jCE:ddlZddlZddlmZmZmZmZddlmZm Z m Z ddl m Z m Z ddlmZddlmZddlmZmZmZmZd d lmZd d lmZd d lmZd d lmZd dlm Z d dl!m"Z"d dl#m$Z$d dl%m&Z&d dl'm(Z(ejRe*Z+GddZ,GddeZ-y)N)ListOptionalAnycast) AccessTokenAccessTokenInfoTokenRequestOptions)AsyncTokenCredentialAsyncSupportsTokenInfo)CredentialUnavailableError)EnvironmentVariables)get_default_authoritynormalize_authority within_dacprocess_credential_exclusions)AzureCliCredential)AzureDeveloperCliCredential)AzurePowerShellCredential)ChainedTokenCredential)EnvironmentCredential)ManagedIdentityCredential)SharedTokenCacheCredential)VisualStudioCodeCredential)WorkloadIdentityCredentialc|eZdZdZdededdfdZdededefd Zdd d e e dede fd Z d ededdfdZ ddZddZy)AsyncFailedDACCredentialzAsync version of FailedDACCredential for use in async credential chains. This acts as a substitute for an async credential that has failed to initialize in the DAC chain. credential_nameerrorreturnNc ||_||_yN)_error_credential_name)selfrr s h/root/aria/tools/markitdown-venv/lib/python3.12/site-packages/azure/identity/aio/_credentials/default.py__init__z!AsyncFailedDACCredential.__init__"s /scopeskwargsc4Kt|jwr#r r$)r&r*r+s r' get_tokenz"AsyncFailedDACCredential.get_token&s(55optionsr1c4Kt|jwr#r-)r&r1r*r+s r'get_token_infoz'AsyncFailedDACCredential.get_token_info)s)55r/argsc Kywr#)r&r4r+s r' __aexit__z"AsyncFailedDACCredential.__aexit__.  cK|Swr#r6r&s r' __aenter__z#AsyncFailedDACCredential.__aenter__1s  sc Kywr#r6r;s r'closezAsyncFailedDACCredential.close4r8r9)r!r)r!N)__name__ __module__ __qualname____doc__strr(rrr.rr rr3r7r<r>r6r)r'rrs 00C0D06s6c6k6AE6 ()< =6PS6 6  S C D  r)rc eZdZdZdeddffd Zddddedeed eededef fd Z dd ded ee de ffd Z xZ S)DefaultAzureCredentialatA credential capable of handling most Azure SDK authentication scenarios. See https://aka.ms/azsdk/python/identity/credential-chains#usage-guidance-for-defaultazurecredential. The identity it uses depends on the environment. When an access token is needed, it requests one using these identities in turn, stopping when one provides a token: 1. A service principal configured by environment variables. See :class:`~azure.identity.aio.EnvironmentCredential` for more details. 2. WorkloadIdentityCredential if environment variable configuration is set by the Azure workload identity webhook. 3. An Azure managed identity. See :class:`~azure.identity.aio.ManagedIdentityCredential` for more details. 4. On Windows only: a user who has signed in with a Microsoft application, such as Visual Studio. If multiple identities are in the cache, then the value of the environment variable ``AZURE_USERNAME`` is used to select which identity to use. See :class:`~azure.identity.aio.SharedTokenCacheCredential` for more details. 5. The identity logged in to Visual Studio Code with the Azure Resources extension. 6. The identity currently logged in to the Azure CLI. 7. The identity currently logged in to Azure PowerShell. 8. The identity currently logged in to the Azure Developer CLI. 9. Brokered authentication. On Windows and WSL only, this uses the default account logged in via Web Account Manager (WAM) if the `azure-identity-broker` package is installed. This default behavior is configurable with keyword arguments. :keyword str authority: Authority of a Microsoft Entra endpoint, for example 'login.microsoftonline.com', the authority for Azure Public Cloud (which is the default). :class:`~azure.identity.AzureAuthorityHosts` defines authorities for other clouds. Managed identities ignore this because they reside in a single cloud. :keyword bool exclude_workload_identity_credential: Whether to exclude the workload identity from the credential. Defaults to **False**. :keyword bool exclude_developer_cli_credential: Whether to exclude the Azure Developer CLI from the credential. Defaults to **False**. :keyword bool exclude_cli_credential: Whether to exclude the Azure CLI from the credential. Defaults to **False**. :keyword bool exclude_environment_credential: Whether to exclude a service principal configured by environment variables from the credential. Defaults to **False**. :keyword bool exclude_powershell_credential: Whether to exclude Azure PowerShell. Defaults to **False**. :keyword bool exclude_visual_studio_code_credential: Whether to exclude stored credential from VS Code. Defaults to **False**. :keyword bool exclude_managed_identity_credential: Whether to exclude managed identity from the credential. Defaults to **False**. :keyword bool exclude_shared_token_cache_credential: Whether to exclude the shared token cache. Defaults to **False**. :keyword str managed_identity_client_id: The client ID of a user-assigned managed identity. Defaults to the value of the environment variable AZURE_CLIENT_ID, if any. If not specified, a system-assigned identity will be used. :keyword str workload_identity_client_id: The client ID of an identity assigned to the pod. Defaults to the value of the environment variable AZURE_CLIENT_ID, if any. If not specified, the pod's default identity will be used. :keyword str workload_identity_tenant_id: Preferred tenant for :class:`~azure.identity.WorkloadIdentityCredential`. Defaults to the value of environment variable AZURE_TENANT_ID, if any. :keyword str shared_cache_username: Preferred username for :class:`~azure.identity.aio.SharedTokenCacheCredential`. Defaults to the value of environment variable AZURE_USERNAME, if any. :keyword str shared_cache_tenant_id: Preferred tenant for :class:`~azure.identity.aio.SharedTokenCacheCredential`. Defaults to the value of environment variable AZURE_TENANT_ID, if any. :keyword str visual_studio_code_tenant_id: Tenant ID to use when authenticating with :class:`~azure.identity.VisualStudioCodeCredential`. Defaults to the tenant specified in the authentication record file used by the Azure Resources extension. :keyword int process_timeout: The timeout in seconds to use for developer credentials that run subprocesses (e.g. AzureCliCredential, AzurePowerShellCredential). Defaults to **10** seconds. :keyword bool require_envvar: If **True**, require that the AZURE_TOKEN_CREDENTIALS environment variable be set to a value denoting the credential type or credential group to use. If unset or empty, DefaultAzureCredential will raise a `ValueError`. Defaults to **False**. .. admonition:: Example: .. literalinclude:: ../samples/credential_creation_code_snippets.py :start-after: [START create_default_credential_async] :end-before: [END create_default_credential_async] :language: python :dedent: 4 :caption: Create a DefaultAzureCredential. r+r!Nc jd|vr td|jdd}|r t|n t}|jdd}|jdtj j tj}|jdtj j tj}|jdtj j tj}|jd|}|jd tj j tj}|jd d } |jd d } tj j tjdjj} | r | s tdddd dddd dddd ddd dddd dddd dddd ddd d dd!} i} i}| jD]5\}}t!t"|d"}|j|d||<|d#| |<7t%| | |} | d$}| d%}| d&}| d'}| d(}| d)}| d*}| d+}g}t'j(d,|s|j+t-d5|d,d-||sX |j+t/d5t!t"||tj j tj0d.||s!|j+t5d5||| dk7d1||s4t7j8r t7d5|||d2|}|j+||s|j+t;|3|s|j+t=| 4|s|j+t?| 4|s|j+tA| 4t'j(d tC||y#t$r0}|j+t3d/t#|0Yd}~#d}~wwxYw)6N tenant_idz7'tenant_id' is not supported in DefaultAzureCredential. authorityvisual_studio_code_tenant_idshared_cache_usernameshared_cache_tenant_idmanaged_identity_client_idworkload_identity_client_idworkload_identity_tenant_idprocess_timeout require_envvarFzAZURE_TOKEN_CREDENTIALS environment variable is required but is not set or is empty. Set it to 'dev', 'prod', or a specific credential name.exclude_environment_credentialenvironmentcredential) exclude_paramenv_namedefault_exclude$exclude_workload_identity_credentialworkloadidentitycredential#exclude_managed_identity_credentialmanagedidentitycredential%exclude_shared_token_cache_credential)rUrW%exclude_visual_studio_code_credentialvisualstudiocodecredentialexclude_cli_credentialazureclicredential exclude_developer_cli_credentialazuredeveloperclicredentialexclude_powershell_credentialazurepowershellcredential) environmentworkload_identitymanaged_identityshared_token_cachevisual_studio_codecli developer_cli powershellrUrWrerfrgrhrirjrkrlT)rH _within_dac) client_idrGtoken_file_pathr)r )rn%_exclude_workload_identity_credential_enable_imds_probe)usernamerGrH)rG)rOr6)# TypeErrorpoprrosenvirongetrAZURE_USERNAMEAZURE_TENANT_IDAZURE_CLIENT_IDAZURE_TOKEN_CREDENTIALSstriplower ValueErroritemsrrCrrsetappendrrAZURE_FEDERATED_TOKEN_FILErrr supportedrrrrsuperr()r&r+rHvscode_tenant_idrJrKrLrMrNrOrQtoken_credentials_envcredential_config exclude_flags user_excludescred_keyconfig param_namerSrXrZr\r]r_rarc credentialsex shared_cache __class__s r'r(zDefaultAzureCredential.__init__~sx & UV VJJ{D1 6?' 2EZE\ !::&DdK & +BBJJNNSgSvSvDw x!' $bjjnn5I5Y5Y&Z" &,ZZ ("**..9M9]9]*^& "'-jj1NPj&k#&,jj )2::>>:N:^:^+_' #!**%6;$4e< " /C/[/[]_ ` f f h n n p "7J "B3#( "H8#(" "G7#(! "I#(# "I8#(# ":0#( "D9#( "A7#(G( V  1 7 7 9 @ Hfc6/#:;J&,jjT&BM( #&,->&?M( # @ 66GXef *7})E&/<=P/Q,.;R0S-0=>R0S-!.u!5+8+I((5l(C%46 t-   4eyVZe^de f3 j""."&s,G"H"=(* 7K7f7f(g! 3   )8:^'<@['[  59S9]9]9_5.:P\eioL   | ,4   9DTU V%   1/R S,   8Y Z/   :?[ \u +&5 j""#;rsp  ,,TTU*.nn)07+.74.9 '  H %  8Q3Qr)