j)LdZddlZddlZddlZddlmZdZdZdZddd Z dS) z@Shared launch options for web authentication, MCP OAuth and TLS.N)urlsplitcddlm} t}|jdvsR|jrK|jD|j=|jdvs4tdDstfddDrt|}d|j cxkrd ksntt| d S#t$r}td |d}~wwxYw) Nr) AnyHttpUrl>httphttps>/c3dK|]+}|pt|dkV,dS) N)isspaceord).0chars FC:\Users\johnn\OneDrive\Documents\AI\shared\authentication\__init__.py z#parse_public_url..s9JJDt||~~7TRJJJJJJc3 K|]}|vV dS)N)rrvalues rrz#parse_public_url..s'GGtu}GGGGGGr)?#\*ir zw--public-url must be an HTTP(S) origin, e.g. https://wangp.example.com, without a path, query, fragment or credentials.) pydanticrrschemehostnameusernamepasswordpathany ValueErrorportstrrstrip)rrparsedurlerrors` rparse_public_urlr) s@###### _% M!2 2 2&/ 2V_Mh?.&+Y2N2NJJEJJJJJ3OGGGG1FGGGGG3O,, jCH%%%%%%%%,, 3xxs### ___STTZ_ __sCC C/C**C/c|j}|}|ddd|dddd |d dd |d tddd|ddd|ddd |ddd |dtdd|ddd |ddd dS)N--auth store_truez6Require a password for all Gradio and Deepy web access)actionhelpz --no-auth store_falseauthz$Disable web authentication (default))r-destr.z--auth-passwordzWWeb passphrase (requires --auth; otherwise WANGP_AUTH_PASSWORD or a generated password))defaultr.z --public-urlORIGINzsRestrict browser requests to this exact origin and handle proxies that rewrite Host, e.g. https://wangp.example.com)typer2metavarr. --mcp-authz+Require OAuth authorization for network MCPz--mcp-auth-passwordzqSeparate MCP approval passphrase (requires --mcp-auth; otherwise WANGP_MCP_AUTH_PASSWORD or a generated password)z--mcp-auth-urlzSPublic MCP server origin, e.g. https://wangp.example.com:7866 (requires --mcp-auth)z --https-portzAServe HTTPS on this port and redirect the main HTTP port to HTTPS)r4r2r.z--ssl-certfilez3TLS certificate PEM file (otherwise WANGP_SSL_CERT)z --ssl-keyfilez2TLS private key PEM file (otherwise WANGP_SSL_KEY)) add_argumentadd_mutually_exclusive_groupr)int)parseraddr0s r add_argumentsr<sc  C  . . 0 0Dh|:rsssk-fKqrrrC4/HIIIIC-tXUJKKKKC \0]^^^^Ct3fggggC$.CDDDDCS$5xyyyyC$-bccccC,`aaaaaarctjd}t|||j||S)NF)add_help) namespace)argparseArgumentParserr<parse_known_argscli_arg)argsr:s rforwarded_optionsrE*sE $e 4 4 4F& DLD999 KrF)mcpc|r|jn|j}|r|jn|j}|rdnd}||st |d|d|sdS||nt j|rdnd}|,tjd}t|rdnd d || r&t| d d krt d |S)Nr6r+z-password requires .WANGP_MCP_AUTH_PASSWORDWANGP_AUTH_PASSWORDz MCP approvalz WanGP webz password: zutf-8iz>The passphrase must be non-empty and at most 1024 UTF-8 bytes.) mcp_authr0mcp_auth_password auth_passwordr"osgetenvsecrets token_urlsafeprintstriplenencode)rDrFenabledsuppliedflagrs rrr3s"1dmm G),Dt%%$2DH ,<r\sFF !!!!!!___$ b b b r