+ P(iI^RIHt^RIHt^RIHt^RIHt^RIHt^RI H t ^RI H t ^RI H t ^R I H t ^R IHt^R IHtR R RR/t!RR4tRtR#))generate_token) url_decode) ClientAuth) TokenAuth) OAuth2Error)!parse_authorization_code_response)parse_implicit_response)prepare_grant_uri)prepare_token_request)prepare_revoke_token_request)create_s256_code_challengeAcceptzapplication/jsonz Content-Typez/application/x-www-form-urlencoded;charset=UTF-8ca]tRt^toRt]t]t] t Rt .t RRlt RtRt]R4t]P$R4tRRltRR ltRR ltRR ltRR ltRR ltRRltRtRtR RltR!RltRRltRtRt R"Rlt!Rt"Rt#Vt$R#)# OAuth2ClientaConstruct a new OAuth 2 protocol client. :param session: Requests session object to communicate with authorization server. :param client_id: Client ID, which you get from client registration. :param client_secret: Client Secret, which you get from registration. :param token_endpoint_auth_method: client authentication method for token endpoint. :param revocation_endpoint_auth_method: client authentication method for revocation endpoint. :param scope: Scope that you needed to access user resources. :param state: Shared secret to prevent CSRF attack. :param redirect_uri: Redirect URI you registered as callback. :param code_challenge_method: PKCE method name, only S256 is supported. :param token: A dict of token attributes such as ``access_token``, ``token_type`` and ``expires_at``. :param token_placement: The place to put token in HTTP request. Available values: "header", "body", "uri". :param update_token: A function for you to update token. It accept a :class:`OAuth2Token` as parameter. :param leeway: Time window in seconds before the actual expiration of the authentication token, that the token is considered expired and will be refreshed. Nc WnW nW0nWpnVfV'dRpMRpW@nVfV'dRpMRpWPnW`nWnWnVPWV4Vn Wn VPRR4pV'd \R4hWnR\4R\4R\4R\4R \4/Vn/VnWnR#) Nclient_secret_basicnone token_updaterz " & "jjF7O '**f4'A-'PF# $.2.H.HF* +,,A1 #5 MM!, -  nn (     zr3c lT;'g VPpVPRR4p V 'dRV 9dVPW4#VPV4p V 'd#RV 9dRp\ V VR7p V R,VR&VfVP P R4pVf\V4pW`P R&VP!W&3/VBpVfVPVP4pVf\pVfVP P R 4pVP!V3R VR VR VR V/V B#)a;Generic method for fetching an access token from the token endpoint. :param url: Access Token endpoint URL, if not configured, ``authorization_response`` is used to extract token from its fragment (implicit way). :param body: Optional application/x-www-form-urlencoded body to add the include in the token request. Prefer kwargs over body. :param method: The HTTP method used to make the request. Defaults to POST, but may also be GET. Other methods should be added as needed. :param headers: Dict to default request headers with. :param auth: An auth tuple or method as accepted by requests. :param grant_type: Use specified grant_type to fetch token. :param state: Optional "state" value to fetch token. :return: A :class:`OAuth2Token` object (a dict too). authorization_responseN#zcode=authorization_code)rrI grant_typetoken_endpointbodyr8methodheaders) rr&token_from_fragment_extract_session_request_paramsrr(rL_guess_grant_type_prepare_token_endpoint_bodyr?rDEFAULT_HEADERS _fetch_token) r-rNr[r\r]r8rYrrPrVsession_kwargsparamss &&&&&&&&, r0 fetch_tokenOAuth2Client.fetch_tokensK6##!',Dd!K !c-C&C++,BJ J==fE !g1G&G-J6&F$F^F6N  **<8J  *62J*4MM, '00LVL <##D$C$CDD ?%G ;--##$45C    !% .4 >E IW  r3c\W4pRV9d*VPVR,VPR4R7hW0nV#)errorerror_descriptionri description)r oauth_error_classrLr.)r-rVrr.s&&& r0r^ OAuth2Client.token_from_fragmentsL'(>F e ((Gn%)) BH  ?%**,G ;--##$45C(()@AAD!%cD!9 C$B <##D$C$CDD""  '         r3cVf VPpVPVPR7'gR#VPR4pVPPR4pV'dV'dVP W2R7R#VPPR4R8XdCVR,pVP VRR 7pVP'dVPWTR 7R#R#) N)r,TrprZrprYclient_credentials access_token)rY)rx)r. is_expiredr,rLr(rprfr%)r-r.rprNrx new_tokens&& r0ensure_active_token OAuth2Client.ensure_active_token-s =JJEt{{33 /2 mm 01 S   s  @ ]]  | ,0D D 0L((9M(NI   !!)!G Er3c |VfVPVP4pVP!RV3RVRVRVRVRV/VB#)a^Revoke token method defined via `RFC7009`_. :param url: Revoke Token endpoint, must be HTTPS. :param token: The token to be revoked. :param token_type_hint: The type of the token that to be revoked. It can be "access_token" or "refresh_token". :param body: Optional application/x-www-form-urlencoded body to add the include in the token request. Prefer kwargs over body. :param auth: An auth tuple or method as accepted by requests. :param headers: Dict to default request headers with. :return: Revocation Response .. _`RFC7009`: https://tools.ietf.org/html/rfc7009 rr.token_type_hintr[r8r])r?r_handle_token_hintr-rNr.r~r[r8r]rPs&&&&&&&,r0 revoke_tokenOAuth2Client.revoke_token>st0 <##D$H$HID&& "     ,          r3c |VfVPVP4pVP!RV3RVRVRVRVRV/VB#)aImplementation of OAuth 2.0 Token Introspection defined via `RFC7662`_. :param url: Introspection Endpoint, must be HTTPS. :param token: The token to be introspected. :param token_type_hint: The type of the token that to be revoked. It can be "access_token" or "refresh_token". :param body: Optional application/x-www-form-urlencoded body to add the include in the token request. Prefer kwargs over body. :param auth: An auth tuple or method as accepted by requests. :param headers: Dict to default request headers with. :return: Introspection Response .. _`RFC7662`: https://tools.ietf.org/html/rfc7662 rr.r~r[r8r])r?rrrs&&&&&&&,r0introspect_tokenOAuth2Client.introspect_tokencst0 <##D$C$CDD&& &     ,          r3c VR8Xd(VPPPV4R#WP9d\ RWP4hVPV,PV4R#)aRegister a hook for request/response tweaking. Available hooks are: * access_token_response: invoked before token parsing. * refresh_token_request: invoked before refreshing token. * refresh_token_response: invoked before refresh token parsing. * protected_request: invoked before making a request. * revoke_token_request: invoked before revoking a token. * introspect_token_request: invoked before introspecting a token. protected_requestNzHook type %s is not in %s.)r$hooksaddr*r')r- hook_typerss&&&r0register_compliance_hook%OAuth2Client.register_compliance_hooksg + + OO ! ! % %d +  00 0,i9M9M  Y'++D1r3cVPR8dVP4VP4pRV9d*VPVR,VP R4R7hW nVP #)irirjrk) status_coderaise_for_statusjsonrmrLr.)r-respr.s&& r0parse_response_token!OAuth2Client.parse_response_tokensk   s "  ! ! #  e ((Gn%))V #<<$$z$/0:AHLPVDczhh{+hh{+<<''%,37;AD(()@AAD:DB((..r3c LVP!V3RVRVRV/VBpVPR,F pV!V4pK VPV4p RV 9dW PR&\ VP 4'dVP VPVR7VP#)r[r8r]rrprv) _http_postr*rr.callabler%) r-rNrpr[r]r8rPrrsr.s &&&&&&, r0rrOAuth2Client._refresh_tokenssTTDT'TVT(()ABBD:DC))$/ % '*7JJ ' D%% & &   djj  Fzzr3c VfQVP'd?VPPR4;'gVPPR4pVfRp\W4WW4wrWVPV,Fp V !W'V4wr'pK VfVP VP 4pVP V4p VP!W%3RVRV/V B#)Nrprxr8r])r.rLr r*r?rr_r) r-rsrNr.r~r[r8r]rPr*rds &&&&&&&&, r0rOAuth2Client._handle_token_hints =TZZZJJNN?3UUtzz~~n7UE <D4 D  $33D99O!0t!D C$ : <##D$H$HID==fEsWtWWWWWr3c VR8Xd#RV9dVPVR&\W!3/VB#RV9d"VP'dVPVR&\W!3/VB#)rXr!r )r!r r )r-r[rYrPs&&&,r0ra)OAuth2Client._prepare_token_endpoint_bodys` - -V+)-):):~&(DVD D & TZZZ"jjF7O$Z@@@r3c f/pVPFpW19gK VPV4W#&K V#)zDExtract parameters for session object from the passing ``**kwargs``.)SESSION_REQUEST_PARAMSr&)r-rPrvrQs&& r0r_,OAuth2Client._extract_session_request_paramss2 ,,A{ 1 - r3c lVPP!V3R\\V44RVRV/VB#)rr]r8)rrrr)r-rNr[r8r]rPs&&&&&,r0rOAuth2Client._http_postsF||   :d+, 6= DH LR  r3c V=R#rB)rrCs&r0__del__OAuth2Client.__del__s Lr3)r+rrr"r*r,r(r!rr rrr.r$rr%) response_modenonceprompt login_hint) NNNNNNNNNheaderN<)NN)NrrNNNNrB)NNrNN)NNNNN)rNNr)NrNN)NNN)%__name__ __module__ __qualname____firstlineno____doc__rr>rr#rrmrMrr1r9r?propertyr.setterrSrfr^rpr{rrrrrcrrrrar_rr__static_attributes____classdictcell__) __classdict__s@r0rrs2# #O>@1 %% \\))'R? B( T"# J# J2, /*"X<A r3rcDRV9dRpV#RV9d RV9dRpV#RpV#)rIrXusernamepasswordrw)rPrYs& r0r`r` sB )  v *"6  * r3N)authlib.common.securityrauthlib.common.urlsrr8rrbaserrfc6749.parametersrr r r rfc7009r rfc7636r rbrr`rr3r0rsM2*A7151/  E rrjr3