+ jLaR$t.0tRt^RIt^RIt^RIt^RIt^RIt^RIHt^RI H t H t H t ^RI Ht^RIHt^RIHt^RIHt^RIHtHt^R IHt!R R ] R R 7tR]P6R]P6R]P8R]P8R]P:R]P:R]P:R]P:R]P<R]P<R]P<R]P</ t]^k]P@!]PBR%8dRMR4t"R&t#]^k]$!]%!]PM444t']^k](!0R'm4t)]^kRRlt*RRlt+R R!lt,!R"R#4t-R#)(av Digest authentication middleware for aiohttp client. This middleware implements HTTP Digest Authentication according to RFC 7616, providing a more secure alternative to Basic Authentication. It supports all standard hash algorithms including MD5, SHA, SHA-256, SHA-512 and their session variants, as well as both 'auth' and 'auth-int' quality of protection (qop) options. N)Callable)FinalLiteral TypedDict)URL)hdrs) ClientError)ClientHandlerType) ClientRequestClientResponse)Payloadc,a]tRt^toV3RltRtVtR#)DigestAuthChallengecn<V^8dQh/S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&#)realmnonceqop algorithmopaquedomainstalestr)format __classdict__s"b/Users/cheyod/AIGC/DSH/.venv/lib/python3.14/site-packages/aiohttp/client_middleware_digest_auth.py __annotate__ DigestAuthChallenge.__annotate__sU J J HN  K  K  JN)__name__ __module__ __qualname____firstlineno____annotate_func____static_attributes____classdictcell__rs@rrrsrrF)totalMD5zMD5-SESSSHAzSHA-SESSSHA256z SHA256-SESSzSHA-256z SHA-256-SESSSHA512z SHA512-SESSzSHA-512z SHA-512-SESSz?(?:^|\s|,\s*)(\w+)(?:\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^\s,]+)))?zC(?:^|\s|,\s*)((?>\w+))(?:\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^\s,]+)))?c0V^8dQhR\R\/#rvaluereturnr)rs"rrrhs;;;;rcFVPRR4PRR4#)z=Escape backslashes and double quotes for HTTP quoted-strings.\\\"\"replacer0s&r escape_quotesr:hs ==v & . .sE ::rc0V^8dQhR\R\/#r/r)rs"rrrms;;3;3;rcFVPRR4PRR4#)z>Unescape backslashes and double quotes in HTTP quoted-strings.r6r5r4r3r7r9s&runescape_quotesr=ms == $ , ,VT ::rcRV^8dQhR\R\\\3,/#)rheaderr1)rdict)rs"rrrrs"''s'tCH~'rc/p\PV4F]pVP^4pVP^4VP^4rTVfVfV'dV#KJVe \V4MTW&K_ V#)aU Parse key-value pairs from the first challenge of a WWW-Authenticate header. This function handles the complex format of WWW-Authenticate header values, supporting both quoted and unquoted values, proper handling of commas in quoted values, and whitespace variations per RFC 7616. A single header may carry several challenges (https://www.rfc-editor.org/rfc/rfc7235#section-4.1). Parsing stops at the next auth-scheme token so a later challenge's parameters cannot overwrite the first challenge's values; a leading scheme token is skipped. Examples of supported formats: - key1="value1", key2=value2 - key1 = "value1" , key2="value, with, commas" - key1=value1,key2="value2" - realm="example.com", nonce="12345", qop="auth" Args: header: The header value string to parse Returns: Dictionary mapping parameter names to their values )_HEADER_PAIRS_PATTERNfinditergroupr=)r?pairsmatchkey quoted_val unquoted_vals& rparse_header_pairsrJrs~2E&//7kk!n#(;;q>5;;q>L  ,"6 L +5+AOJ '|  8 Lrca]tRt^toRtRV3RlRlltV3RlRltV3RlRltV3RlR ltV3R lR lt R t Vt R #)DigestAuthMiddlewarea HTTP digest authentication middleware for aiohttp client. This middleware intercepts 401 Unauthorized responses containing a Digest authentication challenge, calculates the appropriate digest credentials, and automatically retries the request with the proper Authorization header. Features: - Handles all aspects of Digest authentication handshake automatically - Supports all standard hash algorithms: - MD5, MD5-SESS - SHA, SHA-SESS - SHA256, SHA256-SESS, SHA-256, SHA-256-SESS - SHA512, SHA512-SESS, SHA-512, SHA-512-SESS - Supports 'auth' and 'auth-int' quality of protection modes - Properly handles quoted strings and parameter parsing - Includes replay attack protection with client nonce count tracking - Supports preemptive authentication per RFC 7616 Section 3.6 Origin scoping: The credentials are scoped to the origin of the first request the middleware handles. A request to a different origin is passed through untouched, so it never receives a digest response computed from those credentials, unless that origin falls within a protection space the anchor origin advertised through the RFC 7616 ``domain`` directive. Make the first request through the middleware against the intended origin, as the anchor is pinned to it and not reset for the life of the instance. Standards compliance: - RFC 7616: HTTP Digest Access Authentication (primary reference) - RFC 2617: HTTP Authentication (deprecated by RFC 7616) - RFC 1945: Section 11.1 (username restrictions) Implementation notes: The core digest calculation is inspired by the implementation in https://github.com/requests/requests/blob/v2.18.4/requests/auth.py with added support for modern digest auth features and error handling. c0<V^8dQhRS[RS[RS[RR/#)rloginpassword preemptiver1N)rbool)rrs"rr!DigestAuthMiddleware.__annotate__s3(((( (  (rcVf \R4hVf \R4hRV9d \R4hWnVPR4VnVPR4VnRVn^Vn/VnW0n.Vn RVn R#)Nz"None is not allowed as login valuez%None is not allowed as password value:z8A ":" is not allowed in username (RFC 1945#section-11.1)utf-8r) ValueError _login_strencode _login_bytes_password_bytes_last_nonce_bytes _nonce_count _challenge _preemptive_protection_space_origin)selfrNrOrPs&&&&r__init__DigestAuthMiddleware.__init__s =AB B  DE E %<WX X&+*/,,w*?-5__W-E!$/1!+,.#' rcP<V^8dQhRS[RS[RS[S[R,,RS[/#)rmethodurlbodyrr1)rrr r)rrs"rrrRs9c,c,Cc,cc,73<9Oc,TWc,rc a#a$"VPpRV9d \R4hRV9d \R4hVR,pVR,pV'g \R4hVPRR4pVPRR 4pVP4p VPR R4p VP R 4p VP R 4p \ V4P p RpR pV'dR R0PVPR4Uu0uF+pVP4'gKVP4kK- up4pV'g\RV 24hRV9dRMR pVP R 4pV \9d%\RV RRP\4 24h\V ,o$RV$3Rllo#RV#3RllpRPVPWP34pVP4 RV 2P 4pVR8XdM\V\ 4'dVP#4GRjxL pMTpS#!V4pRPVV34pS#!V4pS#!V4pWP$8XdV;P&^, unM^VnWnVP&R pVP R 4p\(P*!R P\-VP&4P R 4V \.P0!4P R 4\2P4!^4.44P74R,pVP R 4pV P4P9R4'dS#!RPVV V344pV'd!RPV VVVV34pV!VV4pMV!VRPV V344pR\;VP<4R\;V4R\;V4RV R VP?4RV/pV 'd\;V 4VR &V'dVVR&VVR!&VVR"&.p VPA4F@wp!p"V!\B9dV PEV! R#V" R$24K*V PEV! R%V" 24KB R&RPV 4 2#uupiEL5i)'a} Build digest authorization header for the current challenge. Args: method: The HTTP method (GET, POST, etc.) url: The request URL body: The request body (used for qop=auth-int) Returns: A fully formatted Digest authorization header string Raises: ClientError: If the challenge is missing required parameters or contains unsupported values rz:Malformed Digest auth challenge: Missing 'realm' parameterrz:Malformed Digest auth challenge: Missing 'nonce' parameterzBSecurity issue: Digest auth challenge contains empty 'nonce' valuerrr*rrUrauthzauth-int,zEDigest auth error: Unsupported Quality of Protection (qop) value(s): z/Digest auth error: Unsupported hash algorithm: z. Supported algorithms: z, c0V^8dQhR\R\/#)rxr1bytes)rs"rr2DigestAuthMiddleware._encode..__annotate__+s 3 3 35 3rcL<S!V4P4P4#)z.H+s1:'')002 2rc<V^8dQhR\R\R\/#)rsdr1rn)rs"rrrp/s! ( (% (E (e (rc4<S!RPW344#)zDRFC 7616 Section 3: KD(secret, data) = H(concat(secret, ":", data)).:)join)rwrxrts&&rKD(DigestAuthMiddleware._encode..KD/sTYYv&' 'rrzrTN08x:NNz-SESSusernameuriresponsenccnoncez="r5=zDigest )#r]rgetupperrXr raw_path_qs intersectionsplitstripDigestFunctionsr{SUPPORTED_ALGORITHMSrYrZ isinstancer as_bytesr[r\hashlibsha1rtimectimeosurandomrrendswithr:rWdecodeitemsQUOTED_AUTH_FIELDSappend)%rarerfrg challengerrqop_rawalgorithm_originalrr nonce_bytes realm_bytespathr qop_bytesq valid_qopsr|A1A2 entity_bytes entity_hashHA1HA2ncvalue ncvalue_bytesr cnonce_bytesnoncebitresponse_digest header_fieldsrEfieldr0rtrss%&&&& @@r_encodeDigestAuthMiddleware._encodes"OO ) #L  ) #L  '"'"T --r*&]];>&,,. x,ll7+ ll7+ 3x##  *-::$+MM#$6D$6q!'')$6DJ![\c[de!+j 8*fC 7+I O +A)M))-3G)H(IK )3 3 3 ( ( YY));8L8LM N q ' . . 0 * $((%)]]_4 # L/KB ,-Bee 00 0    "  !D !,&&s+w/  HH))*11':JJL''0JJqM     )+c }}W-  ??  % %g . .DIIsK>?@C yym\9cJH!h/O diic0B&CDO  doo6 ]5) ]5) 4 ..0 +  &3F&;M( # #&M% ")M$ &,M( #)//1LE5** wbq12 waw/0 2 5)*++SE< 5sAA SB4SR> R>4SC2S5S6E5S,BSA?Sc&<V^8dQhRS[RS[/#)rrfr1)rrQ)rrs"rrrRsrc \V4pVPF`pVPV4'gK\V4\V48XgVR,R8XdR#V\V4,R8XgK_R# R#)z Check if the given URL is within the current protection space. According to RFC 7616, a URI is in the protection space if any URI in the protection space is a prefix of it (after both have been made absolute). /TF)rr_ startswithlen)rarf request_str space_strs&& r_in_protection_space)DigestAuthMiddleware._in_protection_spacesi#h //I)))44;3y>1Yr]c5I3y>*c10rc&<V^8dQhRS[RS[/#)rrr1)r rQ)rrs"rrrRs;%;%n;%;%rc  VPR8wdR#VPPRR4pV'gR#VPR4wr4pV'gR#VP 4R8wdR#V'gR#\ V4;p'gR#/Vn\F(pVPV4;pfKWP V&K* VPP4p .Vn VP PR4;p 'dV P4Fp V PR4p V 'gKV PR 4'd?VPP\V P!\#V 4444KsVPP\\#V 444K VP'g\V 4.Vn \%VP 4#) zr Takes the given response and tries digest-auth, if needed. Returns true if the original request must be resent. iFzwww-authenticateri digestrr5r)statusheadersr partitionlowerrJr]CHALLENGE_FIELDSrforiginr_rrrrrr{rrQ) rar auth_headerresepr header_pairsrr0rrrs && r _authenticate"DigestAuthMiddleware._authenticates ??c !&&**+=rB *44S9W <<>X %!37 ;; ;%E%))%00=).&& $$&!#__((2 26 2||~iin>>#&&**11#fkk#c(6K2LM**11#c#h-@&%%%&)&k]D "DOO$$rc,<V^8dQhRS[RS[RS[/#)rrequesthandlerr1)r r r )rrs"rrrRs%%%$%/@% %rc "VPP4pVPfW0nMAW0P8wd2VPVP4'gV!V4GRjxL #Rp\ ^4FpV^8gFVP 'dVP 'dvVPVP4'dUVPVPVPVP4GRjxL VP\P&V!V4GRjxL pVPV4'dKM VfQhV#LLVL-5i)zRun the digest auth middleware.N)rfrr`rranger^r]rrergrr AUTHORIZATIONr)rarrrr retry_counts&&& r__call__DigestAuthMiddleware.__call__s##% << !L || #D,E,Egkk,R,R )) ) 8KQ   OOO--gkk::<@LLNNGKK=7 2 23 %W--H%%h//%$*###3*7 .sTA E# E.E/,EE. E4EE*E.E/E EEE) r]r[rYrWr\r`rZr^r_N)T) r!r"r#r$__doc__rbrrrrr&r'r(s@rrLrLsA%N((8c,c,J(;%;%z%%rrLcV^8dQh/^\9d)\\\\.R3,3,;R&^\9d)\ \ \R,R3,,;R&^\9d"\ \ \R3,,;R&^\9d \ \\,,;R&#)rz hashlib._Hashr.rrrrrrrrrr) __conditional_annotations__r@rrrortupler frozenset)rs"rrrsH  c8UG_$<==> IV  % QRTWW WvUTeE#s(O,TwDE)C.)Er) r>rrrrrrr)/rrrrresysrcollections.abcrtypingrrryarlrrirclient_exceptionsrclient_middlewaresr client_reqrepr r payloadr rmd5rsha256sha512rcompile version_inforBrrsortedkeysrrrr:r=rJrLr)rs@rrsF $,,*18)5 7;;  7<<  gnn7>> w~~GNN gnn7>> w~~GNN B "  '!G O4   05VO