�
�c� � �b � d Z ddlmZ ddlmZmZ ddlmZ ddlm Z ddl
m Z m Z G d� de� Z
y )
z�
oauthlib.oauth2.rfc8628
~~~~~~~~~~~~~~~~~~~~~~~
This module is an implementation of various logic needed
for consuming and providing OAuth 2.0 Device Authorization RFC8628.
� )�add_params_to_uri)�BackendApplicationClient�Client)�InsecureTransportError)�prepare_token_request)�is_secure_transport�
list_to_scopec �: � � e Zd ZdZdZ� fd�Zdd�Z dd�Z� xZS )� DeviceClienta� A public client utilizing the device authorization workflow.
The client can request an access token using a device code and
a public client id associated with the device code as defined
in RFC8628.
The device authorization grant type can be used to obtain both
access tokens and refresh tokens and is intended to be used in
a scenario where the device being authorized does not have a
user interface that is suitable for performing authentication.
z,urn:ietf:params:oauth:grant-type:device_codec �R �� t �| � |fi |�� |j d� | _ y )N�
client_secret)�super�__init__�getr
)�self� client_id�kwargs� __class__s ��H/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc8628/clients/device.pyr zDeviceClient.__init__ s& �� �
����-�f�-� #�Z�Z�� 8��� c � � t |� s
t � �|� | j n|}d| j fd| j fg}| j
� |j
d| j
f� |r |j
dt |� f� |D ]' }|| s� |j
t |� || f� �) t ||� S )Nr �
grant_typer
�scope)
r r r r r r
�appendr �strr )r �urir r �params�ks r �prepare_request_uriz DeviceClient.prepare_request_uri# s� � �"�3�'�(�*� *� #�m��
�
��� �� � �0�\�4�?�?�4S�U�� � � � )� �M�M�?�D�,>�,>�?� @� � �M�M�7�M�%�$8�9� :�� 3�A��a�y��
�
�s�1�v�v�a�y� 1�2� 3� !��f�-�-r c �~ � | j |d< ||d< |� | j n|}t | j f|||d�|��S )a� Add device_code to request body
The client makes a request to the token endpoint by adding the
device_code as a parameter using the
"application/x-www-form-urlencoded" format to the HTTP request
body.
:param body: Existing request body (URL encoded string) to embed parameters
into. This may contain extra parameters. Default ''.
:param scope: The scope of the access request as described by
`Section 3.3`_.
:param include_client_id: `True` to send the `client_id` in the
body of the upstream request. This is required
if the client is not authenticating with the
authorization server as described in
`Section 3.2.1`_. False otherwise (default).
:type include_client_id: Boolean
:param kwargs: Extra credentials to include in the token request.
The prepared body will include all provided device_code as well as
the ``grant_type`` parameter set to
``urn:ietf:params:oauth:grant-type:device_code``::
>>> from oauthlib.oauth2 import DeviceClient
>>> client = DeviceClient('your_id', 'your_code')
>>> client.prepare_request_body(scope=['hello', 'world'])
'grant_type=urn:ietf:params:oauth:grant-type:device_code&scope=hello+world'
.. _`Section 3.2.1`: https://datatracker.ietf.org/doc/html/rfc6749#section-3.2.1
.. _`Section 3.3`: https://datatracker.ietf.org/doc/html/rfc6749#section-3.3
.. _`Section 3.4`: https://datatracker.ietf.org/doc/html/rfc8628#section-3.4
r �include_client_id)�body� device_coder )r r r r )r r# r" r r! r s r �prepare_request_bodyz!DeviceClient.prepare_request_body6 sT � �J #�n�n��{��&7��"�#� #�m��
�
���$�T�_�_� <�4�[�+0�<�4:�<� <r )N)� NF) �__name__�
__module__� __qualname__�__doc__r r r r$ �
__classcell__)r s @r r r s) �� �
� @�J�9�.�& @D�/4�)<r r N)r) �oauthlib.commonr �oauthlib.oauth2r r � oauthlib.oauth2.rfc6749.errorsr �"oauthlib.oauth2.rfc6749.parametersr � oauthlib.oauth2.rfc6749.utilsr r r � r r �<module>r1 s) ��� .� <� A� D� L�P<�6� P<r |