Nb. d dl Z d dlZd dlmZ d dlmZmZ d dlmZ dZ dZ
d Z d Z d Z
dd
Zd Zd Zd
ZddZ ddZd ZdS ) N)web)AbstractIdentityPolicyAbstractAuthorizationPolicywraps aiohttp_security_identity_policy aiohttp_security_autz_policyc K t |t s
J | |sJ | j t }|d}t j || |j | ||fi | d{V dS )zRemember identity into response.
The action is performed by identity_policy.remember()
Usually the identity is stored in user cookies somehow but may be
pushed into custom header also.
NMSecurity subsystem is not initialized, call aiohttp_security.setup(...) firstreasontext)
isinstancestr config_dictget IDENTITY_KEYr HTTPInternalServerErrorremember)requestresponseidentitykwargsidentity_policyr s f/builddir/build/BUILD/cloudlinux-venv-1.0.10/venv/lib/python3.11/site-packages/aiohttp_security/api.pyr r s h $ $..h.. $ OO8 )--l;;O 9
)DAAAA
"/
"7Hh
I
I&
I
IIIIIIIIII c K | j t }|d}t j || | | | d{V dS )z|Forget previously remembered identity.
Usually it clears cookie or server-side storage to forget user
session.
Nr r )r r r r r forget)r r r r s r r r ! sq )--l;;O 9
)DAAAA
(
3
3333333333r c K | j t }| j t }||d S | | d {V }|d S | | d {V }|S N)r r r AUTZ_KEYidentifyauthorized_userid)r r autz_policyr user_ids r r# r# 2 s )--l;;O%))(33K +"5t$--g66666666Ht 11(;;;;;;;;G Nr c ` K t |t t j f s
J | |sJ | j t }| j t }||dS | | d {V }| ||| d {V }|S )NT)
r r enumEnumr r r r! r" permits)r
permissioncontextr r$ r accesss r r) r) > s j3 "2 3 3??Z?? 3 : )--l;;O%))(33K +"5t$--g66666666H &&xWEE
E
E
E
E
E
EF Mr c K | j t }|dS | | d{V }|dS dS )zkCheck if user is anonymous.
User is considered anonymous if there is not identity
in request.
NTF)r r r r" )r r r s r is_anonymousr. K s^ )--l;;O t$--g66666666Ht 5r c ^ K t | d{V }|t j |S )z>Checker that raises HTTPUnauthorized for anonymous users.
N)r# r HTTPUnauthorized)r userids r check_authorizedr2 Z s@ %W--
-
-
-
-
-
-F
~"$$$ Mr c p t fd }t j dt |S )zDecorator that restrict access only for authorized users.
User is considered authorized if authorized_userid
returns some value.
c K | d }t |t j sd}t | t | d {V | i | d {V S Nz\Incorrect decorator usage. Expecting `def handler(request)` or `def handler(self, request)`.)r r BaseRequest RuntimeErrorr2 )argsr r msgfns r wrappedz login_required..wrappedi s r('3?33 $6C s## # w'''''''''R((((((((((r zDlogin_required decorator is deprecated, use check_authorized instead)r warningswarnDeprecationWarning)r; r< s ` r login_requiredr@ c sS 2YY ) ) ) ) Y )
M 1$& & & Nr c K t | d{V t | || d{V }|st j dS )zChecker that passes only to authoraised users with given permission.
If user is not authorized - raises HTTPUnauthorized,
if user is authorized and does not have permission -
raises HTTPForbidden.
N)r2 r) r
HTTPForbidden)r r* r+ alloweds r check_permissionrD { sl 7
#
########GZ99999999G " !!!" "r c J fd}t j dt |S )zDecorator that restricts access only for authorized users
with correct permissions.
If user is not authorized - raises HTTPUnauthorized,
if user is authorized and does not have permission -
raises HTTPForbidden.
c B t fd }|S )Nc K | d }t |t j sd}t | t | d {V | i | d {V S r5 )r r r7 r8 rD )r9 r r r: r+ r; r* s r r< z0has_permission..wrapper..wrapped s 2hG gs77
(: #3'''"7J@@ @ @ @ @ @ @ @T,V,,,,,,,, ,r r )r; r< r+ r* s ` r wrapperz has_permission..wrapper s> r - - - - - -
- r zDhas_permission decorator is deprecated, use check_permission instead)r= r> r? )r* r+ rH s `` r has_permissionrI sG
M 1$& & & Nr c t |t s
J | t |t s
J | || t < || t < d S r )r r r r r! )appr r$ s r setuprL sW o'= > >OOOO > k#> ? ?LLLL ?'C CMMMr r )r' r= aiohttpr aiohttp_security.abcr r functoolsr r r! r r r# r) r. r2 r@ rD rI rL r r rQ s% ? ? ? ? ? ? ? ? 1 )J J J*4 4 4"
0 " " " "
@ r