✏️ 正在编辑: authentication.cpython-312.pyc
路径:
/var/opt/nydus/ops/mysql/connector/__pycache__/authentication.cpython-312.pyc
提示:
您可以编辑任何文件（包括二进制文件），但请注意不当修改可能导致文件损坏。
� ��'j�9 � � � d Z ddlmZ ddlmZmZmZmZ ddlm Z m Z m Z ddl m Z ddl mZmZ ddlmZmZmZmZmZmZmZmZ dd lmZ erdd lm Z G d � d � Z y )z5Implementing support for MySQL Authentication Plugins� )� annotations)� TYPE_CHECKING�Any�Dict�Optional� )�InterfaceError�NotSupportedError� get_exception)�logger)�MySQLAuthPlugin�get_auth_plugin)�AUTH_SWITCH_STATUS�DEFAULT_CHARSET_ID�DEFAULT_MAX_ALLOWED_PACKET� ERR_STATUS�EXCHANGE_FURTHER_STATUS� MFA_STATUS� OK_STATUS� MySQLProtocol)� HandShakeType)� MySQLSocketc � � e Zd ZdZdd�Zedd�� Zedd�� Zdd�Ze de f dd�Z d dd �Z dd �Z dd �Zd d d d de de dddd ddf dd�Zy)�MySQLAuthenticatorz$Implements the authentication phase.c �X � d| _ i | _ i | _ d| _ d| _ d| _ y)z Constructor.� FN)� _username� _passwords�_plugin_config� _ssl_enabled�_auth_strategy�_auth_plugin_class��selfs �O/opt/nydus/tmp/pip-target-k0fmikie/lib/python/mysql/connector/authentication.py�__init__zMySQLAuthenticator.__init__8 s0 � � ���*,���.0���"'���9=���15�� � c � � | j S )z&Signals whether or not SSL is enabled.)r r# s r% � ssl_enabledz MySQLAuthenticator.ssl_enabledA s � � � � � r' c � � | j S )a Custom arguments that are being provided to the authentication plugin when called. The parameters defined here will override the ones defined in the auth plugin itself. The plugin config is a read-only property - the plugin configuration provided when invoking `authenticate()` is recorded and can be queried by accessing this property. Returns: dict: The latest plugin configuration provided when invoking `authenticate()`. )r r# s r% � plugin_configz MySQLAuthenticator.plugin_configF s � � �"�"�"r' c �: � | j j |� y)z,Update the 'plugin_config' instance variableN)r �update)r$ �configs r% �update_plugin_configz'MySQLAuthenticator.update_plugin_configW s � � ���"�"�6�*r' r c � � |�i }t j |||�� }|j |� t j d� |j |j d� |j d� |j d� |j dd� |j dd� |j d � |j d � � � }t j d � |j ||� t j d � d| _ |S )a� Sets up an SSL communication channel. Args: sock: Pointer to the socket connection. host: Server host name. ssl_options: SSL and TLS connection options (see `network.MySQLSocket.build_ssl_context`). charset: Client charset (see [1]), only the lower 8-bits. client_flags: Integer representing client capabilities flags. max_allowed_packet: Maximum packet size. Returns: ssl_request_payload: Payload used to carry out SSL authentication. References: [1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set )�charset� client_flags�max_allowed_packetzBuilding SSL context�ca�cert�key� verify_certF�verify_identity� tls_versions�tls_ciphersuites)�ssl_ca�ssl_cert�ssl_key�ssl_verify_cert�ssl_verify_identityr9 �tls_cipher_suiteszSwitching to SSLzSSL has been enabledT) r � make_auth_ssl�sendr �debug�build_ssl_context�get� switch_to_sslr ) r$ �sock�host� ssl_optionsr1 r2 r3 �ssl_request_payload� ssl_contexts r% � setup_sslz MySQLAuthenticator.setup_ssl[ s� � �6 � � �K� ,� 9� 9��%� 1� �� � � �%�&�� � �+�,��,�,� �?�?�4�(� �_�_�V�,� �O�O�E�*� '�O�O�M�5� A� +���0A�5� I�$� � � �8� )�o�o�.@� A� -� � � � � �'�(� ���;��-�� � �+�,� ���"�"r' Nc �� � |� | j }|� | j }t j d|� t ||�� || j j |d� | j �� | _ y)a� Switches the authorization plugin. Args: new_strategy_name: New authorization plugin name to switch to. strategy_class: New authorization plugin class to switch to (has higher precedence than the authorization plugin name). username: Username to be used - if not defined, the username provided when `authentication()` was invoked is used. password_factor: Up to three levels of authentication (MFA) are allowed, hence you can choose the password corresponding to the 1st, 2nd, or 3rd factor - 1st is the default. NzSwitching to strategy %s)� plugin_name�auth_plugin_classr )r) ) r r" r rC r r rE r) r! )r$ �new_strategy_name�strategy_class�username�password_factors r% �_switch_auth_strategyz(MySQLAuthenticator._switch_auth_strategy� sq � �& � ��~�~�H� � !� !� 4� 4�N�� � �/�1B�C� �o�)�^� � � �O�O� � ��� 4� �(�(� ��r' c � � d}|d t k( �r-|| j vr t d� �t j |� \ }}| j ||�� t j d|| j j � | j j ||fi | j ��}|d t k( r=t j |� } | j j ||fi | j ��}|d t k( rt j d� |S |d t k( r t# |� �|dz }|d t k( r��-t j$ d� y ) a Handles MFA (Multi-Factor Authentication) response. Up to three levels of authentication (MFA) are allowed. Args: sock: Pointer to the socket connection. pkt: MFA response. Returns: ok_packet: If last server's response is an OK packet. None: If last server's response isn't an OK packet and no ERROR was raised. Raises: InterfaceError: If got an invalid N factor. errors.ErrorTypes: If got an ERROR response. � � z5Failed Multi Factor Authentication (invalid N factor))rS zMFA %i factor %szMFA completed succesfullyr z"MFA terminated with a no ok packetN)r r r r �parse_auth_next_factorrT r rC r! �name�auth_switch_responser r �parse_auth_more_data�auth_more_responser r r �warning)r$ rG �pkt�n_factorrP � auth_datas r% � _mfa_n_factorz MySQLAuthenticator._mfa_n_factor� sP � �* ���!�f� �"��t���.�$�K�� � ,9�+O�+O�PS�+T� (� �y� � &� &�'8�(� &� S� �L�L�+�X�t�7J�7J�7O�7O� P�:�$�%�%�:�:��i��#'�#6�#6��C� �1�v�0�0� )� >� >�s� C� �<�d�)�)�<�<��)��'+�':�':��� �1�v��"�� � � 8�9�� ��1�v��#�#�C�(�(� ��M�H�7 �!�f� �"�: ���;�<�r' c �F � |d t k( rt |� dk( r t d� �|d t k( rft j d� t j |� \ }}| j |� | j j ||fi | j ��}|d t k( rRt j d� t j |� } | j j ||fi | j ��}|d t k( r,t j d| j j � |S |d t k( rQt j d� t j d| j j � | j# ||� S |d t$ k( r t' |� �y ) a� Handles server's response. Args: sock: Pointer to the socket connection. pkt: Server's response after completing the `HandShakeResponse`. Returns: ok_packet: If last server's response is an OK packet. None: If last server's response isn't an OK packet and no ERROR was raised. Raises: errors.ErrorTypes: If got an ERROR response. NotSupportedError: If got Authentication with old (insecure) passwords. rW � z�Authentication with old (insecure) passwords is not supported. For more information, lookup Password Hashing in the latest MySQL manualz+Server's response is an auth switch requestzExchanging further packetsz%s completed succesfullyz$Starting multi-factor authenticationzMFA 1 factor %sN)r �lenr r rC r �parse_auth_switch_requestrT r! rZ r r r[ r\ r rY r ra r r )r$ rG r^ rP r` s r% �_handle_server_responsez*MySQLAuthenticator._handle_server_response� s� � �& �q�6�'� '�C��H��M�#�>�� � �q�6�'� '� �L�L�F� G�+8�+R�+R�SV�+W� (� �y� � &� &�'8� 9�:�$�%�%�:�:��i��#'�#6�#6��C� �q�6�,� ,� �L�L�5� 6�%�:�:�3�?�I�8�$�%�%�8�8��i��#'�#6�#6��C� �q�6�Y� � �L�L�3�T�5H�5H�5M�5M� N��J� �q�6�Z� � �L�L�?� @� �L�L�*�D�,?�,?�,D�,D� E��%�%�d�C�0� 0� �q�6�Z� � ��$� $�r' r Fc �f � || _ |||d�| _ | | _ t j |||||| | | | | || j | j �� \ }| _ |rdd|fndd|f} |j |g|��� t |j |� � }| j ||� }|� t d� d�|S )a� Performs the authentication phase. During re-authentication you must set `is_change_user_request` to True. Args: sock: Pointer to the socket connection. handshake: Initial handshake. username: Account's username. password1: Account's password factor 1. password2: Account's password factor 2. password3: Account's password factor 3. database: Initial database name for the connection. charset: Client charset (see [1]), only the lower 8-bits. client_flags: Integer representing client capabilities flags. max_allowed_packet: Maximum packet size. auth_plugin: Authorization plugin name. auth_plugin_class: Authorization plugin class (has higher precedence than the authorization plugin name). conn_attrs: Connection attributes. is_change_user_request: Whether is a `change user request` operation or not. read_timeout: Timeout in seconds upto which the connector should wait for the server to reply back before raising an ReadTimeoutError. write_timeout: Timeout in seconds upto which the connector should spend to send data to the server before raising an WriteTimeoutError. Returns: ok_packet: OK packet. Raises: InterfaceError: If OK packet is NULL. ReadTimeoutError: If the time taken for the server to reply back exceeds 'read_timeout' (if set). WriteTimeoutError: If the time taken to send data packets to the server exceeds 'write_timeout' (if set). References: [1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set )r rV � ) � handshakerR �password�databaser1 r2 r3 � auth_pluginrO � conn_attrs�is_change_user_requestr) r+ r NzGot a NULL ok_pkt) r r r" r � make_authr) r+ r! rB �bytes�recvrf r )r$ rG ri rR � password1� password2� password3rk r1 r2 r3 rl rO rm rn � read_timeout� write_timeout�response_payload� send_argsr^ �ok_pkts r% � authenticatez MySQLAuthenticator.authenticate# s� � �t "��� '�I�)�D���"3�� � 1>�0G�0G� � � � ��%� 1�#� /�!�#9� �(�(� �,�,�1 �-��$�-�& &� ��=� !���m�,� � �� � �"�/�Y�/� �D�I�I�l�+�,���-�-�d�C�8�� �>� �!4�5�4� ?�� r' )�return�None)r{ �bool)r{ �Dict[str, Any])r. r~ r{ r| )rG r rH �strrI zOptional[Dict[str, Any]]r1 �intr2 r� r3 r� r{ rp )NNr ) rP r rQ � Optional[str]rR r� rS r� r{ r| )rG r r^ rp r{ zOptional[bytes])"rG r ri r rR r rr r rs r rt r rk r� r1 r� r2 r� r3 r� rl r� rO r� rm zOptional[Dict[str, str]]rn r} ru � Optional[int]rv r� r{ rp )�__name__� __module__� __qualname__�__doc__r& �propertyr) r+ r/ r r rL rT ra rf rz � r' r% r r 5 s� � �.�6� �!� �!� �#� �#� +� *� �"<�7#��7#� �7#� .� 7#� � 7#� � 7#� �7#� �7#�x )-�"&� � � � � &� � � � � � � �D4��4� �4� � 4�l5��5� �5� � 5�v ����"&�)� �"<�%)�+/�/3�',�&*�'+�#^��^� !�^� � ^� � ^� � ^� �^� �^� �^� �^� �^� #�^� )�^� -� ^� !%� ^� $�!^�" %�#^�$ �%^r' r N) r� � __future__r �typingr r r r �errorsr r r r �pluginsr r �protocolr r r r r r r r �typesr �networkr r r� r' r% �<module>r� sE ��: <� "� 5� 5� D� D� � 5� � � � !��$�L� Lr'
💾 保存文件
← 返回文件管理器