o O6ufT @slddlZzddlZdZWn eydZYnwddlZddlmZmZdZdZe dZ Gdd d Z dS) NTF)datetime timedeltaz sos-toolsz,urn:ietf:params:oauth:grant-type:device_codesosc@sZeZdZdZddZddZddZdd Zd d Zd d Z ddZ ddZ dddZ dS)DeviceAuthorizationClassz$ Device Authorization Class cCs*d|_d|_d|_||_||_|dSN) _access_token_access_expires_at&_DeviceAuthorizationClass__device_codeclient_identifier_urltoken_endpoint_use_device_code_grant)selfr r rt||j|dkrP|d d vrPt||jWnt jjym}zt d |WYd}~nd}~ww|jdusdSdS) z Continuously poll OIDC token endpoint until the user is successfully authenticated or an error occurs. ) grant_type client_idrrNrz$The SSO authentication is successful)r2r3error)authorization_pending slow_downz)Error was found while posting a request: )GRANT_TYPE_DEVICE_CODErr r r!rtimesleepr)r"r#r r+loggerinfo_set_token_datar%text exceptionsRequestExceptionr4)r token_datacheck_auth_completionr+r.rrrrUs:      z1DeviceAuthorizationClass.poll_for_auth_completioncCsn|d|_tt|dd|_|d|_|d|_|jdkr*tj|_ dStt|jd|_ dS)a@ Set the class attributes as per the input token_data received. In the future we will persist the token data in a local, in-memory keyring, to avoid visting the browser frequently. :param token_data: Token data containing access_token, refresh_token and their expiry etc. access_token expires_inseconds refresh_tokenrefresh_expires_inrN) r&rrutcnowrr_refresh_token_refresh_expires_inmax_refresh_expires_at)r r@rrrr<vs       z(DeviceAuthorizationClass._set_token_datacCs2|r|jS|r||jS||jS)zt Get the valid access_token at any given time. :return: Access_token :rtype: string )is_access_token_validris_refresh_token_valid_use_refresh_token_grantr rrrrget_access_tokensz)DeviceAuthorizationClass.get_access_tokencC$|jo|jo|jtddtkS)z Check the validity of access_token. We are considering it invalid 180 sec. prior to it's exact expiry time. :return: True/False rD)rrrrrHrrrrrMs z.DeviceAuthorizationClass.is_access_token_validcCrQ)z Check the validity of refresh_token. We are considering it invalid 180 sec. prior to it's exact expiry time. :return: True/False rRrD)rIrLrrrHrrrrrNs z/DeviceAuthorizationClass.is_refresh_token_validNcCststdtd|s |jn|d}tj|j|d}|jdkr'|| dS|jdkrKd| dvrKt d |jd | dd | dStd |jd | d)z Fetch the new access_token and refresh_token using the existing refresh_token and persist it. :param refresh_token: optional param for refresh_token rrF)r0r/rFr1r2r3invalidr4zAProblem while fetching the new tokens from refresh token grant - rz%. New Device code will be requested !zcSomething went wrong while using the Refresh token grant for fetching tokens: Returned status code z and error N) r r!rrIr"r#r r+r<r%r:warningr )r rFrefresh_token_datarefresh_token_resrrrrOs:      z1DeviceAuthorizationClass._use_refresh_token_grantr) __name__ __module__ __qualname____doc__rr rrr<rPrMrNrOrrrrrs !  r) loggingr"r ImportErrorr8rrrr7 getLoggerr:rrrrrs