o b"@sdZddlZddlZddlZddlZddlmZddlmZm Z m Z ddl m Z Gddde Z e e Gdd d Ze e Gd d d Ze e Gd d d ZdS)zF Protocol agnostic implementations of SASL authentication mechanisms. N)md5) Attribute Interface implementer) networkStringc@s$eZdZedZddZddZdS)ISASLMechanismz#Common name for the SASL Mechanism.cCdS)z Get the initial client response, if defined for this mechanism. @return: initial client response string. @rtype: C{str}. Nr r r P/usr/lib/python3/dist-packages/twisted/words/protocols/jabber/sasl_mechanisms.pygetInitialResponsez!ISASLMechanism.getInitialResponsecCr)z Get the response to a server challenge. @param challenge: server challenge. @type challenge: C{str}. @return: client response. @rtype: C{str}. Nr ) challenger r r getResponse!r zISASLMechanism.getResponseN)__name__ __module__ __qualname__rnamer rr r r r rs rc@s$eZdZdZdZddZddZdS) Anonymouszm Implements the ANONYMOUS SASL authentication mechanism. This mechanism is defined in RFC 2245. ANONYMOUScCdSNr selfr r r r 6zAnonymous.getInitialResponsecCrrr rr r r r r9zAnonymous.getResponseN)rrr__doc__rr rr r r r r,s  rc@s,eZdZdZdZddZddZddZd S) Plainz Implements the PLAIN SASL authentication mechanism. The PLAIN SASL authentication mechanism is defined in RFC 2595. PLAINcCs"|pd|_|pd|_|p d|_dS)a  @param authzid: The authorization identity. @type authzid: L{unicode} @param authcid: The authentication identity. @type authcid: L{unicode} @param password: The plain-text password. @type password: L{unicode} N)authzidauthcidpassword)rr r!r"r r r __init__Hs zPlain.__init__cCs,|jdd|jdd|jdS)Nzutf-8)r encoder!r"rr r r r Xs   zPlain.getInitialResponsecCrrr rr r r rarzPlain.getResponseN)rrrrrr#r rr r r r r>s  rc@sTeZdZdZdZddZddZddZd d Zd d Z d dZ ddZ ddZ dS) DigestMD5z Implements the DIGEST-MD5 SASL authentication mechanism. The DIGEST-MD5 SASL authentication mechanism is defined in RFC 2831. z DIGEST-MD5cCsF||_||_||_|d||_|dur!|jd|7_dSdS)a @param serv_type: An indication of what kind of server authentication is being attempted against. For example, C{u"xmpp"}. @type serv_type: C{unicode} @param host: The authentication hostname. Also known as the realm. This is used as a scope to help select the right credentials. @type host: C{unicode} @param serv_name: An additional identifier for the server. @type serv_name: C{unicode} @param username: The authentication username to use to respond to a challenge. @type username: C{unicode} @param password: The authentication password to use to respond to a challenge. @type password: C{unicode} /N)usernamer" defaultRealm digest_uri)r serv_typehost serv_namer(r"r r r r#pszDigestMD5.__init__cCrrr rr r r r rzDigestMD5.getInitialResponsecCsb||}d|vr dS|dd}z|d}Wnty'|j|}Ynw||||dS)Nsrspauthcharsetasciirealmnonce)_parsedecodeKeyErrorr)r% _genResponse)rr directivescharsetrealmr r r rs   zDigestMD5.getResponsec Cs|}i}d}d}|rl|d|}|||}|d7}|||ddkrE|d7}|d|}|||} |d|d}|dkrDd}n!|d|}|dkrZ||d } d}n|||} |d}| ||<|s d D]} | |vr}|| d|| <qn|S) z Parses the server challenge. Splits the challenge into a dictionary of directives with values. @return: challenge directives and their values. @rtype: C{dict} of C{str} to C{str}. rT=",FN)qopcipher)indexlstripfindrstripsplit) rr s paramDictcurremainingParamsmiddlerendvalueparamr r r r3s:     zDigestMD5._parsecCsLg}|D]\}}|dvr|d|}n|d|}||qd|S)af Create message string from directives. @param directives: dictionary of directives (names to their values). For certain directives, extra quotes are added, as needed. @type directives: C{dict} of C{str} to C{str} @return: message string. @rtype: C{str}. )usernamer1cnoncer2 digest-urisauthzidr@r:r=)itemsappendjoin)rr7directive_listrrL directiver r r _unparses    zDigestMD5._unparsec sdddd}fdd} |d|d|d|d|} d|} || || |d|d|dd d|| } | S) z Calculates response with given encoded parameters. @return: The I{response} field of a response to a Digest-MD5 challenge of the given parameters. @rtype: L{bytes} cSs t|Sr)rdigest)rFr r r Hs z'DigestMD5._calculateResponse..HcSs t|Sr)binasciib2a_hex)nr r r HEXs z)DigestMD5._calculateResponse..HEXcs|d|S)N:r )krFrXr r KDsz(DigestMD5._calculateResponse..KDr]s AUTHENTICATE:authr ) rcnoncencnoncer(r"r9urir\r`a1a2responser r_r _calculateResponses  ( *zDigestMD5._calculateResponsec Csz|j|}|j|}|j|}Wntywtdd}|}d} ||||||||} |||||| || |dd } || S)z Generate response-value. Creates a response to a challenge according to section 2.1.2.1 of RFC 2831 using the C{charset}, C{realm} and C{nonce} directives from the challenge. r;08xrar0) rNr1r2rOsncr?rPsresponser/) r(r%r"r* UnicodeErrorr _gen_noncerirV) rr8r9rdr(r"r*rcrbqoprhr7r r r r6 s0     zDigestMD5._genResponsecCs4dtttf}t|}t|dS)Nz%f:%f:%dr0)randomtimeosgetpidrr hexdigestr%)r nonceString nonceBytesr r r rl0szDigestMD5._gen_nonceN) rrrrrr#r rr3rVrir6rlr r r r r&fs, 'r&)rrYrprnrohashlibrzope.interfacerrrtwisted.python.compatrrrrr&r r r r s  '