�
Ϫ�f� � �� � d Z ddlmZmZmZmZmZmZmZ ddl m
Z
m Z ddl m
Z
ddlmZ ddlmZ ddlmZ ddlmZmZ dd lmZmZ ee
Zeeeeg d
f f Z G d � d e
� Z G d
� d� Z y
)z=
The point of integration of application and authentication.
� )�Callable�Dict�Iterable�List�Tuple�Type�Union)� Interface�
providedBy)�error)�ICredentialsChecker)� ICredentials)�defer)�Deferred�
maybeDeferred)�failure�reflectNc
�H � e Zd ZdZdeeed f dededee e
e
f fd�Z y) �IRealmz[
The realm connects application-specific objects to the
authentication system.
�avatarId� �mind�
interfaces�returnc � � y)a�
Return avatar which provides one of the given interfaces.
@param avatarId: a string that identifies an avatar, as returned by
L{ICredentialsChecker.requestAvatarId<twisted.cred.checkers.ICredentialsChecker.requestAvatarId>}
(via a Deferred). Alternatively, it may be
C{twisted.cred.checkers.ANONYMOUS}.
@param mind: usually None. See the description of mind in
L{Portal.login}.
@param interfaces: the interface(s) the returned avatar should
implement, e.g. C{IMailAccount}. See the description of
L{Portal.login}.
@returns: a deferred which will fire a tuple of (interface,
avatarAspect, logout), or the tuple itself. The interface will be
one of the interfaces passed in the 'interfaces' argument. The
'avatarAspect' will implement that interface. The 'logout' object
is a callable which will detach the mind from the avatar.
Nr )r r r s �5/usr/lib/python3/dist-packages/twisted/cred/portal.py�
requestAvatarzIRealm.requestAvatar) s � � N) �__name__�
__module__� __qualname__�__doc__r �bytesr �object�_InterfaceItselfr �_requestResultr r r r r r # sI � ��
���u�R�y�(�)� �17� �FV� � �x��'� �7� 8� r r c � � e Zd ZU dZeee ef ed< dde de
e ddfd�Z de ee fd�Z
ded ee ddfd
�Zd ed ed
ee dee fd�Zy)�Portala�
A mediator between clients and a realm.
A portal is associated with one Realm and zero or more credentials checkers.
When a login is attempted, the portal finds the appropriate credentials
checker for the credentials given, invokes it, and if the credentials are
valid, retrieves the appropriate avatar from the Realm.
This class is not intended to be subclassed. Customization should be done
in the realm object and in the credentials checker objects.
�checkers�realmr Nc �P � || _ i | _ |D ] }| j |� � y)z1
Create a Portal to a L{IRealm}.
N)r* r) �registerChecker)�selfr* r) �checkers r �__init__zPortal.__init__P s/ � � ��
���
� � *�G� � � �� )� *r c �H � t | j j � � S )zR
Return list of credentials interfaces that can be used to login.
)�listr) �keys)r- s r �listCredentialsInterfacesz Portal.listCredentialsInterfaces[ s � � �D�M�M�&�&�(�)�)r r. �credentialInterfacesc �L � |s |j }|D ] }|| j |< � y )N)r4 r) )r- r. r4 �credentialInterfaces r r, zPortal.registerCheckera s2 � � $�#*�#?�#?� �#7� 9� �18�D�M�M�-� .� 9r � credentialsr r c
� � | j D ]^ }|j |� s� t | j | j |� j | j
j |g|��� c S t |� }t j t j t j ddj t t j |� � z � � � S )a�
@param credentials: an implementor of
L{twisted.cred.credentials.ICredentials}
@param mind: an object which implements a client-side interface for
your particular realm. In many cases, this may be None, so if the
word 'mind' confuses you, just ignore it.
@param interfaces: list of interfaces for the perspective that the mind
wishes to attach to. Usually, this will be only one interface, for
example IMailAccount. For highly dynamic protocols, however, this
may be a list like (IMailAccount, IUserChooser, IServiceInfo). To
expand: if we are speaking to the system over IMAP, any information
that will be relayed to the user MUST be returned as an
IMailAccount implementor; IMAP clients would not be able to
understand anything else. Any information about unusual status
would have to be relayed as a single mail message in an
otherwise-empty mailbox. However, in a web-based mail system, or a
PB-based client, the ``mind'' object inside the web server
(implemented with a dynamic page-viewing mechanism such as a
Twisted Web Resource) or on the user's client program may be
intelligent enough to respond to several ``server''-side
interfaces.
@return: A deferred which will fire a tuple of (interface,
avatarAspect, logout). The interface will be one of the interfaces
passed in the 'interfaces' argument. The 'avatarAspect' will
implement that interface. The 'logout' object is a callable which
will detach the mind from the avatar. It must be called when the
user has conceptually disconnected from the service. Although in
some cases this will not be in connectionLost (such as in a
web-based session), it will always be at the end of a user's
interactive session.
zNo checker for %sz, )r) r r �requestAvatarId� addCallbackr* r r �failr �Failurer �UnhandledCredentials�join�mapr �qual)r- r7 r r �i�ifacs r �loginz Portal.logini s� � �J � � � K�A��|�|�K�(� �}��M�M�!�$�4�4�k�� �+�d�j�j� 6� 6��K�?I�K� K� K�
�+�&���z�z� �O�O��*�*�'�$�)�)�C�� � �d�4K�*L�L��
�
�
r )r )r r r! r" r r r
r
�__annotations__r r r/ r r3 r, r r$ r r& rC r r r r( r( A s� � �
� �4� �?�$7�7�8�8� HJ� *�� *�'/�0C�'D� *�
� *�*�4��Y��+@� *� 9�*�9�CG� �?�9�
�9�1
�'�1
�/5�1
�DH��O�1
� �.� !�1
r r( ) r" �typingr r r r r r r �zope.interfacer
r � twisted.credr �twisted.cred.checkersr
�twisted.cred.credentialsr �twisted.internetr �twisted.internet.deferr r �twisted.pythonr r r% r$ r& r r( r r r �<module>rM sl �� �
F� E� E� 0� � 5� 1� "� :� +� � �?� �
�'���"�d�(�1C�C�D�� �Y� �<Y
� Y
r |