Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/keystoneauth1/loading/_plugins/identity/__pycache__/v3.cpython-39.pyc
Ðазад
a s�h�L � @ s� d dl Zd dlmZ d dlmZ d dlmZ d dlmZ d dlm Z e e j dd�dd �Z e eejf dd�d d �ZG d d � d ejej �ZG dd� dejej �ZG dd� dejej �ZG dd� deej �ZG dd� deej �Z G dd� deej �Z G dd� dejej �Z G dd� deej! �Z"G d d � d ejej# �Z$G d d � d ej%ej& �Z'G d d!� d!ejej( �Z)G d"d#� d#ejej* �Z+G d$d%� d%ejej, �Z-G d&d'� d'ejej. �Z/dS )(� N)� exceptions)�identity)�oidc)�loading)�opts)�options�returnc C sH | � tjddd�tjddt�d�gd�tjdd d�tjd d d�g� d S ) Nzuser-idzUser's user ID��help�usernamezUser's usernamez user-name)r � deprecatedzuser-domain-idzUser's domain IDzuser-domain-namezUser's domain name)�extendr �Opt)r � r ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/keystoneauth1/loading/_plugins/identity/v3.py� _add_common_identity_options s � ��r c C s0 | � d�r,| � d�s,| � d�s,d}t�|��d S )Nr Zuser_domain_nameZuser_domain_idz�You have provided a username. In the V3 identity API a username is only unique within a domain so you must also provide either a user_domain_id or user_domain_name.)�getr � OptionError)r �mr r r �_assert_identity_options% s ���r c s^ e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z ejejd�� fdd � Z� ZS ) �Passwordz�Authenticate with a username and password. Authenticate to the identity service using the provided username and password. This is the standard and most common form of authentication. �r c C s t jS �N)r � V3Password��selfr r r � plugin_class8 s zPassword.plugin_classc s0 t � �� }t|� |�tjddddd�g� |S )N�passwordTz Password: zUser's password��secret�promptr ��super� get_optionsr r r r �r r �� __class__r r r# < s ��� zPassword.get_options��kwargsr c s t |� t� jf i |��S r �r r" �load_from_options�r r( r% r r r* M s zPassword.load_from_options)�__name__� __module__� __qualname__�__doc__�property�ty�Typer r r �listr r r# �Anyr* � __classcell__r r r% r r 1 s r c sF e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z � ZS )�Tokenad Given an existing token rescope it to another target. Use the Identity service's rescope mechanism to get a new token based upon an existing token. Because an auth plugin requires a service catalog and scope information it is often easier to fetch a new token based on an existing one than validate and reuse the one you already have. r c C s t jS r )r �V3Tokenr r r r r \ s zToken.plugin_classc s& t � �� }|�tjdddd�g� |S )N�tokenTzToken to authenticate with�r r �r" r# r r r r$ r% r r r# ` s ���zToken.get_options)r, r- r. r/ r0 r1 r2 r r7 r r3 r r r# r5 r r r% r r6 S s r6 c s@ e Zd Zejejd�� fdd� Zee j d�� fdd� Z � Z S )�_OpenIDConnectBaser' c s4 |� d�s"|� d�s"d}t�|��t� jf i |��S )NZaccess_token_endpointZdiscovery_endpointzPYou have to specify either an 'access-token-endpoint' or a 'discovery-endpoint'.�r r r r" r* �r r( r r% r r r* o s ��� z$_OpenIDConnectBase.load_from_optionsr c sf t � �� }|�tjddd�tjdddd�tjdd d d d �tjd dd�tjddd�tjddd�g� |S )Nz client-idzOAuth 2.0 Client IDr z client-secretTzOAuth 2.0 Client Secretr9 z openid-scopezopenid profile�scopez�OpenID Connect scope that is requested from authorization server. Note that the OpenID Connect specification states that "openid" must be always specified.)�default�destr zaccess-token-endpointz�OpenID Connect Provider Token Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided by the server in the discovery document.zdiscovery-endpointz�OpenID Connect Discovery Document URL. The discovery document will be used to obtain the values of the access token endpoint and the authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid-configuration�access-token-typez�OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token introspection. Valid values are: "access_token" or "id_token"r: r$ r% r r r# | s: �� �� ���,z _OpenIDConnectBase.get_options) r, r- r. r1 r4 r � _OidcBaseTr* r3 r r r# r5 r r r% r r; n s r; c sF e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z � ZS )� OpenIDConnectClientCredentialsz3Authenticate with the OIDC Client Credentials flow.r c C s t jS r )r �V3OidcClientCredentialsr r r r r � s z+OpenIDConnectClientCredentials.plugin_classc s t � �� }|S r )r" r# r$ r% r r r# � s z*OpenIDConnectClientCredentials.get_options)r, r- r. r/ r0 r1 r2 r rD r r3 r r r# r5 r r r% r rC � s rC c sF e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z � ZS )�OpenIDConnectPasswordzDAuthenticate with the OIDC Resource Owner Password Credentials flow.r c C s t jS r )r �V3OidcPasswordr r r r r � s z"OpenIDConnectPassword.plugin_classc sB t � �� }|�tjdddd�tjddddd�tjdd d �g� |S ) Nr ZUsernameT)r �requiredr r )r r rG Z idp_otp_keyz`A key to be used in the Identity Provider access token endpoint to pass the OTP value. E.g. totpr r: r$ r% r r r# � s ����z!OpenIDConnectPassword.get_options)r, r- r. r/ r0 r1 r2 r rF r r3 r r r# r5 r r r% r rE � s rE c sF e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z � ZS )� OpenIDConnectAuthorizationCodez3Authenticate with the OIDC Authorization Code flow.r c C s t jS r )r �V3OidcAuthorizationCoder r r r r � s z+OpenIDConnectAuthorizationCode.plugin_classc s> t � �� }|�tjddd�tjdddt�d�gdd�g� |S ) Nz redirect-urizOpenID Connect Redirect URLr �codeTzauthorization-codez OAuth 2.0 Authorization Code)r rG r r r: r$ r% r r r# � s � ���z*OpenIDConnectAuthorizationCode.get_options)r, r- r. r/ r0 r1 r2 r rI r r3 r r r# r5 r r r% r rH � s rH c sF e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z � ZS )�OpenIDConnectAccessTokenz-Authenticate with the OIDC Access Token flow.r c C s t jS r )r �V3OidcAccessTokenr r r r r � s z%OpenIDConnectAccessToken.plugin_classc s( t � �� }|�tjddddd�g� |S )Nz access-tokenTzOAuth 2.0 Access Token�r rG r r: r$ r% r r r# s ��� z$OpenIDConnectAccessToken.get_options)r, r- r. r/ r0 r1 r2 r rL r r3 r r r# r5 r r r% r rK � s rK c sF e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z � ZS )� OpenIDConnectDeviceAuthorizationz:Authenticate with the OAuth 2.0 Device Authorization flow.r c C s t jS r )r �V3OidcDeviceAuthorizationr r r r r s z-OpenIDConnectDeviceAuthorization.plugin_classc s> t � �� }dd� |D �}|�tjddd�tjddd�g� |S )Nc S s g | ]}|j d kr|�qS )rA ��name)�.0�optr r r � <listcomp> � z@OpenIDConnectDeviceAuthorization.get_options.<locals>.<listcomp>z device-authorization-endpointz�OAuth 2.0 Device Authorization Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided by the server in the discovery document.r zcode-challenge-methodz PKCE Challenge Method (RFC 7636)r: r$ r% r r r# s ����z,OpenIDConnectDeviceAuthorization.get_options)r, r- r. r/ r0 r1 r2 r rO r r3 r r r# r5 r r r% r rN s rN c s^ e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z ejejd�� fdd � Z� ZS ) �TOTPz�Authenticate with a Time-based One-Time Password. Authenticate to the identity service using a time-based one-time password. This is typically used in combination with another plugin as part of a multi-factor configuration. r c C s t jS r )r �V3TOTPr r r r r : s zTOTP.plugin_classc s0 t � �� }t|� |�tjddddd�g� |S )NZpasscodeTzTOTP passcode: zUser's TOTP passcoder r! r$ r% r r r# > s ��� zTOTP.get_optionsr' c s t |� t� jf i |��S r r) r+ r% r r r* O s zTOTP.load_from_options)r, r- r. r/ r0 r1 r2 r rW r r3 r r r# r4 r* r5 r r r% r rV 2 s rV c s^ e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z ejejd�� fdd � Z� ZS ) � TokenlessAuthz9Authenticate without a token, using an X.509 certificate.r c C s t jS r )r �V3TokenlessAuthr r r r r X s zTokenlessAuth.plugin_classc sn t � �� }|�tjdddd�tjddd�tjdd d�tjd d d�tjd d d�tjddd�tjddd�g� |S )Nzauth-urlTzAuthentication URL�rG r z domain-idzDomain ID to scope tor z domain-namezDomain name to scope toz project-idzProject ID to scope toz project-namezProject name to scope tozproject-domain-idz Domain ID containing projectzproject-domain-namez Domain name containing projectr: r$ r% r r r# \ s& � ����zTokenlessAuth.get_optionsr' c sf |� d�s(|� d�s(|� d�s(|� d�rF|� d�rT|� d�sT|� d�sTd}t�|��t� jf i |��S )NZ domain_idZ domain_nameZ project_id� project_nameZproject_domain_nameZproject_domain_ida You need to provide either a domain_name, domain_id, project_id or project_name. If you have provided a project_name, in the V3 identity API a project_name is only unique within a domain so you must also provide either a project_domain_id or project_domain_name.r< r= r% r r r* t s$ ������ �� z TokenlessAuth.load_from_options)r, r- r. r/ r0 r1 r2 r rY r r3 r r r# r4 r* r5 r r r% r rX U s rX c s^ e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z ejejd�� fdd � Z� ZS ) �ApplicationCredentialz�Authenticate with an application credential. Authenticate to the identity service using the provided application credential secret and ID or name. If a name is used, you must also provide a username and user domain to assist in lookup. r c C s t jS r )r �V3ApplicationCredentialr r r r r � s z"ApplicationCredential.plugin_classc sH t � �� }t|� |�tjddddd�tjddd�tjdd d�g� |S ) N� application_credential_secretTz"Application credential auth secretrM �application_credential_idzApplication credential IDr �application_credential_namezApplication credential namer! r$ r% r r r# � s( �����z!ApplicationCredential.get_optionsr' c sT t |� |�d�s*|�d�s*d}t�|��|�d�sBd}t�|��t� jf i |��S )Nr_ r` z`You must provide either an application credential ID or an application credential name and user.r^ z You must provide an auth secret.)r r r r r" r* r= r% r r r* � s �� z'ApplicationCredential.load_from_options)r, r- r. r/ r0 r1 r2 r r] r r3 r r r# r4 r* r5 r r r% r r\ � s �r\ c sp e Zd ZdZdd�� fdd� Zeejej d�dd��Z e e j d�� fdd � Zejej d �� fd d � Z� ZS ) � MultiFactorz�Authenticate using multiple factors. Authenticate to the identity service using a combination of factors, such as username/password and a TOTP code. Nr c s t � �� d | _d S r )r" �__init__�_methodsr r% r r rb � s zMultiFactor.__init__c C s t jS r )r � V3MultiFactorr r r r r � s zMultiFactor.plugin_classc sp t � �� }|�tjdddd�g� | jrldd� |D �}| jD ]"}t�|�}|D ]}|||j< qNq<t|� � �}|S )N� auth_methodsTz Methods to authenticate with.rZ c S s i | ] }|j |�qS r rP )rR �or r r � <dictcomp>� rU z+MultiFactor.get_options.<locals>.<dictcomp>) r" r# r r r rc Zget_plugin_optionsrQ r3 �values)r r Z options_dict�methodZ method_optsrS r% r r r# � s" ��� zMultiFactor.get_optionsr' c s6 t |� d|vrt�d��|d | _t� jf i |��S )Nre z methods is a required option.)r r r rc r" r* r+ r% r r r* � s z MultiFactor.load_from_options)r, r- r. r/ rb r0 r1 r2 r rd r r3 r r r# r4 r* r5 r r r% r ra � s ra c s^ e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z ejejd�� fdd � Z� ZS ) �OAuth2ClientCredentialz0Authenticate with an OAuth2.0 client credential.r c C s t jS r )r �V3OAuth2ClientCredentialr r r r r � s z#OAuth2ClientCredential.plugin_classc sD t � �� }|�tjdddd�tjdddd�tjddddd �g� |S ) N�oauth2_endpointTzEndpoint for OAuth2.0rZ �oauth2_client_idzClient id for OAuth2.0�oauth2_client_secretzClient secret for OAuth2.0rM r: r$ r% r r r# s* �����z"OAuth2ClientCredential.get_optionsr' c sZ |� d�sd}t�|��|� d�s0d}t�|��|� d�sHd}t�|��t� jf i |��S )Nrl z&You must provide an OAuth2.0 endpoint.rm z2You must provide an OAuth2.0 client credential ID.rn z;You must provide an OAuth2.0 client credential auth secret.r< r= r% r r r* s z(OAuth2ClientCredential.load_from_options)r, r- r. r/ r0 r1 r2 r rk r r3 r r r# r4 r* r5 r r r% r rj � s �rj c s^ e Zd ZdZeejej d�dd��Z e e j d�� fdd� Z ejejd�� fdd � Z� ZS ) �OAuth2mTlsClientCredentialz5Authenticate with an OAuth2.0 mTLS client credential.r c C s t jS r )r � V3OAuth2mTlsClientCredentialr r r r r 0 s z'OAuth2mTlsClientCredential.plugin_classc s4 t � �� }|�tjdddd�tjdddd�g� |S )Nzoauth2-endpointTz.Endpoint for OAuth2.0 Mutual-TLS AuthorizationrZ zoauth2-client-idz:Client credential ID for OAuth2.0 Mutual-TLS Authorizationr: r$ r% r r r# 4 s ����z&OAuth2mTlsClientCredential.get_optionsr' c sB |� d�sd}t�|��|� d�s0d}t�|��t� jf i |��S )Nrl z1You must provide an OAuth2.0 Mutual-TLS endpoint.rm zOYou must provide an client credential ID for OAuth2.0 Mutual-TLS Authorization.r< r= r% r r r* G s � z,OAuth2mTlsClientCredential.load_from_options)r, r- r. r/ r0 r1 r2 r rp r r3 r r r# r4 r* r5 r r r% r ro + s �ro )0�typingr1 Z keystoneauth1r r Zkeystoneauth1.identity.v3r r Zkeystoneauth1.loadingr r3 r r �dict�strr4 r Z BaseV3Loaderr r r7 r6 ZBaseFederationLoaderrB r; rD rC rF rE rI rH rL rK rO rN rW rV Z BaseLoaderrY rX r] r\ rd ra rk rj rp ro r r r r �<module> sF "@ � � � �"#: �:0 �2 �
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка