CasperSecurity
o
��Hhzv � @ s� d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl
m Z m Z m
Z
mZmZ ddlmZmZmZmZ dd lmZmZmZ dd
lmZmZ dd l m Z dd l m Z m Z m!Z! dd
l"m#Z#m$Z$m%Z%m&Z& ddl'm(Z( ddl)m*Z* ddl m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0 ddl1m2Z2 ddlm3Z3 ej4dkr�zej5Z6W n e7y� ej8Z6Y nw ejZ6efdd�Z9efdd�Z:G dd� de;�Z<G dd� de<�Z=d d � Z>dS ) z�
requests.sessions
~~~~~~~~~~~~~~~~~
This module provides a Session object to manage and persist settings across
requests (cookies, auth, proxies).
� N)� timedelta)� OrderedDict� )�_basic_auth_str)� cookielib�is_py3�urljoin�urlparse�Mapping)�cookiejar_from_dict�extract_cookies_to_jar�RequestsCookieJar�
merge_cookies)�Request�PreparedRequest�DEFAULT_REDIRECT_LIMIT)�
default_hooks�
dispatch_hook)�to_native_string)�to_key_val_list�default_headers�
DEFAULT_PORTS)�TooManyRedirects�
InvalidSchema�ChunkedEncodingError�ContentDecodingError)�CaseInsensitiveDict)� HTTPAdapter)� requote_uri�get_environ_proxies�get_netrc_auth�should_bypass_proxies�get_auth_from_url� rewind_body)�codes)�REDIRECT_STATI�win32c C sp |du r| S | du r |S t |t�rt | t�s| S |t|��}|�t| �� dd� |�� D �}|D ]}||= q0|S )z�Determines appropriate setting for a given request, taking into account
the explicit setting on that request, and the setting in the session. If a
setting is a dictionary, they will be merged together using `dict_class`
Nc S s g | ]
\}}|d u r|�qS �N� )�.0�k�vr( r( �3/usr/lib/python3/dist-packages/requests/sessions.py�
<listcomp>J s z!merge_setting.<locals>.<listcomp>)�
isinstancer
r �update�items)�request_setting�session_setting�
dict_class�merged_setting� none_keys�keyr( r( r, �
merge_setting2 s �� r7 c C s@ |du s |� d�g kr
| S | du s| � d�g kr|S t| ||�S )z�Properly merges both requests and session hooks.
This is necessary because when request_hooks == {'response': []}, the
merge breaks Session hooks entirely.
N�response)�getr7 )�
request_hooks�
session_hooksr3 r( r( r, � merge_hooksQ s
r< c @ sB e Zd Zdd� Zdd� Z ddd �Zd
d � Zd d
� Zdd� ZdS )�SessionRedirectMixinc C s, |j r|jd }tr|�d�}t|d�S dS )z7Receives a Response. Returns a redirect URI or ``None``�location�latin1�utf8N)� is_redirect�headersr �encoder )�self�respr> r( r( r, �get_redirect_targetb s
z(SessionRedirectMixin.get_redirect_targetc C s� t |�}t |�}|j|jkrdS |jdkr&|jdv r&|jdkr&|jdv r&dS |j|jk}|j|jk}t�|jd�df}|sI|j|v rI|j|v rIdS |pL|S )zFDecide whether Authorization header should be removed when redirectingT�http)�P N�https)i� NFN)r �hostname�scheme�portr r9 )rD �old_url�new_url�
old_parsed�
new_parsed� changed_port�changed_scheme� default_portr( r( r, �should_strip_authw s
z&SessionRedirectMixin.should_strip_authFNTc
k s@ � g }
| � |�} t|j�j} | �r |�� }
|
�|� |
dd� |_z|j W n tt t
fy9 |j j dd� Y nw t
|j�| jkrLtd�| j�|d��|�� | �d�rdt|j�}d�t|j�| g�} t| �}|jd krv| rv|j| d
�}n|jr||j} |�� } |js�t|jt| ��} nt| �} t| �|
_| �|
|� |j t j t j fvr�d }|D ] }|
j �!|d� q�d|
_"|
j }|�!d d� t#|
j$||j � t%|
j$| j&� |
�'|
j$� | �(|
|�}| �)|
|� |
j*duo�d
|v p�d|v }|r�t+|
� |
}|r�|V n | j,|f|||||dd�| ��}t#| j&|
|j � | � |�} |V | sdS dS )zBReceives a Response. Returns a generator of Responses or Requests.r NF)�decode_contentzExceeded {} redirects.)r8 z//�:� )�fragment)�Content-Lengthz Content-Type�Transfer-Encoding�CookierY rZ )�stream�timeout�verify�cert�proxies�allow_redirects)-rF r �urlrX �copy�append�history�contentr r � RuntimeError�raw�read�len�
max_redirectsr �format�close�
startswith�joinr rK �_replace�geturl�netlocr r �rebuild_method� status_coder$ �temporary_redirect�permanent_redirectrB �pop�bodyr �_cookiesr �cookies�prepare_cookies�rebuild_proxies� rebuild_auth�_body_positionr# �send)rD rE �reqr\ r] r^ r_ r` �yield_requests�adapter_kwargs�histrb �previous_fragment�prepared_request� parsed_rurl�parsed�purged_headers�headerrB �
rewindabler( r( r, �resolve_redirects� s� �
�
����
�z&SessionRedirectMixin.resolve_redirectsc C sV |j }|j}d|v r| �|jj|�r|d= | jr t|�nd}|dur)|�|� dS dS )z�When being redirected we may want to strip authentication from the
request to avoid leaking credentials. This method intelligently removes
and reapplies authentication where possible to avoid credential loss.
�
AuthorizationN)rB rb rT �request� trust_envr � prepare_auth)rD r� r8 rB rb �new_authr( r( r, r} � s �z!SessionRedirectMixin.rebuild_authc
C s� |dur|ni }|j }|j}t|�j}|�� }|�d�}t||d�}| jr>|s>t||d�} | �|| �d��}
|
r>|� ||
� d|v rE|d= z
t
|| �\} } W n
t y\ d\} } Y nw |� d�sm| rm| rmt
| | �|d< |S )a� This method re-evaluates the proxy configuration by considering the
environment variables. If we are redirected to a URL covered by
NO_PROXY, we strip the proxy configuration. Otherwise, we set missing
proxy keys for this URL (in case they were stripped by a previous
redirect).
This method also replaces the Proxy-Authorization header where
necessary.
:rtype: dict
N�no_proxy�r� �allzProxy-Authorization�NNrI )rB rb r rK rc r9 r! r� r �
setdefaultr" �KeyErrorrn r )
rD r� r` rB rb rK � new_proxiesr� � bypass_proxy�environ_proxies�proxy�username�passwordr( r( r, r| s,
�z$SessionRedirectMixin.rebuild_proxiesc C sX |j }|jtjkr|dkrd}|jtjkr|dkrd}|jtjkr'|dkr'd}||_ dS )z�When being redirected we may want to change the method of the request
based on certain specs or browser behavior.
�HEAD�GET�POSTN)�methodrt r$ � see_other�found�moved)rD r� r8 r� r( r( r, rs < s
z#SessionRedirectMixin.rebuild_method)FNTNNF) �__name__�
__module__� __qualname__rF rT r� r} r| rs r( r( r( r, r= ` s
�n +r= c @ s� e Zd ZdZg d�Zdd� Zdd� Zdd� Zd d
� Z d+d
d�Z dd� Z
dd� Z dd� Z d,dd�Z
d-dd�Zd-dd�Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd S ).�Sessiona� A Requests session.
Provides cookie persistence, connection-pooling, and configuration.
Basic Usage::
>>> import requests
>>> s = requests.Session()
>>> s.get('https://httpbin.org/get')
<Response [200]>
Or as a context manager::
>>> with requests.Session() as s:
... s.get('https://httpbin.org/get')
<Response [200]>
) rB rz �authr` �hooks�paramsr^ r_ �adaptersr\ r� rk c C sr t � | _d | _i | _t� | _i | _d| _d| _d | _ t
| _ d| _ t
i �| _t� | _| �dt� � | �dt� � d S )NFTzhttps://zhttp://)r rB r� r` r r� r� r\ r^ r_ r rk r� r rz r r� �mountr �rD r( r( r, �__init__l s
zSession.__init__c C s | S r' r( r� r( r( r, � __enter__� s zSession.__enter__c G s | � � d S r' )rm )rD �argsr( r( r, �__exit__� s zSession.__exit__c
C s� |j pi }t|tj�st|�}ttt� | j �|�}|j}| jr)|s)| js)t |j
�}t � }|j |j
�� |j
|j|j|jt|j| jtd�t|j| j�t|| j�|t|j| j�d�
|S )a� Constructs a :class:`PreparedRequest <PreparedRequest>` for
transmission and returns it. The :class:`PreparedRequest` has settings
merged from the :class:`Request <Request>` instance and those of the
:class:`Session`.
:param request: :class:`Request` instance to prepare with this
session's settings.
:rtype: requests.PreparedRequest
)r3 )
r� rb �files�data�jsonrB r� r� rz r� )rz r. r � CookieJarr r r
r� r� r rb r �preparer� �upperr� r� r� r7 rB r r� r< r� )rD r� rz �merged_cookiesr� �pr( r( r, �prepare_request� s.
�
� zSession.prepare_requestNTc C sx t |�� ||||p
i ||pi ||| d�
}| �|�}| p i } | �|j| |
||�}| |
d�}|�|� | j|fi |��}|S )ax Constructs a :class:`Request <Request>`, prepares it and sends it.
Returns :class:`Response <Response>` object.
:param method: method for the new :class:`Request` object.
:param url: URL for the new :class:`Request` object.
:param params: (optional) Dictionary or bytes to be sent in the query
string for the :class:`Request`.
:param data: (optional) Dictionary, list of tuples, bytes, or file-like
object to send in the body of the :class:`Request`.
:param json: (optional) json to send in the body of the
:class:`Request`.
:param headers: (optional) Dictionary of HTTP Headers to send with the
:class:`Request`.
:param cookies: (optional) Dict or CookieJar object to send with the
:class:`Request`.
:param files: (optional) Dictionary of ``'filename': file-like-objects``
for multipart encoding upload.
:param auth: (optional) Auth tuple or callable to enable
Basic/Digest/Custom HTTP Auth.
:param timeout: (optional) How long to wait for the server to send
data before giving up, as a float, or a :ref:`(connect timeout,
read timeout) <timeouts>` tuple.
:type timeout: float or tuple
:param allow_redirects: (optional) Set to True by default.
:type allow_redirects: bool
:param proxies: (optional) Dictionary mapping protocol or protocol and
hostname to the URL of the proxy.
:param stream: (optional) whether to immediately download the response
content. Defaults to ``False``.
:param verify: (optional) Either a boolean, in which case it controls whether we verify
the server's TLS certificate, or a string, in which case it must be a path
to a CA bundle to use. Defaults to ``True``. When set to
``False``, requests will accept any TLS certificate presented by
the server, and will ignore hostname mismatches and/or expired
certificates, which will make your application vulnerable to
man-in-the-middle (MitM) attacks. Setting verify to ``False``
may be useful during local development or testing.
:param cert: (optional) if String, path to ssl client cert file (.pem).
If Tuple, ('cert', 'key') pair.
:rtype: requests.Response
)
r� rb rB r� r� r� r� r� rz r� )r] ra )r r� r� �merge_environment_settingsrb r/ r )rD r� rb r� r� rB rz r� r� r] ra r` r� r\ r^ r_ r� r� �prep�settings� send_kwargsrE r( r( r, r� � s. .�
��
zSession.requestc K � |� dd� | jd|fi |��S )z�Sends a GET request. Returns :class:`Response` object.
:param url: URL for the new :class:`Request` object.
:param \*\*kwargs: Optional arguments that ``request`` takes.
:rtype: requests.Response
ra Tr� �r� r� �rD rb �kwargsr( r( r, r9 $ � z Session.getc K r� )z�Sends a OPTIONS request. Returns :class:`Response` object.
:param url: URL for the new :class:`Request` object.
:param \*\*kwargs: Optional arguments that ``request`` takes.
:rtype: requests.Response
ra T�OPTIONSr� r� r( r( r, �options/ r� zSession.optionsc K r� )z�Sends a HEAD request. Returns :class:`Response` object.
:param url: URL for the new :class:`Request` object.
:param \*\*kwargs: Optional arguments that ``request`` takes.
:rtype: requests.Response
ra Fr� r� r� r( r( r, �head: r� z Session.headc K s | j d|f||d�|��S )a� Sends a POST request. Returns :class:`Response` object.
:param url: URL for the new :class:`Request` object.
:param data: (optional) Dictionary, list of tuples, bytes, or file-like
object to send in the body of the :class:`Request`.
:param json: (optional) json to send in the body of the :class:`Request`.
:param \*\*kwargs: Optional arguments that ``request`` takes.
:rtype: requests.Response
r� )r� r� �r� )rD rb r� r� r� r( r( r, �postE s z Session.postc K � | j d|fd|i|��S )au Sends a PUT request. Returns :class:`Response` object.
:param url: URL for the new :class:`Request` object.
:param data: (optional) Dictionary, list of tuples, bytes, or file-like
object to send in the body of the :class:`Request`.
:param \*\*kwargs: Optional arguments that ``request`` takes.
:rtype: requests.Response
�PUTr� r� �rD rb r� r� r( r( r, �putR �
z Session.putc K r� )aw Sends a PATCH request. Returns :class:`Response` object.
:param url: URL for the new :class:`Request` object.
:param data: (optional) Dictionary, list of tuples, bytes, or file-like
object to send in the body of the :class:`Request`.
:param \*\*kwargs: Optional arguments that ``request`` takes.
:rtype: requests.Response
�PATCHr� r� r� r( r( r, �patch^ r� z
Session.patchc K s | j d|fi |��S )z�Sends a DELETE request. Returns :class:`Response` object.
:param url: URL for the new :class:`Request` object.
:param \*\*kwargs: Optional arguments that ``request`` takes.
:rtype: requests.Response
�DELETEr� r� r( r( r, �deletej s zSession.deletec
K s| |� d| j� |� d| j� |� d| j� |� d| j� t|t�r%td��|�dd�}|� d�}|j
}| j |j d�}t
� }|j|fi |��}t
� | } t| d �|_td
||fi |��}|jrm|jD ] }
t| j|
j|
j� qat| j||j� |r�| j||fi |��} d d � | D �} ng } | r�| �d
|� | �� }| |_|s�zt| j||fddi|���|_W n ty� Y nw |s�|j |S )zISend a given PreparedRequest.
:rtype: requests.Response
r\ r^ r_ r` z#You can only send PreparedRequests.ra T)rb )�secondsr8 c S s g | ]}|�qS r( r( )r) rE r( r( r, r- � s z Session.send.<locals>.<listcomp>r r� ) r� r\ r^ r_ r` r. r �
ValueErrorrw r9 r� � get_adapterrb �preferred_clockr r �elapsedr re r rz r� rh r� �insert�next�_next�
StopIterationrf )
rD r� r� ra r\ r� �adapter�start�rr� rE �genre r( r( r, r t sH
" �z Session.sendc
C s� | j r7|dur |�d�nd}t||d�}|�� D ]
\}} |�|| � q|du s+|du r7tj�d�p6tj�d�}t|| j�}t|| j �}t|| j
�}t|| j �}||||d�S )z^
Check the environment and merge it with some settings.
:rtype: dict
Nr� r� T�REQUESTS_CA_BUNDLE�CURL_CA_BUNDLE)r^ r` r\ r_ ) r� r9 r r0 r� �os�environr7 r` r\ r^ r_ )
rD rb r` r\ r^ r_ r� � env_proxiesr* r+ r( r( r, r� � s
� �z"Session.merge_environment_settingsc C s< | j �� D ]\}}|�� �|�� �r| S qtd�|���)z~
Returns the appropriate connection adapter for the given URL.
:rtype: requests.adapters.BaseAdapter
z*No connection adapters were found for {!r})r� r0 �lowerrn r rl )rD rb �prefixr� r( r( r, r� � s
�zSession.get_adapterc C s | j �� D ]}|�� qdS )z+Closes all adapters and as such the sessionN)r� �valuesrm )rD r+ r( r( r, rm � s
�z
Session.closec s> || j � < � fdd�| j D �}|D ] }| j �|�| j |< qdS )zwRegisters a connection adapter to a prefix.
Adapters are sorted in descending order by prefix length.
c s g | ] }t |�t � �k r|�qS r( )rj )r) r* �r� r( r, r- � s z!Session.mount.<locals>.<listcomp>N)r� rw )rD r� r� � keys_to_mover6 r( r� r, r� � s
�z
Session.mountc s � fdd�� j D �}|S )Nc s i | ] }|t � |d ��qS r' )�getattr)r) �attrr� r( r, �
<dictcomp>� s z(Session.__getstate__.<locals>.<dictcomp>)� __attrs__)rD �stater( r� r, � __getstate__� s zSession.__getstate__c C s" |� � D ]
\}}t| ||� qd S r' )r0 �setattr)rD r� r� �valuer( r( r, � __setstate__� s �zSession.__setstate__)NNNNNNNTNNNNNNr� r' )r� r� r� �__doc__r� r� r� r� r� r� r9 r� r� r� r� r� r� r r� r� rm r� r� r� r( r( r( r, r� S s2 >)
�L
K r� c C s t � S )aZ
Returns a :class:`Session` for context-management.
.. deprecated:: 1.0.0
This method has been deprecated since version 1.0.0 and is only kept for
backwards compatibility. New code should use :class:`~requests.sessions.Session`
to create a session. This may be removed at a future date.
:rtype: Session
)r� r( r( r( r, �session s r� )?r� r� �sys�time�datetimer � collectionsr r� r �compatr r r r r
rz r r r
r �modelsr r r r� r r �_internal_utilsr �utilsr r r �
exceptionsr r r r �
structuresr r� r r r r r! r" r# � status_codesr$ r% �platform� perf_counterr� �AttributeError�clockr7 r< �objectr= r� r� r( r( r( r, �<module> sF
� t 3