tPjt pddlZddlZddlmZmZddlZddlmZddlm Z m Z ddl m Z m Z mZGddZy)N)Finalcast)verbose_proxy_logger)get_async_httpx_clienthttpxSpecialProvider)CommonProxyErrorsLitellmUserRolesUserAPIKeyAuthc eZdZdZedededzdedzdefdZedededzdedzdee eefe eefffd Z edede eeffd Z ed e d ed ededeedzedzedzff dZ edede fdZy) Oauth2Handlerz* Handles OAuth2 token validation. token_info_endpointoauth_client_idNoauth_client_secretreturnc>d|jvxr |duxr|duS)am Determine if this is an introspection endpoint (requires POST) or token info endpoint (uses GET). Args: token_info_endpoint: The OAuth2 endpoint URL oauth_client_id: OAuth2 client ID oauth_client_secret: OAuth2 client secret Returns: bool: True if this is an introspection endpoint introspectN)lowerr rrs d/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/auth/oauth2_check.py_is_introspection_endpointz(Oauth2Handler._is_introspection_endpoints5$ /557 7 0t+ 0#4/ tokencddi}d|i}|rD|rBtj|d|jj}d||d<||fS|r||d<||fS)aP Prepare headers and data for OAuth2 introspection endpoint (RFC 7662). Args: token: The OAuth2 token to validate oauth_client_id: OAuth2 client ID oauth_client_secret: OAuth2 client secret Returns: Tuple of (headers, data) for the introspection request Content-Typez!application/x-www-form-urlencodedr:zBasic Authorization client_id)base64 b64encodeencodedecode)rrrheadersdata credentialss r_prepare_introspection_requestz,Oauth2Handler._prepare_introspection_request+s")*MN& 2!'!1!1_4EQGZF[2\2c2c2e!f!m!m!oK)/ }'=GO $ }  /D }rcd|ddS)z Prepare headers for generic token info endpoint. Args: token: The OAuth2 token to validate Returns: Dict of headers for the token info request zBearer zapplication/json)rrrs r_prepare_token_info_requestz)Oauth2Handler._prepare_token_info_requestJs$+5'!2DVWWr response_datauser_id_field_nameuser_role_field_nameuser_team_id_field_namecr|j|}|j|}|j|}|||fS)a Extract user information from OAuth2 response. Args: response_data: The response data from OAuth2 endpoint user_id_field_name: Field name for user ID user_role_field_name: Field name for user role user_team_id_field_name: Field name for team ID Returns: Tuple of (user_id, user_role, user_team_id) )get)r*r+r,r-user_id user_team_id user_roles r_extract_user_infoz Oauth2Handler._extract_user_infoWsD&'**+=>+//0GH (,,-AB  <//rc XKddlm}|dur&tdtjj zt jd|dutjd}tjjdd }tjjd d }tjjd d }tjjd}tjjd}|s tdttj}tj!|||} | rMt jdtj#|||\} } |j%|| | d{} nFt jdtj'|} |j|| d{} | j)| j+} t jd|| | r| jdds tdtj-| |||\} }}t/||| t1t2|S77#t4j6$r}td|d}~wt8$r}td|d}~wwxYww) aB Makes a request to the token introspection endpoint to validate the OAuth2 token. This function implements OAuth2 token introspection according to RFC 7662. It supports both generic token info endpoints (GET) and OAuth2 introspection endpoints (POST). Args: token (str): The OAuth2 token to validate. Returns: UserAPIKeyAuth: If the token is valid, containing user information. Raises: ValueError: If the token is invalid, the request fails, or the token info endpoint is not set. r) premium_userTz;Oauth2 token validation is only available for premium usersz*Oauth2 token validation for token=[set=%s]NOAUTH_TOKEN_INFO_ENDPOINTOAUTH_USER_ID_FIELD_NAMEsubOAUTH_USER_ROLE_FIELD_NAMEroleOAUTH_USER_TEAM_ID_FIELD_NAMEteam_idOAUTH_CLIENT_IDOAUTH_CLIENT_SECRETz9OAUTH_TOKEN_INFO_ENDPOINT environment variable is not set) llm_providerrz*Using OAuth2 introspection endpoint (POST))rrr)r"r#z'Using generic token info endpoint (GET)r()r"z?Oauth2 token validation for token=%s, response from endpoint=%sactivezToken is not active)r*r+r,r-)api_keyr<r0r2z#Oauth 2.0 Token validation failed: z+An error occurred during token validation: )litellm.proxy.proxy_serverr5 ValueErrorrnot_premium_uservaluerdebugosgetenvenvironr/rr Oauth2Checkr rr%postr)raise_for_statusjsonr3r rr httpxHTTPStatusError Exception)rr5r r+r,r-rrclientis_introspection_endpointr"r#responser0r2r1es rcheck_oauth2_tokenz Oauth2Handler.check_oauth2_tokenps" < t #MPaPrPrPxPxx  ""#OQV^bQbc&(YY/J%K$&JJNN3Mu$U&(jjnn5QSY&Z)+8WYb)c"$0A!B%'ZZ^^4I%J"XY Y.A I'I#AI'I%BI'"J*#I'%I''J':J J'J""J''J*)__name__ __module__ __qualname____doc__ staticmethodstrboolrtupledictr%r)r3r rUr'rrr r sS   t !4Z     ,t!4Z tCH~tCH~- . < X3 X4S> X X000"0"% 0 sTz3:sTz1 2 000dPdPdPdPrr )rrGtypingrrrNlitellm._loggingr&litellm.llms.custom_httpx.http_handlerrrlitellm.proxy._typesrr r r r'rrrcs0  1UTFPFPr