeee d�dd�Z � Z S ) �OAuth2PasswordBearerNT)�tokenUrlr/ r r0 r1 c s0 |si }t ||d�d�}t� j||||d� d S )N)rB r )r r- �r? r) r" )r rB r/ r r0 r1 r. r* r r! r" � s �z OAuth2PasswordBearer.__init__r4 c � sJ |j �d�}t|�\}}|r(|�� dkrF| jrBttdddid��nd S |S �Nr7 Zbearerr8 zWWW-AuthenticateZBearer)r9 r: r; �r; r< r �lowerr1 r r �r r5 r= �scheme�paramr r r! r> � s �z OAuth2PasswordBearer.__call__)NNNT� r# r$ r% r' r r r@ r" r r> r, r r r* r! rA � s ��rA c s\ e Zd Zd eeee ee eeeef ee ed�� fdd� Zeee d�dd�Z � Z S ) � OAuth2AuthorizationCodeBearerNT)�authorizationUrlrB � refreshUrlr/ r r0 r1 c s4 |si }t ||||d�d�}t� j||||d� d S )N)rL rB rM r )ZauthorizationCoder- rC ) r rL rB rM r/ r r0 r1 r. r* r r! r" � s ���z&OAuth2AuthorizationCodeBearer.__init__r4 c � sJ |j �d�}t|�\}}|r(|�� dkrF| jrBttdddid��nd S |S rD rE rG r r r! r> � s �z&OAuth2AuthorizationCodeBearer.__call__)NNNNTrJ r r r* r! rK � s ��rK c @ s$ e Zd Zdeee d�dd�ZdS )�SecurityScopesN)r c C s |pg | _ d�| j �| _d S )N� )r �joinZ scope_str)r r r r r! r" � s zSecurityScopes.__init__)N)r# r$ r% r r r' r" r r r r! rN � s rN N) �typingr r r r r Zfastapi.exceptionsr Zfastapi.openapi.modelsr r2 r r? Zfastapi.param_functionsr Zfastapi.security.baser Zfastapi.security.utilsr Zstarlette.requestsr Zstarlette.statusr r r r( rA rK rN r r r r! �<module> s 24"+
cải xoăn