auth.py 9.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318
  1. from __future__ import annotations
  2. import base64
  3. import binascii
  4. import typing as t
  5. from ..http import dump_header
  6. from ..http import parse_dict_header
  7. from ..http import quote_header_value
  8. from .structures import CallbackDict
  9. if t.TYPE_CHECKING:
  10. import typing_extensions as te
  11. class Authorization:
  12. """Represents the parts of an ``Authorization`` request header.
  13. :attr:`.Request.authorization` returns an instance if the header is set.
  14. An instance can be used with the test :class:`.Client` request methods' ``auth``
  15. parameter to send the header in test requests.
  16. Depending on the auth scheme, either :attr:`parameters` or :attr:`token` will be
  17. set. The ``Basic`` scheme's token is decoded into the ``username`` and ``password``
  18. parameters.
  19. For convenience, ``auth["key"]`` and ``auth.key`` both access the key in the
  20. :attr:`parameters` dict, along with ``auth.get("key")`` and ``"key" in auth``.
  21. .. versionchanged:: 2.3
  22. The ``token`` parameter and attribute was added to support auth schemes that use
  23. a token instead of parameters, such as ``Bearer``.
  24. .. versionchanged:: 2.3
  25. The object is no longer a ``dict``.
  26. .. versionchanged:: 0.5
  27. The object is an immutable dict.
  28. """
  29. def __init__(
  30. self,
  31. auth_type: str,
  32. data: dict[str, str | None] | None = None,
  33. token: str | None = None,
  34. ) -> None:
  35. self.type = auth_type
  36. """The authorization scheme, like ``basic``, ``digest``, or ``bearer``."""
  37. if data is None:
  38. data = {}
  39. self.parameters = data
  40. """A dict of parameters parsed from the header. Either this or :attr:`token`
  41. will have a value for a given scheme.
  42. """
  43. self.token = token
  44. """A token parsed from the header. Either this or :attr:`parameters` will have a
  45. value for a given scheme.
  46. .. versionadded:: 2.3
  47. """
  48. def __getattr__(self, name: str) -> str | None:
  49. return self.parameters.get(name)
  50. def __getitem__(self, name: str) -> str | None:
  51. return self.parameters.get(name)
  52. def get(self, key: str, default: str | None = None) -> str | None:
  53. return self.parameters.get(key, default)
  54. def __contains__(self, key: str) -> bool:
  55. return key in self.parameters
  56. def __eq__(self, other: object) -> bool:
  57. if not isinstance(other, Authorization):
  58. return NotImplemented
  59. return (
  60. other.type == self.type
  61. and other.token == self.token
  62. and other.parameters == self.parameters
  63. )
  64. @classmethod
  65. def from_header(cls, value: str | None) -> te.Self | None:
  66. """Parse an ``Authorization`` header value and return an instance, or ``None``
  67. if the value is empty.
  68. :param value: The header value to parse.
  69. .. versionadded:: 2.3
  70. """
  71. if not value:
  72. return None
  73. scheme, _, rest = value.partition(" ")
  74. scheme = scheme.lower()
  75. rest = rest.strip()
  76. if scheme == "basic":
  77. try:
  78. username, _, password = base64.b64decode(rest).decode().partition(":")
  79. except (binascii.Error, UnicodeError):
  80. return None
  81. return cls(scheme, {"username": username, "password": password})
  82. if "=" in rest.rstrip("="):
  83. # = that is not trailing, this is parameters.
  84. return cls(scheme, parse_dict_header(rest), None)
  85. # No = or only trailing =, this is a token.
  86. return cls(scheme, None, rest)
  87. def to_header(self) -> str:
  88. """Produce an ``Authorization`` header value representing this data.
  89. .. versionadded:: 2.0
  90. """
  91. if self.type == "basic":
  92. value = base64.b64encode(
  93. f"{self.username}:{self.password}".encode()
  94. ).decode("utf8")
  95. return f"Basic {value}"
  96. if self.token is not None:
  97. return f"{self.type.title()} {self.token}"
  98. return f"{self.type.title()} {dump_header(self.parameters)}"
  99. def __str__(self) -> str:
  100. return self.to_header()
  101. def __repr__(self) -> str:
  102. return f"<{type(self).__name__} {self.to_header()}>"
  103. class WWWAuthenticate:
  104. """Represents the parts of a ``WWW-Authenticate`` response header.
  105. Set :attr:`.Response.www_authenticate` to an instance of list of instances to set
  106. values for this header in the response. Modifying this instance will modify the
  107. header value.
  108. Depending on the auth scheme, either :attr:`parameters` or :attr:`token` should be
  109. set. The ``Basic`` scheme will encode ``username`` and ``password`` parameters to a
  110. token.
  111. For convenience, ``auth["key"]`` and ``auth.key`` both act on the :attr:`parameters`
  112. dict, and can be used to get, set, or delete parameters. ``auth.get("key")`` and
  113. ``"key" in auth`` are also provided.
  114. .. versionchanged:: 2.3
  115. The ``token`` parameter and attribute was added to support auth schemes that use
  116. a token instead of parameters, such as ``Bearer``.
  117. .. versionchanged:: 2.3
  118. The object is no longer a ``dict``.
  119. .. versionchanged:: 2.3
  120. The ``on_update`` parameter was removed.
  121. """
  122. def __init__(
  123. self,
  124. auth_type: str,
  125. values: dict[str, str | None] | None = None,
  126. token: str | None = None,
  127. ):
  128. self._type = auth_type.lower()
  129. self._parameters: dict[str, str | None] = CallbackDict( # type: ignore[misc]
  130. values, lambda _: self._trigger_on_update()
  131. )
  132. self._token = token
  133. self._on_update: t.Callable[[WWWAuthenticate], None] | None = None
  134. def _trigger_on_update(self) -> None:
  135. if self._on_update is not None:
  136. self._on_update(self)
  137. @property
  138. def type(self) -> str:
  139. """The authorization scheme, like ``basic``, ``digest``, or ``bearer``."""
  140. return self._type
  141. @type.setter
  142. def type(self, value: str) -> None:
  143. self._type = value
  144. self._trigger_on_update()
  145. @property
  146. def parameters(self) -> dict[str, str | None]:
  147. """A dict of parameters for the header. Only one of this or :attr:`token` should
  148. have a value for a given scheme.
  149. """
  150. return self._parameters
  151. @parameters.setter
  152. def parameters(self, value: dict[str, str]) -> None:
  153. self._parameters = CallbackDict( # type: ignore[misc]
  154. value, lambda _: self._trigger_on_update()
  155. )
  156. self._trigger_on_update()
  157. @property
  158. def token(self) -> str | None:
  159. """A dict of parameters for the header. Only one of this or :attr:`token` should
  160. have a value for a given scheme.
  161. """
  162. return self._token
  163. @token.setter
  164. def token(self, value: str | None) -> None:
  165. """A token for the header. Only one of this or :attr:`parameters` should have a
  166. value for a given scheme.
  167. .. versionadded:: 2.3
  168. """
  169. self._token = value
  170. self._trigger_on_update()
  171. def __getitem__(self, key: str) -> str | None:
  172. return self.parameters.get(key)
  173. def __setitem__(self, key: str, value: str | None) -> None:
  174. if value is None:
  175. if key in self.parameters:
  176. del self.parameters[key]
  177. else:
  178. self.parameters[key] = value
  179. self._trigger_on_update()
  180. def __delitem__(self, key: str) -> None:
  181. if key in self.parameters:
  182. del self.parameters[key]
  183. self._trigger_on_update()
  184. def __getattr__(self, name: str) -> str | None:
  185. return self[name]
  186. def __setattr__(self, name: str, value: str | None) -> None:
  187. if name in {"_type", "_parameters", "_token", "_on_update"}:
  188. super().__setattr__(name, value)
  189. else:
  190. self[name] = value
  191. def __delattr__(self, name: str) -> None:
  192. del self[name]
  193. def __contains__(self, key: str) -> bool:
  194. return key in self.parameters
  195. def __eq__(self, other: object) -> bool:
  196. if not isinstance(other, WWWAuthenticate):
  197. return NotImplemented
  198. return (
  199. other.type == self.type
  200. and other.token == self.token
  201. and other.parameters == self.parameters
  202. )
  203. def get(self, key: str, default: str | None = None) -> str | None:
  204. return self.parameters.get(key, default)
  205. @classmethod
  206. def from_header(cls, value: str | None) -> te.Self | None:
  207. """Parse a ``WWW-Authenticate`` header value and return an instance, or ``None``
  208. if the value is empty.
  209. :param value: The header value to parse.
  210. .. versionadded:: 2.3
  211. """
  212. if not value:
  213. return None
  214. scheme, _, rest = value.partition(" ")
  215. scheme = scheme.lower()
  216. rest = rest.strip()
  217. if "=" in rest.rstrip("="):
  218. # = that is not trailing, this is parameters.
  219. return cls(scheme, parse_dict_header(rest), None)
  220. # No = or only trailing =, this is a token.
  221. return cls(scheme, None, rest)
  222. def to_header(self) -> str:
  223. """Produce a ``WWW-Authenticate`` header value representing this data."""
  224. if self.token is not None:
  225. return f"{self.type.title()} {self.token}"
  226. if self.type == "digest":
  227. items = []
  228. for key, value in self.parameters.items():
  229. if key in {"realm", "domain", "nonce", "opaque", "qop"}:
  230. value = quote_header_value(value, allow_token=False)
  231. else:
  232. value = quote_header_value(value)
  233. items.append(f"{key}={value}")
  234. return f"Digest {', '.join(items)}"
  235. return f"{self.type.title()} {dump_header(self.parameters)}"
  236. def __str__(self) -> str:
  237. return self.to_header()
  238. def __repr__(self) -> str:
  239. return f"<{type(self).__name__} {self.to_header()}>"