+ PV-jbJaR$t.0tRt^RIt^RIt^RIt^RIt^RIt^RIHt^RI H t H t H t ^RI Ht^RIHt^RIHt^RIHt^RIHtHt^R IHt!R R ] R R 7tR]P6R]P6R]P8R]P8R]P:R]P:R]P:R]P:R]P<R]P<R]P<R]P</ t]^k]P@!]PBR%8dRMR4t"R&t#]^k]$!]%!]PM444t']^k](!0R'm4t)]^kRRlt*RRlt+R R!lt,!R"R#4t-R#)(av Digest authentication middleware for aiohttp client. This middleware implements HTTP Digest Authentication according to RFC 7616, providing a more secure alternative to Basic Authentication. It supports all standard hash algorithms including MD5, SHA, SHA-256, SHA-512 and their session variants, as well as both 'auth' and 'auth-int' quality of protection (qop) options. N)Callable)FinalLiteral TypedDict)URL)hdrs) ClientError)ClientHandlerType) ClientRequestClientResponse)Payloadc,a]tRt^toV3RltRtVtR#)DigestAuthChallengecn<V^8dQh/S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&#)realmnonceqop algorithmopaquedomainstalestr)format __classdict__s"v/Volumes/fast/ai/experiments/ui-tars-smoke/.venv/lib/python3.14/site-packages/aiohttp/client_middleware_digest_auth.py __annotate__ DigestAuthChallenge.__annotate__sU J J HN  K  K  JN)__name__ __module__ __qualname____firstlineno____annotate_func____static_attributes____classdictcell__rs@rrrsrrF)totalMD5zMD5-SESSSHAzSHA-SESSSHA256z SHA256-SESSzSHA-256z SHA-256-SESSSHA512z SHA512-SESSzSHA-512z SHA-512-SESSz:(?:^|\s|,\s*)(\w+)\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^\s,]+))z>(?:^|\s|,\s*)((?>\w+))\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^\s,]+))c0V^8dQhR\R\/#rvaluereturnr)rs"rrrls%%%%rc&VPRR4#)z,Escape double quotes for HTTP header values."\"replacer0s&r escape_quotesr8ls ==e $$rc0V^8dQhR\R\/#r/r)rs"rrrqs%%3%3%rc&VPRR4#)z-Unescape double quotes in HTTP header values.r4r3r5r7s&runescape_quotesr;qs == $$rcRV^8dQhR\R\\\3,/#)rheaderr1)rdict)rs"rrrvs"stCH~rc \PV4UUUu/uF5wrpVP4;p'gK YB'd \V4MTbK7 uppp#uupppi)aI Parse key-value pairs from WWW-Authenticate or similar HTTP headers. This function handles the complex format of WWW-Authenticate header values, supporting both quoted and unquoted values, proper handling of commas in quoted values, and whitespace variations per RFC 7616. Examples of supported formats: - key1="value1", key2=value2 - key1 = "value1" , key2="value, with, commas" - key1=value1,key2="value2" - realm="example.com", nonce="12345", qop="auth" Args: header: The header value string to parse Returns: Dictionary mapping parameter names to their values )_HEADER_PAIRS_PATTERNfindallstripr;)r=key quoted_val unquoted_val stripped_keys& rparse_header_pairsrGvs\,.C-J-J6-R -R )C\IIK 'L ' R Zoj1\Q-R  s AAca]tRt^toRtRV3RlRlltV3RlRltV3RlRltV3RlR ltV3R lR lt R t Vt R #)DigestAuthMiddlewarea HTTP digest authentication middleware for aiohttp client. This middleware intercepts 401 Unauthorized responses containing a Digest authentication challenge, calculates the appropriate digest credentials, and automatically retries the request with the proper Authorization header. Features: - Handles all aspects of Digest authentication handshake automatically - Supports all standard hash algorithms: - MD5, MD5-SESS - SHA, SHA-SESS - SHA256, SHA256-SESS, SHA-256, SHA-256-SESS - SHA512, SHA512-SESS, SHA-512, SHA-512-SESS - Supports 'auth' and 'auth-int' quality of protection modes - Properly handles quoted strings and parameter parsing - Includes replay attack protection with client nonce count tracking - Supports preemptive authentication per RFC 7616 Section 3.6 Origin scoping: The credentials are scoped to the origin of the first request the middleware handles. A request to a different origin is passed through untouched, so it never receives a digest response computed from those credentials, unless that origin falls within a protection space the anchor origin advertised through the RFC 7616 ``domain`` directive. Make the first request through the middleware against the intended origin, as the anchor is pinned to it and not reset for the life of the instance. Standards compliance: - RFC 7616: HTTP Digest Access Authentication (primary reference) - RFC 2617: HTTP Authentication (deprecated by RFC 7616) - RFC 1945: Section 11.1 (username restrictions) Implementation notes: The core digest calculation is inspired by the implementation in https://github.com/requests/requests/blob/v2.18.4/requests/auth.py with added support for modern digest auth features and error handling. c0<V^8dQhRS[RS[RS[RR/#)rloginpassword preemptiver1N)rbool)rrs"rr!DigestAuthMiddleware.__annotate__s3(((( (  (rcVf \R4hVf \R4hRV9d \R4hWnVPR4VnVPR4VnRVn^Vn/VnW0n.Vn RVn R#)Nz"None is not allowed as login valuez%None is not allowed as password value:z8A ":" is not allowed in username (RFC 1945#section-11.1)utf-8r) ValueError _login_strencode _login_bytes_password_bytes_last_nonce_bytes _nonce_count _challenge _preemptive_protection_space_origin)selfrKrLrMs&&&&r__init__DigestAuthMiddleware.__init__s =AB B  DE E %<WX X&+*/,,w*?-5__W-E!$/1!+,.#' rcP<V^8dQhRS[RS[RS[S[R,,RS[/#)rmethodurlbodyrr1)rrr r)rrs"rrrOs9c,c,Cc,cc,73<9Oc,TWc,rc a#a$"VPpRV9d \R4hRV9d \R4hVR,pVR,pV'g \R4hVPRR4pVPRR 4pVP4p VPR R4p VP R 4p VP R 4p \ V4P p RpR pV'dR R0PVPR4Uu0uF+pVP4'gKVP4kK- up4pV'g\RV 24hRV9dRMR pVP R 4pV \9d%\RV RRP\4 24h\V ,o$RV$3Rllo#RV#3RllpRPVPWP34pVP4 RV 2P 4pVR8XdM\V\ 4'dVP#4GRjxL pMTpS#!V4pRPVV34pS#!V4pS#!V4pWP$8XdV;P&^, unM^VnWnVP&R pVP R 4p\(P*!R P\-VP&4P R 4V \.P0!4P R 4\2P4!^4.44P74R,pVP R 4pV P4P9R4'dS#!RPVV V344pV'd!RPV VVVV34pV!VV4pMV!VRPV V344pR\;VP<4R\;V4R\;V4RV R VP?4RV/pV 'd\;V 4VR &V'dVVR&VVR!&VVR"&.p VPA4F@wp!p"V!\B9dV PEV! R#V" R$24K*V PEV! R%V" 24KB R&RPV 4 2#uupiEL5i)'a} Build digest authorization header for the current challenge. Args: method: The HTTP method (GET, POST, etc.) url: The request URL body: The request body (used for qop=auth-int) Returns: A fully formatted Digest authorization header string Raises: ClientError: If the challenge is missing required parameters or contains unsupported values rz:Malformed Digest auth challenge: Missing 'realm' parameterrz:Malformed Digest auth challenge: Missing 'nonce' parameterzBSecurity issue: Digest auth challenge contains empty 'nonce' valuerrr*rrRrauthzauth-int,zEDigest auth error: Unsupported Quality of Protection (qop) value(s): z/Digest auth error: Unsupported hash algorithm: z. Supported algorithms: z, c0V^8dQhR\R\/#)rxr1bytes)rs"rr2DigestAuthMiddleware._encode..__annotate__ s 3 3 35 3rcL<S!V4P4P4#)z.H s1:'')002 2rc<V^8dQhR\R\R\/#)rsdr1rk)rs"rrrm$s! ( (% (E (e (rc4<S!RPW344#)zDRFC 7616 Section 3: KD(secret, data) = H(concat(secret, ":", data)).:)join)rtrurqs&&rKD(DigestAuthMiddleware._encode..KD$sTYYv&' 'rrwrQN08x:NNz-SESSusernameuriresponsenccnoncez="r3=zDigest )#rZrgetupperrUr raw_path_qs intersectionsplitrBDigestFunctionsrxSUPPORTED_ALGORITHMSrVrW isinstancer as_bytesrXrYhashlibsha1rtimectimeosurandomroendswithr8rTdecodeitemsQUOTED_AUTH_FIELDSappend)%r^rbrcrd challengerrqop_rawalgorithm_originalrr nonce_bytes realm_bytespathr qop_bytesq valid_qopsryA1A2 entity_bytes entity_hashHA1HA2ncvalue ncvalue_bytesr cnonce_bytesnoncebitresponse_digest header_fieldspairsfieldr0rqrps%&&&& @@r_encodeDigestAuthMiddleware._encodes"OO ) #L  ) #L  '"'"T --r*&]];>&,,. x,ll7+ ll7+ 3x##  *-::$+MM#$6D$6q!'')$6DJ![\c[de!+j 8*fC 7+I O +A)M))-3G)H(IK )3 3 3 ( ( YY));8L8LM N q ' . . 0 * $((%)]]_4 # L/KB ,-Bee 00 0    "  !D !,&&s+w/  HH))*11':JJL''0JJqM     )+c }}W-  ??  % %g . .DIIsK>?@C yym\9cJH!h/O diic0B&CDO  doo6 ]5) ]5) 4 ..0 +  &3F&;M( # #&M% ")M$ &,M( #)//1LE5** wbq12 waw/0 2 5)*++SE< 5sAA SB4SR> R>4SC2S5S6E5S,BSA?Sc&<V^8dQhRS[RS[/#)rrcr1)rrN)rrs"rrrOzsrc \V4pVPF`pVPV4'gK\V4\V48XgVR,R8XdR#V\V4,R8XgK_R# R#)z Check if the given URL is within the current protection space. According to RFC 7616, a URI is in the protection space if any URI in the protection space is a prefix of it (after both have been made absolute). /TF)rr\ startswithlen)r^rc request_str space_strs&& r_in_protection_space)DigestAuthMiddleware._in_protection_spacezsi#h //I)))44;3y>1Yr]c5I3y>*c10rc&<V^8dQhRS[RS[/#)rrr1)r rN)rrs"rrrOs9%9%n9%9%rc  VPR8wdR#VPPRR4pV'gR#VPR4wr4pV'gR#VP 4R8wdR#V'gR#\ V4;p'gR#/Vn\F(pVPV4;pfKWP V&K* VPP4p VP PR4;p 'd.Vn V P4Fp V PR4p V PR 4'd?VPP\V P!\#V 4444KiVPP\\#V 444K M\V 4.Vn \%VP 4#) zr Takes the given response and tries digest-auth, if needed. Returns true if the original request must be resent. iFzwww-authenticaterf digestrr3r)statusheadersr partitionlowerrGrZCHALLENGE_FIELDSrcoriginr\rrBrrrrxrrN) r^r auth_headerrbsepr header_pairsrr0rrr~s && r _authenticate"DigestAuthMiddleware._authenticatesu ??c !&&**+=rB *44S9W <<>X %!37 ;; ;%E%))%00=).&& $$&__((2 26 2%'D "||~iin>>#&&**11#fkk#c(6K2LM**11#c#h-@&'*&k]D "DOO$$rc,<V^8dQhRS[RS[RS[/#)rrequesthandlerr1)r r r )rrs"rrrOs%%%$%/@% %rc "VPP4pVPfW0nMAW0P8wd2VPVP4'gV!V4GRjxL #Rp\ ^4FpV^8gFVP 'dVP 'dvVPVP4'dUVPVPVPVP4GRjxL VP\P&V!V4GRjxL pVPV4'dKM VfQhV#LLVL-5i)zRun the digest auth middleware.N)rcrr]rranger[rZrrbrdrr AUTHORIZATIONr)r^rrrr retry_counts&&& r__call__DigestAuthMiddleware.__call__s##% << !L || #D,E,Egkk,R,R )) ) 8KQ   OOO--gkk::<@LLNNGKK=7 2 23 %W--H%%h//%$*###3*7 .sTA E# E.E/,EE. E4EE*E.E/E EEE) rZrXrVrTrYr]rWr[r\N)T) r!r"r#r$__doc__r_rrrrr&r'r(s@rrIrIsA%N((8c,c,J(9%9%v%%rrIcV^8dQh/^\9d)\\\\.R3,3,;R&^\9d)\ \ \R,R3,,;R&^\9d"\ \ \R3,,;R&^\9d \ \\,,;R&#)rz hashlib._Hashr.rrrrrrrrrr) __conditional_annotations__r>rrrlrtupler frozenset)rs"rrrsH  c8UG_$<==> I^  % QRTWW _~UTeE#s(O,TLE)C.)Mr) r>r~rrrrrr})/rrrrresysrcollections.abcrtypingrrryarlrrfrclient_exceptionsrclient_middlewaresr client_reqrepr r payloadr rmd5rsha256sha512rcompile version_infor@rrsortedkeysrrrr8r;rGrIr)rs@rrsE $,,*18)5 7;;  7<<  gnn7>> w~~GNN gnn7>> w~~GNN B "  '!B J<   05VO