j' d Z ddlZddlZddlZddlZddlZddlZddlmZm Z ddl
m Z ddl m
Z
mZ ddlmZmZmZ dZdZd d
d d d
Z G d d Zd dZd dZddddddZd Z G d d Z G d d Z G d d Z dS ) zIPassword-only login, process-wide throttling and shared browser sessions. N) urlencodeurlsplit)run_in_threadpool)HTTPConnectionRequest) HTMLResponse JSONResponseRedirectResponse
wangp_sessioniQ no-storez no-referrerDENYzjdefault-src 'none'; style-src 'unsafe-inline'; form-action 'self'; frame-ancestors 'none'; base-uri 'none')
Cache-ControlReferrer-PolicyzX-Frame-OptionszContent-Security-Policyc e Zd Zd Zd Zd ZdS ) PasswordGatec t j d | _ | | | _ t j | _ d| _ d| _ d S )N r )
secrets token_bytessalt_hashdigest threadingLocklockfailures next_attempt)selfpasswords AC:\Users\johnn\OneDrive\Documents\AI\shared\authentication\web.py__init__zPasswordGate.__init__ sK '++ jj** N$$
c d t j | d | j ddd S )Nutf-8 @ )r nrp)hashlibscryptencoder )r values r r zPasswordGate._hash s- ~ell7 3 3$)uPQUVWWWWr" c " | j d sdS t j | j t j z
}|dk r d|f| j S t |t oRt | d dk o,t j
| | | j }|r*d| _ d| _ | j dS | xj dz
c_ | j d k rd
nt# d| j d z
d z }t j |z | _ d|f| j S # | j w xY w)
NF)blocking)Fr' r r$ i Tr r' iX )r acquiremathceilr time monotonicrelease
isinstancestrlenr- r compare_digestr r r max)r r. remainingvaliddelays r checkzPasswordGate.check s y % 00 8 $"3dn6F6F"FGGI1}} i'
I uc** Ms5<<3H3H/I/IT/Q MV]Vlmqmwmwx}m~m~ AE AL WM WME
!
$%!
I
MMQ MM =B..CCC4=1;L4M4MPR4RE $ 0 05 8D %< I DI s 6E3 /A8E3 AE3 3FN)__name__
__module__ __qualname__r! r rC r" r r r sD X X X r" r c ||S ddd | j j | j j }| j j }| j d }|dv r|d| d| hv r|S | d| S ) Nhttphttps)wswssorigin> rI rJ zhttp://https://z://)geturlschemenetlocheaders)
connection
public_urlrQ hostrM s r _browser_originrW 3 s 7
+
+
/
/
0Ez~G\
]
]F > D
#
#H
-
-F """v2BD2B2BDUtDUDU1V'V'V
r" c f | j d }|d u p|t | | k S )NrM )rS rO rW )rT rU rM s r same_originrY A s6
#
#H
-
-F T> NVz:'N'N NNr" zSign In)errorstatusretrybuttonc d d | D }dt j | dt j | dt j | dt j |d d | d
t j | d t j | d } i t d
di}
|rt | |
d< t
| ||
S )NrZ c 3 ~ K | ]8\ }}d t j |d dt j |d dV 9dS )zN)htmlescape.0kvs r z login_page..G sw S S{{|~v4;q3M3M3MvvX\XcdemqXrXrXrvvv S S S S S Sr" z{a
z
z
r z same-originz Retry-After status_coderS )joinitemsre rf PAGE_HEADERSr< r ) title descriptionactionfieldsr\ r] r^ r_ hiddenpagerS s r
login_pagerw F s
WW S S DJ DP DP DR DR S S S S SF Q LP LW X] L^ L^ Q QU## Q Q-1[-E-E Q Qgkgrsy BF hG hG hG Q Q KQ Q Q _c _j kq _r _r Q Q [_ [f gl [m [m Q Q QD A @ 0-@@G ,!$U
&' B B BBr" c N K t }| 2 3 d {V }| | t | dk rt d ?6 ddlm} d || d d D S ) Nr% zLogin request is too large.r )parse_qsc & i | ]\ }}||d S )rG rg s r
z small_form..X s" ` ` `AAqu ` ` `r" r$ T)keep_blank_values) bytearraystreamextendr=
ValueError urllib.parsery decodero )requestdatachunkry s r
small_formr Q s ;;D ~~'' < < < < < < *>RV!W!W!W!]!]!_!_ ` ` ``s A$c " e Zd ZddZd Zd ZdS )WebAuthenticationNc ddl m} | || nd | _ |t | nd | _ i | _ t
j | _ t j
d | _ d S )Nr )parse_public_url ) shared.authenticationr rU r gatesessionsr r r r
token_urlsafe csrf_secret)r r rU r s r r! zWebAuthentication.__init__\ sz :::::::D:P**:666VZ.6.BL***
N$$ "044r" c | j dS | j 5 | j |j t
d d t
j k cd d d S # 1 swxY w Y d S )NTrZ r )r r r rO cookiesCOOKIEr8 r9 )r rT s r
authenticatedz WebAuthentication.authenticatedd s 9 4
Y _ _=$$Z%7%;%;FB%G%GKKdnN^N^^ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _s AA,,A03A0c K |j dd }t | }| d r@| d s+d|v s'|j s |j st
d |D rd}dt d|i z }d\ }}}|j dk r+ t | d {V }n*# t t f$ r t d d
id cY S w xY wt || j rTt j | d
d d | j d st d did S | j dn3t) | j j | dd d {V \ } }| rt- |dddi }
t j d } | j 5 t3 j fd| j D | _ t; | j dk r t d did cd d d S t< z | j | < d d d n # 1 swxY w Y |
t@ | d tC || j d d dt< |
S |rd!nd"}|rd#| d$nd%}tE d&d'|d
| j i|||( S ))Nnext/z//\c 3 < K | ]}t | d k V dS )r N)ord)rh cs r rk z*WebAuthentication.login..m sk |Y |Y MN| AB }C }C FH }H |Y |Y |Y |Y |Y |Yr" /auth/login?)rZ r[ r POSTdetailzInvalid login request.i rm csrfrZ r$ Cross-origin request rejected. r1 r / r r rl r c ( i | ]\ }}|k ||S rG rG )rh keyexpirynows r r| z+WebAuthentication.login..~ s+ $j$j$j[S&]cfi]i]iS&]i]i]ir" i zToo many active sessions.i TrN strict)httponlysecuresamesitepathmax_agei z
Try again in z seconds.zIncorrect passphrase.zSign In to WanGPz+One login gives access to Gradio and Deepy.)r\ r] r^ )# query_paramsrO r
startswithrR rQ anyr methodr r UnicodeErrorr rY rU r r> r- r r r rC r
r r r8 r9 r ro r= SESSION_SECONDS
set_cookier rW rw )
r r targetparsedrs r\ r] r^ formrA responsesessionr s
@r loginzWebAuthentication.loginj s| %))B&!! %% ):):4)@)@ DFNNV\VcNgmgtNx{ |Y |Y RX |Y |Y |Y yY yYNF )VV,<"="== ) vu >V # #
[ ' 0 0000000 -
[
[
[#X/G$HVYZZZZZZ
[ w88
c@VW[W_W_`fhjWkWkWrWrszW{W{ ~B ~N ~U ~U V] ~^ ~^ A_ A_
c#X/O$P^abbbb(, (999EVW[W`Wfhlhphpq{} iA iA FB FB @B @B @B @B @B @BLE5
+Fo_iMjkkk!/33Y C C .**C$j$j$j$jDMDWDWDYDY$j$j$jDM4=))T11 +X7R,Sad e e e C C C C C C C C
.1?-BDM'* C C C C C C C C C C C C C C C ##FGd?[bdhdsKtKtKK AK LL LL W_ fi sB# C C C !*SSsF8=Z4E4444CZE,.[]cflnrn~e HM V\ di j j j js+ ,C $C)(C)A(I-I--I14I1N)rD rE rF r! r r rG r" r r r [ sN 5 5 5 5_ _ _ j j j j jr" r c e Zd Zd Zd ZdS )WebAuthMiddlewarec $ ||c| _ | _ d S r )appauth)r r r s r r! zWebAuthMiddleware.__init__ s !4$)))r" c d K |d dvr | ||| d {V S t | }|d }|d dk rO|dk rI|d dv r? | j t || d {V ||| d {V S |d dk p |d d v}| j | r |rt
|| j j s|d dk r |d
d d d {V S |r.t
|| j j st d
did }n|d dv rld|j
dd v rO||d r d|d d z ndz }t dt d|i z d }nt d
did } |||| d {V S |d k r|d dk r|d d k r| j j 5 | j j |j
t$ d d d d d n # 1 swxY w Y t dd }| t$ d |||| d {V S | ||| d {V S )!Ntype> rI websocketr rI z /auth/loginr > GETr r > r HEADOPTIONSzwebsocket.closei )r coder r r r > r r z text/htmlacceptrZ query_string?latin1r r r zSign in to WanGP.r z /auth/logoutr r )r )r r r r r r rY rU r rS rO r r
r r r popr r
delete_cookie) r scopereceivesendrT r unsafer r s r __call__zWebAuthMiddleware.__call__ s = 5 5 5 %$77777777 7#E**
V} =F " "t}'<'<x TcAcAcH w0G0G H HHHHHHH%QXZ^________ _v +-bx Hb1by&&z22
8v
8kR\^b^g^rFsFs
8V} ++ !T+ ! !eFmv&=&=%/U[B[B[
Q
Q "&&z'9'='=fb'I'I4PPP
Q
Q
Q
Q
Q
Q
Q
Q
Q
Q
Q
Q
Q
Q
Q'
3GGGH " "6 " 4 4 4!%$77777777 7XXeWd333333333s ??I
IIN)rD rE rF r! r rG r" r r r s2 ( ( (4 4 4 4 4r" r c e Zd ZdZd Zd ZdS )GradioStartupMiddlewarezAcknowledge Gradio's launch probe; queue startup runs in the lifespan.
This public response performs no work and exposes no application state.
The actual startup endpoint remains inaccessible through the auth gate.
c || _ d S r )r )r r s r r! z GradioStartupMiddleware.__init__ s
r" c K |d dk r8|d dk r,|d dk r t d ||| d {V S | ||| d {V S )Nr rI r r r z/gradio_api/startup-eventsT)r r )r r r r s r r z GradioStartupMiddleware.__call__ s =F " "uX%'?'?E&MUqDqDq+ d++E7DAAAAAAAA AXXeWd333333333r" N)rD rE rF __doc__r! r rG r" r r r s<
4 4 4 4 4r" r r ) r r+ re r6 r r r8 r r r starlette.concurrencyr starlette.requestsr r starlette.responsesr r r
r r rp r rW rY rw r r r r rG r" r r s O O , , , , , , , , 3 3 3 3 3 3 6 6 6 6 6 6 6 6 L L L L L L L L L L !+
bh Fr s s > O O O O
=?sRS\e C C C C Ca a a+j +j +j +j +j +j +j +j\ 4 4 4 4 4 4 4 4@ 4 4 4 4 4 4 4 4 4 4r"