gj/ dZddlZddlmZddlmZmZddlZddlm Z ddl m Z m Z dd l mZmZd Zd ZGd d eZGddedZdefdZdddedegdfdzdefdZd edefdZdejdefdZdS)aADevice Code OAuth (RFC 8628) for browser-based login, plus access token refresh. The flow: the client requests a device code, displays a URL and a short user code, the user authorizes in a browser, and the client polls ``POST {ENDPOINT}/oauth/token`` until a token is issued. Access tokens may come with a refresh token, used to renew them transparently (see ``utils/_auth.py::get_token``). This module is self-contained protocol logic: no printing, no persistence. Interactive flows live in ``_login.py`` (human/library) and ``cli/auth.py`` (machine-readable event stream). N)Callable) TypedDictcast) constants)DeviceCodeErrorOAuthErrorCode) get_sessionhf_raise_for_statusz,urn:ietf:params:oauth:grant-type:device_code refresh_tokencLeZdZUeed<eed<eed<eed<eed<eed<dS)DeviceCodeInfo device_code user_codeverification_uriverification_uri_completeinterval expires_inN__name__ __module__ __qualname__str__annotations__intg/var/www/app.qaans.com/backend/venv/lib/python3.11/site-packages/huggingface_hub/utils/_oauth_device.pyrr(sONNN""""MMMOOOOOrrc8eZdZUeed<eed<eed<eed<dS)OAuthTokenResponse access_tokenr r token_typeNrrrrr!r!1s:OOOOOOOOrr!F)totalreturnc  ttjddtjitj}t |n7#tj$r%}tdtjd||d}~wwxYw| }| dd| d d | d s |d |d <tt|S) a'Request a device code from the Hub's OAuth device authorization endpoint. The returned dict is normalized: `interval`, `expires_in` and `verification_uri_complete` are always set (server values, or sensible defaults). Raises: [`DeviceCodeError`]: If the request fails. z /oauth/device client_iddatatimeoutz#Failed to request device code from z/oauth/device: Nrrirr)r postrENDPOINTDEVICE_CODE_OAUTH_CLIENT_IDHF_HUB_DOWNLOAD_TIMEOUTr httpx HTTPErrorrjson setdefaultgetrr)responseeinfos rrequest_device_coder88ss==%%! 0 0 0yDE5&   H%%%% ?sssjIDVjjghjjkkqrrs ==??D OOJ"""OOL#&&& 88/ 0 0E,01C,D ()  % %%sAAB ( BB ) on_pending device_infor9c |d}tj|dz}tj|krd} ttjdt |dtjdtj}|j dkr| }n#tj tf$rYnwxYw|d |vrtt|S|d xnxt"jkr| |nxt"jkr|d z }nxt"jkrt+d t"j xt"jkrt+dt"j }t+d|d|dd| tj|tj|kt+dt"j )awPoll the token endpoint until the user authorizes the device. Args: device_info (`DeviceCodeInfo`): The device authorization response from [`request_device_code`]. on_pending (`Callable`, *optional*): Called after each "authorization pending" response (e.g. to print a progress dot). Returns: `OAuthTokenResponse`: the full token response: `access_token`, and optionally `refresh_token` and `expires_in`. Raises: [`DeviceCodeError`]: If authorization is denied, the device code expires, or the server returns an unexpected OAuth error. rrN /oauth/tokenr) grant_typerr'r(r"errorr+z&Device code expired. Please try again. error_codez+Authorization was denied. Please try again.z OAuth error:  - error_descriptionz0Device code expired (timeout). Please try again.)time monotonicr r,rr-_DEVICE_CODE_GRANT_TYPEr.r/ status_coder2r0r1 ValueErrorrr!r4r AUTHORIZATION_PENDING SLOW_DOWN EXPIRED_TOKENr ACCESS_DENIEDsleep)r:r9rdeadliner)r5r?s rpoll_device_tokenrPTs=&:&H~+l";;H .  X % % "}}))%333"9#.}#=!*!F "9*H#c))}},    D   %%.555((7##TT9^9999!-" -^----MHH1^1111)@^Mi2^1111)ER`Rn)UUU$((;NPR2S2SUUbg 8[ .  X % %^ LYgYu v v vvsA3B44C  C c  ttjdt|tjdtj}n*#tj$r}td||d}~wwxYwt|}d|vrtt|S| d}td|p|jd| d d | ) aExchange a refresh token for a new access token. Returns: `OAuthTokenResponse`: the full token response: `access_token`, and optionally a rotated `refresh_token` and `expires_in`. Raises: [`DeviceCodeError`]: If the server rejects the refresh (`error_code="invalid_grant"` when the refresh token is expired or revoked) or returns an unexpected response. r<)r=r r'r(z Failed to refresh access token: Nr"r?rBrCrDr@)r r,rr-_REFRESH_TOKEN_GRANT_TYPEr.r/r0r1r_parse_token_responserr!r4rH)r r5r6r)r?s rrefresh_access_tokenrTs M==%%! / / /7!.&B5&    ?MMMDDDEE1LM  * *D&--- HHW  E p5+HH4HppTXXVikmMnMnpp   sAAA8 A33A8r5c  |S#t$r:}tdtjd|jd|jdd|d}~wwxYw)NzFailed to parse response from z/oauth/token (status z): r>)r2rIrrr-rHtext)r5r6s rrSrSs}}  FY-? F F+ F F08 dsd0C F F   s A5AA)__doc__rEcollections.abcrtypingrrr0rDrerrorsrr _httpr r rGrRrr!r8rPrrTResponsedictrSrrrr^s   $$$$$$"""""""" 4444444433333333I+Y%&^&&&&:MQDwDwDwDw08T0BT0IDwDwDwDwDwN  0B    FENtr