,OfDddlZddlZddlZddlmZddlmZmZmZddlmZm Z m Z m Z ddl Z ddl mZddlmZddlmZddlmZmZerdd lmZd Zee ZGd d ejZGddeejZGddeZGddeZGddeeZGddeZGddeZ GddeedZ!GddeedZ"GddeedZ#y) N)ABC)datetime timedeltatimezone) TYPE_CHECKINGDictOptionalUnion)utils)Consts)InstallationAuthorization) Requester WithRequesterGithubIntegration)secondsceZdZdZeej defdZeej defdZ de ddfdZ de ddfdZ edefd Z y) AuthzS This class is the base class of all authentication methods for Requester. returncy)z The type of the auth token as used in the HTTP Authorization header, e.g. Bearer or Basic. :return: token type Nselfs +lib/python3.12/site-packages/github/Auth.py token_typezAuth.token_type9cy)zc The auth token as used in the HTTP Authorization header. :return: token Nrrs rtokenz Auth.tokenCrrheadersNc@|jd|j|d<y)z3 Add authorization to the headers.  AuthorizationN)rr rr!s rauthenticationzAuth.authenticationMs"'+oo%6a |#D rc"|j|d<y)z0 Mask header, e.g. for logging. r$N) _masked_tokenr%s rmask_authenticationzAuth.mask_authenticationSs$(#5#5 rcy)Nz(unknown auth removed)rrs rr(zAuth._masked_tokenYs'r)__name__ __module__ __qualname____doc__propertyabcabstractmethodstrrr dictr&r)r(rrrrr4s C   s  EdEtE 646D6 (s((rrceZdZeej defdZeej defdZedefdZ edefdZ edefdZ y) HTTPBasicAuthrcy)z The username. Nrrs rusernamezHTTPBasicAuth.username_rrcy)z The password. Nrrs rpasswordzHTTPBasicAuth.passwordfrrcy)NBasicrrs rrzHTTPBasicAuth.token_typemrctj|jd|jj j dj ddS)N:utf-8 )base64 b64encoder7r9encodedecodereplacers rr zHTTPBasicAuth.tokenqsJ4==/4==/ B I I KLSST[\ddeikmnnrcy)Nz"Basic (login and password removed)rrs rr(zHTTPBasicAuth._masked_tokenus3rN) r+r,r-r/r0r1r2r7r9rr r(rrrr5r5^s  #   #  Cosoo4s44rr5cbeZdZdZdedefdZedefdZedefdZedefdZ y ) LoginzE This class is used to authenticate with login and password. loginr9ct|tsJt|dkDsJt|tsJt|dkDsJ||_||_yNr) isinstancer2len_login _password)rrJr9s r__init__zLogin.__init__sR%%%%5zA~~(C(((8}q    !rrc|jSNrOrs rrJz Login.login {{rc|jSrSrJrs rr7zLogin.username zzrc|jSrSrPrs rr9zLogin.passwords ~~rN) r+r,r-r.r2rQr/rJr7r9rrrrIrIzsk"c"S"s##rrIc^eZdZdZdefdZedefdZedefdZedefdZ y) TokenzJ This class is used to authenticate with a single constant token. r cVt|tsJt|dkDsJ||_yrLrMr2rN_tokenrr s rrQzToken.__init__)%%%%5zA~~ rrcyNr rrs rrzToken.token_typer<rc|jSrSr_rs rr z Token.tokenrUrcyNztoken (oauth token removed)rrs rr(zToken._masked_token,rN) r+r,r-r.r2rQr/rr r(rrrr\r\sdc Cs-s--rr\c&eZdZdZedefdZy)JWTz This class is the base class to authenticate with a JSON Web Token (JWT). https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/generating-a-json-web-token-jwt-for-a-github-app rcy)NBearerrrs rrzJWT.token_typesrN)r+r,r-r.r/r2rrrrrjrjs"Crrjc eZdZdZej ej ejfdee e fde de de de f dZ e dee e ffd Z e de fd Ze de fd Z dd e deee e fdeeddfdZddee de fdZy )AppAuthz This class is used to authenticate as a GitHub App. https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/authenticating-as-a-github-app app_id private_key jwt_expiry jwt_issued_at jwt_algorithmct|ttfsJ|t|trt|dkDsJdt|tsJt|dkDsJdt|tsJ|tj |cxkrtj ksJ|J|||_||_||_ ||_ ||_ y)Nrzapp_id must not be emptyzprivate_key must not be empty) rMintr2rNr MIN_JWT_EXPIRYMAX_JWT_EXPIRY_app_id _private_key _jwt_expiry_jwt_issued_at_jwt_algorithm)rrorprqrrrss rrQzAppAuth.__init__s&3*-5v5- fc "v;? >$> >?+s+++;!#D%DD#*c*6J6*$$ Kf6K6KKWZWKWZWK '%++rrc|jSrS)rxrs rrozAppAuth.app_ids ||rc|jSrS)ryrs rrpzAppAuth.private_keys   rc"|jSrS) create_jwtrs rr z AppAuth.tokens  rNinstallation_idtoken_permissions requesterAppInstallationAuthct||||S)a Creates a github.Auth.AppInstallationAuth instance for an installation. :param installation_id: installation id :param token_permissions: optional permissions :param requester: optional requester with app authentication :return: )r)rrrrs rget_installation_authzAppAuth.get_installation_auths#4:KYWWr expirationc|Mt|tsJ|tj|cxkrtjksJ|J|tt j }||j z|||n |jz|jd}tj||j|j}t|tr|jdS|S)z Create a signed JWT https://docs.github.com/en/developers/apps/building-github-apps/authenticating-with-github-apps#authenticating-as-a-github-app :return string: jwt )iatexpiss)key algorithmr?)rMrur rvrwtimer{rzrxjwtrDrpr|bytesrE)rrnowpayload encrypteds rrzAppAuth.create_jwts  !j#. : :.((JO&:O:OO [Q[ [O [Q[ [O$))+,,, (>*DDTDTU<<  JJwD,<,<H[H[\ i '##G, ,rNNrS)r+r,r-r.r DEFAULT_JWT_EXPIRYDEFAULT_JWT_ISSUED_ATDEFAULT_JWT_ALGORITHMr rur2rQr/rorpr r rrrrrrrrnrns!33#99#99 ,c3h,, ,  ,  ,,c3h!S!!!s!! 7;)- XX$DcN3XI& X  X"Xc]crrnc2eZdZdZdefdZedefdZy) AppAuthTokenz This class is used to authenticate as a GitHub App with a single constant JWT. https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/authenticating-as-a-github-app r cVt|tsJt|dkDsJ||_yrLr^r`s rrQzAppAuthToken.__init__rarrc|jSrSrers rr zAppAuthToken.tokenrUrN)r+r,r-r.r2rQr/r rrrrr s.c srrc deZdZUdZdZeded<dZeeed< dde de dee e e fd ee ffd Zd e d dffd Zed ee e ffd Zed e fdZed e fdZed ee e e ffdZed e fdZed e fdZed efdZd efdZed e fdZxZS)rz This class is used to authenticate as a GitHub App Installation. https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/authenticating-as-a-github-app-installation Nr!_AppInstallationAuth__integration0_AppInstallationAuth__installation_authorizationapp_authrrrc4t|t|tsJ|t|tsJ||t|t sJ||t|t sJ|||_||_||_ ||j|yyrS) superrQrMrnrur3r _app_auth_installation_id_token_permissions withRequester)rrrrr __class__s rrQzAppInstallationAuth.__init__*s (G,6h6,/3/@@/ (J7H$,ObQbbO Jy)$DOiOD! /"3    y ) !rrct|tsJ|t| |j |j ddlm}|di|jj|_ |S)Nrrr) rMrrrwithAuthrgithub.GithubIntegrationrrkwargsr)rrrrs rrz!AppInstallationAuth.withRequester?sX)Y/::/ i00@A ?.G1F1FG rc.|jjSrS)rrors rrozAppInstallationAuth.app_idJs~~$$$rc.|jjSrS)rrprs rrpzAppInstallationAuth.private_keyNs~~)))rc|jSrS)rrs rrz#AppInstallationAuth.installation_idRs$$$rc|jSrS)rrs rrz%AppInstallationAuth.token_permissionsVs&&&rcyrcrrs rrzAppInstallationAuth.token_typeZr<rc|j |jr|j|_|jjSrS)r _is_expired_get_installation_authorizationr rs rr zAppInstallationAuth.token^s9  , , 48H8H040T0T0VD -00666rc|jJ|jjtz }|tjt j kSrS)r expires_at!TOKEN_REFRESH_THRESHOLD_TIMEDELTArrrutc)rtoken_expires_ats rrzAppInstallationAuth._is_expireddsD00<<<<<GGJkk(,,x||"<<t|d|_d|_yrS)rrQrOrP)rrs rrQzNetrcAuth.__init__s %) (,rc|jSrSrWrs rr7zNetrcAuth.usernamerXrc@|jJd|jSNrrTrs rrJzNetrcAuth.logins"{{&^(^^&{{rc@|jJd|jSrrZrs rr9zNetrcAuth.passwords"~~)a+aa)~~rrct|tsJ|t| |t j |j d}|td|j|\|_ |_ |S)NT) raise_errorsz.Could not get credentials from netrc for host ) rMrrrr get_netrc_authbase_urlrhostnamerOrP)rrauthrs rrzNetrcAuth.withRequester sp)Y/::/ i(##I$6$6TJ <!OPYPbPbOcde e&*# T^ rr) r+r,r-r.rQr/r2r7rJr9rrrrs@rrrsv- #s# y [  rr)$r0rBrrrrrtypingrrr r rrequestsr githubr github.InstallationAuthorizationr github.Requesterrrrr&ACCESS_TOKEN_REFRESH_THRESHOLD_SECONDSrrr5rIr\rjrnrrrrrrrrs: 2277 F5:*,&$-6\$]!'(377'(T4D#''48M6-D-. $ PcPf3$U-$ .C DU-px&$ m4x&v# }[9#r