File: //opt/saltstack/salt/lib/python3.10/site-packages/zmq/auth/__pycache__/thread.cpython-310.pyc
o
�N�g/ � @ s� d Z ddlZddlmZ ddlmZmZ ddlmZm Z m
Z
m Z m Z m
Z
ddlZddlmZ ddlmZ G d d
� d
e�Ze d ed �Zd
edefdd�ZeG dd� d��ZdgZdS )z>ZAP Authenticator in a Python Thread.
.. versionadded:: 14.1
� N)�chain)�Event�Thread)�Any�Dict�List�Optional�TypeVar�cast)�jsonapi� )�
Authenticatorc
sp e Zd ZdZ ddddededed ee d
df � fd d �
Zdd
d�Z ddd�Z
de e d
e
fdd�Z� ZS )�AuthenticationThreadziA Thread for running a zmq Authenticator
This is run in the background by ThreadedAuthenticator
�utf-8N�context� zmq.Context�endpoint�encoding�log�
authenticator�returnc sv t � �� |p tj�� | _|| _|pt�d� | _ }t
� | _ |p&t |||d�| _
|�tj�| _d| j_| j�|� d S )Nzzmq.auth�r r r )�super�__init__�zmq�Context�instancer r �logging� getLoggerr r �startedr
r �socket�PAIR�pipe�linger�connect)�selfr r r r r �� __class__� �C/opt/saltstack/salt/lib/python3.10/site-packages/zmq/auth/thread.pyr s
�z AuthenticationThread.__init__c C s | j �� | j�� | j j}t�� }|�| jtj � |�|tj � zt
|� � �}W n
tj y4 Y n@w | j|v rd|| j tj krd z
| jj
tjd�}W n
tjyW Y n
w | �|�}|r`nqC|rdn||v rs|| tj krs| �� q"| j�� | j �� dS )z*Start the Authentication Agent thread taskT)�flagsN)r �startr �set�
zap_socketr ZPoller�registerr" �POLLIN�dict�pollZZMQError�recv_multipartZNOBLOCKZAgain� _handle_pipe� _handle_zap�close�stop)r% ZzapZpollerZsocks�msg� terminater( r( r) �run0 s<
��
� �
zAuthenticationThread.runc C s8 | j jdu r
td��| j j�� }|sdS | j �|� dS )z7
Handle a message from the ZAP socket.
NzZAP socket closed)r r- � RuntimeErrorr2 Zhandle_zap_message)r% r7 r( r( r) r4 S s z AuthenticationThread._handle_zapr7 c s� d}|du r
d}|S |d }� j �d|� |dkrA� fdd�|d d� D �}z � jj|� W |S ty@ � j �d
|� Y |S w |d krm� fd d�|d d� D �}z � jj|� W |S tyl � j �d
|� Y |S w |dkr�|d �� j�}|d }t t
t t f t �
|��}� j�||� |S |dkr�|d �� j�}|d �� j�}� j�||� |S |dkr�d}|S � j �d|� |S )z6
Handle a message from front-end API.
FNTr z auth received API command %r� ALLOWc � g | ]}|� � j��qS r( ��decoder ��.0�m�r% r( r) �
<listcomp>l � z5AuthenticationThread._handle_pipe.<locals>.<listcomp>r zFailed to allow %s� DENYc r< r( r= r? rB r( r) rC s rD zFailed to deny %s� PLAIN� � CURVE� TERMINATEz!Invalid auth command from API: %r)r �debugr �allow� Exception� exception�denyr> r r
r �strr �loads�configure_plain�configure_curve�error) r% r7 r8 Zcommand� addresses�domainZjson_passwords� passwords�locationr( rB r) r3 ^ sT " � � ������z!AuthenticationThread._handle_pipe)r NN�r N)�__name__�
__module__� __qualname__�__doc__rO r r r
r r9 r4 r �bytes�boolr3 �
__classcell__r( r( r& r) r s* �������
# r �T)Zbound�clsr c C sF | j �� D ]\}}|�d�st|�sqtt|d�}|js |j|_q| S )zAinherit docstrings from Authenticator, so we don't duplicate them�_N)�__dict__�items�
startswith�callable�getattrr
r\ )ra �name�methodZupstream_methodr( r( r) �_inherit_docstrings� s �rj c @ s e Zd ZU dZded< eed< eed< ded< dZeed < eed
< d.de d dedefd
d�Z
dedefdd�Z defdd�Z defdd�Z
defdd�Z d/ded e eeef fd d �Zd0ded efd d!�Z d/ded"efd#d$�Zd1d&d'�Zd1d(d)�Zd%efd*d+�Zd1d,d-�Zd S )2�ThreadAuthenticatorz-Run ZAP authentication in a background threadr r r r z
zmq.Socketr" � �
pipe_endpoint�threadNr c C s> || _ || _d | _dt| �� d�| _d | _|ptj�� | _ d S )Nz inproc://z.inproc)
r r r" �idrm rn r r r r )r% r r r r( r( r) r � s z ThreadAuthenticator.__init__�key�valuec C sZ t | g| j�� �D ]}||jv s|t|di �v r"t�| ||� d S q t| jj ||� d S )N�__annotations__)
r r' �mrorc rg �object� __setattr__�setattrrn r )r% rp rq �objr( r( r) ru � s �z ThreadAuthenticator.__setattr__c C s t | jj|�S �N)rg rn r )r% rp r( r( r) � __getattr__� s z ThreadAuthenticator.__getattr__rT c �$ � j �dg� fdd�|D � � d S )Nr; c r< r( ��encoder �r@ �arB r( r) rC � rD z-ThreadAuthenticator.allow.<locals>.<listcomp>�r" �send_multipart�r% rT r( rB r) rK � � �zThreadAuthenticator.allowc rz )NrE c r< r( r{ r} rB r( r) rC � rD z,ThreadAuthenticator.deny.<locals>.<listcomp>r r� r( rB r) rN � r� zThreadAuthenticator.deny�*rU rV c C s( | j �d|�| j�t�|pi �g� d S )NrF )r" r� r| r r �dumps)r% rU rV r( r( r) rQ � s �z#ThreadAuthenticator.configure_plainrW c C s. |� | j�}|� | j�}| j�d||g� d S )NrH )r| r r" r� )r% rU rW r( r( r) rR � s z#ThreadAuthenticator.configure_curve�credentials_providerc C s | j jj||d� d S )N)r� )rn r �configure_curve_callback)r% rU r� r( r( r) r� � s
�z,ThreadAuthenticator.configure_curve_callbackr c C sf | j �tj�| _d| j_| j�| j� t| j | j| j | j
d�| _ | j � � | j j
jdd�s1td��dS )z Start the authentication threadr r �
)�timeoutz$Authenticator thread failed to startN)r r r r! r" r# �bindrm r r r rn r+ r �waitr: rB r( r( r) r+ � s �
�zThreadAuthenticator.startc C sB | j r | j �d� | �� r| j�� d| _| j �� d| _ dS dS )z Stop the authentication threadrI N)r" �send�is_alivern �joinr5 rB r( r( r) r6 � s
�zThreadAuthenticator.stopc C s | j r
| j �� r
dS dS )z$Is the ZAP thread currently running?TF)rn r� rB r( r( r) r� � s z ThreadAuthenticator.is_alivec C s | � � d S rx )r6 rB r( r( r) �__del__� s zThreadAuthenticator.__del__)Nr N)r� N)r� rl rX )rY rZ r[ r\ rr r rO rm r r r ru ry rK rN r rQ rR r� r+ r6 r^ r� r� r( r( r( r) rk � sN
���
���
���
�
rk )r\ r � itertoolsr � threadingr r �typingr r r r r r
r Z zmq.utilsr �baser
r �typer` rj rk �__all__r( r( r( r) �<module> s
a