^j/dZddlZddlmZddlmZmZddlZddlm Z ddl m Z m Z dd l mZmZd Zd ZGd d eZGddedZdefdZdddedegdfdzdefdZd edefdZdej0defdZy)aADevice Code OAuth (RFC 8628) for browser-based login, plus access token refresh. The flow: the client requests a device code, displays a URL and a short user code, the user authorizes in a browser, and the client polls ``POST {ENDPOINT}/oauth/token`` until a token is issued. Access tokens may come with a refresh token, used to renew them transparently (see ``utils/_auth.py::get_token``). This module is self-contained protocol logic: no printing, no persistence. Interactive flows live in ``_login.py`` (human/library) and ``cli/auth.py`` (machine-readable event stream). N)Callable) TypedDictcast) constants)DeviceCodeErrorOAuthErrorCode) get_sessionhf_raise_for_statusz,urn:ietf:params:oauth:grant-type:device_code refresh_tokencJeZdZUeed<eed<eed<eed<eed<eed<y)DeviceCodeInfo device_code user_codeverification_uriverification_uri_completeinterval expires_inN__name__ __module__ __qualname__str__annotations__intn/var/www/ramen.bs-engineer-server.com/venv/lib/python3.12/site-packages/huggingface_hub/utils/_oauth_device.pyrr(s#N""MOrrc6eZdZUeed<eed<eed<eed<y)OAuthTokenResponse access_tokenr r token_typeNrrrrr!r!1sOOrr!F)totalreturnc tjtjddtjitj }t ||j}|jdd|jd d |jd s|d |d <tt|S#tj$r%}tdtjd||d}~wwxYw) a'Request a device code from the Hub's OAuth device authorization endpoint. The returned dict is normalized: `interval`, `expires_in` and `verification_uri_complete` are always set (server values, or sensible defaults). Raises: [`DeviceCodeError`]: If the request fails. z /oauth/device client_iddatatimeoutz#Failed to request device code from z/oauth/device: Nrrirr)r postrENDPOINTDEVICE_CODE_OAUTH_CLIENT_IDHF_HUB_DOWNLOAD_TIMEOUTr httpx HTTPErrorrjson setdefaultgetrr)responseeinfos rrequest_device_coder88ss=%%!!"- 0yDDE55&  H% ==?D OOJ"OOL#& 88/ 0,01C,D ()  %% ??s CIDVDVCWWfghfijkqrrssAB55C- C((C-) on_pending device_infor9c |d}tj|dz}tj|krd} tjtj dt |dtjdtj}|jdkr|j}|d |vrtt|S|j!d xnxt"j$k(r ||nxt"j&k(r|d z }nxt"j(k(rt+d t"j( xt"j,k(rt+dt"j, }t+d|d|j!dd| tj.|tj|krt+dt"j( #tjtf$rYIwxYw)awPoll the token endpoint until the user authorizes the device. Args: device_info (`DeviceCodeInfo`): The device authorization response from [`request_device_code`]. on_pending (`Callable`, *optional*): Called after each "authorization pending" response (e.g. to print a progress dot). Returns: `OAuthTokenResponse`: the full token response: `access_token`, and optionally `refresh_token` and `expires_in`. Raises: [`DeviceCodeError`]: If authorization is denied, the device code expires, or the server returns an unexpected OAuth error. rrN /oauth/tokenr) grant_typerr'r(r"errorr+z&Device code expired. Please try again. error_codez+Authorization was denied. Please try again.z OAuth error:  - error_descriptionz0Device code expired (timeout). Please try again.)time monotonicr r,rr-_DEVICE_CODE_GRANT_TYPEr.r/ status_coder2r0r1 ValueErrorrr!r4r AUTHORIZATION_PENDING SLOW_DOWN EXPIRED_TOKENr ACCESS_DENIEDsleep)r:r9rdeadliner)r5r?s rpoll_device_tokenrPTs&:&H~~+l";;H .. X % "}))%%&l3"9#.}#=!*!F!F "99*H##c)}}  %.55((7#9^99!-" -^--MH1^11)@^MiMi2^11)ER`RnRn)'wc$((;NPR2S1TUbg 8[ .. X %^ LYgYuYu vv=,   sA3GG87G8c  tjtjdt|tj dtj }t|}d|vrtt|S|jd}td|xs |jd|jd d | #tj$r}td||d}~wwxYw) aExchange a refresh token for a new access token. Returns: `OAuthTokenResponse`: the full token response: `access_token`, and optionally a rotated `refresh_token` and `expires_in`. Raises: [`DeviceCodeError`]: If the server rejects the refresh (`error_code="invalid_grant"` when the refresh token is expired or revoked) or returns an unexpected response. r<)r=r r'r(z Failed to refresh access token: Nr"r?rBrCrDr@)r r,rr-_REFRESH_TOKEN_GRANT_TYPEr.r/r0r1r_parse_token_responserr!r4rH)r r5r6r)r?s rrefresh_access_tokenrTs M=%%!!", /7!.&BB55&   ! *D&-- HHW E  *5+HH4H4H*ITXXVikmMnLop  ??M @DE1LMsAB44CCCr5c  |jS#t$r?}tdtjd|j d|j dd|d}~wwxYw)NzFailed to parse response from z/oauth/token (status z): r>)r2rIrrr-rHtext)r5r6s rrSrSsm}} ,Y-?-?,@A++,C ds0C/D F  s A:AA)__doc__rEcollections.abcrtypingrrr0rDrerrorsrr _httpr r rGrRrr!r8rPrrTResponsedictrSrrrr^s  $" 43I+Y%&^&:MQDwDw08T0BT0IDwDwN  0B FENNtr