j- ddlZddlZddlZddlZddlZddlmZddlmZm Z ddl m Z m Z ddl mZddlmZddlmZdd lmZmZmZmZdd lmZed d Zedd Zej8eZeee zdzZ eee zdzZ!eee zdzZ"de ede#defdZ$de%de%fdZ&de%fdZ'de%ddfdZ(de%ddfdZ)de%ddfdZ* d+ddd e%de e%d!e e e%de%fd"Z+d#e,d$e,d%e,de,fd&Z-de e.fd'Z/de0fd(Z1d)e%de%fd*Z2y),N) ContextVar) ascii_lettersdigits)ListOptional)urlparse)AccessTokenInfo)ClientAuthenticationError)DEFAULT_REFRESH_OFFSET!DEFAULT_TOKEN_REFRESH_RETRY_DELAYEnvironmentVariablesKnownAuthorities)TokenRefreshStatuswithin_credential_chainF)default within_dacz-.z_-.:/z_-. tokenlast_request_timereturnc|tjSttj}||jk\rtjS||z t krtj S|j||jk\rtjS|j|z tkrtjStj S)a^Determine the refresh status of a token. :param ~azure.core.credentials.AccessTokenInfo or None token: The token to evaluate. If None, a refresh is required. :param int last_request_time: The time of the last token request, as seconds since the epoch. :return: The refresh status of the token. :rtype: TokenRefreshStatus ) rREQUIREDinttime expires_onr NOT_NEEDED refresh_on RECOMMENDEDr )rrnows _/root/aria/tools/markitdown-venv/lib/python3.12/site-packages/azure/identity/_internal/utils.pyget_refresh_statusr!$s }!*** diik C e!*** !BB!,,, #u/?/?(?!--- #!77!---  ( (( authorityct|}|jsd|jdzS|jdk7rtdj ||jdS)zEnsure authority uses https, strip trailing spaces and /. :param str authority: authority to normalize :return: normalized authority :rtype: str :raises: ValueError if authority is not a valid https URL zhttps://z /httpszL'{}' is an invalid authority. The value must be a TLS protected (https) URL.)rschemerstrip ValueErrorformat)r#parseds r normalize_authorityr+Esfi F ==I,,T222 }} Z a abk l     D !!r"ctjjtjt j }t|SN)osenvirongetrAZURE_AUTHORITY_HOSTrAZURE_PUBLIC_CLOUDr+)r#s r get_default_authorityr3Ys/ 3HHJZJmJmnI y ))r"scopecB|rtd|Dr tdy)zRaise ValueError if scope is empty or contains a character invalid for a scope :param str scope: scope to validate :raises: ValueError if scope is empty or contains a character invalid for a scope. c3,K|] }|tvywr-)VALID_SCOPE_CHARACTERS.0cs r z!validate_scope..dsGA!77GzeAn invalid scope was provided. Only alphanumeric characters, '.', '-', '_', ':', and '/' are allowed.Nanyr()r4s r validate_scoper?^s* CGGG s  Hr" tenant_idcB|rtd|Dr tdy)zRaise ValueError if tenant_id is empty or contains a character invalid for a tenant ID. :param str tenant_id: tenant ID to validate :raises: ValueError if tenant_id is empty or contains a character invalid for a tenant ID. c3,K|] }|tvywr-)VALID_TENANT_ID_CHARACTERSr8s r r;z%validate_tenant_id..psSAA%??Sr<zInvalid tenant ID provided. You can locate your tenant ID by following the instructions here: https://learn.microsoft.com/partner-center/find-ids-and-domain-namesNr=)r@s r validate_tenant_idrDjs- SSS S  Tr" subscriptioncJ|rtd|Drtd|dy)a Raise ValueError if subscription is empty or contains a character invalid for a subscription name/ID. :param str subscription: subscription ID to validate :raises: ValueError if subscription is empty or contains a character invalid for a subscription ID. c3,K|] }|tvywr-)VALID_SUBSCRIPTION_CHARACTERSr8s r r;z(validate_subscription..}s\!q(EE\r<zSubscription 'z' contains invalid characters. If this is the name of a subscription, use its ID instead. You can locate your subscription by following the instructions listed here: https://learn.microsoft.com/azure/azure-portal/get-subscription-tenant-idNr=)rEs r validate_subscriptionrIws: 3\|\\\N+X X  ]r")additionally_allowed_tenantsdefault_tenantrJc D|||k(r|S|dk(s-tjjtjrt j d|||S|s|S|g}d|vs||vrt j d|||S|s|dk(r|Stdj|)aReturns the correct tenant for a token request given a credential's configuration. :param str default_tenant: The tenant ID configured on the credential. :param str tenant_id: The tenant ID requested by the user. :keyword list[str] additionally_allowed_tenants: The list of additionally allowed tenants. :return: The tenant ID to use for the token request. :rtype: str :raises: ~azure.core.exceptions.ClientAuthenticationError adfszA token was request for a different tenant than was configured on the credential, but the configured value was used since multi tenant authentication has been disabled. Configured tenant ID: %s, Requested tenant ID %s*zA token was requested for a different tenant than was configured on the credential, and the requested tenant ID was used to authenticate. Configured tenant ID: %s, Requested tenant ID %s organizationsaThe current credential is not configured to acquire tokens for tenant {}. To enable acquiring tokens for this tenant add it to the additionally_allowed_tenants when creating the credential, or add "*" to additionally_allowed_tenants to allow acquiring tokens for any tenant.)message) r.r/r0r&AZURE_IDENTITY_DISABLE_MULTITENANTAUTH_LOGGERinfor r))rKr@rJ_s r resolve_tenantrUs I72::>>2F2m2m#n  ?     #+')$ **i;W.W  %     (No,M #+,26)+<  r"credential_config exclude_flags user_excludesc tjjtjdj j }|dk(rhd}|D] }||v||< n|dk(rhd}|D] }||v||< n|r|jDchc] }d|vs|d}}||vrBddgt|z} tdtjd|d d j| d d } |jD]\}}|jd|k(s|} n|D] }|| k7||< |jD] \}} |  | ||<|Scc}w) aProcess credential exclusions based on environment variable and user overrides. This method handles the AZURE_TOKEN_CREDENTIALS environment variable to determine which credentials should be excluded from the credential chain, and then applies any user-provided exclude overrides which take precedence over environment settings. :param credential_config: Configuration mapping for all available credentials, containing exclude parameter names, environment names, and default exclude settings :type credential_config: dict :param exclude_flags: Dictionary of exclude flags for each credential (will be modified) :type exclude_flags: dict :param user_excludes: User-provided exclude overrides from constructor kwargs :type user_excludes: dict :return: Dictionary of final exclude flags for each credential :rtype: dict :raises ValueError: If token_credentials_env contains an invalid credential name dev>clibroker powershell developer_clishared_token_cachevisual_studio_codeprod> environmentmanaged_identityworkload_identityenv_namezInvalid value for z: z. Valid values are: z, .N) r.r/r0rAZURE_TOKEN_CREDENTIALSstriplowervaluessortedr(joinitems) rVrWrXtoken_credentials_envdev_credentialscred_keyprod_credentialsconfigvalid_credentials valid_valuesselected_cred_key user_values r process_credential_exclusionsrxs*JJNN+?+W+WY[\bbdjjl%v) FH&.o&EM( # F & (S) GH&.6F&FM( # G >O>V>V>XqF\fjp\pVJ/qq (9 9!6?V4E-FFL$%9%Q%Q$RRTUjTkl%%)YY|%<$=Q@  ! 1 7 7 9  Hfzz*%)>>$,!  * DH&.2C&CM( # D!. 3 3 51*  !&0M( #1 1rs  E E c2 ddlm}|S#t$rYywxYw)zReturn the InteractiveBrowserBrokerCredential class if available, otherwise None. :return: InteractiveBrowserBrokerCredential class or None :rtype: Optional[type] r"InteractiveBrowserBrokerCredentialN)azure.identity.brokerr{ ImportErrorrzs r get_broker_credentialr~s" L11 s  ctj}t|d|dj}t|d|dj}|dk(xrd|vS)Nsystemrreleaser linux microsoft)platformunamegetattrrj)r platform_namers r is_wslrsY NN EE8U1X6<<>MeYa1779G G # > w(>>r"scltj|jd}|jdS)Nzutf-8)base64 b64encodeencodedecode)rencodeds r encode_base64rs*qxx01G >>' ""r"r-)3rr.rloggingr contextvarsrstringrrtypingrr urllib.parserazure.core.credentialsr azure.core.exceptionsr _constantsr r rr_enumsrrr getLogger__name__rR frozensetrCr7rHrr!strr+r3r?rDrIrUdictrxtyper~boolrrr"r rs   "(!!2; ($%>N  e 4 '  H %&}v'='DE"=6#9G#CD )-&*@6*I J)h7)C)Tf)B"3"3"(*s*  #  $    #  $        $29= 22}2#+49"5 2  2j;T;$;_c;hl;| x~ ??#S#S#r"