j$ddlmZmZmZmZddlmZmZmZm Z m Z ddl m Z ddl mZddlmZddlmZmZmZdd lmZdd lmZmZed d ZGddZGdd eZy))AnyOptionalTypeVarcast) AccessTokenTokenRequestOptionsAccessTokenInfoSupportsTokenInfoTokenCredential)SilentAuthenticationCredential)CredentialUnavailableError)DEVELOPER_SIGN_ON_CLIENT_ID) AadClient AadClientBase within_dac) log_get_token)NO_TOKENSharedTokenCacheBaseT_SharedTokenCacheCredential)boundceZdZdZddeededdfdZddZdeddfd Z dd Z e ddd d d edeedeede dede f dZe ddd edeedefdZede fdZy)SharedTokenCacheCredentialaAuthenticates using tokens in the local cache shared between Microsoft applications. :param str username: Username (typically an email address) of the user to authenticate as. This is used when the local cache contains tokens for multiple identities. :keyword str authority: Authority of a Microsoft Entra endpoint, for example 'login.microsoftonline.com', the authority for Azure Public Cloud (which is the default). :class:`~azure.identity.AzureAuthorityHosts` defines authorities for other clouds. :keyword str tenant_id: a Microsoft Entra tenant ID. Used to select an account when the cache contains tokens for multiple identities. :keyword AuthenticationRecord authentication_record: an authentication record returned by a user credential such as :class:`DeviceCodeCredential` or :class:`InteractiveBrowserCredential` :keyword cache_persistence_options: configuration for persistent token caching. If not provided, the credential will use the persistent cache shared by Microsoft development applications :paramtype cache_persistence_options: ~azure.identity.TokenCachePersistenceOptions Nusernamekwargsreturnc Rd|vrtdi||_ytdd|i||_y)Nauthentication_recordr)r _credentialr)selfrrs i/root/aria/tools/markitdown-venv/lib/python3.12/site-packages/azure/identity/_credentials/shared_cache.py__init__z#SharedTokenCacheCredential.__init__%s1 "f ,2P2ZSY2ZD :WHWPVWD c:|jj|SN)r" __enter__r#s r$r)z$SharedTokenCacheCredential.__enter__+s ""$ r&argsc6|jj|yr()r"__exit__r#r+s r$r-z#SharedTokenCacheCredential.__exit__/s!!!4(r&c$|jy)z)Close the credential's transport session.Nr-r*s r$closez SharedTokenCacheCredential.close2s  r&Fclaims tenant_id enable_caescopesr3r4r5c^tt|jj||||d|S)a Get an access token for `scopes` from the shared cache. If no access token is cached, attempt to acquire one using a cached refresh token. This method is called automatically by Azure SDK clients. :param str scopes: desired scopes for the access token. This method requires at least one scope. For more information about scopes, see https://learn.microsoft.com/entra/identity-platform/scopes-oidc. :keyword str claims: additional claims required in the token, such as those returned in a resource provider's claims challenge following an authorization failure :keyword str tenant_id: not used by this credential; any value provided will be ignored. :keyword bool enable_cae: indicates whether to enable Continuous Access Evaluation (CAE) for the requested token. Defaults to False. :return: An access token with the desired scopes. :rtype: ~azure.core.credentials.AccessToken :raises ~azure.identity.CredentialUnavailableError: the cache is unavailable or contains insufficient user information :raises ~azure.core.exceptions.ClientAuthenticationError: authentication failed. The error's ``message`` attribute gives a reason. r2)rr r" get_token)r#r3r4r5r6rs r$r8z$SharedTokenCacheCredential.get_token6s8>AtOT%5%56@@ FiJ RX  r&optionsr:cVtt|jj|d|iS)aRequest an access token for `scopes`. If no access token is cached, attempt to acquire one using a cached refresh token. This is an alternative to `get_token` to enable certain scenarios that require additional properties on the token. This method is called automatically by Azure SDK clients. :param str scopes: desired scope for the access token. This method requires at least one scope. For more information about scopes, see https://learn.microsoft.com/entra/identity-platform/scopes-oidc. :keyword options: A dictionary of options for the token request. Unknown options will be ignored. Optional. :paramtype options: ~azure.core.credentials.TokenRequestOptions :rtype: ~azure.core.credentials.AccessTokenInfo :return: An AccessTokenInfo instance containing information about the token. :raises ~azure.identity.CredentialUnavailableError: the cache is unavailable or contains insufficient user information. :raises ~azure.core.exceptions.ClientAuthenticationError: authentication failed. The error's ``message`` attribute gives a reason. r:)rr r"get_token_infor#r:r6s r$r<z)SharedTokenCacheCredential.get_token_infoYs,*Ht%t'7'78GGaY`aar&c*tjS)zWhether the shared token cache is supported on the current platform. :return: True if the shared token cache is supported on the current platform, otherwise False. :rtype: bool )r supportedr!r&r$r?z$SharedTokenCacheCredential.supportedps$--//r&r()rrrN)__name__ __module__ __qualname____doc__rstrrr%r)r-r1rboolrr8rr r< staticmethodr?r!r&r$rrs"X#XXX )c)d)!%#'       C=           DTXbcbH=P4Qb]lbb,0t00r&rc eZdZdZdedefdZdZddZdddd d ed e ed e ed e de de f dZ ddd ede edefdZdddd ede edede def dZde defdZy)rzQThe original SharedTokenCacheCredential, which doesn't use msal.ClientApplicationr#rcR|jr|jj|Sr()_clientr)r*s r$r)z%_SharedTokenCacheCredential.__enter__}s << LL " " $ r&cP|jr|jj|yyr()rJr-r.s r$r-z$_SharedTokenCacheCredential.__exit__s" << !DLL ! !4 ( r&Nc$|jyr(r0r*s r$r1z!_SharedTokenCacheCredential.closes  r&Fr2r6r3r4r5rci}|r||d<|r||d<||d<|j||dd|}t|j|jS)Nr3r4r5r8r:base_method_name)_get_token_basertoken expires_on)r#r3r4r5r6rr: token_infos r$r8z%_SharedTokenCacheCredential.get_tokensc(*  &GH  #,GK * )T))67U`kdjk :++Z-B-BCCr&r9r:c(|j||ddS)Nr<rN)rPr=s r$r<z*_SharedTokenCacheCredential.get_token_infos#t##VWO_``r&r<rNrOc f|std|d|js|j|xsi}|jd}|jd}|jdd}|r |jn |j }|s |j |}|s td |j|j|j|} |s|j|| |} | r| S|j| |D]6} tt|jj || f|||d |} | cStt+j,| jd #t"$rG} t%jr-tt'| d t)| t'| d d | d} ~ wwxYw)N'z' requires at least one scoper3r4r5F)is_caezShared token cache unavailable)messager2rXresponse)rXrYr) ValueError_client_initialized_initialize_clientget _cae_cache_cache_initialize_cacher _get_account _username _tenant_id_get_cached_access_token_get_refresh_tokensrrrJobtain_token_by_refresh_token ExceptionrgetattrrErformat) r#r:rOr6rr3r4rW token_cacheaccountrQ refresh_tokenes r$rPz+_SharedTokenCacheCredential._get_token_basesq!1 22OPQ Q''  # # %-RX&KK , \51)/dooT[[ 000?K09YZZ##DNNDOOF#S11&'&1QE "55gf5M M SY 5SSM28IZ`dj )ZAX1YZZ >>#4 '9c!f =PQS]_cHd  s=1E  F0)AF++F0c $tddti|S)N client_idr!)rr)r#rs r$_get_auth_clientz,_SharedTokenCacheCredential._get_auth_clientsI#>I&IIr&r@)rArBrCrDrr)r-r1rErrFrrr8rr r<rPrrpr!r&r$rrzs[a ) !%#' DD DC= D  D  D D$UYacaH=P4Qa]la 26 0 1[1[-.1[ 1[  1[  1[fJJJr&N)typingrrrrazure.core.credentialsrrr r r silentr r _constantsr _internalrrr_internal.decoratorsr_internal.shared_token_cacherrrrrr!r&r$rysU 0/xx2)4<<0I C45d0d0NXJ"6XJr&