/var/opt/nydus/ops/mysql/connector/__pycache__
Edit: /var/opt/nydus/ops/mysql/connector/__pycache__/authentication.cpython-312.pyc (14815B)
N j9 d Z ddlmZ ddlmZmZmZmZ ddlm Z m
Z
m Z ddl m Z ddl
mZmZ ddlmZmZmZmZmZmZmZmZ dd lmZ erdd
lm Z G d d Z y
)z5Implementing support for MySQL Authentication Plugins ) annotations)
TYPE_CHECKINGAnyDictOptional )InterfaceErrorNotSupportedError
get_exception)logger)MySQLAuthPluginget_auth_plugin)AUTH_SWITCH_STATUSDEFAULT_CHARSET_IDDEFAULT_MAX_ALLOWED_PACKET
ERR_STATUSEXCHANGE_FURTHER_STATUS
MFA_STATUS OK_STATUS
MySQLProtocol)
HandShakeType) MySQLSocketc e Zd ZdZddZedd Zedd ZddZe de
f ddZ d dd Z dd
Z
dd Zd d d d de de
dddd
ddf ddZy)MySQLAuthenticatorz$Implements the authentication phase.c X d| _ i | _ i | _ d| _ d| _ d| _ y)z Constructor. FN) _username
_passwords_plugin_config _ssl_enabled_auth_strategy_auth_plugin_classselfs O/opt/nydus/tmp/pip-target-a90h98xg/lib/python/mysql/connector/authentication.py__init__zMySQLAuthenticator.__init__8 s0 *,.0"'9=15 c | j S )z&Signals whether or not SSL is enabled.)r r# s r% ssl_enabledz MySQLAuthenticator.ssl_enabledA s r' c | j S )a Custom arguments that are being provided to the authentication plugin when called.
The parameters defined here will override the ones defined in the
auth plugin itself.
The plugin config is a read-only property - the plugin configuration
provided when invoking `authenticate()` is recorded and can be queried
by accessing this property.
Returns:
dict: The latest plugin configuration provided when invoking
`authenticate()`.
)r r# s r%
plugin_configz MySQLAuthenticator.plugin_configF s """r' c : | j j | y)z,Update the 'plugin_config' instance variableN)r update)r$ configs r% update_plugin_configz'MySQLAuthenticator.update_plugin_configW s ""6*r' r c |i }t j ||| }|j | t j d |j |j
d |j
d |j
d |j
dd |j
dd |j
d |j
d
}t j d |j || t j d
d| _ |S )a Sets up an SSL communication channel.
Args:
sock: Pointer to the socket connection.
host: Server host name.
ssl_options: SSL and TLS connection options (see
`network.MySQLSocket.build_ssl_context`).
charset: Client charset (see [1]), only the lower 8-bits.
client_flags: Integer representing client capabilities flags.
max_allowed_packet: Maximum packet size.
Returns:
ssl_request_payload: Payload used to carry out SSL authentication.
References:
[1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set
)charset client_flagsmax_allowed_packetzBuilding SSL contextcacertkey verify_certFverify_identity tls_versionstls_ciphersuites)ssl_cassl_certssl_keyssl_verify_certssl_verify_identityr9 tls_cipher_suiteszSwitching to SSLzSSL has been enabledT) r
make_auth_sslsendr debugbuild_ssl_contextget
switch_to_sslr ) r$ sockhost ssl_optionsr1 r2 r3 ssl_request_payload ssl_contexts r% setup_sslz MySQLAuthenticator.setup_ssl[ s 6 K , 9 9% 1
%& +,,, ??4( __V, OOE* 'OOM5 A +0A5 I$ 8 )oo.@ A -
'( ;- +, ""r' Nc | | j }| | j }t j d| t || || j
j
|d | j | _ y)a Switches the authorization plugin.
Args:
new_strategy_name: New authorization plugin name to switch to.
strategy_class: New authorization plugin class to switch to
(has higher precedence than the authorization plugin name).
username: Username to be used - if not defined, the username
provided when `authentication()` was invoked is used.
password_factor: Up to three levels of authentication (MFA) are allowed,
hence you can choose the password corresponding to the 1st,
2nd, or 3rd factor - 1st is the default.
NzSwitching to strategy %s) plugin_nameauth_plugin_classr )r) ) r r" r rC r r rE r) r! )r$ new_strategy_namestrategy_classusernamepassword_factors r% _switch_auth_strategyz(MySQLAuthenticator._switch_auth_strategy sq & ~~H ! ! 4 4N /1BC
o)^
OO 4 ((
r' c d}|d t k( r-|| j vr t d t j | \ }}| j || t
j d|| j j | j j ||fi | j }|d t k( r=t j | } | j j ||fi | j }|d t k( rt
j d |S |d t k( r t# | |dz
}|d t k( r-t
j$ d y )
a
Handles MFA (Multi-Factor Authentication) response.
Up to three levels of authentication (MFA) are allowed.
Args:
sock: Pointer to the socket connection.
pkt: MFA response.
Returns:
ok_packet: If last server's response is an OK packet.
None: If last server's response isn't an OK packet and no ERROR was raised.
Raises:
InterfaceError: If got an invalid N factor.
errors.ErrorTypes: If got an ERROR response.
z5Failed Multi Factor Authentication (invalid N factor))rS zMFA %i factor %szMFA completed succesfullyr z"MFA terminated with a no ok packetN)r r r r parse_auth_next_factorrT r rC r! nameauth_switch_responser r parse_auth_more_dataauth_more_responser r r warning)r$ rG pktn_factorrP auth_datas r%
_mfa_n_factorz MySQLAuthenticator._mfa_n_factor sP * !f
"t.$K ,9+O+OPS+T ( y & &'8( & S LL+Xt7J7J7O7O P:$%%::i#'#6#6C 1v00 ) > >s C
q6' ' LLF G+8+R+RSV+W ( y & &'8 9:$%%::i#'#6#6C q6, , LL5 6%::3?I8$%%88i#'#6#6C q6Y LL3T5H5H5M5M NJ q6Z LL? @ LL*D,?,?,D,D E%%dC0 0 q6Z $ $r' r Fc f || _ |||d| _ | | _ t j |||||| |
| | |
|| j
| j
\ }| _ |rdd|fndd|f} |j |g| t |j | }| j || }| t d d|S )a Performs the authentication phase.
During re-authentication you must set `is_change_user_request` to True.
Args:
sock: Pointer to the socket connection.
handshake: Initial handshake.
username: Account's username.
password1: Account's password factor 1.
password2: Account's password factor 2.
password3: Account's password factor 3.
database: Initial database name for the connection.
charset: Client charset (see [1]), only the lower 8-bits.
client_flags: Integer representing client capabilities flags.
max_allowed_packet: Maximum packet size.
auth_plugin: Authorization plugin name.
auth_plugin_class: Authorization plugin class (has higher precedence
than the authorization plugin name).
conn_attrs: Connection attributes.
is_change_user_request: Whether is a `change user request` operation or not.
read_timeout: Timeout in seconds upto which the connector should wait for
the server to reply back before raising an ReadTimeoutError.
write_timeout: Timeout in seconds upto which the connector should spend to
send data to the server before raising an WriteTimeoutError.
Returns:
ok_packet: OK packet.
Raises:
InterfaceError: If OK packet is NULL.
ReadTimeoutError: If the time taken for the server to reply back exceeds
'read_timeout' (if set).
WriteTimeoutError: If the time taken to send data packets to the server
exceeds 'write_timeout' (if set).
References:
[1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set
)r rV )
handshakerR passworddatabaser1 r2 r3 auth_pluginrO
conn_attrsis_change_user_requestr) r+ r NzGot a NULL ok_pkt)
r r r" r make_authr) r+ r! rB bytesrecvrf r )r$ rG ri rR password1 password2 password3rk r1 r2 r3 rl rO rm rn read_timeout
write_timeoutresponse_payload send_argsr^ ok_pkts r% authenticatez MySQLAuthenticator.authenticate# s t " 'I)D"3 1>0G0G % 1# /!#9 (( ,,1
-$-& & = !m,
"/Y/ DIIl+,--dC8 > !454 ?
r' )returnNone)r{ bool)r{ Dict[str, Any])r. r~ r{ r| )rG r rH strrI zOptional[Dict[str, Any]]r1 intr2 r r3 r r{ rp )NNr )
rP r rQ
Optional[str]rR r rS r r{ r| )rG r r^ rp r{ zOptional[bytes])"rG r ri r rR r rr r rs r rt r rk r r1 r r2 r r3 r rl r rO r rm zOptional[Dict[str, str]]rn r} ru
Optional[int]rv r r{ rp )__name__
__module__ __qualname____doc__r& propertyr) r+ r/ r r rL rT ra rf rz r' r% r r 5 s .6 ! ! # # + * "<7#7# 7# . 7#
7#
7# 7#
7#x )-"&
&
D44 4
4l55 5
5v "&) "<%)+//3',&*'+#^^ !^ ^
^
^ ^ ^ ^ ^ ^ #^ )^ - ^ !% ^ $!^" %#^$
%^r' r N) r
__future__r typingr r r r errorsr r
r r pluginsr
r protocolr r r r r r r r typesr networkr r r r' r% r sE : < " 5 5 D D 5 !$L Lr'