o
RDiG @ s6 d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl m Z d dl
mZmZ ddlmZmZmZmZmZ ddlmZmZmZmZ ddlm Z m Z m Z m Z dd l m!Z! dd
l"m#Z#m$Z$m%Z% dd l&m'Z' d d
l(m)Z) d dl*m+Z+m,Z, erddl(m-Z- e.e/Z0dZ1G dd de+Z2dS ) ) annotationsN)
ModuleType)
TYPE_CHECKINGAny )
IS_WINDOWSparse_qs urlencodeurlparseurlsplit)HTTP_HEADER_ACCEPTHTTP_HEADER_CONTENT_TYPEHTTP_HEADER_SERVICE_NAMEHTTP_HEADER_USER_AGENT)ER_IDP_CONNECTION_ERRORER_INVALID_VALUEER_NO_HOSTNAME_FOUNDER_UNABLE_TO_OPEN_BROWSER)OperationalError) CONTENT_TYPE_APPLICATION_JSON EXTERNAL_BROWSER_AUTHENTICATORPYTHON_CONNECTOR_USER_AGENT) is_valid_url )Auth) AuthByPluginAuthType)SnowflakeConnectioni @ c s e Zd ZdZ dIdJ fdd
ZdKddZedLddZedMddZdNddZ dOd$d%Z
dPd'd(Z dQd)d*Z dRd0d1Z
dSd3d4ZdTd5d6ZdUd8d9ZdVd;d<ZdWd=d>ZdXd?d@ZdYdAdBZdZdEdFZd[dGdHZ ZS )\AuthByWebBrowserzKAuthenticates user by web browser. Only used for SAML based authentication.N applicationstrwebbrowser_pkgModuleType | None
socket_pkgtype[socket.socket] | Noneprotocol
str | NonehostportreturnNonec sl t jdi | d| _d | _|| _d | _|d u rtn|| _|d u r%tjn|| _ || _
|| _ || _ d | _
d S )NT )super__init__consent_cache_id_token_token _application
_proof_key
webbrowser _webbrowsersocket_socket _protocol_host_port_origin)selfr r! r# r% r' r( kwargs __class__r+ \/var/www/Datamplify/venv/lib/python3.10/site-packages/snowflake/connector/auth/webbrowser.pyr- 6 s
zAuthByWebBrowser.__init__c C s
d | _ d S Nr/ r: r+ r+ r>
reset_secretsP s
z AuthByWebBrowser.reset_secretsr c C s t jS r? )r EXTERNAL_BROWSERrA r+ r+ r> type_S s zAuthByWebBrowser.type_c C s | j S )zReturns the token.r@ rA r+ r+ r> assertion_contentW s z"AuthByWebBrowser.assertion_contentbodydict[Any, Any]c C s, t |d d< | j|d d< | j|d d< dS )zUsed by Auth to update the request that gets sent to /v1/login-request.
Args:
body: existing request dictionary
data
AUTHENTICATORTOKEN PROOF_KEYN)r r/ r1 )r: rF r+ r+ r> update_body\ s z AuthByWebBrowser.update_bodyconnr
authenticator service_nameaccountuserr; r c
K s( t d | tjtj}tdd dkr(t r t
d n | tj tj
d ztdd}z||ttd d
f W n# tjya } z| jd
tjkr[t| d | d td
| d} ~ ww |d
| d }
|jrt d | |||||
|} n t d | ||
|} t d t| s| j|t d| ddd W | dS t d t d t d| d | j | } | rt d | stdd dkrt d | !|| n)t d t"d }
| #|
| j$s| j|t%d dd W | dS W | dS W | dS | w ) z!Web Browser based Authentication.z authenticating by Web Browser SNOWFLAKE_AUTH_SOCKET_REUSE_PORTFalsetruezUConfiguration SNOWFLAKE_AUTH_SOCKET_REUSE_PORT is not available in Windows. Ignoring.r SF_AUTH_SOCKET_ADDR localhostSF_AUTH_SOCKET_PORTr z% is not found. Ensure /etc/hosts has z entry.)msgerrnoNz"step 1: query GS to obtain SSO urlz&step 1: constructing console login urlzValidate SSO URLzThe SSO URL provided z is invalidcodemessagerM retz\Initiating login request with your identity provider. Press CTRL+C to abort and try again...zstep 2: open a browserzGoing to open: z to authenticate...zA browser window should have opened for you to complete the login. If you can't see it, check existing browser windows, or your OS settings.SNOWFLAKE_AUTH_FORCE_SERVERzstep 3: accept SAML tokenzWe were unable to open a browser window for you, please open the url above manually then paste the URL you are redirected to into the terminal.z-Enter the URL the SSO URL redirected you to: zKUnable to open a browser in this environment and SSO URL contained no token)&loggerdebugr5 r4 AF_INET SOCK_STREAMosgetenvlowerr warning
setsockopt
SOL_SOCKET SO_REUSEPORTbindintgaierrorargs
EAI_NONAMEr r listen getsockname_disable_console_login _get_sso_url_get_console_login_urlr _handle_failurer closeprintr3 open_new_receive_saml_tokeninput_process_get_urlr/ r )r: rM rN rO rP rQ r; socket_connectionhostnameex
callback_portsso_urlbrowser_openedurlr+ r+ r> preparef s
-
zAuthByWebBrowser.preparedict[str, bool]c K s | | ddiS )NsuccessT)authenticate_with_retry)r: rM r; r+ r+ r> reauthenticate s
z AuthByWebBrowser.reauthenticatec C s zd}t }d}d}tdd dk}tr |r td d }t|dkr||k r|d
7 }t|gg g \}} }
|d dur| \}} z|rUt
d | t t
j}n| t }W n( ty t
d ||k r|d
} t
d| d t| nt
d Y nw t|dkr||k s*|dd}
| |
|s| ||
| W |t
j | dS W |t
j | n |t
j | w q)z%Receives SAML token from web browser.Tr N "SNOWFLAKE_AUTH_SOCKET_MSG_DONTWAITfalserT zWConfiguration SNOWFLAKE_AUTH_SOCKET_MSG_DONTWAIT is not available in Windows. Ignoring.Fr zcCalling socket_client.recv with MSG_DONTWAIT flag due to SNOWFLAKE_AUTH_SOCKET_MSG_DONTWAIT env varz[BlockingIOError raised from socket.recv while attempting to retrieve callback token requestg ?zWaiting z seconds before trying againzExceeded retry countutf-8
) bytearrayrd re rf r r` rg lenselectacceptra recvBUF_SIZEr4 MSG_DONTWAITBlockingIOErrortimesleepdecodesplit_process_options_process_receive_saml_tokenshutdown SHUT_RDWRrv )r: rM r| attemptsraw_data
socket_client max_attempts
msg_dont_wait read_sockets_write_sockets_exception_sockets_
sleep_timerH r+ r+ r> ry sv
%
z$AuthByWebBrowser._receive_saml_tokenrH list[str]r
socket.socketboolc C s |D ] }| dr nqdS | | | |\}}|s dS | |s%dS || _ddtdt dd| dd | j d
d
g}| d
| d d
S )z'Allows JS Ajax access to this endpoint.zOPTIONS FHTTP/1.1 200 OKzDate: {}z%a, %d %b %Y %H:%M:%S GMTz'Access-Control-Allow-Methods: POST, GETz Access-Control-Allow-Headers: z Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: r r T)
startswith_get_user_agent_check_post_requested_validate_originr9 formatr strftimegmtimesendalljoinencode)r: rH r linerequested_headersrequested_origincontentr+ r+ r> r " s2
z!AuthByWebBrowser._process_optionsr c C sb t |}|jd}|d }t|dkr|d n| jdkr dnd}|j| jko0|| jko0|| jkS )N:r r httpsi P )r netlocr r r6 schemer7 r8 )r: r r^ r host_gotport_gotr+ r+ r> r C s $ z!AuthByWebBrowser._validate_originc C s | |s
| ||s
d S ddg}| jr-d| ji}t|}|d| j |d nd| j d}|dt| |d || | d
| d d S ) Nr zContent-Type: text/htmlconsentr z Vary: Accept-Encoding, Originz
SAML Response for Snowflake
Your identity was confirmed and propagated to Snowflake zR.
You can close this window now and go back where you started from.
zContent-Length: r r r ) _process_get
_process_postr9 r. jsondumpsappendr0 r r r r )r: rM rH r r rX r+ r+ r> r Q s"
z,AuthByWebBrowser._process_receive_saml_token tuple[str | None, str | None]c C s d }d }d }|D ]}| dr|}q| dr|}q| dr!|}q|r3|r3|r3|dd dkr5dS |dd d|ddd fS )Nz Access-Control-Request-Method:z Access-Control-Request-Headers:zOrigin:r r POST)NN)r r stripr )r: rH request_line header_line origin_liner r+ r+ r> r o s,
z&AuthByWebBrowser._check_post_requestedr c C s8 t t|j}d|vs|d d sd S |d d | _d S )Ntokenr )r r
queryr/ )r: r parsedr+ r+ r> r{ s z!AuthByWebBrowser._process_get_urlc C sF |D ] }| dr
|} nqdS | | | \}}}| | dS )NzGET FT)r r r r{ )r: rH r target_liner r r+ r+ r> r s
z AuthByWebBrowser._process_getc C s |D ] }| dr n
q| j|tddd dS | | zt|d }|d| _|dd | _W d S t yI t
|d d d
| _Y d S w ) NzPOST zLInvalid HTTP request from web browser. Idp authentication could have failed.rZ r] Fr r Tr ) r ru r r r loadsgetr/ r. Exceptionr )r: rM rH r payloadr+ r+ r> r s*
z AuthByWebBrowser._process_postc C s6 |D ]}| drt| d S qtd d S )Nz
user-agentz
No User-Agent)rf r r` ra )r: rH r r+ r+ r> r s
z AuthByWebBrowser._get_user_agentr rl c
C s t ttttti}|r||t< d}tj|||j|j |j
| |j |j
|j|j|j|jjjddd } || d d< t|| d d< td||| |jj||t| |jjj
|jjj
d }
|
d
sf| j ||
d |
d } | d } | d
| _ | S )z Gets SSO URL from Snowflake.z /session/authenticator-requestF) use_pooling)session_managerrH rI BROWSER_MODE_REDIRECT_PORTz%account=%s, authenticator=%s, user=%s)timeoutsocket_timeoutr r] ssoUrlproofKey) r
r r r r r r base_auth_datar _internal_application_name _internal_application_version
_ocsp_modecert_revocation_check_mode
login_timeoutnetwork_timeoutr "platform_detection_timeout_secondsrestr cloner r` ra _rest
_post_requestr r _connectionru r1 )
r: rM rN rO rP r rQ headersr rF r^ rH r r+ r+ r> rs sN
z AuthByWebBrowser._get_sso_urlc C sJ t tdd| _|jjd t||| jd }t
d| |S )N asciiz/console/login?)
login_namebrowser_mode_redirect_port proof_keyzConsole Log In URL: ) base64 b64encodesecrets token_bytesr r1 r
server_urlr r` ra )r: rM r( rQ r r+ r+ r> rt s z'AuthByWebBrowser._get_console_login_url)NNNNN)r r r! r" r# r$ r% r& r' r& r( r& r) r* )r) r* )r) r )r) r )rF rG r) r* )rM r rN r rO r& rP r rQ r r; r r) r* )rM r r; r r) r )rM r r) r* )rH r r r r) r )r r r) r )rM r rH r r r r) r* )rH r r) r )r r r) r* )rH r r) r )rM r rH r r) r )rH r r) r* )rM r rN r rO r& rP r r rl rQ r r) r )rM r r( rl rQ r r) r )__name__
__module__ __qualname____doc__r- rB propertyrD rE rL r r ry r r r r r{ r r r rs rt
__classcell__r+ r+ r< r> r 3 s6
n
E
!
5r )3
__future__r r r loggingrd r r r4 r r2 typesr typingr r compatr r r r
r constantsr r
r r errorcoder r r r errorsr networkr r r url_utilr r r by_pluginr r r getLoggerr r` r r r+ r+ r+ r> s2