OwlCyberSecurity - MANAGER
Edit File: wrapper.pyc
� �t�ac @ s� d Z d d l m Z m Z d d l m Z m Z d d l m Z m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d e j f d � � YZ d e f d � � YZ d S( s* Wrapper Resources for rfc2617 HTTP Auth. i����( t implementst directlyProvides( t errort credentials( t gatherResultst succeed( t failure( t responsecode( t http( t iweb( t IAuthenticatedRequestt UnauthorizedResponsec B s5 e Z d Z d � Z d d � Z e d d � � Z RS( s{ A specialized response class for generating www-authenticate headers from the given L{CredentialFactory} instances c C s t t | � j t j d � d S( Ns/ You are not authorized to access this resource.( t superR t __init__R t UNAUTHORIZED( t self( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyR , s c sn g � g } x: | j � D], } � j | j � | j | j | � � q W� � f d � } t | � j | � S( s� Set up the response's headers. @param factories: A L{dict} of {'scheme': ICredentialFactory} @param remoteAddr: An L{IAddress} for the connecting client. c s& t � | � } � j j d | � d S( Ns www-authenticate( t zipt headerst setHeader( t challengest authHeaders( t schemesR ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _setAuthHeader> s ( t itervaluest appendt schemet getChallengeR t addCallback( R t factoriest remoteAddrt challengeDst factoryR ( ( R R s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _generateHeaders1 s c s5 t � � � j | | � } | j � f d � � | S( s Create an Unauthorized response. @param factories: A L{dict} of {'scheme': ICredentialFactory} @param remoteAddr: An L{IAddress} for the connecting client. @return: a Deferred that fires with the L{UnauthorizedResponse} instance. c s � S( N( ( t _( t response( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt <lambda>P t ( R R R ( t clsR R t d( ( R" s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt makeResponseC s N( t __name__t __module__t __doc__R t NoneR t classmethodR' ( ( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyR ' s t HTTPAuthResourcec B sZ e Z d Z e e j � d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( s� I wrap a resource to prevent it being accessed unless the authentication can be completed using the credential factory, portal, and interfaces specified. c C sJ | | _ t g | D] } | j | f ^ q � | _ | | _ | | _ d S( s� @param wrappedResource: A L{txweb2.iweb.IResource} to be returned from locateChild and render upon successful authentication. @param credentialFactories: A list of instances that implement L{ICredentialFactory}. @type credentialFactories: L{list} @param portal: Portal to handle logins for this resource. @type portal: L{twisted.cred.portal.Portal} @param interfaces: the interfaces that are allowed to log in via the given portal @type interfaces: L{tuple} N( t wrappedResourcet dictR t credentialFactoriest portalt interfaces( R R. R0 R1 R2 R ( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyR \ s % c sK | \ | _ | _ t | t � � f d � } t | _ | j | � � j S( s( Callback for successful login. @param avatar: A tuple of the form (interface, avatar) as returned by your realm. @param request: L{IRequest} that encapsulates this auth attempt. @return: the IResource in C{self.wrappedResource} c si � j t j k r_ � j j d � s_ t j � j | j � } � f d � } | j | � | Sn t � � S( s� A response filter that adds www-authenticate headers to an outgoing response if it's code is UNAUTHORIZED (401) and it does not already have them. s www-authenticatec s# � j j d | j j d � � � S( Ns www-authenticate( R R t getHeader( t newResp( R" ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _respond� s ( t codeR R R t hasHeaderR R' R0 R R R ( t requestR" R& R5 ( R ( R" s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _addAuthenticateHeaders� s ( t avatarInterfacet avatarR R t Truet handleErrorst addResponseFilterR. ( R R; R8 R9 ( ( R s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _loginSucceededv s c C s. t j | j | j � } d � } | j | � S( sM Errback for failed login. @param request: L{IRequest} that encapsulates this auth attempt. @return: A Deferred L{Failure} containing an L{HTTPError} containing the L{UnauthorizedResponse} if C{result} is an L{UnauthorizedLogin} or L{UnhandledCredentials} error c S s t j t j | � � S( N( R t FailureR t HTTPError( R" ( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _fail� s ( R R' R0 R R ( R t ignoredR8 R& RB ( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _loginFailed� s c sL | j | � � } � � f d � } � � f d � } | j | � j | � S( s� @param factory: An L{ICredentialFactory} that understands the given response. @param response: The client's authentication response as a string. @param request: The request that prompted this authentication attempt. @return: A L{Deferred} that fires with the wrappedResource on success or a failure containing an L{UnauthorizedResponse} c s> | j t j � t j � j � j � } d � } | j | � S( Nc S s t j t j | � � S( N( R R@ R RA ( R" ( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyR5 � s ( t trapR t LoginFailedR R' R0 R R ( t errR& R5 ( R8 R ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _decodeFailure� s c s= � j j | d � j � j � j � j � f d � f d � S( N( R1 t loginR+ R2 t addCallbacksR? RD ( t creds( R8 R ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _login� s ( t decodet addErrbackR ( R R R" R8 R& RH RL ( ( R8 R s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyRI � s c C s� | j j d � } | d k ra | j j t j � d | j � j | j | j | f d | f d � S| d | j k r� | j d | � S| j | j | d | d | � Sd S( sx Attempt to authenticate the given request @param request: An L{IRequest} to be authenticated. t authorizationi i N( R R3 R+ R1 RI R t AnonymousR2 RJ R? RD R0 ( R R8 t authHeader( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt authenticate� s c C s | j | � | f S( sw Authenticate the request then return the C{self.wrappedResource} and the unmodified segments. ( RR ( R R8 t seg( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt locateChild� s c s/ � f d � } | j � � } | j | � | S( sz Authenticate the request then return the result of calling renderHTTP on C{self.wrappedResource} c s | j � � S( N( t renderHTTP( t resource( R8 ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt _renderResource� s ( RR R ( R R8 RW R& ( ( R8 s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyRU � s ( R( R) R* R R t IResourceR R? RD RI RR RT RU ( ( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyR- T s , N( R* t zope.interfaceR R t twisted.credR R t twisted.internet.deferR R t twisted.pythonR t txweb2R R R t txweb2.auth.interfacesR t StatusResponseR t objectR- ( ( ( s& /opt/cpanel-ccs/txweb2/auth/wrapper.pyt <module> s -