Current Dir: /snap/core22/2437/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/__pycache__/

[FILE] authorization.cpython-310.pyc [ edit | delete | rename ]
[FILE] base.cpython-310.pyc [ edit | delete | rename ]
[FILE] introspect.cpython-310.pyc [ edit | delete | rename ]
[FILE] metadata.cpython-310.pyc [ edit | delete | rename ]
[FILE] pre_configured.cpython-310.pyc [ edit | delete | rename ]
[FILE] resource.cpython-310.pyc [ edit | delete | rename ]
[FILE] revocation.cpython-310.pyc [ edit | delete | rename ]
[FILE] token.cpython-310.pyc [ edit | delete | rename ]
[FILE] __init__.cpython-310.pyc [ edit | delete | rename ]

Viewing: /snap/core22/2437/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/__pycache__/introspect.cpython-310.pyc

o

���aw�@sZdZd
dl
Z
d
dlZd
dlmZ
ddlmZ
ddlmZm	Z	
e�
e�
ZGdd	�d	e�Z
dS)
z�
oauthlib.oauth2.rfc6749.endpoint.introspect
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

An implementation of the OAuth 2.0 `Token Introspection`.

.. _`Token Introspection`: https://tools.ietf.org/html/rfc7662
�N)
�Request�)
�OAuth2Error�
)�BaseEndpoint�catch_errors_and_unavailabilityc@s<eZ
dZd
ZdZdZddd�
Ze		d
dd	�
�
Zd
d�Z	dS)�IntrospectEndpointa�Introspect token endpoint.

   This endpoint defines a method to query an OAuth 2.0 authorization
   server to determine the active state of an OAuth 2.0 token and to
   determine meta-information about this token. OAuth 2.0 deployments
   can use this method to convey information about the authorization
   context of the token from the authorization server to the protected
   resource.

   To prevent the values of access tokens from leaking into
   server-side logs via query parameters, an authorization server
   offering token introspection MAY disallow the use of HTTP GET on
   the introspection endpoint and instead require the HTTP POST method
   to be used at the introspection endpoint.
   )�access_token�
refresh_token)
�POSTNcCs t�
|�

|
|_|p|j|_dS�
N)r�__init__�request_validator�valid_token_types�supported_token_types)�selfrr�r�N/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/introspect.pyr
)s


�zIntrospectEndpoint.__init__rc	
Cs�d
ddd�}t|
|||�}z
|�
|�

t�d|�
Wn&ty@
}
zt�d||�
|�|j�

||j|jfWYd}~Sd}~w
w|j	�
|j|j|�}|durZ|t�
tdd	�
�
d
fSd|vrc|�d�

|t�
td
ddi
|�
�
�
d
fS)a*
Create introspect valid or invalid response

        If the authorization server is unable to determine the state
        of the token without additional information, it SHOULD return
        an introspection response indicating the token is not active
        as described in Section 2.2.
        zapplication/jsonzno-storezno-cache)zContent-Typez
Cache-Control�PragmazToken introspect valid for %r.z)Client error during validation of %r. %r.NF)
�active��rTr)r�validate_introspect_request�log�debugr�update�headers�json�status_coder�introspect_token�token�token_type_hint�dumps�dict�pop)	r�uri�http_method�bodyr�resp_headers�request�
e�claimsrrr�create_introspect_response/s0

�







��


�




z-IntrospectEndpoint.create_introspect_responsecCs6|�|
�

|�
|
�

|�|
�

|�|
�

|�|
�

d
S)a�Ensure the request is valid.

        The protected resource calls the introspection endpoint using
        an HTTP POST request with parameters sent as
        "application/x-www-form-urlencoded".

        token REQUIRED.  The string value of the token.

        token_type_hint OPTIONAL.
        A hint about the type of the token submitted for
        introspection.  The protected resource MAY pass this parameter to
        help the authorization server optimize the token lookup.  If the
        server is unable to locate the token using the given hint, it MUST
        extend its search across all of its supported token types.  An
        authorization server MAY ignore this parameter, particularly if it
        is able to detect the token type automatically.
            *  access_token: An Access Token as defined in [`RFC6749`],
                `section 1.4`_

            *  refresh_token: A Refresh Token as defined in [`RFC6749`],
                `section 1.5`_

        The introspection endpoint MAY accept other OPTIONAL
        parameters to provide further context to the query.  For
        instance, an authorization server may desire to know the IP
        address of the client accessing the protected resource to
        determine if the correct client is likely to be presenting the
        token.  The definition of this or any other parameters are
        outside the scope of this specification, to be defined by
        service documentation or extensions to this specification.

        .. _`section 1.4`: http://tools.ietf.org/html/rfc6749#section-1.4
        .. _`section 1.5`: http://tools.ietf.org/html/rfc6749#section-1.5
        .. _`RFC6749`: http://tools.ietf.org/html/rfc6749
        N)�_raise_on_bad_method�_raise_on_bad_post_request�_raise_on_missing_token�_raise_on_invalid_client�_raise_on_unsupported_token)rr(rrrrRs

$






z.IntrospectEndpoint.validate_introspect_requestr)rNN)
�__name__�
__module__�__qualname__�__doc__r�valid_request_methodsr
rr+rrrrrrs



�"r)r4r�logging�oauthlib.commonr�errorsr�baserr�	getLoggerr1rrrrrr�<module>
s




Upload File: 



    CMD: