ruạṛ
a ���ftC � @ s� d dl mZ d dlmZ d dlmZ d dlmZmZ d dlm Z d dl m Z m Z d dl mZ d dlmZmZmZ d d lmZ d d lmZ d d lmZ ed �ZG dd� de�ZdS )� )�absolute_import)�requests)�six)�retry�circuit_breaker)� BaseClient)�get_config_value_or_default�validate_config)�Signer)�Sentinel�#get_signer_from_authentication_type� AUTHENTICATION_TYPE_FIELD_NAME)�InvalidAlloyConfig)� OCI_SDK_ENABLED_SERVICES_SET� )� identity_data_plane_type_mappingZMissingc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �DataplaneClientaj APIs for managing identity data plane services. For example, use this API to create a scoped-access security token. To manage identity domains (for example, creating or deleting an identity domain) or to manage resources (for example, users and groups) within the default identity domain, see [IAM API](https://docs.oracle.com/iaas/api/#/en/identity/). c K s& t �d�std��t||�d�d� d|v r6|d }nDt|v rHt|�}n2t|d |d |d |�d�t|d �|�d �d �}d |�d �ddi |�dd�|�dt j �|�d�d�}d|v r�|�d�|d< |�d�du r�t j |d< d|v r�|�d�|d< t d||t fi |��| _|�d�| _|�d�| _dS )a� Creates a new service client :param dict config: Configuration keys and values as per `SDK and Tool Configuration <https://docs.cloud.oracle.com/Content/API/Concepts/sdkconfig.htm>`__. The :py:meth:`~oci.config.from_file` method can be used to load configuration from a file. Alternatively, a ``dict`` can be passed. You can validate_config the dict using :py:meth:`~oci.config.validate_config` :param str service_endpoint: (optional) The endpoint of the service to call using this client. For example ``https://iaas.us-ashburn-1.oraclecloud.com``. If this keyword argument is not provided then it will be derived using the region in the config parameter. You should only provide this keyword argument if you have an explicit need to specify a service endpoint. :param timeout: (optional) The connection and read timeouts for the client. The default values are connection timeout 10 seconds and read timeout 60 seconds. This keyword argument can be provided as a single float, in which case the value provided is used for both the read and connection timeouts, or as a tuple of two floats. If a tuple is provided then the first value is used as the connection timeout and the second value as the read timeout. :type timeout: float or tuple(float, float) :param signer: (optional) The signer to use when signing requests made by the service client. The default is to use a :py:class:`~oci.signer.Signer` based on the values provided in the config parameter. One use case for this parameter is for `Instance Principals authentication <https://docs.cloud.oracle.com/Content/Identity/Tasks/callingservicesfrominstances.htm>`__ by passing an instance of :py:class:`~oci.auth.signers.InstancePrincipalsSecurityTokenSigner` as the value for this keyword argument :type signer: :py:class:`~oci.signer.AbstractBaseSigner` :param obj retry_strategy: (optional) A retry strategy to apply to all calls made by this service client (i.e. at the client level). There is no retry strategy applied by default. Retry strategies can also be applied at the operation level by passing a ``retry_strategy`` keyword argument as part of calling the operation. Any value provided at the operation level will override whatever is specified at the client level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. A convenience :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` is also available. The specifics of the default retry strategy are described `here <https://docs.oracle.com/en-us/iaas/tools/python/latest/sdk_behaviors/retries.html>`__. :param obj circuit_breaker_strategy: (optional) A circuit breaker strategy to apply to all calls made by this service client (i.e. at the client level). This client uses :py:data:`~oci.circuit_breaker.DEFAULT_CIRCUIT_BREAKER_STRATEGY` as default if no circuit breaker strategy is provided. The specifics of circuit breaker strategy are described `here <https://docs.oracle.com/en-us/iaas/tools/python/latest/sdk_behaviors/circuit_breakers.html>`__. :param function circuit_breaker_callback: (optional) Callback function to receive any exceptions triggerred by the circuit breaker. :param bool client_level_realm_specific_endpoint_template_enabled: (optional) A boolean flag to indicate whether or not this client should be created with realm specific endpoint template enabled or disable. By default, this will be set as None. :param allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this client should allow control characters in the response object. By default, the client will not allow control characters to be in the response object. Zidentity_data_planea The Alloy configuration has disabled this service, this behavior is controlled by OCI_SDK_ENABLED_SERVICES_SET variable. Please check if your local alloy-config file configured the service you're targeting or contact the cloud provider on the availability of this service�signer)r �tenancy�user� fingerprintZkey_file� pass_phraseZ key_content)r r r Zprivate_key_file_locationr Zprivate_key_contentT�service_endpointz/v1z)https://auth.{region}.{secondLevelDomain}�skip_deserializationF�circuit_breaker_strategy�5client_level_realm_specific_endpoint_template_enabled)Zregional_clientr � base_pathZservice_endpoint_templateZ#service_endpoint_template_per_realmr r r �timeoutN�allow_control_charsZ dataplane�retry_strategy�circuit_breaker_callback)r Zis_service_enabledr r �getr r r r r Z GLOBAL_CIRCUIT_BREAKER_STRATEGYZ DEFAULT_CIRCUIT_BREAKER_STRATEGYr r � base_clientr r )�selfZconfig�kwargsr Zbase_client_init_kwargs� r% �L/usr/lib/python3.9/site-packages/oci/identity_data_plane/dataplane_client.py�__init__ sB 3 � � zDataplaneClient.__init__c s� g }d}d}d}d}dg� � fdd�t �|�D �}|rDtd|����d d d �} | jj|�d�| jd �} | r�t| tj �s�| j� | � | � | j � | j | jj||| |d |�d �|||d� S | jj||| |d |�d �|||d� S dS )aE Based on the calling Principal and the input payload, derive the claims, and generate a scoped-access token for specific resources. For example, set scope to urn:oracle:db::id::<compartment-id> for access to a database in a compartment. :param oci.identity_data_plane.models.GenerateScopedAccessTokenDetails generate_scoped_access_token_details: (required) Scoped access token request :param obj retry_strategy: (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. This operation will not retry by default, users can also use the convenient :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` provided by the SDK to enable retries for it. The specifics of the default retry strategy are described `here <https://docs.oracle.com/en-us/iaas/tools/python/latest/sdk_behaviors/retries.html>`__. To have this operation explicitly not perform any retries, pass an instance of :py:class:`~oci.retry.NoneRetryStrategy`. :param bool allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this request should allow control characters in the response object. By default, the response will not allow control characters in strings :return: A :class:`~oci.response.Response` object with data of type :class:`~oci.identity_data_plane.models.SecurityToken` :rtype: :class:`~oci.response.Response` :example: Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/latest/identitydataplane/generate_scoped_access_token.py.html>`__ to see an example of how to use generate_scoped_access_token API. z"/actions/generateScopedAccessToken�POST� generate_scoped_access_tokenz\https://docs.oracle.com/iaas/api/#/en/identity-dp/v1/SecurityToken/GenerateScopedAccessTokenr c s g | ]}|� vr|�qS r% r% ��.0Z_key�Zexpected_kwargsr% r& � <listcomp>� � z@DataplaneClient.generate_scoped_access_token.<locals>.<listcomp>z1generate_scoped_access_token got unknown kwargs: �application/json)�accept� content-type�Zoperation_retry_strategyZclient_retry_strategy� SecurityTokenr � � resource_path�method� header_params�bodyZ response_typer �operation_name�api_reference_link�required_argumentsN)r �iterkeys� ValueErrorr" � get_preferred_retry_strategyr! r � isinstancer �NoneRetryStrategy� add_opc_client_retries_header� add_circuit_breaker_callbackr �make_retrying_call�call_api) r# Z$generate_scoped_access_token_detailsr$ r; r5 r6 r9 r: � extra_kwargsr7 r r% r, r& r) w sZ ��� � �z,DataplaneClient.generate_scoped_access_tokenc s� g }d}d}d}d}g d�� � fdd�t �|�D �}|rFtd|����d d |�d t�d �} d d � t �| �D �} | jj|�d�| jd�} | r�t | t j �s�| j� | � | � | j� | j| jj||| |d|�d�|||d� S | jj||| |d|�d�|||d� S dS )a� Exchanges a valid user token-based signature (API key and UPST) for a short-lived UPST of the authenticated user principal. When not specified, the user session duration is set to a default of 60 minutes in all realms. Resulting UPSTs are refreshable while the user session has not expired. :param oci.identity_data_plane.models.GenerateUserSecurityTokenDetails generate_user_security_token_details: (required) The key-value pair object storing the token exchange request parameters required to obtain a UPST for self. :param str opc_request_id: (optional) Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. :param obj retry_strategy: (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. This operation will not retry by default, users can also use the convenient :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` provided by the SDK to enable retries for it. The specifics of the default retry strategy are described `here <https://docs.oracle.com/en-us/iaas/tools/python/latest/sdk_behaviors/retries.html>`__. To have this operation explicitly not perform any retries, pass an instance of :py:class:`~oci.retry.NoneRetryStrategy`. :param bool allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this request should allow control characters in the response object. By default, the response will not allow control characters in strings :return: A :class:`~oci.response.Response` object with data of type :class:`~oci.identity_data_plane.models.SecurityToken` :rtype: :class:`~oci.response.Response` :example: Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/latest/identitydataplane/generate_user_security_token.py.html>`__ to see an example of how to use generate_user_security_token API. z /token/upst/actions/GenerateUpstr( � generate_user_security_tokenz\https://docs.oracle.com/iaas/api/#/en/identity-dp/v1/SecurityToken/GenerateUserSecurityToken)r r �opc_request_idc s g | ]}|� vr|�qS r% r% r* r, r% r& r- � r. z@DataplaneClient.generate_user_security_token.<locals>.<listcomp>z1generate_user_security_token got unknown kwargs: r/ rG )r0 r1 zopc-request-idc S s& i | ] \}}|t ur|d ur||�qS )N)�missing)r+ �k�vr% r% r& � <dictcomp>� r. z@DataplaneClient.generate_user_security_token.<locals>.<dictcomp>r r2 r3 r r4 N)r r< r= r! rH Z iteritemsr" r> r r? r r@ rA rB r rC rD ) r# Z$generate_user_security_token_detailsr$ r; r5 r6 r9 r: rE r7 r r% r, r& rF � s^ !� �� � �z,DataplaneClient.generate_user_security_tokenN)�__name__� __module__� __qualname__�__doc__r' r) rF r% r% r% r& r s [Lr N) Z __future__r Z oci._vendorr r Zocir r Zoci.base_clientr Z oci.configr r Z oci.signerr Zoci.utilr r r Zoci.exceptionsr Z oci.alloyr Zmodelsr rH �objectr r% r% r% r& �<module> s
cải xoăn