+ Q(i ZRt^RIt^RIHtHtHt^RIHtHtRRlt RRlt RR lt R#) zKUtilities for OAuth 2.0 Resource Indicators (RFC 8707) and PKCE (RFC 7636).N)urlparseurlsplit urlunsplit)AnyUrlHttpUrlc\V^8dQhR\\,\,R\/#)urlreturn)strrr)formats"[/Users/agent/.openclaw/workspace/venv/lib/python3.14/site-packages/mcp/shared/auth_utils.py __annotate__r s#cGmf&<c\V4p\V4p\VPVPP 4VP P 4RR74pV#)a(Convert server URL to canonical resource URL per RFC 8707. RFC 8707 section 2 states that resource URIs "MUST NOT include a fragment component". Returns absolute URI with lowercase scheme/host for canonical form. Args: url: Server URL to convert Returns: Canonical resource URL string )schemenetlocfragment)r rr_replacerlowerr)r url_strparsed canonicals& r resource_url_from_server_urlr sV#hGg F6??&--2E2E2GPVP]P]PcPcPepr?stI rc<V^8dQhR\R\R\/#)rrequested_resourceconfigured_resourcer )r bool)r s"r rrs"'6'6s'6'6QU'6rc\V4p\V4pVPP4VPP48wg8VPP4VPP48wdR#VPpVPp\ V4\ V48dR#VP R4'g VR, pVP R4'g VR, pVPV4#)aCheck if a requested resource URL matches a configured resource URL. A requested resource matches if it has the same scheme, domain, port, and its path starts with the configured resource's path. This allows hierarchical matching where a token for a parent resource can be used for child resources. Args: requested_resource: The resource URL being requested configured_resource: The resource URL that has been configured Returns: True if the requested resource matches the configured resource F/)rrrrpathlenendswith startswith)rr requested configuredrequested_pathconfigured_paths&& r check_resource_allowedr)s +,I-.J:#4#4#:#:#<< @P@P@V@V@X\f\m\m\s\s\u@u^^N ooO >S11  " "3 ' '#  # #C ( (3  $ $_ 55rcbV^8dQhR\\,R,R\R,/#)r expires_inNr )intr float)r s"r rrIs' ) )sSy4'7 )EDL )rcXVfR#\P!4\V4,#)zCalculate token expiry timestamp from expires_in seconds. Args: expires_in: Seconds until token expiration (may be string from some servers) Returns: Unix timestamp when token expires, or None if no expiry specified N)timer,)r+s&r calculate_token_expiryr0Is" 99;Z ((r) __doc__r/ urllib.parserrrpydanticrrrr)r0rr r5s$Q 77$,'6T )r