File: //var/opt/nydus/ops/mysql/connector/plugins/__pycache__/caching_sha2_password.cpython-39.pyc
a
�,�h� � @ sx d Z ddlZddlmZ ddlmZmZmZ ddlm Z ddl
m
Z
dd l m Z er`dd
l
mZ d ZG d d � d e �ZdS )
z,Caching SHA2 Password Authentication Plugin.� N)�sha256)�
TYPE_CHECKING�Any�Optional� )�InterfaceError)�logger� )�MySQLAuthPlugin)� MySQLSocket�"MySQLCachingSHA2PasswordAuthPluginc @ s� e Zd ZU dZdZeed< eed�dd�Ze e
d�dd ��Z e e d�d
d ��Z
eeee d �d
d�Zdeeed�dd�Zdeeed�dd�ZdS )r z�Class implementing the MySQL caching_sha2_password authentication plugin
Note that encrypting using RSA is not supported since the Python
Standard Library does not provide this OpenSSL functionality.
� �perform_full_authentication)� auth_data�returnc C s| |s t d��| jsdS t| j�� ��� }t� }|�t|��� � |�|� |�� }dd� t||�D �}tjdg|�R � }|S )z�Return a scramble of the password using a Nonce sent by the
server.
The scramble is of the form:
XOR(SHA2(password), SHA2(SHA2(SHA2(password)), Nonce))
z"Missing authentication data (seed)� c S s g | ]\}}||A �qS � r )�.0�h1�h2r r �`/opt/nydus/tmp/pip-target-wkfpz8uv/lib64/python/mysql/connector/plugins/caching_sha2_password.py�
<listcomp>I r z@MySQLCachingSHA2PasswordAuthPlugin._scramble.<locals>.<listcomp>Z32B) r � _passwordr �encode�digest�update�zip�struct�pack)�selfr Zhash1Zhash2Z hash2_digestZxoredZhash3r r r � _scramble7 s
z,MySQLCachingSHA2PasswordAuthPlugin._scramble)r c C s dS )zPlugin official name.Zcaching_sha2_passwordr �r r r r �nameM s z'MySQLCachingSHA2PasswordAuthPlugin.namec C s dS )z'Signals whether or not SSL is required.Fr r! r r r � requires_sslR s z/MySQLCachingSHA2PasswordAuthPlugin.requires_ssl)r �kwargsr c K s> |sdS t |�dkr | �|�S |d | jkr:| j�� d S dS )a� Make the client's authorization response.
Args:
auth_data: Authorization data.
kwargs: Custom configuration to be passed to the auth plugin
when invoked. The parameters defined here will override the ones
defined in the auth plugin itself.
Returns:
packet: Client's authorization response.
Nr r � )�lenr r r r )r r r$ r r r �
auth_responseW s
z0MySQLCachingSHA2PasswordAuthPlugin.auth_responser )�sockr r$ r c K s, | j |fi |��}|r |�|� t|�� �S )aE Handles server's `auth more data` response.
Args:
sock: Pointer to the socket connection.
auth_data: Authentication method data (from a packet representing
an `auth more data` response).
kwargs: Custom configuration to be passed to the auth plugin
when invoked. The parameters defined here will override the ones
defined in the auth plugin itself.
Returns:
packet: Last server's response after back-and-forth
communication.
)r' �send�bytes�recv)r r( r r$ �responser r r �auth_more_responsem s
z5MySQLCachingSHA2PasswordAuthPlugin.auth_more_responsec K sZ | j |fi |��}|du r"td��t�d|t|�� |�|� t|�� �}t�d|� |S )aS Handles server's `auth switch request` response.
Args:
sock: Pointer to the socket connection.
auth_data: Plugin provided data (extracted from a packet
representing an `auth switch request` response).
kwargs: Custom configuration to be passed to the auth plugin
when invoked. The parameters defined here will override the ones
defined in the auth plugin itself.
Returns:
packet: Last server's response after back-and-forth
communication.
NzGot a NULL auth responsez# request: %s size: %sz # server response packet: %s)r' r r �debugr& r) r* r+ )r r( r r$ r, Zpktr r r �auth_switch_response� s
z7MySQLCachingSHA2PasswordAuthPlugin.auth_switch_responseN)�__name__�
__module__� __qualname__�__doc__r �int�__annotations__r* r �property�strr" �boolr# r r r' r- r/ r r r r r . s
� �)r3 r �hashlibr �typingr r r �errorsr r � r
�networkr ZAUTHENTICATION_PLUGIN_CLASSr r r r r �<module> s