U  W[$@sddlmZmZddlZddlmZmZmZddlm Z ddl m Z ddl m Z ddlmZmZGdd d eZd ZeeGd d d ZeeGd ddeZeeGdddZeZdS))divisionabsolute_importN) implementer Interface Attribute)Logger)defer)failure)error credentialsc@s eZdZdZedZddZdS)ICredentialsCheckerzB An object that can check sub-interfaces of ICredentials. zKA list of sub-interfaces of ICredentials which specifies which I may check.cCsdS)a @param credentials: something which implements one of the interfaces in self.credentialInterfaces. @return: a Deferred which will fire a string which identifies an avatar, an empty tuple to specify an authenticated anonymous user (provided as checkers.ANONYMOUS) or fire a Failure(UnauthorizedLogin). Alternatively, return the result itself. @see: L{twisted.cred.credentials} N)r r r 7/usr/lib/python3/dist-packages/twisted/cred/checkers.pyrequestAvatarIdsz#ICredentialsChecker.requestAvatarIdN)__name__ __module__ __qualname____doc__rcredentialInterfacesrr r r rr s r r c@seZdZejfZddZdS)AllowAnonymousAccesscCs ttSN)rsucceed ANONYMOUSselfr r r rr:sz$AllowAnonymousAccess.requestAvatarIdN)rrrr Z IAnonymousrrr r r rr6src@s<eZdZdZejejfZddZddZ ddZ dd Z d S) 'InMemoryUsernamePasswordDatabaseDontUseak An extremely simple credentials checker. This is only of use in one-off test programs or examples which don't want to focus too much on how credentials are verified. You really don't want to use this for anything else. It is, at best, a toy. If you need a simple credentials checker for a real application, see L{FilePasswordDB}. cKsdd|D|_dS)NcSsi|]\}}|d|qS)ascii)encode).0xyr r r OszDInMemoryUsernamePasswordDatabaseDontUse.__init__..)itemsusers)rr#r r r__init__Nsz0InMemoryUsernamePasswordDatabaseDontUse.__init__cCs||j|<dSr)r#)rusernamepasswordr r raddUserRsz/InMemoryUsernamePasswordDatabaseDontUse.addUsercCs|r|SttSdSrr ZFailurer UnauthorizedLoginrZmatchedr%r r r_cbPasswordMatchVsz8InMemoryUsernamePasswordDatabaseDontUse._cbPasswordMatchcCs@|j|jkr.t|j|j|j|j|jStt SdSr) r%r#r maybeDeferred checkPassword addCallbackr+failr r)rr r rr]s  z7InMemoryUsernamePasswordDatabaseDontUse.requestAvatarIdN) rrrrr IUsernamePasswordIUsernameHashedPasswordrr$r'r+rr r r rr?s rc@sTeZdZdZdZdZdZeZddd Z d d Z d d Z ddZ ddZ ddZdS)FilePasswordDBat A file-based, text-based username/password database. Records in the datafile for this class are delimited by a particular string. The username appears in a fixed field of the columns delimited by this string, as does the password. Both fields are specifiable. If the passwords are not stored plaintext, a hash function must be supplied to convert plaintext passwords to the form stored on disk and this CredentialsChecker will only be able to check IUsernamePassword credentials. If the passwords are stored plaintext, IUsernameHashedPassword credentials will be checkable as well. FNr:TcCsR||_||_||_||_||_||_||_|jdkrDtjtj f|_ n tjf|_ dS)a @type filename: C{str} @param filename: The name of the file from which to read username and password information. @type delim: C{str} @param delim: The field delimiter used in the file. @type usernameField: C{int} @param usernameField: The index of the username after splitting a line on the delimiter. @type passwordField: C{int} @param passwordField: The index of the password after splitting a line on the delimiter. @type caseSensitive: C{bool} @param caseSensitive: If true, consider the case of the username when performing a lookup. Ignore it otherwise. @type hash: Three-argument callable or L{None} @param hash: A function used to transform the plaintext password received over the network to a format suitable for comparison against the version stored on disk. The arguments to the callable are the username, the network-supplied password, and the in-file version of the password. If the return value compares equal to the version stored on disk, the credentials are accepted. @type cache: C{bool} @param cache: If true, maintain an in-memory cache of the contents of the password file. On lookups, the mtime of the file will be checked, and the file will only be re-parsed if the mtime is newer than when the cache was generated. N) filenamedelimufieldpfield caseSensitivehashcacher r0r1r)rr5r6Z usernameFieldZ passwordFieldr9r:r;r r rr$|s$ zFilePasswordDB.__init__c Cs:tt|}dD]$}z ||=Wqtk r2YqXq|S)N) _credCache_cacheTimestamp)dictvarsKeyError)rdkr r r __getstate__s  zFilePasswordDB.__getstate__cCs|r|SttSdSrr(r*r r rr+szFilePasswordDB._cbPasswordMatchc cszt|jdz}|D]n}|}||j}|jt|ks|jt|krJq|jrh||j||jfVq||j ||jfVqW5QRXWn:t k r}z|j j d|dt W5d}~XYnXdS)a Loads the credentials from the configured file. @return: An iterable of C{username, password} couples. @rtype: C{iterable} @raise UnauthorizedLogin: when failing to read the credentials from the file. rbz$Unable to load credentials db: {e!r})eN)openr5rstripsplitr6r7lenr8r9lowerIOError_logr r))rflinepartsrEr r r_loadCredentialss  *zFilePasswordDB._loadCredentialscCs|js|}|jr^|jdks2tj|j|jkrPtj|j|_t | |_||j|fS| D]\}}||krf||fSqft |dSr) r9rJr;r<ospathgetmtimer5r=r>rPr@)rr%upr r rgetUserszFilePasswordDB.getUsercCsz||j\}}Wn"tk r6ttYSXt|d}|j r|dk rv| |j|j |}||krvt |SttSt |j ||j|SdSr)rVr%r@rr/r r)r r0r:r&rr,r-r.r+)rcrTrUZuphr r rrs  zFilePasswordDB.requestAvatarId)r3rr4TNF)rrrrr;r<r=rrLr$rCr+rPrVrr r r rr2hs  ; r2)Z __future__rrrQZzope.interfacerrrZtwisted.loggerrZtwisted.internetrZtwisted.pythonr Z twisted.credr r r rrobjectrr2ZOnDiskUsernamePasswordDatabaser r r rs    "(