o is @sddlZddlZddlmZmZddlZddlZddlmZddl m Z ddl m Z ddl mZddlmZmZmZmZGd d d eZd d ZdS) N)DictAny)urlparse)ClientAuthenticationError)CredentialUnavailableError)DEVELOPER_SIGN_ON_CLIENT_ID)AuthCodeRedirectServerInteractiveCredentialwrap_exceptions within_daccs@eZdZdZdeddffdd Zededefdd Z Z S) InteractiveBrowserCredentialaOpens a browser to interactively authenticate a user. :func:`~get_token` opens a browser to a login URL provided by Microsoft Entra ID and authenticates a user there with the authorization code flow, using PKCE (Proof Key for Code Exchange) internally to protect the code. :keyword str authority: Authority of a Microsoft Entra endpoint, for example "login.microsoftonline.com", the authority for Azure Public Cloud (which is the default). :class:`~azure.identity.AzureAuthorityHosts` defines authorities for other clouds. :keyword str tenant_id: a Microsoft Entra tenant ID. Defaults to the "organizations" tenant, which can authenticate work or school accounts. :keyword str client_id: Client ID of the Microsoft Entra application that users will sign into. It is recommended that developers register their applications and assign appropriate roles. For more information, visit https://aka.ms/azsdk/identity/AppRegistrationAndRoleAssignment. If not specified, users will authenticate to an Azure development application, which is not recommended for production scenarios. :keyword str login_hint: a username suggestion to pre-fill the login page's username/email address field. A user may still log in with a different username. :keyword str redirect_uri: a redirect URI for the application identified by `client_id` as configured in Azure Active Directory, for example "http://localhost:8400". This is only required when passing a value for **client_id**, and must match a redirect URI in the application's registration. The credential must be able to bind a socket to this URI. :keyword AuthenticationRecord authentication_record: :class:`AuthenticationRecord` returned by :func:`authenticate` :keyword bool disable_automatic_authentication: if True, :func:`get_token` will raise :class:`AuthenticationRequiredError` when user interaction is required to acquire a token. Defaults to False. :keyword cache_persistence_options: configuration for persistent token caching. If unspecified, the credential will cache tokens in memory. :paramtype cache_persistence_options: ~azure.identity.TokenCachePersistenceOptions :keyword int timeout: seconds to wait for the user to complete authentication. Defaults to 300 (5 minutes). :keyword bool disable_instance_discovery: Determines whether or not instance discovery is performed when attempting to authenticate. Setting this to true will completely disable both instance discovery and authority validation. This functionality is intended for use in scenarios where the metadata endpoint cannot be reached, such as in private clouds or Azure Stack. The process of instance discovery entails retrieving authority metadata from https://login.microsoft.com/ to validate the authority. By setting this to **True**, the validation of the authority is disabled. As a result, it is crucial to ensure that the configured authority host is valid and trustworthy. :keyword bool enable_support_logging: Enables additional support logging in the underlying MSAL library. This logging potentially contains personally identifiable information and is intended to be used only for troubleshooting purposes. :raises ValueError: invalid **redirect_uri** .. admonition:: Example: .. literalinclude:: ../samples/credential_creation_code_snippets.py :start-after: [START create_interactive_browser_credential] :end-before: [END create_interactive_browser_credential] :language: python :dedent: 4 :caption: Create an InteractiveBrowserCredential. kwargsreturnNc s|dd}|rt||_|jjr|jjstdnd|_|dd|_|dd|_|dt|_ |dt }t t |j dd|i|dS) N redirect_urizR"redirect_uri" must be a URL with port number, for example "http://localhost:8400" login_hinttimeouti, _server_class client_id)popr _parsed_urlhostnameport ValueError _login_hint_timeoutr rrsuperr __init__)selfrrr __class__rZ/home/app/Keep/.python/lib/python3.10/site-packages/azure/identity/_credentials/browser.pyrEs   z%InteractiveBrowserCredential.__init__scopesc Oshd}d}|jr6zd|jj|jj}|j|jj|jj|jd}Wn8tjy5}ztd|d|d}~wwt ddD]}z|jd||jd}d |}Wn tjyXYq;w|s`td dt |}| d }|j di|}|j ||d ||jd } d| vrtdt| dstdd|} | st rtd|jdtd|jd|j| | ||dS)Nz http://{}:{})rz!Couldn't start an HTTP server on )messagei i(# localhostzhttp://localhost:{}z*Couldn't start an HTTP server on localhostclaimsZselect_account)rpromptclaims_challengerZauth_uriz#Failed to begin authentication flowzFailed to open a browserz?Timed out after waiting {} seconds for the user to authenticate)r#r)r)rformatrrrrsocketerrorrrangelistgetZ_get_appZinitiate_auth_code_flowr _open_browserZwait_for_redirectr rZacquire_token_by_auth_code_flow) rr#rserverrexrr'appZflowresponserrr"_request_tokenTsX       z+InteractiveBrowserCredential._request_token) __name__ __module__ __qualname____doc__rrr strrr5 __classcell__rrr r"r s 1r cCst|}|sEt}|d}|d}d|vrE|dkrEddi}ztjddd d |gfi|}|dk}W|StyDY|Sw|S) NrrZ microsoftlinuxrzpowershell.exez -NoProfilez-CommandzStart-Process "{}") webbrowseropenplatformunamelower subprocesscallr* Exception)urlZopenedrAsystemreleaser exit_coderrr"r0s(     r0)r@r+typingrrrCr> urllib.parserZazure.core.exceptionsrr$r _constantsr _internalr r r r r r0rrrr"s     y