i0SrSSKrSSKJr SSKJr SSKJr SSKJr SSKJr SSKJ r SS K J r SS K J r SS K Jr SS KJr SS KJr SSKJr SSKJr SSKJr SSKJr SSKJr SSKJr SSKJr SSKJr SSKJ r SSK!J"r" SSK#J$r$ Sr%"SS\ 5r&"SS\5r'"SS\5r(S \)S!\*\)\44S"jr+"S#S$\5r,"S%S&\5r-g)'zDefines an auth handler to inject an Authorization header into each request. Tokens are assumed to be installed onto a user's system via a separate CLI command. N)fnmatch) lru_cache)Any) NamedTuple)Optional)Protocol) ParseResult)urlparse) CondaError)Context)ChannelAuthBase) BaseModel)Field)ValidationError)PreparedRequest)Response) repo_config)TOKEN_DOMAIN_MAP)CredentialType)AnacondaAuthConfig)TokenNotFoundError) TokenInfoz/repo/c*\rSrSrS\S\S\4SjrSrg) ResponseHook$response_returnc gN)selfrrs 6Lib\site-packages\anaconda_auth\_conda\auth_handler.py__call__ResponseHook.__call__&s#r!N)__name__ __module__ __qualname____firstlineno__rrr$__static_attributes__r!r&r#rr$sEEEEr&rc4\rSrSr%Sr\\\S'\\S'Sr g)AccessCredential)zNRepresents a typed string containing an access credential (of CredentialType).valuetyper!N) r'r(r)r*__doc__rstr__annotations__rr+r!r&r#r-r-)sX C= r&r-c\rSrSrSrSrg)AnacondaAuthError1zr A generic error to raise that is a subclass of CondaError so we don't trigger the unhandled exception traceback. r!N)r'r(r)r*r1r+r!r&r#r5r51sr&r5 channel_namercUnURS5(dUS- n[U5nUR(aUR(d0$0n[ 5nUR HnUR SS5nX`:XaUnM[U5nURUR:waMEURUR-nURUR-n [X5(dMUnM U$)z=Find the correct channel settings from conda's configuration./channel) endswithr schemenetlocr channel_settingsgetpathr) r7url parsed_urlr?contextsettingsr:parsed_settingurl_without_schemapatterns r#_load_channel_settingsrI7s C <<   s #J   J$5$5 iG,,,,y"-  "'  !'*  J$5$5 5 '..@ ''.*=*== % / /' #-& r&cn\rSrSr%\"SSS9r\\\S'\"SSS9r \\ \S'\ S\S S4S j5r S r g) AnacondaAuthHandlerExtraSettingsdN auth_domain)defaultaliasoverride_auth_domaincredential_typeoverride_credential_typer7rcj[U5nU"S0UD6$![an[SU35eSnAff=f)z3Load extra settings for a channel, with validation.zIError when loading anaconda-auth extra configuration from your condarc. Nr!)rIrr5)clsr7rEes r#from_channel_name2AnacondaAuthHandlerExtraSettings.from_channel_namejsH*,7 ?? " #_`a_be  s 2-2r!)r'r(r)r*rrPrr2r3rRr classmethodrVr+r!r&r#rKrKdsX*/M*R(3-R9>-:h~6S5Wr&rKc ^\rSrSrS\S\S\4U4SjjrS\S\\\ 44Sjr S \S \ S\S\ \ 4S jr \S\S\ \ 4S j5r\S \S\ 4Sj5r\S \S\\ \\ 44Sj5rS \ S\4SjrS\S\4SjrSrU=r$)AnacondaAuthHandlervr7argskwargscb>[TU]"U/UQ70UD6 [RU5Ulgr )super__init__rKrV_extras)r"r7r\r] __class__s r#r`AnacondaAuthHandler.__init__ws, 7777II,W r&rCrcURR5nUn[RnU[;a [Uup4n[ US9nUR (a[RnURR(aURRnURR(aURRnX44$)zSelect the appropriate domain for token lookup based on a parsed URL. We also determine whether to use API key or legacy repo token. This method handles a default set of rules, as well as user overrides via conda channel_settings. )domain) r>lowerrAPI_KEYrruse_unified_repo_api_keyrarPrR)r"rCchannel_domain token_domainrQrconfigs r#_load_token_domain&AnacondaAuthHandler._load_token_domain{s$**002& (00 - -/?/O ,L1$<8  * *,44O << , ,<<<rfr token_listitemsr r-rrv)rCretokens token_urlrx token_netlocs r#_load_token_via_conda_token/AnacondaAuthHandler._load_token_via_conda_tokens}""((*  " ++-F$*LLN ' 299 %%'61e6G+E>3L3LMM%3r&rBc[U5nURU5up4URX4U5=n(aU$URU5=n(aU$[ SU5$)a)Load the appropriate token based on URL matching. First, attempts to load from the keyring. If that fails, we attempt to load the legacy repo token via conda-token. Cached for performance. Args: url: The URL for the request. Returns: The token, if it can be loaded. None, otherwise. N)r rlr|rr-)r"rBrCrjrQrxs r# _load_tokenAnacondaAuthHandler._load_tokensp c] (,(?(? (K% 11 :  5 L66zB BU BLo66r&c[R"S5=n(aSU3[R4$UR U5nUR cSUR 4$UR [R:XaSUR 3UR 4$SUR 3UR 4$![a SWR 4s$f=f)zBuild the Authorization header based on the request URL. The result can vary in terms of "token" vs. "Bearer" as well as whether the credential is a legacy repo token or an API key. ANACONDA_AUTH_API_KEYzBearer Nztoken ) osgetenvrrgrr/r0rv Exception)r"rBrprxs r# _build_header!AnacondaAuthHandler._build_headersii 78 87 8WI&(>(>> > $$$S)E{{"UZZ''zz^666 }-uzz99U[[M*EJJ6 6 $# # $s+B4 8B4B44CCcp^^U[R:XaSOSmS[S[S[4UU4SjjnU$)Nzanaconda token installzanaconda loginrrrc>URS;aeURRRS5b!SURSTRSTS3nOSTRSTS3n[ U5eU$) zBRaise a nice error message if the authentication token is missing.> AuthorizationzReceived authentication error (z) when accessing z?. If your token is invalid or expired, please re-install with `z`.zToken not found for z. Please install token with `) status_coderequestheadersr@r7r5)rrmessage instructionr"s r#handler.handler s##z1##++//@L9(:N:N9OO`aearar`stXXcWddfh /t/@/@.AB66A]"F(00Or&)rrvrr)r"rQrrs` @r#_build_response_handler+AnacondaAuthHandler._build_response_handlersF .";";; %!   h S X   r&rcURcU$URUR5up#URSURU55 U(aX!RS'U$)z22(2 2 " # 2h   " #  7s7'7776$$x}n/L)M$$:' 8Or&rZ).r1rr functoolsrtypingrrrr urllib.parser r condar conda.base.contextr conda.plugins.typesr pydanticrrrrequestsrranaconda_auth._condaranaconda_auth._conda.configrranaconda_auth.configranaconda_auth.exceptionsranaconda_auth.tokenrrrrr-r5r2dictrIrKrZr!r&r#rs  $!&/$$,8637)  F8F z  **c3h*Zy$P/Pr&