OKidZddlZddlmZddlmZmZddlmZddl m Z m Z ddl m Z ddlmZdd lmZmZej&eZd ZGd d e j.Zy) z Classes/functions for integrating with Django REST Framework. http://www.django-rest-framework.org/api-guide/authentication/#custom-authentication N) get_backends)ImproperlyConfiguredSuspiciousOperation) import_string)authentication exceptions) HTTPError)OIDCAuthenticationBackend)import_from_settingsparse_www_authenticate_headerc0tdd}|r/t|}t|ts d}t ||St Dcgc]}t|ts|}}|s d}t |t |dkDr t d|dScc}w)z5 Get the Django auth backend that uses OIDC. OIDC_DRF_AUTH_BACKENDNzTClass configured in OIDC_DRF_AUTH_BACKEND does not extend OIDCAuthenticationBackend!zxNo backends extending OIDCAuthenticationBackend found - add one to AUTHENTICATION_BACKENDS or set OIDC_DRF_AUTH_BACKEND!z.More than one OIDCAuthenticationBackend found!r)r r isinstancer rrlen)backend_settingbackendmsgbbackendss V/var/www/aura-ras/venv/lib/python3.12/site-packages/mozilla_django_oidc/contrib/drf.pyget_oidc_backendrs++BDIO0-02'#<== 's+ +(>VaZ;T-UVHV  O #3'' 8}q"#STT A;Ws B Bc.eZdZdZdZddZdZdZdZy) OIDCAuthenticationz0 Provide OpenID authentication for DRF. apiNc*|xs t|_yN)rr)selfrs r__init__zOIDCAuthentication.__init__Bs4"2"4 c|j|}|sy |jj|dd}|sd}tj|||fS#t$rl}|j}|j dk(rKd|j vr=t|j d}tj|jddd}~wt$r0}tjd|tjdd}~wwxYw) z Authenticate the request and return a tuple of (user, token) or None if there was no authentication attempt. Nizwww-authenticateerror_descriptionz(no error description in www-authenticatezLogin failed: %sz Login failedz7Login failed: No user found for the given access token.)get_access_tokenrget_or_create_userr response status_codeheadersr rAuthenticationFailedgetrLOGGERinfo)rrequest access_tokenuserexcrespdatars r authenticatezOIDCAuthentication.authenticateEs ,,W5  B<<22<tLD*KC11#6 6\!!1 <EC11#6 6 Y]X 11#6 6Awr c d|jzS)a If this method returns None, a generic HTTP 403 forbidden response is returned by DRF when authentication fails. By making the method return a string, a 401 is returned instead. The return value will be used as the WWW-Authenticate header. zBearer realm="%s")www_authenticate_realm)rr,s rauthenticate_headerz&OIDCAuthentication.authenticate_headers#T%@%@@@r r) __name__ __module__ __qualname____doc__r>rr2r#r?r rrr:s% #5$"L8Ar r)rCloggingdjango.contrib.authrdjango.core.exceptionsrrdjango.utils.module_loadingrrest_frameworkrrrequests.exceptionsr mozilla_django_oidc.authr mozilla_django_oidc.utilsr r getLoggerr@r*rBaseAuthenticationrrDr rrOsV ,L55)>   8 $DUA::UAr