
    qh$                     n    S r SSKrSSKJr  SSKJr  SSKJr  \R                  " \	5      r
 " S S	\5      rg)
aR  
oauthlib.oauth1.rfc5849.endpoints.access_token
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This module is an implementation of the access token provider logic of
OAuth 1.0 RFC 5849. It validates the correctness of access token requests,
creates and persists tokens as well as create the proper response to be
returned to the client.
    N)	urlencode   )errors   )BaseEndpointc                   2    \ rS rSrSrS r  SS jrS rSrg)	AccessTokenEndpoint   a  An endpoint responsible for providing OAuth 1 access tokens.

Typical use is to instantiate with a request validator and invoke the
``create_access_token_response`` from a view function. The tuple returned
has all information necessary (body, status, headers) to quickly form
and return a proper response. See :doc:`/oauth1/validator` for details on which
validator methods to implement for this endpoint.
c                 X   U R                   R                  UR                  U5      Ul        U R	                  5       U R	                  5       SR                  UR                  5      S.nUR                  U5        U R                   R                  X15        [        UR                  5       5      $ )a  Create and save a new access token.

Similar to OAuth 2, indication of granted scopes will be included as a
space separated list in ``oauth_authorized_realms``.

:param request: OAuthlib request.
:type request: oauthlib.common.Request
:returns: The token as an urlencoded string.
 )oauth_tokenoauth_token_secretoauth_authorized_realms)
request_validator
get_realmsresource_owner_keyrealmstoken_generatorjoinupdatesave_access_tokenr   items)selfrequestcredentialstokens       `/var/www/html/env/lib/python3.13/site-packages/oauthlib/oauth1/rfc5849/endpoints/access_token.pycreate_access_token'AccessTokenEndpoint.create_access_token    s     //::&&1  //1"&"6"6"8'*xx'?	
 	[!00@''    Nc                 ~   SS0n U R                  XX45      nU R                  U5      u  pU(       aO  U R                  Xu=(       d    0 5      n
U R                  R	                  UR
                  UR                  U5        XjS4$ 0 SS4$ ! [        R                   a"  nXkR                  UR                  4s SnA$ SnAff = f)a  Create an access token response, with a new request token if valid.

:param uri: The full URI of the token request.
:param http_method: A valid HTTP verb, i.e. GET, POST, PUT, HEAD, etc.
:param body: The request body as a string.
:param headers: The request headers as a dict.
:param credentials: A list of extra credentials to include in the token.
:returns: A tuple of 3 elements.
          1. A dict of headers to set on the response.
          2. The response body as a string.
          3. The response status code as an integer.

An example of a valid request::

    >>> from your_validator import your_validator
    >>> from oauthlib.oauth1 import AccessTokenEndpoint
    >>> endpoint = AccessTokenEndpoint(your_validator)
    >>> h, b, s = endpoint.create_access_token_response(
    ...     'https://your.provider/access_token?foo=bar',
    ...     headers={
    ...         'Authorization': 'OAuth oauth_token=234lsdkf....'
    ...     },
    ...     credentials={
    ...         'my_specific': 'argument',
    ...     })
    >>> h
    {'Content-Type': 'application/x-www-form-urlencoded'}
    >>> b
    'oauth_token=lsdkfol23w54jlksdef&oauth_token_secret=qwe089234lkjsdf&oauth_authorized_realms=movies+pics&my_specific=argument'
    >>> s
    200

An response to invalid request would have a different body and status::

    >>> b
    'error=invalid_request&description=missing+resource+owner+key'
    >>> s
    400

The same goes for an an unauthorized request:

    >>> b
    ''
    >>> s
    401
zContent-Typez!application/x-www-form-urlencoded   Ni  )_create_requestvalidate_access_token_requestr   r   invalidate_request_token
client_keyr   r   OAuth1Error
urlencodedstatus_code)r   urihttp_methodbodyheadersr   resp_headersr   validprocessed_requestr   es               r   create_access_token_response0AccessTokenEndpoint.create_access_token_response6   s    ` '(KL	=**3TKG'+'I'I($E00:KL&&??&&.. $C//4}$!! 	=q}}<<	=s$   A:B B B<B71B<7B<c                    U R                  U5        U R                  U5        UR                  (       d  [        R                  " SS9eU R
                  R                  UR                  5      (       d  [        R                  " SS9eUR                  (       d  [        R                  " SS9eU R
                  R                  UR                  5      (       d  [        R                  " SS9eU R
                  R                  UR                  UR                  UR                  UUR                  S9(       d  SU4$ U R
                  R                  UR                  U5      nU(       d  U R
                  R                  Ul
        U R
                  R                  UR                  UR                  U5      nU(       d  U R
                  R                   Ul        U R
                  R#                  UR                  UR                  UR                  U5      nU R%                  USS	9nX!R&                  S
'   X1R&                  S'   XAR&                  S'   XQR&                  S'   [)        X#UU45      nU(       dm  [*        R-                  S5        [*        R-                  SU5        [*        R-                  SU5        [*        R-                  SU5        [*        R-                  SU5        Xa4$ )a  Validate an access token request.

:param request: OAuthlib request.
:type request: oauthlib.common.Request
:raises: OAuth1Error if the request is invalid.
:returns: A tuple of 2 elements.
          1. The validation result (True or False).
          2. The request object.
zMissing resource owner.)descriptionz"Invalid resource owner key format.zMissing verifier.zInvalid verifier format.)request_tokenFT)is_token_requestclientresource_ownerverifier	signaturez&[Failure] request verification failed.zValid client:, %szValid token:, %szValid verifier:, %szValid signature:, %s)_check_transport_security_check_mandatory_parametersr   r   InvalidRequestErrorr   check_request_tokenr:   check_verifiervalidate_timestamp_and_noncer&   	timestampnoncevalidate_client_keydummy_clientvalidate_request_tokendummy_request_tokenvalidate_verifier_check_signaturevalidator_logallloginfo)r   r   valid_clientvalid_resource_ownervalid_verifiervalid_signaturevs          r   r$   1AccessTokenEndpoint.validate_access_token_requestw   s    	&&w/((1)),,57 7 %%99**, ,,,@B B ,,/1 1 %%44W5E5EFF,,68 8 %%BB""G$5$5w}}g%88 C : '>! --AA)!%!7!7!D!DG  $55LL : :G E#)-)?)?)S)SG& //AA&&	 //$/O +7h'2F./,:j)-<k* ^ " #HH=>HH(,7HH')=>HH*N;HH+_=zr     )GETNNN)	__name__
__module____qualname____firstlineno____doc__r   r2   r$   __static_attributes__rT   r    r   r	   r	      s"    (, IM?C?=B`r    r	   )rZ   loggingoauthlib.commonr    r   baser   	getLoggerrV   rL   r	   rT   r    r   <module>ra      s6     %  !B, Br    