h(GdZddlZddlZddlZddlmZddlmZddlmZdZ dZ e gdZ e gd Z Gd d Zd Zd ZdCdZdCdZdCdZdCdZdCdZdCdZdDdZdDdZdCdZdCdZdEdZdZdZdCdZdZdCdZ d Z!Gd!d"ej"Z#Gd#d$ej"Z$Gd%d&ej%Z&Gd'd(ej'Z(Gd)d*ej'Z)Gd+d,ej"Z*Gd-d.ej+Z,Gd/d0ej-Z.Gd1d2ej-Z/Gd3d4ej-Z0Gd5d6ej'Z1Gd7d8ej-Z2Gd9d:ej'Z3Gd;dej4Z6e2e$e#e$e/e&e(e)e*e0e.e5e6d? Z7d@Z8dAZ9dBZ:dS)FzFirebase auth utils.N)parse) exceptions)_utilsFIREBASE_AUTH_EMULATOR_HOSTi)acramrat_hashaud auth_timeazpcnfc_hashexpiatissjtinbfnoncesubfirebase) VERIFY_EMAIL EMAIL_SIGNINPASSWORD_RESETc:eZdZdZdZdZdZedZdS) PageIteratora(An iterator that allows iterating over a sequence of items, one at a time. This implementation loads a page of items into memory, and iterates on them. When the whole page has been traversed, it loads another page. This class never keeps more than one page of entries in memory. cD|std||_d|_dS)NzCurrent page must not be None.) ValueError _current_page_iter)self current_pages ^/var/www/html/e360mart/e360mart_env/lib/python3.11/site-packages/firebase_admin/_auth_utils.py__init__zPageIterator.__init__+s, ?=>> >) c<|jt|j|_ t|jS#t$r[|jjrM|j|_t|j|_t|jcYSwxYwN)riteritemsnext StopIterationr has_next_page get_next_pager s r"__next__zPageIterator.__next__2s : dj))DJ  ## #   !/ (%)%7%E%E%G%G"!$*-- DJ'''''  s6A!BBc|Sr&r-s r"__iter__zPageIterator.__iter__As r$ctr&)NotImplementedErrorr-s r"r(zPageIterator.itemsDs!!r$N) __name__ __module__ __qualname____doc__r#r.r1propertyr(r0r$r"rr#sf   ""X"""r$rc|tjtd}|rd|vrtdtd|d|S)Nz//zInvalid z: "z%". It must follow format "host:port".)osgetenvEMULATOR_HOST_ENV_VARr) emulator_hosts r"get_emulator_hostr?IscI3R88M2.. 1, 1 1 1 1 122 2 r$c&tdkS)Nr:)r?r0r$r" is_emulatedrARs   " $$r$Fc||sdSt|tr|rt|dkrtd|d|S)NzInvalid uid: "zG". The uid must be a non-empty string with no more than 128 characters. isinstancestrlenr)uidrequireds r" validate_uidrJVsf {8{t c3  sc#hhnn S     Jr$c||sdSt|tr|std|d|d}t |dks|dr|dstd|d|S) NzInvalid email: "z$". Email must be a non-empty string.@rz!Malformed email address string: "".)rErFrsplitrG)emailrIpartss r"validate_emailrS_s }X}t eS ! !LL Ju J J JLL L KK  E 5zzQeAheAhFUFFFGGG Lr$c||sdSt|tr|std|d|drt jd|std|d|S)a Validates the specified phone number. Phone number vlidation is very lax here. Backend will enforce E.164 spec compliance, and normalize accordingly. Here we check if the number starts with + sign, and contains at least one alphanumeric character. NzInvalid phone number: "z+". Phone number must be a non-empty string.+z [a-zA-Z0-9]z<". Phone number must be a valid, E.164 compliant identifier.)rErFr startswithresearch)phonerIs r"validate_phonerZjs }X}t eS ! !ZZ Xe X X XZZ Z   C % -(G(G% $e $ $ $%% % Lr$c||sdSt|trt|dkrtd|S)NzNInvalid password string. Password must be a string at least 6 characters long.rD)passwordrIs r"validate_passwordr^|sRt h $ $^H (9(9 \^^ ^ Or$cd||sdSt|tr|st|d|S)Nz# must be a non-empty byte sequence.)rEbytesr)valuelabelrIs r"validate_bytesrcsG }X}t eU # #H5HEFFFGGG Lr$cf||sdSt|tr|std|d|S)NzInvalid display name: "z+". Display name must be a non-empty string.rErFr) display_namerIs r"validate_display_namergs[Ht lC ( (  l     r$Tcf||sdSt|tr|std|d|S)NzInvalid provider ID: "z*". Provider ID must be a non-empty string.re) provider_idrIs r"validate_provider_idrjsV8t k3 ' '^{^ \[ \ \ \^^ ^ r$cf||sdSt|tr|std|d|S)NzInvalid provider UID: "z+". Provider UID must be a non-empty string.re) provider_uidrIs r"validate_provider_uidrmsVHt lC ( (a a _l _ _ _aa a r$c||sdSt|tr|std|d tj|}|jstd|d|S#t $r}td|d|d}~wwxYw)z*Parses and validates the given URL string.NzInvalid photo URL: "z(". Photo URL must be a non-empty string.zMalformed photo URL: "rO)rErFrrurlparsenetloc Exception) photo_urlrIparsederrs r"validate_photo_urlrust i % %XYX V9 V V VXX XJ **} ECiCCCDD D JJJ?)???@@cIJs/A"" B,BBc(||sdSt|trtd t|}n&#t$r}td|d|d}~wwxYw||krt|d|dkrt|d|S)zJValidates the given timestamp value. Timestamps must be positive integers.Nz%Boolean value specified as timestamp.z"Invalid type for timestamp value: ., must be a numeric value and a whole number.rz' timestamp must be a positive interger.rEboolrint TypeError) timestamprbrI timestamp_intrts r"validate_timestamprst)T""B@AAAUI UUUJiJJJKKQTTU !!EOOOPPPEJJJKKK < AAAcl|t|trtd|d t|}n&#t$r}td|d|d}~wwxYw||krt|d|||krt|d|d|||krt|d|d|S)auValidates that the given value represents an integer. There are several ways to represent an integer in Python (e.g. 2, 2L, 2.0). This method allows for all such representations except for booleans. Booleans also behave like integers, but always translate to 1 and 0. Passing a boolean to an API that expects integers is most likely a developer error. Nz Invalid type for integer value: rwrxz must not be smaller than z must not be larger than ry)rarblowhighval_intrts r" validate_intrs } 5$//}DEDDDEEEOe** OOODEDDDEE3NO%EOOOPPP 7S==ECCSCCCDDD GdNNECCDCCCDDD Nrc\t|tstd|d|d|S)z+Validates that the given value is a string.Invalid type for : rwrerarbs r"validate_stringrs< eS ! !@>U>>e>>>??? Lr$c\t|tstd|d|d|S)z,Validates that the given value is a boolean.rrrw)rErzrrs r"validate_booleanrs< eT " "@>U>>e>>>??? Lr$c||sdSt|}t|tkrtdtd t j|}n"#t $r}td|d}~wwxYwt|tstdt t| }t|dkr5d t|}td|d t|dkr%td |d |S) zValidates the specified custom claims. Custom claims must be specified as a JSON string. The string must not exceed 1000 characters, and the parsed JSON payload must not contain reserved JWT claims. Nz&Custom claims payload must not exceed z characters.z-Failed to parse custom claims string as JSON.z1Custom claims must be parseable as a JSON object.rN, zClaims "z$" are reserved, and must not be set.zClaim "z#" is reserved, and must not be set.)rFrGMAX_CLAIMS_PAYLOAD_SIZErjsonloadsrqrEdictRESERVED_CLAIMS intersectionsetkeysjoinsortedpop) custom_claimsrI claims_strrsrtinvalid_claimsjoineds r"validate_custom_claimsrsw Xt]##J :000 Z5L Z Z Z\\ \SJ'' SSSHIIsRS fd # #NLMMM$11#fkkmm2D2DEEN >Q6.1122PFPPPQQQ >a On((** O O OQQ Q sA A;&A66A;cr|tvr-td|ddt|S)Nz*Invalid action type provided action_type: z. Valid values are r)VALID_EMAIL_ACTION_TYPESrr) action_types r"validate_action_typersS222 5 5 5yy122 5 566 6 r$cZ|s|rtdgS|D]}t|d|S)Nz5Invalid provider IDs. Provider ids should be providedT)rrj) provider_idsrIris r"validate_provider_idsr sO   VTUU U #00 [$//// r$c g}|D]^\}}t|tr/t|}|D]}||d|I||_t |S)z6Creates an update mask list from the given dictionary.rw)r(rErbuild_update_maskappendr)paramsmaskkeyra child_maskchilds r"rrs Dllnn U eT " " *511J# . . s,,U,,---- . KK     $<<r$ceZdZdZdZdZdS)UidAlreadyExistsErrorz.The user with the provided uid already exists.z-The user with the provided uid already existscJtj||||dSr&rAlreadyExistsErrorr#r messagecause http_responses r"r#zUidAlreadyExistsError.__init__%%%..tWe]SSSSSr$Nr4r5r6r7default_messager#r0r$r"rr s388EOTTTTTr$rceZdZdZdZdZdS)EmailAlreadyExistsErrorz0The user with the provided email already exists.z/The user with the provided email already existscJtj||||dSr&rrs r"r#z EmailAlreadyExistsError.__init__.rr$Nrr0r$r"rr)s3::GOTTTTTr$rceZdZdZdZdZdS)InsufficientPermissionErrorzEThe credential used to initialize the SDK lacks required permissions.zThe credential used to initialize the SDK has insufficient permissions to perform the requested operation. See https://firebase.google.com/docs/admin/setup for details on how to initialize the Admin SDK with appropriate permissionscJtj||||dSr&)rPermissionDeniedErrorr#rs r"r#z$InsufficientPermissionError.__init__:s%(11$ VVVVVr$Nrr0r$r"rr2s6OOYO WWWWWr$rceZdZdZdZdZdS)InvalidDynamicLinkDomainErrorzs3FF]OVVVVVr$rceZdZdZdZddZdS)InvalidIdTokenErrorz7The provided ID token is not a valid Firebase ID token.z The provided ID token is invalidNcJtj||||dSr&rrs r"r#zInvalidIdTokenError.__init__Lrr$NNrr0r$r"rrGs9AA8OVVVVVVr$rceZdZdZdZdZdS)PhoneNumberAlreadyExistsErrorz7The user with the provided phone number already exists.z6The user with the provided phone number already existscJtj||||dSr&rrs r"r#z&PhoneNumberAlreadyExistsError.__init__Urr$Nrr0r$r"rrPs3AANOTTTTTr$rceZdZdZddZdS)UnexpectedResponseErrorzCBackend service responded with an unexpected or malformed response.NcJtj||||dSr&)r UnknownErrorr#rs r"r#z UnexpectedResponseError.__init__\s%((w}MMMMMr$rr4r5r6r7r#r0r$r"rrYs4MMNNNNNNr$rceZdZdZdZddZdS)UserNotFoundErrorz2No user record found for the specified identifier.z-No user record found for the given identifierNcJtj||||dSr&r NotFoundErrorr#rs r"r#zUserNotFoundError.__init__e% ))$ NNNNNr$rrr0r$r"rr`s9<<EOOOOOOOr$rceZdZdZdZddZdS)EmailNotFoundErrorz-No user record found for the specified email.z(No user record found for the given emailNcJtj||||dSr&rrs r"r#zEmailNotFoundError.__init__nrr$rrr0r$r"rri977@OOOOOOOr$rceZdZdZdZddZdS)TenantNotFoundErrorz-No tenant found for the specified identifier.z(No tenant found for the given identifierNcJtj||||dSr&rrs r"r#zTenantNotFoundError.__init__wrr$rrr0r$r"rrrrr$rceZdZdZdZdS)TenantIdMismatchErrorz4Missing or invalid tenant ID field in the given JWT.cFtj||dSr&r)r rs r"r#zTenantIdMismatchError.__init__~s!'00w?????r$Nrr0r$r"rr{s.>>@@@@@r$rceZdZdZdZddZdS)ConfigurationNotFoundErrorz4No auth provider found for the specified identifier.z/No auth provider found for the given identifierNcJtj||||dSr&rrs r"r#z#ConfigurationNotFoundError.__init__rr$rrr0r$r"rrs9>>GOOOOOOOr$rceZdZdZdZddZdS)UserDisabledErrorz8An operation failed due to a user record being disabled.zThe user record is disabledNcJtj||||dSr&rrs r"r#zUserDisabledError.__init__rr$rrr0r$r"rrs9BB3OVVVVVVr$rceZdZdZddZdS)TooManyAttemptsTryLaterErrorz*Rate limited because of too many attempts.NcJtj||||dSr&rResourceExhaustedErrorr#rs r"r#z%TooManyAttemptsTryLaterError.__init__%)224%WWWWWr$rrr0r$r"rrs444XXXXXXr$rceZdZdZddZdS)ResetPasswordExceedLimitErrorz,Reset password emails exceeded their limits.NcJtj||||dSr&rrs r"r#z&ResetPasswordExceedLimitError.__init__rr$rrr0r$r"rrs466XXXXXXr$r) CONFIGURATION_NOT_FOUNDDUPLICATE_EMAILDUPLICATE_LOCAL_ID EMAIL_EXISTSEMAIL_NOT_FOUNDINSUFFICIENT_PERMISSIONINVALID_DYNAMIC_LINK_DOMAININVALID_ID_TOKENPHONE_NUMBER_EXISTSTENANT_NOT_FOUNDUSER_NOT_FOUNDTOO_MANY_ATTEMPTS_TRY_LATERRESET_PASSWORD_EXCEED_LIMITc|jtj|St|j\}}|s7d|jj}tj||St |}t|||}|stj||S||||jS)zWConverts a requests error received from the Firebase Auth service into a FirebaseError.NzUnexpected error response: )r)rr) responserhandle_requests_error_parse_error_bodycontentdecode_CODE_TO_EXC_TYPEget_build_error_message)errorcodecustom_messagemsgexc_types r"handle_auth_backend_errorr s ~+E222,U^<<D. @MEN,B,I,I,K,KMM+E3???? $$T**H tX~ > >C @+E3???? 8CuEN C C CCr$ci} |}t|tr|di}n#t$rYnwxYwt|tr|dnd}d}|rD|d}|dkr)||dzd}|d|}||fS)zGParses the given error response to extract Auth error code and message.rrN:rN)rrErrrfindstrip)r error_dict parsed_bodyr r  separators r"rrsJ mmoo k4 ( ( 6$"55J      )3:t(D(D N:>>) $ $ $$DN $IIcNN ??!)a-..17799N  #D  s?A AAc^|rt|dr|jnd}|rd|nd}|d|d|S)Nrz Error while calling Auth service r:z (z).)hasattrr)r r r rexts r"rrsccX'899ch..@b"0 8 n   bC . . . . . ..r$)F)Tr);r7rr;rWurllibrfirebase_adminrrr=rrrrrr?rArJrSrZr^rcrgrjrmrurrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr rrr0r$r"rs %%%%%%!!!!!!6#3QQQRR#"#"#"#"#"#"#"#"L%%%    $ J J J J .  8   TTTTTJ9TTTTTTTTj;TTT W W W W W*"B W W WVVVVVJ$CVVVVVVVV*9VVVTTTTTJ$ATTTNNNNNj5NNNOOOOO 0OOOOOOOO1OOOOOOOO*2OOO@@@@@J;@@@OOOOO!9OOOVVVVV 7VVVXXXXX:#DXXXXXXXXJ$EXXX :./+):#@+8+'#?#@"DDD$   ,/////r$