i*ddlZddlZ ddlZdZn #e$rdZYnwxYw ddlmZdZn #e$rdZYnwxYw ddlmZn #e$rdZYnwxYweje Z dZ Gdde Z Gdd e ZGd d e ZGd d e ZGdde ZGddeZeZGdde ZGddeZGddeZGddeZGddeZdS)NTF) SASLClient ProxyExecuteceZdZdZdZdS) AuthProviderz An abstract class that defines the interface that will be used for creating :class:`~.Authenticator` instances when opening new connections to Cassandra. .. versionadded:: 2.0.0 ct)z Implementations of this class should return a new instance of :class:`~.Authenticator` or one of its subclasses. NotImplementedErrorselfhosts `/Users/user/workspace/sujinbaek/cqa-test-app/venv/lib/python3.11/site-packages/cassandra/auth.pynew_authenticatorzAuthProvider.new_authenticator4s "###N)__name__ __module__ __qualname____doc__rrr rr+s-$$$$$rrc*eZdZdZdZ dZdZdZdS) Authenticatora3 An abstract class that handles SASL authentication with Cassandra servers. Each time a new connection is created and the server requires authentication, a new instance of this class will be created by the corresponding :class:`~.AuthProvider` to handler that authentication. The lifecycle of the new :class:`~.Authenticator` will the be: 1) The :meth:`~.initial_response()` method will be called. The return value will be sent to the server to initiate the handshake. 2) The server will respond to each client response by either issuing a challenge or indicating that the authentication is complete (successful or not). If a new challenge is issued, :meth:`~.evaluate_challenge()` will be called to produce a response that will be sent to the server. This challenge/response negotiation will continue until the server responds that authentication is successful (or an :exc:`~.AuthenticationFailed` is raised). 3) When the server indicates that authentication is successful, :meth:`~.on_authentication_success` will be called a token string that the server may optionally have sent. The exact nature of the negotiation between the client and server is specific to the authentication mechanism configured server-side. .. versionadded:: 2.0.0 NcdS)z Returns a message to send to the server to initiate the SASL handshake. :const:`None` may be returned to send an empty message. Nrr s r initial_responsezAuthenticator.initial_response]s trct)z Called when the server sends a challenge message. Generally, this method should return :const:`None` when authentication is complete from a client perspective. Otherwise, a string should be returned. rr challenges r evaluate_challengez Authenticator.evaluate_challengeds "###rcdS)z Called when the server indicates that authentication was successful. Depending on the authentication mechanism, `token` may be :const:`None` or a string. Nr)r tokens r on_authentication_successz'Authenticator.on_authentication_successls r)rrrrserver_authenticator_classrrr rrr rr<sV:"&8$$$     rrceZdZdZdZdZdS)PlainTextAuthProvidera An :class:`~.AuthProvider` that works with Cassandra's PasswordAuthenticator. Example usage:: from cassandra.cluster import Cluster from cassandra.auth import PlainTextAuthProvider auth_provider = PlainTextAuthProvider( username='cassandra', password='cassandra') cluster = Cluster(auth_provider=auth_provider) .. versionadded:: 2.0.0 c"||_||_dSNusernamepasswordr r'r(s r __init__zPlainTextAuthProvider.__init__    rc6t|j|jSr%)PlainTextAuthenticatorr'r(r s r rz'PlainTextAuthProvider.new_authenticators%dmT]CCCrNrrrrr*rrrr r#r#usA  !!!DDDDDrr#ceZdZdZdZdZdS)%TransitionalModePlainTextAuthProvidera@ An :class:`~.AuthProvider` that works with DSE TransitionalModePlainTextAuthenticator. Example usage:: from cassandra.cluster import Cluster from cassandra.auth import TransitionalModePlainTextAuthProvider auth_provider = TransitionalModePlainTextAuthProvider() cluster = Cluster(auth_provider=auth_provider) .. warning:: TransitionalModePlainTextAuthProvider will be removed in cassandra-driver 4.0. The transitional mode will be handled internally without the need of any auth provider. c:tddS)NzTransitionalModePlainTextAuthProvider will be removed in cassandra-driver 4.0. The transitional mode will be handled internally without the need of any auth provider.)logwarningrs r r*z.TransitionalModePlainTextAuthProvider.__init__s' , - - - - -rctSr%)&TransitionalModePlainTextAuthenticatorr s r rz7TransitionalModePlainTextAuthProvider.new_authenticators5777rNr.rrr r0r0s< --- 88888rr0ceZdZdZdZdZdS)SaslAuthProvidera An :class:`~.AuthProvider` supporting general SASL auth mechanisms Suitable for GSSAPI or other SASL mechanisms Example usage:: from cassandra.cluster import Cluster from cassandra.auth import SaslAuthProvider sasl_kwargs = {'service': 'something', 'mechanism': 'GSSAPI', 'qops': 'auth'.split(',')} auth_provider = SaslAuthProvider(**sasl_kwargs) cluster = Cluster(auth_provider=auth_provider) .. versionadded:: 2.1.4 c fttdd|vrtd||_dS)N+The puresasl library has not been installedr zTkwargs should not contain 'host' since it is passed dynamically to new_authenticator)r ImportError ValueError sasl_kwargs)r r<s r r*zSaslAuthProvider.__init__s?  KLL L [ stt t&rc&t|fi|jSr%)SaslAuthenticatorr<r s r rz"SaslAuthProvider.new_authenticators ::)9:::rNr.rrr r7r7s<&''';;;;;rr7c&eZdZdZddZdZdZdS)r>z A pass-through :class:`~.Authenticator` using the third party package 'pure-sasl' for authentication .. versionadded:: 2.1.4 GSSAPIc Zttdt|||fi||_dS)Nr9)rr:sasl)r r service mechanismr<s r r*zSaslAuthenticator.__init__s6  KLL LtWiGG;GG rc4|jSr%rBprocessrs r rz"SaslAuthenticator.initial_responsesy  """rc6|j|Sr%rFrs r rz$SaslAuthenticator.evaluate_challengesy  +++rN)r@)rrrrr*rrrrr r>r>sTHHHH ###,,,,,rr>c eZdZdZddZdZdS) DSEGSSAPIAuthProviderz Auth provider for GSS API authentication. Works with legacy `KerberosAuthenticator` or `DseAuthenticator` if `kerberos` scheme is enabled. dseauthTc tstdtstd||_||_||_||_dS)a :param service: name of the service :param qops: iterable of "Quality of Protection" allowed; see ``puresasl.QOP`` :param resolve_host_name: boolean flag indicating whether the authenticator should reverse-lookup an FQDN when creating a new authenticator. Default is ``True``, which will resolve, or return the numeric address if there is no PTR record. Setting ``False`` creates the authenticator with the numeric address known by Cassandra :param properties: additional keyword properties to pass for the ``puresasl.mechanisms.GSSAPIMechanism`` class. Presently, 'principal' (user) is the only one referenced in the ``pure-sasl`` implementation r9z+The kerberos library has not been installedN)_have_puresaslr:_have_kerberosrCqopsresolve_host_name properties)r rCrQrRrSs r r*zDSEGSSAPIAuthProvider.__init__sU MKLL L MKLL L  !2$rc|jrtj|dfdd}t||j|j|jS)Nr)rRsocket getnameinfoGSSAPIAuthenticatorrCrQrSr s r rz'DSEGSSAPIAuthProvider.new_authenticatorsB  ! 7%tQi33A6D"4ty$/RRRrN)rKrLTr.rrr rJrJsF%%%%&SSSSSrrJc eZdZdZdZdZdS)BaseDSEAuthenticatorc td)Nzget_mechanism not implementedrrs r get_mechanismz"BaseDSEAuthenticator.get_mechanisms!"ABBBrc td)Nz%get_initial_challenge not implementedrrs r get_initial_challengez*BaseDSEAuthenticator.get_initial_challenges!"IJJJrc|jdkr|S||S)Nz0com.datastax.bdp.cassandra.auth.DseAuthenticator)r!r[rr]rs r rz%BaseDSEAuthenticator.initial_responsesC  *.` ` `%%'' '**4+E+E+G+GHH HrN)rrrr[r]rrrr rYrYsLCCCKKKIIIIIrrYc&eZdZdZdZdZdZdS)r-c"||_||_dSr%r&r)s r r*zPlainTextAuthenticator.__init__ r+rcdS)NsPLAINrrs r r[z$PlainTextAuthenticator.get_mechanismsxrcdS)N PLAIN-STARTrrs r r]z,PlainTextAuthenticator.get_initial_challenges~rcx|dkr&d|jd|j}|Std)Nrcz6Did not receive a valid challenge response from server)r'r(encode Exception)r rdatas r rz)PlainTextAuthenticator.evaluate_challengesA  & & &%)]]]DMMBD;;== PQQQrNrrrr*r[r]rrrr r-r- sU!!!RRRRRrr-c"eZdZdZfdZxZS)r5zc Authenticator that accounts for DSE authentication is configured with transitional mode. cZtt|dddS)N)superr5r*)r __class__s r r*z/TransitionalModePlainTextAuthenticator.__init__"s* 4d;;DDRLLLLLr)rrrrr* __classcell__)rns@r r5r5sKMMMMMMMMMrr5c&eZdZdZdZdZdZdS)rWc:|pi}t||dfd|i||_dS)Nr@rQ)rrB)r r rCrQrSs r r*zGSSAPIAuthenticator.__init__'s0%2 tWhPPTPZPP rcdS)NsGSSAPIrrs r r[z!GSSAPIAuthenticator.get_mechanism+syrcdSNs GSSAPI-STARTrrs r r]z)GSSAPIAuthenticator.get_initial_challenge.srct|dkr|jS|j|SrtrFrs r rz&GSSAPIAuthenticator.evaluate_challenge1s7  ' '9$$&& &9$$Y// /rNrirrr rWrW&sSQQQ00000rrW)rUloggingkerberosrPr:puresasl.clientrrO getLoggerrr2_proxy_execute_keyobjectrrr#r0r7r>DSEPlainTextAuthProviderrJrYr-r5rWrrr r}s" OOONNNNN******NNNNN*******JJJg!!$$$$$$6$$$"6 6 6 6 6 F6 6 6 rDDDDDLDDD088888F8886;;;;;|;;;>,,,,, ,,,(1SSSSSLSSS< I I I I I= I I IRRRRR1RRR&MMMMM-CMMM00000.00000s'(22=AA