a mzfLF@s$dZddlZddlZddlZddlZddlmZddlmZddl m Z m Z m Z m Z mZmZz(ddlmZmZddlmZmZmZWn6eyddlmZmZddlmZmZmZYn0gd Ze Zd e_Gd d d eZdTd dZedddZZedZ Z!edZ"Z#edZ$Z%GdddeZ&e&Z'Gddde&Z(e(Z)Gddde&Z*e*Z+GdddeZ,e,Z-Gddde&Z.e.Z/Gdd d eZ0e0Z1Gd!d"d"eZ2e2Z3Gd#d$d$eZ4e4Z5Gd%d&d&eZ6dUd'd(Z7e7Z8Gd)d*d*eZ9e9Z:Gd+d,d,eZ;e;ZGd/d0d0eZ?e?Z@Gd1d2d2eZAeAZBGd3d4d4eZCeCZDGd5d6d6eZEdVd7d8ZFeFZGGd9d:d:eZHdWd;d<ZIeIZJGd=d>d>ejKZLdXd@dAZMdYdBdCZNdDdEZOdFdGZPdZdHdIZQdJdKZRdLdMZSdNdOZTdPdQZUeUeT_VeZWZXdReW_eYdSkr ddlZZZeZ[dS)[z- Web API (wrapper around WSGI) (from web.py) N)BytesIO)urljoin)dictaddintgetsafestrstoragestorify threadeddict)unquotequote) CookieErrorMorsel SimpleCookie)3configheaderdebuginputdata setcookiecookiesctx HTTPErrorOKCreatedAccepted NoContentokcreatedaccepted nocontentRedirectFoundSeeOther NotModified TempRedirectredirectfoundseeother notmodified tempredirect BadRequest Unauthorized ForbiddenNotFoundNoMethod NotAcceptableConflictGonePreconditionFailedUnsupportedMediaTypeUnavailableForLegalReasons badrequest unauthorized forbiddennotfoundnomethod notacceptableconflictgonepreconditionfailedunsupportedmediatypeunavailableforlegalreasons InternalError internalerrorz A configuration object for various aspects of web.py. `debug` : when True, enables reloading, disabled template caching and sets internalerror to debugerror. c@seZdZidfddZdS)rcCs8|t_|D]\}}t||q||_t||dSN)rstatusitemsrr Exception__init__)selfrEheadersrkvrM8/var/www/media/lib/python3.9/site-packages/web/webapi.pyrHZs  zHTTPError.__init__N)__name__ __module__ __qualname__rHrMrMrMrNrYsrcsd|durddd}ddddd}|p:d}|iffdd }t|ttf||dS)N rrCz `%s` statuscst|||dSrDrrH)rIrrJrErMrNrHjsz_status_code..__init__)__doc__rH)splitreplacetyperobject)rEr classname docstringrHrMrTrN _status_codebs r\z200 OKrC)rz 201 Createdz 202 Acceptedz204 No Contentc@seZdZdZdddZdS)r!z#A `301 Moved Permanently` redirect.301 Moved PermanentlyFcCsNttj|}|dr0|r"tj}ntj}||}d|d}t|||ddS)z Returns a `status` redirect to the new URL. `url` is joined with the base URL so that things like `redirect("about") will work properly. / text/html) Content-TypeZLocationrCN)rrpath startswithZrealhomehomerrH)rIurlrEabsolutenewlocrcrJrMrMrNrH|s   zRedirect.__init__N)r]FrOrPrQrUrHrMrMrMrNr!ysr!c@seZdZdZdddZdS)r"zA `302 Found` redirect.FcCstj||d|ddS)Nz 302 Foundrer!rHrIrdrerMrMrNrHszFound.__init__N)FrgrMrMrMrNr"sr"c@seZdZdZdddZdS)r#zA `303 See Other` redirect.FcCstj||d|ddS)Nz 303 See OtherrhrirjrMrMrNrHszSeeOther.__init__N)FrgrMrMrMrNr#sr#c@seZdZdZddZdS)r$zA `304 Not Modified` status.cCst|ddS)Nz304 Not ModifiedrS)rIrMrMrNrHszNotModified.__init__NrgrMrMrMrNr$sr$c@seZdZdZdddZdS)r%z$A `307 Temporary Redirect` redirect.FcCstj||d|ddS)Nz307 Temporary RedirectrhrirjrMrMrNrHszTempRedirect.__init__N)FrgrMrMrMrNr%sr%c@seZdZdZdZdddZdS)r+z`400 Bad Request` error.z bad requestNcCs&d}ddi}t||||p|jdS)Nz400 Bad Requestr`r_rrHmessagerIrlrErJrMrMrNrHszBadRequest.__init__)NrOrPrQrUrlrHrMrMrMrNr+sr+c@seZdZdZdZdddZdS)r,z`401 Unauthorized` error.r7NcCs&d}ddi}t||||p|jdS)Nz401 Unauthorizedr`r_rkrmrMrMrNrHszUnauthorized.__init__)NrnrMrMrMrNr,sr,c@seZdZdZdZdddZdS)r-z`403 Forbidden` error.r8NcCs&d}ddi}t||||p|jdS)Nz 403 Forbiddenr`r_rkrmrMrMrNrHszForbidden.__init__)NrnrMrMrMrNr-sr-c@seZdZdZdZdddZdS) _NotFoundz`404 Not Found` error.z not foundNcCs&d}ddi}t||||p|jdS)Nz 404 Not Foundr`ztext/html; charset=utf-8rkrmrMrMrNrHsz_NotFound.__init__)NrnrMrMrMrNrosrocCs.|r t|Stdr$tjdStSdS)zIReturns HTTPError with '404 Not Found' error from the active application. app_stackN)rorgetrpr9rlrMrMrNr.s  r.c@seZdZdZdZdddZdS)r/z!A `405 Method Not Allowed` error.zmethod not allowedNcsRd}i}d|d<gd}r.fdd|D}d||d<t||||jdS) Nz405 Method Not Allowedr_r`)GETHEADPOSTPUTDELETEcsg|]}t|r|qSrM)hasattr).0methodclsrMrN z%NoMethod.__init__..z, ZAllow)joinrrHrl)rIr}rErJmethodsrMr|rNrHszNoMethod.__init__)NrnrMrMrMrNr/sr/c@seZdZdZdZdddZdS)r0z`406 Not Acceptable` error.znot acceptableNcCs&d}ddi}t||||p|jdS)Nz406 Not Acceptabler`r_rkrmrMrMrNrHszNotAcceptable.__init__)NrnrMrMrMrNr0sr0c@seZdZdZdZdddZdS)r1z`409 Conflict` error.r<NcCs&d}ddi}t||||p|jdS)Nz 409 Conflictr`r_rkrmrMrMrNrH$szConflict.__init__)NrnrMrMrMrNr1sr1c@seZdZdZdZdddZdS)r2z`410 Gone` error.r=NcCs&d}ddi}t||||p|jdS)Nz410 Goner`r_rkrmrMrMrNrH2sz Gone.__init__)NrnrMrMrMrNr2-sr2c@seZdZdZdZdddZdS)r3z `412 Precondition Failed` error.zprecondition failedNcCs&d}ddi}t||||p|jdS)Nz412 Precondition Failedr`r_rkrmrMrMrNrH@szPreconditionFailed.__init__)NrnrMrMrMrNr3;sr3c@seZdZdZdZdddZdS)r4z#`415 Unsupported Media Type` error.zunsupported media typeNcCs&d}ddi}t||||p|jdS)Nz415 Unsupported Media Typer`r_rkrmrMrMrNrHNszUnsupportedMediaType.__init__)NrnrMrMrMrNr4Isr4c@seZdZdZdZdddZdS)_UnavailableForLegalReasonsz*`451 Unavailable For Legal Reasons` error.zunavailable for legal reasonsNcCs&d}ddi}t||||p|jdS)Nz!451 Unavailable For Legal Reasonsr`r_rkrmrMrMrNrH\sz$_UnavailableForLegalReasons.__init__)NrnrMrMrMrNrWsrcCs.|r t|Stdr$tjdStSdS)z]Returns HTTPError with '415 Unavailable For Legal Reasons' error from the active application.rprqN)rrrrrpr@rsrMrMrNr5bs  r5c@seZdZdZdZdddZdS)_InternalErrorz500 Internal Server Error`.zinternal server errorNcCs&d}ddi}t||||p|jdS)Nz500 Internal Server Errorr`r_rkrmrMrMrNrHtsz_InternalError.__init__)NrnrMrMrMrNrosrcCs.|r t|Stdr$tjdStSdS)zNReturns HTTPError with '500 internal error' error from the active application.rprqN)rrrrrprBrsrMrMrNrAzs  rAc@seZdZdZdddZdS)cgiFieldStorageaA Subclass cgi.FieldStorage, as read_binary expects fp to return bytes. If the headers do not contain a content-disposition with a filename, cgi.FieldStorage's make_file will create a TemporaryFile with `w+` flags. The write to that temporary file will fail, due to incorrect encoding in Python 3. NcCs tdS)z For backwards compatibility with Python 2, make_file accepted a binary flag. This was unused, and removed in Python 3. zwb+)tempfile TemporaryFile)rIbinaryrMrMrN make_fileszcgiFieldStorage.make_file)N)rOrPrQrUrrMrMrMrNrsrFcCs|t|t|}}d|vs2d|vs2d|vs2d|vr:td|durhtjD]\}}||krHdSqHtj||fdS)z Adds the header `hdr: value` with the response. If `unique` is True and a header with that name already exists, it doesn't add a new one.   zinvalid characters in headerTN)r ValueErrorrrJlowerappend)hdrvalueuniquehrLrMrMrNrs rcs|pd}dd}tj}i}}|dvr|ddvr|ddd r|td }|s|d }t||d d }|t_n0t}t |t r| d}t |}t||d d }||}|dvrd|d<|t|d d}fddt fddt||DS)z2Returns storage object with GET or POST arguments.bothcs&jdurg_tfddDS)Ncsg|]}||fqSrMrM)rzrKfsrMrNr~rz-rawinput..dictify..)listdictrrMrrNdictifys zrawinput..dictify)rpostputpatchREQUEST_METHOD)rvrwPATCH CONTENT_TYPErCz multipart/ _fieldstorage wsgi.inputr)fpenvironkeep_blank_valueszutf-8)rrrrt)rrcs4t|trfdd|DS|jdur,|jS|SdS)Ncsg|] }|qSrMrM)rzxprocess_fieldstoragerMrNr~rz:rawinput..process_fieldstorage..) isinstancerfilenamerrrrMrNrs   z&rawinput..process_fieldstoragecsg|]\}}||fqSrMrMrzrKrLrrMrNr~rzrawinput..)renvcopyrrrrbrrrrstrencoderrrrF)r{reabrdrMrrNrawinputs.        rcOsV|dd}t|}z$|ddt|g|Ri|WStyPtYn0dS)z Returns a `storage` object with the GET and POST arguments. See `storify` for how `requireds` and `defaults` work. _methodrZ_unicodeTN)popr setdefaultr KeyErrorr6) requiredsdefaultsroutrMrMrNrs   rcCsTdtvrNtjddkr*tjdt_n$ttjdd}tjd|t_tjS)z'Returns the data sent with the request.rZHTTP_TRANSFER_ENCODINGchunkedrCONTENT_LENGTHr)rrrrreadrr)ZclrMrMrNrs rc Cst}t|t|}}|||t|t|tr@|dkr@d}||d<|pTtjd|d<|rf||d<|rr||d<|r~d|d <|}|r| d vr|d |7}t d |d S)zSets a cookie.ri6eexpiresr^radomainsecureThttponly)strictZlaxnonez ; SameSite=%sz Set-CookieN) rrsetr rintrZhomepath OutputStringrr) namerrrrrrasamesitemorselrMrMrNrs"  rc Csd|vrt}z||WnJtyft}|dD]&}z||Wq:ty^Yq:0q:Yn0tdd|D}nHi}|dD]8}|dd}t|dkr|\}}t|||<q|S)aParse a HTTP_COOKIE header and return dict of cookie names and decoded values. >>> sorted(parse_cookies('').items()) [] >>> sorted(parse_cookies('a=1').items()) [('a', '1')] >>> sorted(parse_cookies('a=1%202').items()) [('a', '1 2')] >>> sorted(parse_cookies('a=Z%C3%A9Z').items()) [('a', 'Z\xc3\xa9Z')] >>> sorted(parse_cookies('a=1; b=2; c=3').items()) [('a', '1'), ('b', '2'), ('c', '3')] # TODO: cclauss re-enable this test # >>> sorted(parse_cookies('a=1; b=w("x")|y=z; c=3').items()) # [('a', '1'), ('b', 'w('), ('c', '3')] >>> sorted(parse_cookies('a=1; b=w(%22x%22)|y=z; c=3').items()) [('a', '1'), ('b', 'w("x")|y=z'), ('c', '3')] >>> sorted(parse_cookies('keebler=E=mc2').items()) [('keebler', 'E=mc2')] >>> sorted(parse_cookies(r'keebler="E=mc2; L=\"Loves\"; fudge=\012;"').items()) [('keebler', 'E=mc2; L="Loves"; fudge=\n;')] ";cSsg|]\}}|t|jfqSrM)r rrrMrMrNr~;rz!parse_cookies..=r) rloadr rVrrFlenr strip) http_cookiecookie attr_valuer key_valuekeyrrMrMrN parse_cookiess&    rcOs^dtvr tjdd}t|t_zttjg|Ri|WStyXttYn0dS)a(Returns a `storage` object with all the request cookies in it. See `storify` for how `requireds` and `defaults` work. This is forgiving on bad HTTP_COOKIE input, it tries to parse at least the cookies it can. The values are converted to unicode if _unicode=True is passed. _parsed_cookiesZ HTTP_COOKIErCN) rrrrrrr rr6 StopIteration)rrrrMrMrNrGs   rcGsBztjd}Wntj}Yn0|D]}tt||dq&dS)z= Prints a prettyprinted version of `args` to stderr. wsgi.errors)filerC)rrsysstderrprintpprintpformat)argsrargrMrMrNr]s rcCs0ztjd}Wntj}Yn0||dS)Nr)rrrrwrite)rrrMrMrN _debugwritejs  ra% A `storage` object containing various information about the request: `environ` (aka `env`) : A dictionary containing the standard WSGI environment variables. `host` : The domain (`Host` header) requested by the user. `home` : The base path for the application. `ip` : The IP address of the requester. `method` : The HTTP method used. `path` : The path request. `query` : If there are no query arguments, the empty string. Otherwise, a `?` followed by the query string. `fullpath` : The full path requested, including query arguments (`== path + query`). ### Response Data `status` (default: "200 OK") : The status code to be used in the response. `headers` : A list of 2-tuples to be used in the response. `output` : A string to be used as the response. __main__)NNN)N)N)N)F)N)rCNFFNN)\rUcgirrrior urllib.parserutilsrrrrr r r r http.cookiesr rr ImportErrorurllibCookie__all__rrGrr\rrrrrrr rr!r&r"r'r#r(r$r)r%r*r+r6r,r7r-r8ror.r9r/r:r0r;r1r<r2r=r3r>r4r?rr5r@rrArB FieldStoragerrrrrrrrrrrrcontextrOdoctesttestmodrMrMrMrNs    :                 0 5  (