⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.166
Server IP:
97.74.87.16
Server:
Linux 16.87.74.97.host.secureserver.net 5.14.0-503.38.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 18 08:52:10 EDT 2025 x86_64
Server Software:
Apache
PHP Version:
8.2.28
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
var
/
opt
/
nydus
/
ops
/
mysql
/
connector
/
__pycache__
/
View File Name :
authentication.cpython-39.pyc
a ��Rh#7 � @ s� d Z ddlmZ ddlZddlmZmZmZmZ ddl m Z m Z m Z ddl m Z ddlmZmZ dd lmZmZmZmZmZmZmZmZ dd lmZ er�dd l m Z G d d � d �Z dS )z5Implementing support for MySQL Authentication Plugins� )� annotationsN)� TYPE_CHECKING�Any�Dict�Optional� )�InterfaceError�NotSupportedError� get_exception)�logger)�MySQLAuthPlugin�get_auth_plugin)�AUTH_SWITCH_STATUS�DEFAULT_CHARSET_ID�DEFAULT_MAX_ALLOWED_PACKET� ERR_STATUS�EXCHANGE_FURTHER_STATUS� MFA_STATUS� OK_STATUS� MySQLProtocol)� HandShakeType)� MySQLSocketc @ s� e Zd ZdZdd�dd�Zedd�dd��Zed d�d d ��Zed e fd ddddddd�dd�Z d)dddddd�dd�Z d ddd �d d �Z d ddd �d d �Z d!d!d!d!ded e dddd"f d d#ddddddddddd$dd%dd&�d'd(�ZdS )*�MySQLAuthenticatorz$Implements the authentication phase.�None)�returnc C s( d| _ i | _i | _d| _d| _d| _dS )z Constructor.� FN)� _username� _passwords�_plugin_config� _ssl_enabled�_auth_strategy�_auth_plugin_class��self� r$ �Q/opt/nydus/tmp/pip-target-o2llkf2b/lib64/python/mysql/connector/authentication.py�__init__: s zMySQLAuthenticator.__init__�boolc C s | j S )z&Signals whether or not SSL is enabled.)r r" r$ r$ r% � ssl_enabledC s z MySQLAuthenticator.ssl_enabledzDict[str, Any]c C s | j S )a Custom arguments that are being provided to the authentication plugin when called. The parameters defined here will override the ones defined in the auth plugin itself. The plugin config is a read-only property - the plugin configuration provided when invoking `authenticate()` is recorded and can be queried by accessing this property. Returns: dict: The latest plugin configuration provided when invoking `authenticate()`. )r r" r$ r$ r% � plugin_configH s z MySQLAuthenticator.plugin_configr r �strzOptional[Dict[str, Any]]�int�bytes)�sock�host� ssl_options�charset� client_flags�max_allowed_packetr c C s� |du r i }t j|||d�}|�|� t�d� |j|�d�|�d�|�d�|�dd�|�d d�|�d �|�d �d �}t�d � |�||� t�d� d| _|S )a� Sets up an SSL communication channel. Args: sock: Pointer to the socket connection. host: Server host name. ssl_options: SSL and TLS connection options (see `network.MySQLSocket.build_ssl_context`). charset: Client charset (see [1]), only the lower 8-bits. client_flags: Integer representing client capabilities flags. max_allowed_packet: Maximum packet size. Returns: ssl_request_payload: Payload used to carry out SSL authentication. References: [1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set N)r0 r1 r2 zBuilding SSL context�ca�cert�keyZ verify_certFZverify_identity� tls_versionsZtls_ciphersuites)Zssl_caZssl_certZssl_keyZssl_verify_certZssl_verify_identityr6 Ztls_cipher_suiteszSwitching to SSLzSSL has been enabledT) r Z make_auth_ssl�sendr �debugZbuild_ssl_context�getZ switch_to_sslr ) r# r- r. r/ r0 r1 r2 Zssl_request_payload� ssl_contextr$ r$ r% � setup_sslY s. � � z MySQLAuthenticator.setup_sslNr z Optional[str])�new_strategy_name�strategy_class�username�password_factorr c C sP |du r| j }|du r | j}t�d|� t||d�|| j�|d�| jd�| _dS )a� Switches the authorization plugin. Args: new_strategy_name: New authorization plugin name to switch to. strategy_class: New authorization plugin class to switch to (has higher precedence than the authorization plugin name). username: Username to be used - if not defined, the username provided when `authentication()` was invoked is used. password_factor: Up to three levels of authentication (MFA) are allowed, hence you can choose the password corresponding to the 1st, 2nd, or 3rd factor - 1st is the default. NzSwitching to strategy %s)Z plugin_name�auth_plugin_classr )r( ) r r! r r8 r r r9 r( r )r# r< r= r> r? r$ r$ r% �_switch_auth_strategy� s � �z(MySQLAuthenticator._switch_auth_strategyzOptional[bytes])r- �pktr c C s� d}|d t kr�|| jvr"td��t�|�\}}| j||d� t�d|| jj � | jj ||fi | j ��}|d t kr�t� |�}| jj||fi | j ��}|d tkr�t�d� |S |d tkr�t|��|d7 }qt�d� d S ) a Handles MFA (Multi-Factor Authentication) response. Up to three levels of authentication (MFA) are allowed. Args: sock: Pointer to the socket connection. pkt: MFA response. Returns: ok_packet: If last server's response is an OK packet. None: If last server's response isn't an OK packet and no ERROR was raised. Raises: InterfaceError: If got an invalid N factor. errors.ErrorTypes: If got an ERROR response. � � z5Failed Multi Factor Authentication (invalid N factor))r? zMFA %i factor %szMFA completed succesfullyr z"MFA terminated with a no ok packetN)r r r r Zparse_auth_next_factorrA r r8 r �name�auth_switch_responser r �parse_auth_more_data�auth_more_responser r r �warning)r# r- rB Zn_factorr< � auth_datar$ r$ r% � _mfa_n_factor� s: ��� �� z MySQLAuthenticator._mfa_n_factorc C s |d t kr t|�dkr td��|d t krft�d� t�|�\}}| �|� | jj ||fi | j ��}|d t kr�t�d� t� |�}| jj ||fi | j ��}|d tkr�t�d| jj� |S |d tkr�t�d� t�d| jj� | �||�S |d tk�rt|��d S ) a� Handles server's response. Args: sock: Pointer to the socket connection. pkt: Server's response after completing the `HandShakeResponse`. Returns: ok_packet: If last server's response is an OK packet. None: If last server's response isn't an OK packet and no ERROR was raised. Raises: errors.ErrorTypes: If got an ERROR response. NotSupportedError: If got Authentication with old (insecure) passwords. rD � z�Authentication with old (insecure) passwords is not supported. For more information, lookup Password Hashing in the latest MySQL manualz+Server's response is an auth switch requestzExchanging further packetsz%s completed succesfullyz$Starting multi-factor authenticationzMFA 1 factor %sN)r �lenr r r8 r Zparse_auth_switch_requestrA r rF r r rG rH r rE r rK r r )r# r- rB r< rJ r$ r$ r% �_handle_server_response� s> � �� �� z*MySQLAuthenticator._handle_server_responser Fr zOptional[Dict[str, str]]r )r- � handshaker> � password1� password2� password3�databaser0 r1 r2 � auth_pluginr@ � conn_attrs�is_change_user_requestr) r c K s� || _ |||d�| _t�|�| _| | _tj|||||| | | | | || j| j d� \}| _ |r\dnd}|j |g|�R � t |� � �}| �||�}|du r�td�d�|S )a Performs the authentication phase. During re-authentication you must set `is_change_user_request` to True. Args: sock: Pointer to the socket connection. handshake: Initial handshake. username: Account's username. password1: Account's password factor 1. password2: Account's password factor 2. password3: Account's password factor 3. database: Initial database name for the connection. charset: Client charset (see [1]), only the lower 8-bits. client_flags: Integer representing client capabilities flags. max_allowed_packet: Maximum packet size. auth_plugin: Authorization plugin name. auth_plugin_class: Authorization plugin class (has higher precedence than the authorization plugin name). conn_attrs: Connection attributes. is_change_user_request: Whether is a `change user request` operation or not. plugin_config: Custom configuration to be passed to the auth plugin when invoked. The parameters defined here will override the ones defined in the auth plugin itself. Returns: ok_packet: OK packet. Raises: InterfaceError: If OK packet is NULL. References: [1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set )r rC � ) rO r> �passwordrS r0 r1 r2 rT r@ rU rV r( r) )r r )NNNzGot a NULL ok_pkt)r r �copy�deepcopyr r! r Z make_authr( r) r r7 r, �recvrN r )r# r- rO r> rP rQ rR rS r0 r1 r2 rT r@ rU rV r) Zresponse_payloadZ send_argsrB Zok_pktr$ r$ r% � authenticate! s4 5 � z MySQLAuthenticator.authenticate)NNr )�__name__� __module__� __qualname__�__doc__r& �propertyr( r) r r r; rA rK rN r\ r$ r$ r$ r% r 7 s: � < �"6;�r ) r` � __future__r rY �typingr r r r �errorsr r r r Zpluginsr r �protocolr r r r r r r r �typesr �networkr r r$ r$ r$ r% �<module> s (