ɯeiG V d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl m Z d dl
mZmZ ddlmZmZmZmZmZ ddlmZmZmZmZ ddlm Z m Z m Z m Z dd l m!Z! dd
l"m#Z#m$Z$m%Z% dd l&m'Z' d d
l(m)Z) d dl*m+Z+m,Z, erddl(m-Z- ej\ e/ Z0dZ1 G d de+ Z2y) ) annotationsN)
ModuleType)
TYPE_CHECKINGAny )
IS_WINDOWSparse_qs urlencodeurlparseurlsplit)HTTP_HEADER_ACCEPTHTTP_HEADER_CONTENT_TYPEHTTP_HEADER_SERVICE_NAMEHTTP_HEADER_USER_AGENT)ER_IDP_CONNECTION_ERRORER_INVALID_VALUEER_NO_HOSTNAME_FOUNDER_UNABLE_TO_OPEN_BROWSER)OperationalError) CONTENT_TYPE_APPLICATION_JSON EXTERNAL_BROWSER_AUTHENTICATORPYTHON_CONNECTOR_USER_AGENT) is_valid_url )Auth) AuthByPluginAuthType)SnowflakeConnectioni @ c J e Zd ZdZ d d fd
ZddZedd Zedd ZddZ ddZ
ddZ d d Z d d
Z
d d Z d d Zd d
Zd!dZd"dZd#dZd$dZ d%dZ d&dZ xZS )'AuthByWebBrowserzKAuthenticates user by web browser. Only used for SAML based authentication.c t | di | d| _ d | _ || _ d | _ |t n|| _ |t j n|| _ || _
|| _ || _ d | _
y )NT )super__init__consent_cache_id_token_token _application
_proof_key
webbrowser _webbrowsersocket_socket _protocol_host_port_origin) self applicationwebbrowser_pkg
socket_pkgprotocolhostportkwargs __class__s e/var/www/html/glpi_dashboard/venv/lib/python3.12/site-packages/snowflake/connector/auth/webbrowser.pyr$ zAuthByWebBrowser.__init__6 sz "6"&*#"& ' (0Jn
( /FMMZ
"
c d | _ y Nr& r1 s r:
reset_secretsz AuthByWebBrowser.reset_secretsP s r; c " t j S r= )r EXTERNAL_BROWSERr? s r: type_zAuthByWebBrowser.type_S s (((r; c | j S )zReturns the token.r> r? s r: assertion_contentz"AuthByWebBrowser.assertion_contentW s {{r; c d t |d d< | j |d d< | j |d d< y)zUsed by Auth to update the request that gets sent to /v1/login-request.
Args:
body: existing request dictionary
data
AUTHENTICATORTOKEN PROOF_KEYN)r r& r( )r1 bodys r: update_bodyz AuthByWebBrowser.update_body\ s7 )GV _% $ V W $(OOV [!r; c t j d | j t j t j
}t
j dd j dk( rKt rt j d n/|j t j t j d t
j dd } |j |t t
j d d
f |j+ d
|j- d }
|j. r,t j d | j1 |||||
| } n(t j d | j3 ||
| } t j d t5 | s0| j7 |t8 d| dd |j; yt= d t j d t= d| d | j> jA | } | r t= d | s't
j dd j dk( r(t j d | jC || n_t= d tE d }
| jG |
| jH s,| j7 |tJ d d |j; y|j; y# t j $ r>} | j" d
t j$ k( rt' | d | d t(
| d} ~ ww xY w# |j; w xY w) z!Web Browser based Authentication.z authenticating by Web Browser SNOWFLAKE_AUTH_SOCKET_REUSE_PORTFalsetruezUConfiguration SNOWFLAKE_AUTH_SOCKET_REUSE_PORT is not available in Windows. Ignoring.r SF_AUTH_SOCKET_ADDR localhostSF_AUTH_SOCKET_PORTr z% is not found. Ensure /etc/hosts has z entry.)msgerrnoNz"step 1: query GS to obtain SSO urlz&step 1: constructing console login urlzValidate SSO URLzThe SSO URL provided z is invalidcodemessageconnretz\Initiating login request with your identity provider. Press CTRL+C to abort and try again...zstep 2: open a browserzGoing to open: z to authenticate...zA browser window should have opened for you to complete the login. If you can't see it, check existing browser windows, or your OS settings.SNOWFLAKE_AUTH_FORCE_SERVERzstep 3: accept SAML tokenzWe were unable to open a browser window for you, please open the url above manually then paste the URL you are redirected to into the terminal.z-Enter the URL the SSO URL redirected you to: zKUnable to open a browser in this environment and SSO URL contained no token)&loggerdebugr, r+ AF_INET SOCK_STREAMosgetenvlowerr warning
setsockopt
SOL_SOCKET SO_REUSEPORTbindintgaierrorargs
EAI_NONAMEr r listen getsockname_disable_console_login _get_sso_url_get_console_login_urlr _handle_failurer closeprintr* open_new_receive_saml_tokeninput_process_get_urlr& r )r1 rZ
authenticator service_nameaccountuserr8 socket_connectionhostnameex
callback_portsso_urlbrowser_openedurls r: preparezAuthByWebBrowser.preparef s 45 !LL 9K9K L
997 A G G IV Sk ",,V->->@S@SUVWT &yy!6 DH
!&& BII&;Q ?@
$ $Q ' - 9 9 ;A >M** AB ++- w
t EF 55dM4P LL+ , ($$ 0&;G9K$P % Z
# # %W
n
LL1 2 OG9,?@ A ! - - 6 6w ?N + 99 :GDJJLPVV 89((/@AC
KL%%c*{{ (( !$=!= ) # # % # # %W ??
771:!2!22* 'j(M#*G - 2 H
V
# # %s8 7L> 0K* >CL> C5L> *L;=9L66L;;L> >Mc , |j | ddiS )NsuccessT)authenticate_with_retry)r1 rZ r8 s r: reauthenticatez AuthByWebBrowser.reauthenticate s
$$T*4 r; c d}t }d}d}t j dd j dk( }t r|rt
j
d d}t | dk( r||k r|d z
}t j |gg g \ }} }
|d e|j \ }} |r:t
j d
|j t t j }n|j t }t | dk( r||k r|j% d j' d }
| j) |
| sD| j+ ||
| |j- t j. |j1 y |j- t j. |j1 # t $ rd t
j d ||k r1d } t
j d
| d t! j" | nt
j d Y (w xY w# j- t j. |j1 w xY w)z%Receives SAML token from web browser.r N "SNOWFLAKE_AUTH_SOCKET_MSG_DONTWAITfalserP zWConfiguration SNOWFLAKE_AUTH_SOCKET_MSG_DONTWAIT is not available in Windows. Ignoring.Fr zcCalling socket_client.recv with MSG_DONTWAIT flag due to SNOWFLAKE_AUTH_SOCKET_MSG_DONTWAIT env varz[BlockingIOError raised from socket.recv while attempting to retrieve callback token requestg ?zWaiting z seconds before trying againzExceeded retry countutf-8
) bytearrayra rb rc r r] rd lenselectacceptr^ recvBUF_SIZEr+ MSG_DONTWAITBlockingIOErrortimesleepdecodesplit_process_options_process_receive_saml_tokenshutdown SHUT_RDWRrs )r1 rZ r} attemptsraw_data
socket_client max_attempts
msg_dont_wait read_sockets_write_sockets_exception_sockets_
sleep_timerG s r: rv z$AuthByWebBrowser._receive_saml_token s@ @
& $; $
! II BGLRRT $ u %*M (mq(X -D MHGM}}*+RHDL.2D $A2+<+C+C+E(
qE , !' %J!" ,9+=+=$,f.A.A," ,9+=+=h+G- (mq(X -DJ w/55f=,,T=A44T4 O &&v'7'78 ##%
B
&&v'7'78 ##%C X / E "LL } (, 6-1
& &.zl:V$W!" !%
: 6 & -C D E( &&v'7'78 ##%s9 B"H# &AF3 7H# AH# 3A)H H# H H# #1Ic |D ] }|j d s n y| j | | j | \ }}|sy| j | sy|| _ ddj t
j dt
j dd| dd | j d
d
g}|j d j | j d y
)z'Allows JS Ajax access to this endpoint.zOPTIONS FHTTP/1.1 200 OKzDate: {}z%a, %d %b %Y %H:%M:%S GMTz'Access-Control-Allow-Methods: POST, GETz Access-Control-Allow-Headers: z Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: r r T)
startswith_get_user_agent_check_post_requested_validate_originr0 formatr strftimegmtimesendalljoinencode)r1 rG r linerequested_headersrequested_origincontents r: r z!AuthByWebBrowser._process_options" s Dz* T".2.H.H.N++ $$%56'
94;;=I
6,->,? @ ++DLL> :
fkk' 2 9 9' BCr; c t | }|j j d }|d }t | dkD r|d n| j dk( rdnd}|j
| j k( xr || j k( xr || j k( S )N:r r httpsi P )r netlocr r r- schemer. r/ )r1 r r[ r host_gotport_gots r: r z!AuthByWebBrowser._validate_originC s '(!!#&!9 Vq F1Idnn6OsUW
JJ$.. (
'DJJ&
'DJJ&
r; c | j | s| j || sy ddg}| j rSd| j i}t j
| }|j
d| j |j
d nd| j d}|j
dt | |j
d |j
| |j d
j | j d y ) Nr zContent-Type: text/htmlconsentr z Vary: Accept-Encoding, Originz
SAML Response for Snowflake
Your identity was confirmed and propagated to Snowflake zR.
You can close this window now and go back where you started from.
zContent-Length: r r r ) _process_get
_process_postr0 r% jsondumpsappendr' r r r r )r1 rZ rG r r rT s r: r z,AuthByWebBrowser._process_receive_saml_tokenQ s &t/A/A$/M
%
<< t : :;D**T"C NN :4<<.I J NN: ;9
:>9J9J8K L C )#c(45rs fkk' 2 9 9' BCr; c d }d }d }|D ]> }|j d r|}|j d r|}+|j d s=|}@ |r)|r'|r%|j d d j dk7 ry|j d d j dj |j d dd j fS )Nz Access-Control-Request-Method:z Access-Control-Request-Headers:zOrigin:r r POST)NN)r r stripr )r1 rG request_line header_line origin_liner s r: r z&AuthByWebBrowser._check_post_requestedo s #D ?@ # !BC " + "
# !!#&q)//1V;
c "1 % + + - HH[&&s+AB/ 0 6 6 8
r; c t t t | j }d|vs|d d sy |d d | _ y )Ntokenr )r r queryr& )r1 r parseds r: rx z!AuthByWebBrowser._process_get_url s< (3---. & w(: Woa( r; c |D ] }|j d s|} n y| j | |j \ }}}| j | y)NzGET FT)r r r rx )r1 rG r target_liner r s r: r z AuthByWebBrowser._process_get s] Dv& "
T" %%' 3 c"r; c l |D ] }|j d s n | j |t dd y| j | t j
|d }|j
d | _ |j
dd | _ y # t $ r t |d d d
| _ Y y w xY w) NzPOST zLInvalid HTTP request from web browser. Idp authentication could have failed.rV rY Fr r Tr ) r rr r r r loadsgetr& r% Exceptionr )r1 rZ rG r payloads r: r z AuthByWebBrowser._process_post s Dw'
3 8
!
T" 9jjb*G!++g.DK*1++i*FD ' 9"48,W5a8DK 9s AB "B32B3c |D ]8 }|j j d s#t j | y t j d y )Nz
user-agentz
No User-Agent)rc r r] r^ )r1 rG r s r: r z AuthByWebBrowser._get_user_agent sB *Dzz|&&|4 T" *
LL )r; c > t t t t t t i}|r ||t
< d}t
j |||j |j |j |j |j |j |j |j |j |j" j$ j' d } || d d< t) | | d d< t* j- d||| |j. j1 ||t3 j4 | |j. j6 j |j. j6 j }
|
d
s| j9 ||
|
d } | d } | d
| _ | S )z Gets SSO URL from Snowflake.z /session/authenticator-requestF) use_pooling)session_managerrG rH BROWSER_MODE_REDIRECT_PORTz%account=%s, authenticator=%s, user=%s)timeoutsocket_timeoutr rY ssoUrlproofKey) r r r
r r r r base_auth_datar2 _internal_application_name _internal_application_version
_ocsp_modecert_revocation_check_mode
login_timeoutnetwork_timeoutr "platform_detection_timeout_secondsrestr clonestrr] r^ _rest
_post_requestr r _connectionrr r( )
r1 rZ ry rz r{ r r| headersr rK r[ rG r s
r: rp z AuthByWebBrowser._get_sso_url s
%&C = "$?
0+>r+BCJJ7S JJ ! !
"&26!%
+C512
r; )NNNNN)r2 r r3 zModuleType | Noner4 ztype[socket.socket] | Noner5
str | Noner6 r r7 r returnNone)r r )r r )r r )rK zdict[Any, Any]r r )rZ r ry r rz r r{ r r| r r8 r r r )rZ r r8 r r zdict[str, bool])rZ r r r )rG list[str]r
socket.socketr bool)r r r r )rZ r rG r r r r r )rG r r z tuple[str | None, str | None])r r r r )rG r r r )rZ r rG r r r )rG r r r )rZ r ry r rz r r{ r r ri r| r r r )rZ r r7 ri r| r r r )__name__
__module__ __qualname____doc__r$ r@ propertyrC rE rL r r rv r r r r rx r r r rp rq
__classcell__)r9 s @r: r r 3 s U
-115 # * /
4 ) ) 4l& "l& l&
! l&
l& l& l&
l&\! "! !
!C&J B
D' D/8 DIV D
D<
2) 4*3!3 3 ! 3
3
3 3
3j'/2:= r; r )3
__future__r r r loggingra r r r+ r r) typesr typingr r compatr r r
r r constantsr
r r r errorcoder r r r errorsr networkr r r url_utilr r r by_pluginr r r getLoggerr r] r r r" r; r: r s "
% H H &
$ -& 8 $ O| Or;