�
�w�g�v � � � S r / SQrSSKJrJr SSKrSSKJr SSKrSSK r SSK
J
r
SSK r SSK J
r
SSKrSSKJrJrJr SSKrSS KJr SS
KJrJrJrJr SS K J r S r S
r Sr Sr!Sr"\#\$\%4r&S r'S r( " S S\5 r) " S S\5 r " S S\5 r* " S S5 r+ " S S \+5 r, " S S \+5 r- " S S \+5 r. " S! S"5 r/ " S# S$\/5 r0 " S% S&\05 r1 " S' S(\25 r3 " S) S*\35 r4 " S+ S,\35 r5 " S- S.\55 r6 " S/ S0\55 r7 " S1 S2\75 r8 " S3 S4\35 r9 " S5 S6\35 r: " S7 S8\35 r; " S9 S:\35 r<g);z4launchpadlib credentials and authentication support.)� AccessToken�AnonymousAccessToken� AuthorizeRequestTokenWithBrowser�CredentialStore� RequestTokenAuthorizationEngine�Consumer� Credentials� )� b64decode� b64encodeN)�StringIO)�select)�stdin)� urlencode�urljoin�parse_qs)� HTTPError)r r �OAuthAuthorizer�SystemWideConsumer)�urisz+request-tokenz
+access-tokenz+authorize-token� i� c �T � [ [ R R SS5 5 $ )z�Whether the user has disabled SSL certificate connection.
Some testing servers have broken certificates. Rather than raising an
error, we allow an environment variable,
``LP_DISABLE_SSL_CERTIFICATE_VALIDATION`` to disable the check.
�%LP_DISABLE_SSL_CERTIFICATE_VALIDATIONF)�bool�os�environ�get� � �:/usr/lib/python3/dist-packages/launchpadlib/credentials.py�$_ssl_certificate_validation_disabledr ? s � � ��
�
��� F��N� O�Or c � � [ 5 n[ R " US9R U SU[ U5 S9u pEUR
S:w a [
XE5 eXE4$ )z�POST to ``url`` with ``headers`` and a body of urlencoded ``params``.
Wraps it up to make sure we avoid the SSL certificate validation if our
environment tells us to. Also, raises an error on non-200 statuses.
)�"disable_ssl_certificate_validation�POST)�method�headers�body�� )r �httplib2�Http�requestr �statusr )�urlr% �params�
cert_disabled�response�contents r �
_http_postr1 L s[ � � 9�:�M� �
�
�+8��
�g�c�&�'� �&�8I�g�J� �H� ���#� ���*�*� � � r c � � \ rS rSrSrSrSrSrSrSr S r
\ S 5 r S\
R \4S
jr\
R 4S jrS rg)
r �[ z�Standard credentials storage and usage class.
:ivar consumer: The consumer (application)
:type consumer: `Consumer`
:ivar access_token: Access information on behalf of the user
:type access_token: `AccessToken`
N�uri�dictz<BR>�
c � � [ 5 nU R U5 UR 5 n[ U[ 5 ( a UR S5 nU$ )zUTurn this object into a string.
This should probably be moved into OAuthAuthorizer.
�utf-8)r �save�getvalue�
isinstance�str�encode)�self�sio�
serializeds r � serialize�Credentials.serializek sD � �
�j�� � � �#���\�\�^�
� �j�#� &� &�#�*�*�7�3�J��r c � � U " 5 n[ U[ 5 ( d UR S5 nUR [ U5 5 U$ )zmCreate a `Credentials` object from a serialized string.
This should probably be moved into OAuthAuthorizer.
r8 )r; r< �decode�loadr )�cls�value� credentialss r � from_string�Credentials.from_stringw s> � � �e� ��%��%�%��L�L��)�E�����%� �)��r c � � U R c S5 eU R b S5 e[ R " U5 n[ U R R
SSS9nU[ - nSU0nX0R :X a SUS' [ XVU5 u px[ U[ 5 ( a UR S 5 nX0R :X a9 [ R " U5 nUb XS
' [ R U5 U l U$ [ R# U5 U l U< [$ < S U R R
< 3nUb XR l US U- -
nU$ )
a[ Request an OAuth token to Launchpad.
Also store the token in self._request_token.
This method must not be called on an object with no consumer
specified or if an access token has already been obtained.
:param context: The context of this token, that is, its scope of
validity within Launchpad.
:param web_root: The URL of the website on which the token
should be requested.
:token_format: How the token should be
presented. URI_TOKEN_FORMAT means just return the URL to
the page that authorizes the token. DICT_TOKEN_FORMAT
means return a dictionary describing the token
and the site's authentication policy.
:return: If token_format is URI_TOKEN_FORMAT, the URL for the
user to authorize the `AccessToken` provided by
Launchpad. If token_format is DICT_TOKEN_FORMAT, a dict of
information about the new access token.
zConsumer not specified.z Access token already obtained.� PLAINTEXT�&)�oauth_consumer_key�oauth_signature_method�oauth_signature�Refererzapplication/json�Acceptr8 �
lp.context�
?oauth_token=z&lp.context=%s)�consumer� access_tokenr �lookup_web_rootr5 �key�request_token_page�DICT_TOKEN_FORMATr1 r; �bytesrD �json�loadsr � from_params�_request_tokenrI �authorize_token_page�context) r> ra �web_root� token_formatr- r, r% r/ r0 s r �get_request_token� Credentials.get_request_token� sN � �8 �}�}�(�C�*C�C�(�� � �(�J�*J�J�(��'�'��1��� #�}�}� 0� 0�#.� �
��
�+�+�� �h�'�� �1�1� 1� 2�G�H� � &�s�V� <��� �g�u� %� %� �n�n�W�-�G� �1�1� 1��Z�Z��(�F��"�'.�|�$�"-�"9�"9�&�"A�D� ��M�"-�"9�"9�'�"B�D� ��$��#�#�'�'��C�
�"�.5�#�#�+��'�'�1�1���Jr c �X � U R c S5 e[ R " U5 n[ U R R
SU R R
SU R R - S9nU[ - nSU0n[ X4U5 u pV[ R U5 U l g)a4 Exchange the previously obtained request token for an access token.
This method must not be called unless get_request_token() has been
called and completed successfully.
The access token will be stored as self.access_token.
:param web_root: The base URL of the website that granted the
request token.
Nz5get_request_token() doesn't seem to have been called.rL z&%s)rN rO � oauth_tokenrP rQ ) r_ r rW r5 rU rX �secret�access_token_pager1 r rI rV )r> rb r- r, r% r/ r0 s r �'exchange_request_token_for_access_token�3Credentials.exchange_request_token_for_access_token� s� � �
� � � +� C� B� C� +��'�'��1��� #�}�}� 0� 0�#.� �+�+�/�/� !�D�$7�$7�$>�$>� >�
�� �*�*�� �h�'�� &�s�V� <��� '� 3� 3�G� <��r )r_ rV )�__name__�
__module__� __qualname__�__firstlineno__�__doc__r_ �URI_TOKEN_FORMATrZ �ITEM_SEPARATOR�NEWLINErA � classmethodrI r �STAGING_WEB_ROOTrd rj �__static_attributes__r r r r r [ sd � �� �N� �� ���N��G�
� � � � � ��&�&�%� ;�| �,�,�=r r c �8 � \ rS rSrSr\S 5 r\S 5 rSrg)r �� zAn OAuth access token.c �J � US nUS nUR S5 nU " X#U5 $ )z:Create and return a new `AccessToken` from the given dict.rg �oauth_token_secretrS )r )rF r- rX rh ra s r r^ �AccessToken.from_params� s4 � � �]�#���,�-���*�*�\�*���3��(�(r c �R � [ U[ 5 ( d UR S5 n[ USS9nUS n[ U5 S:X d S5 eUS nUS n[ U5 S:X d S 5 eUS nUR S
5 nUb [ U5 S:X d S 5 eUS nU " X4U5 $ ) z<Create and return a new `AccessToken` from the given string.r8 F)�keep_blank_valuesrg r z/Query string must have exactly one oauth_token.r rz z*Query string must have exactly one secret.rS z*Query string must have exactly one context)r; r< rD r �lenr )rF � query_stringr- rX rh ra s r rI �AccessToken.from_string� s� � � �,��,�,�'�.�.�w�7�L��,�%�@���]�#���3�x�1�}�O� O�O�}��!�f���,�-���6�{�a� �M�!M�M� ������*�*�\�*�� � ��G� ��!�
<�;�
<�!� �a�j�G��3��(�(r r N) rl rm rn ro rp rt r^ rI rv r r r r r � s+ � � ��)� �)� �)� �)r r c �, ^ � \ rS rSrSrU 4S jrSrU =r$ )r � zgAn OAuth access token that doesn't authenticate anybody.
This token can be used for anonymous access.
c �& >� [ TU ] SS5 g )N� ��super�__init__)r> � __class__s �r r� � AnonymousAccessToken.__init__ s �� �
����R� r r )rl rm rn ro rp r� rv �
__classcell__�r� s @r r r � s �� ��
!� !r r c �: � \ rS rSrSrS
S jrS rS rS rS r S r
g) r i z�Store OAuth credentials locally.
This is a generic superclass. To implement a specific way of
storing credentials locally you'll need to subclass this class,
and implement `do_save` and `do_load`.
Nc � � Xl g)z�Constructor.
:param credential_save_failed: A callback to be invoked if the
save to local storage fails. You should never invoke this
callback yourself! Instead, you should raise an exception
from do_save().
N��credential_save_failed)r> r� s r r� �CredentialStore.__init__ s
� � '=�#r c � � U R X5 U$ ! [ a e [ a* nU R c UeU R 5 SnAU$ SnAff = f)z�Save the credentials and invoke the callback on failure.
Do not override this method when subclassing. Override
do_save() instead.
N)�do_save�EXPLOSIVE_ERRORS� Exceptionr� )r> rH �unique_consumer_id�es r r9 �CredentialStore.save s^ � � *� �L�L�� 9� ���
� � �� *��*�*�2��� � '� '� )� )���� *�s � �A� A�Ac � � [ 5 e)z�Store newly-authorized credentials locally for later use.
:param credentials: A Credentials object to save.
:param unique_consumer_id: A string uniquely identifying an
OAuth consumer on a Launchpad instance.
��NotImplementedError)r> rH r� s r r� �CredentialStore.do_save) s
� � "�#�#r c �$ � U R U5 $ )a� Retrieve credentials from a local store.
This method is the inverse of `save`.
There's no special behavior in this method--it just calls
`do_load`. There _is_ special behavior in `save`, and this
way, developers can remember to implement `do_save` and
`do_load`, not `do_save` and `load`.
:param unique_key: A string uniquely identifying an OAuth consumer
on a Launchpad instance.
:return: A `Credentials` object if one is found in the local
store, and None otherise.
)�do_load�r> �
unique_keys r rE �CredentialStore.load2 s � � �|�|�J�'�'r c � � [ 5 e)a Retrieve credentials from a local store.
This method is the inverse of `do_save`.
:param unique_key: A string uniquely identifying an OAuth consumer
on a Launchpad instance.
:return: A `Credentials` object if one is found in the local
store, and None otherise.
r� r� s r r� �CredentialStore.do_loadD s
� � "�#�#r r� �N) rl rm rn ro rp r� r9 r� rE r� rv r r r r r s � ��=�� $�(�$ $r r c �P ^ � \ rS rSrSrSrS U 4S jjr\S 5 rS r S r
Sr U =r $ )
�KeyringCredentialStoreiR z�Store credentials in the GNOME keyring or KDE wallet.
This is a good solution for desktop applications and interactive
scripts. It doesn't work for non-interactive scripts, or for
integrating third-party websites into Launchpad.
s <B64>c �b >� [ TU ] U5 S U l U( a [ U5 U l g g r� )r� r� � _fallback�MemoryCredentialStore)r> r� �fallbackr� s �r r� � KeyringCredentialStore.__init__\ s- �� �
���/�0� ��� � 2�3I� J�D�N� r c � � S[ 5 ; a SSKqS[ 5 ; a SSKJq gg! [ a [
q gf = f)a Ensure the keyring module is imported (postponing side effects).
The keyring module initializes the environment-dependent backend at
import time (nasty). We want to avoid that initialization because it
may do things like prompt the user to unlock their password store
(e.g., KWallet).
�keyringr N�NoKeyringError)r� )�globalsr� �keyring.errorsr� � ImportError� RuntimeErrorr r r �_ensure_keyring_imported�/KeyringCredentialStore._ensure_keyring_importedb s> � � �G�I� %� � �7�9� ,�
.�9� -�� �
.�!-��
.�s �* �=�=c � � U R 5 UR 5 nU R [ U5 - n [ R SX#R
S5 5 g! [ aU n[ [ :X a S[ U5 ; a e U R ( a U R R X5 SnAge SnAff = f)z2Store newly-authorized credentials in the keyring.� launchpadlibr8 �$No recommended backend was availableN) r� rA � B64MARKERr r� � set_passwordrD r� r� r< r� r9 )r> rH r� r@ r� s r r� � KeyringCredentialStore.do_saveu s� � � �%�%�'� �*�*�,�
� �^�^�i�
�&;�;�
� � � � � �
�,=�,=�g�,F�
�� � � �,�.�:�#�a�&�H���~�~����#�#�K�<�<��� �s �%A �
B?�*A
B:�9B:�:B?c �\ � U R 5 [ R SU5 nUb� [ U[
5 ( a UR S5 nUR U R 5 ( a" [ U[ U R 5 S 5 n [ R! U5 nU$ g! [ aU n[ [ :X a S[ U5 ; a e U R ( a U R R U5 s SnA$ e SnAff = f! [ a gf = f! [" a gf = f)z&Retrieve credentials from the keyring.r� r� N�utf8)r� r� � get_passwordr� r� r< r� rE r; r= �
startswithr� r
r~ � TypeErrorr rI r� )r> r� �credential_stringr� rH s r r� � KeyringCredentialStore.do_load� s � � �%�%�'� � '� 4� 4� �
�!� � � (��+�S�1�1�$5�$<�$<�V�$D�!� �+�+�D�N�N�;�;� �(1�)�#�d�n�n�*=�*?�@�)�%�
� )� 5� 5�6G� H� �"�"� ��A � � �,�.�:�#�a�&�H���~�~��~�~�*�*�:�6�6��� ��( !� � � �� �
� �
�sH �B, �2!D �D �,
D �6A D�?D �D�D �
D�D�
D+�*D+)r� )NF)
rl rm rn ro rp r� r� � staticmethodr� r� r� rv r� r� s @r r� r� R s8 �� �� �I�K� �.� �.�$�2'� 'r r� c �< ^ � \ rS rSrSrSU 4S jjrS rS rSrU =r $ )� UnencryptedFileCredentialStorei� z�Store credentials unencrypted in a file on disk.
This is a good solution for scripts that need to run without any
user interaction.
c �0 >� [ TU ] U5 Xl g r� )r� r� �filename)r> r� r� r� s �r r� �'UnencryptedFileCredentialStore.__init__� s �� �
���/�0� �
r c �: � UR U R 5 g)z Save the credentials to disk.N)� save_to_pathr� �r> rH r� s r r� �&UnencryptedFileCredentialStore.do_save� s � �� � �� � �/r c � � [ R R U R 5 ( aT [ R " U R 5 [ R
S:X d [ R U R 5 $ g)z Load the credentials from disk.r N)r �path�existsr� �stat�ST_SIZEr �load_from_pathr� s r r� �&UnencryptedFileCredentialStore.do_load� sQ � �
�G�G�N�N�4�=�=� )� )��G�G�D�M�M�*�4�<�<�8�A�=� �-�-�d�m�m�<� <�r )r� r� �
rl rm rn ro rp r� r� r� rv r� r� s @r r� r� � s �� �� !�0�� r r� c �< ^ � \ rS rSrSrSU 4S jjrS rS rSrU =r $ )r� i� z�CredentialStore that stores keys only in memory.
This can be used to provide a CredentialStore instance without
actually saving any key to persistent storage.
c �2 >� [ TU ] U5 0 U l g r� )r� r� � _credentials)r> r� r� s �r r� � MemoryCredentialStore.__init__� s �� �
���/�0� ��r c � � XR U' g)z!Store the credentials in our dictN�r� r� s r r� � MemoryCredentialStore.do_save� s � �(3���*�%r c �8 � U R R U5 $ )z&Retrieve the credentials from our dict)r� r r� s r r� � MemoryCredentialStore.do_load� s � �� � �$�$�Z�0�0r r� r� r� r� s @r r� r� � s �� �� �4�1� 1r r� c �T � \ rS rSrSrSr S S jr\S 5 rS r S r
S r S
r S r
g)
r i� a The superclass of all request token authorizers.
This base class does not implement request token authorization,
since that varies depending on how you want the end-user to
authorize a request token. You'll need to subclass this class and
implement `make_end_user_authorize_token`.
� UNAUTHORIZEDNc �< � [ R " U5 U l [ R " U5 U l Uc Uc [ S5 eUb Ub [ SU< SU< S35 eUc S/n[
U5 nO
[ U5 nUnXPl X l U=( d / U l
g)a� Base class initialization.
:param service_root: The root of the Launchpad instance being
used.
:param application_name: The name of the application that
wants to use launchpadlib. This is used in conjunction
with a desktop-wide integration.
If you specify this argument, your values for
consumer_name and allow_access_levels are ignored.
:param consumer_name: The OAuth consumer name, for an
application that wants its own point of integration into
Launchpad. In almost all cases, you want to specify
application_name instead and do a desktop-wide
integration. The exception is when you're integrating a
third-party website into Launchpad.
:param allow_access_levels: A list of the Launchpad access
levels to present to the user. ('READ_PUBLIC' and so on.)
Your value for this argument will be ignored during a
desktop-wide integration.
:type allow_access_levels: A list of strings.
Nz:You must provide either application_name or consumer_name.zOYou must provide only one of application_name and consumer_name. (You provided z and z.)�DESKTOP_INTEGRATION) r �lookup_service_root� service_root�web_root_for_service_rootrb �
ValueErrorr r rU �application_name�allow_access_levels)r> r� r� �
consumer_namer� rU s r r� �(RequestTokenAuthorizationEngine.__init__� s� � �@ !� 4� 4�\� B��� �6�6�|�D��
� � #�
�(=� �L��
� � '�M�,E� � $�]�4��
� � � $9�"9� �)�*:�;�H� �
�.�H� ,� � �
� 0� �#6�#<�"�� r c �N � U R R S- U R - $ )z7Return a string identifying this consumer on this host.�@)rU rX r� )r> s r r� �2RequestTokenAuthorizationEngine.unique_consumer_id0 s$ � � �}�}� � �3�&��):�):�:�:r c � � [ < SU< 3nSn[ U R 5 S:� a X#UR U R 5 - -
n[ U R
U5 $ )z�Return the authorization URL for a request token.
This is the URL the end-user must visit to authorize the
token. How exactly does this happen? That depends on the
subclass implementation.
rT z&allow_permission=r )r` r~ r� �joinr rb )r> �
request_token�page�allow_permissions r �authorization_url�1RequestTokenAuthorizationEngine.authorization_url5 s` � � ';�M�J��/�� �t�'�'� (�1� ,� �'7�'<�'<��(�(�(� �
�D� �t�}�}�d�+�+r c � � U R U5 nU R X5 UR c gUR XR 5 U$ )a� Authorize a token and associate it with the given credentials.
If the credential store runs into a problem storing the
credential locally, the `credential_save_failed` callback will
be invoked. The callback will not be invoked if there's a
problem authorizing the credentials.
:param credentials: A `Credentials` object. If the end-user
authorizes these credentials, this object will have its
.access_token property set.
:param credential_store: A `CredentialStore` object. If the
end-user authorizes the credentials, they will be
persisted locally using this object.
:return: If the credentials are successfully authorized, the
return value is the `Credentials` object originally passed
in. Otherwise the return value is None.
N)rd � make_end_user_authorize_tokenrV r9 r� )r> rH �credential_store�request_token_strings r �__call__�(RequestTokenAuthorizationEngine.__call__D sL � �( $� 5� 5�k� B� � �*�*�;�M� � #� #� +��� � �k�+B�+B�C��r c �\ � UR U R [ R S9nUS $ )zLGet a new request token from the server.
:param return: The request token.
)rb rc rg )rd rb r rZ )r> rH �authorization_jsons r rd �1RequestTokenAuthorizationEngine.get_request_tokenb s6 � �
)� :� :��]�]��1N�1N� ;�
�� "�-�0�0r c � � [ 5 e)a� Authorize the given request token using the given credentials.
Your subclass must implement this method: it has no default
implementation.
Because an access token may expire or be revoked in the middle
of a session, this method may be called at arbitrary points in
a launchpadlib session, or even multiple times during a single
session (with a different request token each time).
In most cases, however, this method will be called at the
beginning of a launchpadlib session, or not at all.
r� )r> rH r� s r r� �=RequestTokenAuthorizationEngine.make_end_user_authorize_tokenl s
� � "�#�#r )r� r� rU r� rb �NNN)rl rm rn ro rp �UNAUTHORIZED_ACCESS_LEVELr� �propertyr� r� r� rd r� rv r r r r r � sH � �� !/� �
�� � >=�@ �;� �;�
,� �<1�$r r c �> � \ rS rSrSrSrSrS rS rS r S r
S r S
r g ) � AuthorizeRequestTokenWithURLi} z�Authorize using a URL.
This authorizer simply shows the URL for the user to open for
authorization, and waits until the server responds.
z�Please open this authorization page:
(%s)
in your browser. Use your browser to authorize
this program to access Launchpad on your behalf.z.Press Enter after authorizing in your browser.c � � [ U5 g)z�Display a message.
By default, prints the message to standard output. The message
does not require any user interaction--it's solely
informative.
N)�print)r> �messages r �output�#AuthorizeRequestTokenWithURL.output� s � � �g�r c �@ � U R U R U- 5 g)� Notify the end-user of the URL.N)r �WAITING_FOR_USER)r> r� s r �!notify_end_user_authorization_url�>AuthorizeRequestTokenWithURL.notify_end_user_authorization_url� s � � � � �D�)�)�,=�=�>r c �b � UR U R 5 UR SL$ ! [ ay nUR R S:X a [ UR 5 eUR R S:w a [ S5 [ U5 [ UR 5 eSnAff = f)z Check if the end-user authorizedi� i� z#Unexpected response from Launchpad:N)
rj rb r r/ r+ � EndUserDeclinedAuthorizationr0 r �EndUserNoAuthorizationrV )r> rH r� s r � check_end_user_authorization�9AuthorizeRequestTokenWithURL.check_end_user_authorization� s� � �
8� � ?� ?��
�
� N� �'�'�t�3�3�� � 8��z�z� � �C�'� 3�1�9�9�=�=��:�:�$�$��+��?�@��!�H�,�Q�Y�Y�7�7�� 8�s �+ �
B.�A4B)�)B.c � � U R U R 5 [ R " 5 U R U5 g)�"Wait for the end-user to authorizeN)r �WAITING_FOR_LAUNCHPADr �readliner )r> rH s r � wait_for_end_user_authorization�<AuthorizeRequestTokenWithURL.wait_for_end_user_authorization� s, � � � � �D�.�.�/�
���� �)�)�+�6r c �j � U R U5 nU R U5 U R U5 g)z2Have the end-user authorize the token using a URL.N)r� r
r )r> rH r� r� s r r� �:AuthorizeRequestTokenWithURL.make_end_user_authorize_token� s0 � � � 2� 2�=� A�� �.�.�/@�A� �,�,�[�9r r N)
rl rm rn ro rp r r r r
r r r� rv r r r r r } s3 � �� ;� � M���?�4�$7� :r r c �\ ^ � \ rS rSrSrSrSrSrSrSr S U 4S jjr
U 4S jr S
r S r
U =r$ )
r i� a; Authorize using a URL that pops-up automatically in a browser.
This authorizer simply opens up the end-user's web browser to a
Launchpad URL and lets the end-user authorize the request token
themselves.
This is the same as its superclass, except this class also
performs the browser automatic opening of the URL.
z�The authorization page:
(%s)
should be opening in your browser. Use your browser to authorize
this program to access Launchpad on your behalf.z/Press Enter to continue or wait (%d) seconds...� )z www-browser�links�links2�lynx�elinksz elinks-lite�netrik�w3mz5Waiting to hear from Launchpad about your decision...c �( >� [ TU ] XSU5 g)a Constructor.
:param service_root: See `RequestTokenAuthorizationEngine`.
:param application_name: See `RequestTokenAuthorizationEngine`.
:param consumer_name: The value of this argument is
ignored. If we have the capability to open the end-user's
web browser, we must be running on the end-user's computer,
so we should do a full desktop integration.
:param credential_save_failed: See `RequestTokenAuthorizationEngine`.
:param allow_access_levels: The value of this argument is
ignored, for the same reason as consumer_name.
Nr� )r> r� r� r� r� r� r� s �r r� �)AuthorizeRequestTokenWithBrowser.__init__� s �� �. ��� �D�2H�
r c �� >� [ TU ] U5 [ R " 5 n[ USS5 nX0R
; nU( ae U R U R U R - 5 [ [ // / U R 5 u n nU( a [ R " 5 Ub [ R " U5 gg! [ R a SnSn N�f = f)r �basenameNF)r� r
�
webbrowserr �getattr�TERMINAL_BROWSERS�Errorr �TIMEOUT_MESSAGE�TIMEOUTr
r r �open)r> r� � browser_obj�browser�console_browser�rlist�_r� s �r r
�BAuthorizeRequestTokenWithBrowser.notify_end_user_authorization_url� s� �� �
��1�2C�D� $�$�.�.�*�K� �k�:�t�<�G� %�)?�)?� ?�O�
� �K�K��,�,�t�|�|�;� <� !�%��"�b�$�,�,�?�K�E�1�a����� � � "� �O�O� -� .� #�� � � � $� �K� #�O� $�s �0C � C$�#C$c � � U R U R 5 [ R " 5 nUR cu [ R " [
5 U R
U5 ( a g [ R " 5 U[ - :� a [ S[ - 5 eUR c Mt gg! [ a NOf = f)r NzTimed out after %d seconds.)
r r �timerV �sleep�access_token_poll_timer r �access_token_poll_timeout�TokenAuthorizationTimedOut)r> rH �
start_times r r �@AuthorizeRequestTokenWithBrowser.wait_for_end_user_authorization s� � � � � �D�.�.�/��Y�Y�[�
��&�&�.� �J�J�-� .�
��4�4�[�A�A�� B� �y�y�{�j�+D� D�D�0�1�4M�M�� � �&�&�.��
*�
��
�s �B4 �4
C� Cr r� )rl rm rn ro rp r r) r* r' r r� r
r rv r� r� s @r r r � sQ �� �� ;� � H�O��G� �� @� � � #� �
�6/�.� r r c � � \ rS rSrSrg)�TokenAuthorizationExceptioni r N�rl rm rn ro rv r r r r; r; � � �r r; c � � \ rS rSrSrg)� RequestTokenAlreadyAuthorizedi r Nr< r r r r? r? r= r r? c � � \ rS rSrSrSrg)�EndUserAuthorizationFailedi$ z?Superclass exception for all failures of end-user authorizationr N�rl rm rn ro rp rv r r r rA rA $ s � �I�r rA c � � \ rS rSrSrSrg)r
i* z End-user declined authorizationr NrB r r r r
r
* s � �)�r r
c � � \ rS rSrSrSrg)r i0 z*End-user did not perform any authorizationr NrB r r r r r 0 s � �4�r r c � � \ rS rSrSrSrg)r7 i6 z<End-user did not perform any authorization in timeout periodr NrB r r r r7 r7 6 s � �F�r r7 c � � \ rS rSrSrg)� ClientErrori< r Nr< r r r rG rG < r= r rG c � � \ rS rSrSrg)� ServerErrori@ r Nr< r r r rI rI @ r= r rI c � � \ rS rSrSrg)�NoLaunchpadAccountiD r Nr< r r r rK rK D r= r rK c � � \ rS rSrSrg)� TooManyAuthenticationFailuresiH r Nr< r r r rM rM H r= r rM )=rp �__all__�base64r
r r( �ior r\ r r
r� �sysr r3 � urllib.parser r r r% �lazr.restfulclient.errorsr �"lazr.restfulclient.authorize.oauthr � _AccessTokenr r r r� r rY ri r` r5 r6 � MemoryError�KeyboardInterrupt�
SystemExitr� r r1 r r r r� r� r� r r r r� r; r? rA r
r r7 rG rI rK rM r r r �<module>rY s� ��" ;� ��� � � � � � � � � 5� 5� � /�� � �%� �#� �)� �� � #� � �!2�J�?� �
P� � =�/� =�D )�,� )�@!�<� !�H$� H$�Vc�_� c�L�_� �21�O� 1�(U$� U$�p8:�#B� 8:�va�'C� a�H �)� � �$?� � �!<� � �#=� � � 7� � �!7� � �-� � �-� � �4� � �$?� r