j$ddlZddlZddlmZmZmZmZddlZddlm Z m Z m Z m Z ddl mZddlmZddlmZddlmZd d lmZd d lmZd d lmZeeeefZej8eZGd dZy)N)OptionalUnionAnycast) AccessTokenAccessTokenInfoTokenRequestOptionsSupportsTokenInfo)CredentialUnavailableError)EnvironmentVariables) within_dac) log_get_token)CertificateCredential)ClientSecretCredential)UsernamePasswordCredentialc eZdZdZdeddfdZddZdeddfdZdd Ze ddd d e d e e d e e dede f dZ e ddd e de edefdZy)EnvironmentCredentialaA credential configured by environment variables. This credential is capable of authenticating as a service principal using a client secret or a certificate. Configuration is attempted in this order, using these environment variables: Service principal with secret: - **AZURE_TENANT_ID**: ID of the service principal's tenant. Also called its 'directory' ID. - **AZURE_CLIENT_ID**: the service principal's client ID - **AZURE_CLIENT_SECRET**: one of the service principal's client secrets - **AZURE_AUTHORITY_HOST**: authority of a Microsoft Entra endpoint, for example "login.microsoftonline.com", the authority for Azure Public Cloud, which is the default when no value is given. Service principal with certificate: - **AZURE_TENANT_ID**: ID of the service principal's tenant. Also called its 'directory' ID. - **AZURE_CLIENT_ID**: the service principal's client ID - **AZURE_CLIENT_CERTIFICATE_PATH**: path to a PEM or PKCS12 certificate file including the private key. - **AZURE_CLIENT_CERTIFICATE_PASSWORD**: (optional) password of the certificate file, if any. - **AZURE_CLIENT_SEND_CERTIFICATE_CHAIN**: (optional) If True, the credential will send the public certificate chain in the x5c header of each token request's JWT. This is required for Subject Name/Issuer (SNI) authentication. Defaults to False. - **AZURE_AUTHORITY_HOST**: authority of a Microsoft Entra endpoint, for example "login.microsoftonline.com", the authority for Azure Public Cloud, which is the default when no value is given. .. admonition:: Example: .. literalinclude:: ../samples/credential_creation_code_snippets.py :start-after: [START create_environment_credential] :end-before: [END create_environment_credential] :language: python :dedent: 4 :caption: Create an EnvironmentCredential. kwargsreturnNc d|_tdtjDrst dt j tjt j tjt j tjd||_ntdtjDrtdt j tjt j tjt j tjt j jtjtt j jtj dd||_ntdtj"Drt%dt j tjt j tj&t j tj(t j jtjdd||_t+j,d t.t1jrd nd |jr5t2j5d |jj6j8yt;tjtjztj"z}|Dcgc]}|t j vs|}}|rVt2j=|jdrt>j@nt>jBddjE|yt2j5dycc}w)Nc3^K|]%}tjj|du'ywNosenvironget.0vs h/root/aria/tools/markitdown-venv/lib/python3.12/site-packages/azure/identity/_credentials/environment.py z1EnvironmentCredential.__init__..?s"^rzz~~a ,^+-) client_id client_secret tenant_idc3^K|]%}tjj|du'ywrrrs r"r#z1EnvironmentCredential.__init__..Fs"W1"$.Wr$F)r%r'certificate_pathpasswordsend_certificate_chainc3^K|]%}tjj|du'ywrrrs r"r#z1EnvironmentCredential.__init__..Qs"d1"$.dr$T)r%usernamer*r'_silence_deprecation_warningzEnvironment is configured to use username and password authentication. This authentication method is deprecated, as it doesn't support multifactor authentication (MFA). For more details, see https://aka.ms/azsdk/identity/mfa.r ) stacklevelz Environment is configured for %s _within_dacz[Incomplete environment configuration for EnvironmentCredential. These variables are set: %sz, z#No environment configuration found.)# _credentialallr CLIENT_SECRET_VARSrrrAZURE_CLIENT_IDAZURE_CLIENT_SECRETAZURE_TENANT_ID CERT_VARSrAZURE_CLIENT_CERTIFICATE_PATHr!AZURE_CLIENT_CERTIFICATE_PASSWORDbool#AZURE_CLIENT_SEND_CERTIFICATE_CHAINUSERNAME_PASSWORD_VARSrAZURE_USERNAMEAZURE_PASSWORDwarningswarnDeprecationWarningr_LOGGERinfo __class____name__setlogloggingINFOWARNINGjoin)selfrexpected_variablesr! set_variabless r"__init__zEnvironmentCredential.__init__<sAE ^6J6]6]^ ^5 **%9%I%IJ jj)=)Q)QR**%9%I%IJ   D  W8L8V8VW W4 **%9%I%IJ**%9%I%IJ!#,@,^,^!_(<(^(^_'+JJNN#7#[#[]bc(  D d8L8c8cd d9 **%9%I%IJ$8$G$GH$8$G$GH**..)=)M)MN-1     D  MMK# * 01a      LL;T=M=M=W=W=`=` a!$$..&99:&==>"  );N1a2::oQNMN $*JJ}$=GLL7??qIIm,  BCOs ?N N cR|jr|jj|Sr)r3 __enter__rNs r"rSzEnvironmentCredential.__enter__ts"       & & ( argscP|jr|jj|yyr)r3__exit__)rNrVs r"rXzEnvironmentCredential.__exit__ys&    %D   % %t , rUc$|jy)z)Close the credential's transport session.N)rXrTs r"closezEnvironmentCredential.close}s  rUclaimsr'scopesr\r'ct|jsd}t||jj|||d|S)a@Request an access token for `scopes`. This method is called automatically by Azure SDK clients. :param str scopes: desired scopes for the access token. This method requires at least one scope. For more information about scopes, see https://learn.microsoft.com/entra/identity-platform/scopes-oidc. :keyword str claims: additional claims required in the token, such as those returned in a resource provider's claims challenge following an authorization failure. :keyword str tenant_id: optional tenant to include in the token request. :return: An access token with the desired scopes. :rtype: ~azure.core.credentials.AccessToken :raises ~azure.identity.CredentialUnavailableError: environment variable configuration is incomplete EnvironmentCredential authentication unavailable. Environment variables are not fully configured. Visit https://aka.ms/azsdk/python/identity/environmentcredential/troubleshoot to troubleshoot this issue.messager[)r3r get_token)rNr\r'r]rras r"rbzEnvironmentCredential.get_tokensG(  -W= =)t))6&I`Y_``rU)optionsrcc|jsd}t|tt|jj|d|iS)aRequest an access token for `scopes`. This is an alternative to `get_token` to enable certain scenarios that require additional properties on the token. This method is called automatically by Azure SDK clients. :param str scopes: desired scope for the access token. This method requires at least one scope. For more information about scopes, see https://learn.microsoft.com/entra/identity-platform/scopes-oidc. :keyword options: A dictionary of options for the token request. Unknown options will be ignored. Optional. :paramtype options: ~azure.core.credentials.TokenRequestOptions :rtype: ~azure.core.credentials.AccessTokenInfo :return: An AccessTokenInfo instance containing information about the token. :raises ~azure.identity.CredentialUnavailableError: environment variable configuration is incomplete. r_r`rc)r3r rr get_token_info)rNrcr]ras r"rez$EnvironmentCredential.get_token_infosK"  -W= =Gt%t'7'78GGaY`aarU)rr)rN)rG __module__ __qualname____doc__rrQrSrXrZrstrrrrbr rrer2rUr"rrs!F6D6D6Dp -c-d-48UYaa$,SMaEMc]aeha aa8TXbcbH=P4Qb]lbbrUr) rJrtypingrrrrrAazure.core.credentialsrrr r r _constantsr _internalr_internal.decoratorsr certificaterr&r user_passwordrEnvironmentCredentialTypes getLoggerrGrDrr2rUr"rtsf  --gg)-"0.15"#8:PRl#lm '  H %^b^brU