uPj UdZddlZddlZddlmZddlZddlmZddlm Z ddl m Z ddl m Z mZmZddlmZdd lmZd Zeed <d Zeed <dZeed<e Zeed<Gdde ZdedzfdZdefdZdefdZde fdZ d!dedzdedzdedzdefdZ d!dedzdedzdedzdefdZ dededede!ee"ffdZ#dededede!ee"ffdZ$dejJde!ee"ffd Z&y)"z GigaChat OAuth Authenticator Handles OAuth 2.0 token management for GigaChat API. Based on official GigaChat SDK authentication flow. N)Final)verbose_logger) InMemoryCache)BaseLLMException) HTTPHandler_get_httpx_clientget_async_httpx_clientget_secret_str) LlmProvidersz1https://ngw.devices.sberbank.ru:9443/api/v2/oauthGIGACHAT_AUTH_URLGIGACHAT_API_PERSGIGACHAT_SCOPEi`TOKEN_EXPIRY_BUFFER_MS _token_cacheceZdZdZy)GigaChatAuthErrorzGigaChat authentication error.N)__name__ __module__ __qualname____doc__h/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/llms/gigachat/authenticator.pyrr&s(rrreturnc2tdxs tdS)z*Get GigaChat credentials from environment.GIGACHAT_CREDENTIALSGIGACHAT_API_KEYr rrr_get_credentialsr*s 0 1 W^DV5WWrc(tdxstS)z6Get GigaChat auth URL from environment or use default.r )r r rrr _get_auth_urlr!/s - . C2CCrc(tdxstS)z3Get GigaChat scope from environment or use default.r)r rrrr _get_scoper#4s * + =~=rctddiS)z7Get cached httpx client with SSL verification disabled. ssl_verifyF)params)rrrr_get_http_clientr'9s \5$9 ::r credentialsscopeauth_urlc|xs t}|s tdd|xs t}|xs t}d|dd}tj |}|r=|\}}t j dz|tz krtjd|St|||\}}td |tz t j dzz dz }|d kDrtj|||f| |S) ae Get valid access token, using cache if available. Args: credentials: Base64-encoded credentials (client_id:client_secret) scope: API scope (GIGACHAT_API_PERS, GIGACHAT_API_CORP, etc.) auth_url: OAuth endpoint URL Returns: Access token string Raises: GigaChatAuthError: If authentication fails eGigaChat credentials not provided. Set GIGACHAT_CREDENTIALS or GIGACHAT_API_KEY environment variable. status_codemessagegigachat_token:N"Using cached GigaChat access tokenrttl) rrr#r!r get_cachetimerrdebug_request_token_syncmax set_cacher(r)r* cache_keycachedtoken expires_at ttl_secondss rget_access_tokenrC>s&3!1!3K {   !Z\E*=?H)Sb)9(:;I **95F "z 99;  -C C C  !E FL,KIE:Q.D!Dtyy{UYGY!Y]a abKQy5**=;O LrcK|xs t}|s tdd|xs t}|xs t}d|dd}tj |}|r=|\}}t j dz|tz krtjd|St|||d{\}}td |tz t j dzz dz }|d kDrtj|||f| |S7Vw) z"Async version of get_access_token.r,r-r.r1Nr2r3r4rr5) rrr#r!rr7r8rrr9_request_token_asyncr;r<r=s rget_access_token_asyncrFps 3!1!3K {   !Z\E*=?H)Sb)9(:;I **95F "z 99;  -C C C  !E FL3;xPPE:Q.D!Dtyy{UYGY!Y]a abKQy5**=;O LQsB&D(C?)ADcd|ttjdd}d|i}tjd| t }|j |||d}|jt|S#tj$r=}t|jjd|jj d }~wtj$r}td d | d }~wwxYw) z Request new access token from GigaChat OAuth endpoint (sync). Returns: Tuple of (access_token, expires_at_ms) Basic !application/x-www-form-urlencoded AuthorizationRqUIDz Content-Typer)(Requesting GigaChat access token from %sheadersdatatimeout GigaChat authentication failed: r.N(GigaChat authentication request failed: )struuiduuid4rr9r'postraise_for_status_parse_token_responsehttpxHTTPStatusErrorrresponser/text RequestErrorr(r)r*rPrQclientr^es rr:r:s"+/TZZ\";G E"DCXN (* ++hdTV+W!!#$X..    ..6qzz6GH      >qcB   s$9A::C0 8CC0C++C0c(Kd|ttjdd}d|i}tjd| t t jddi}|j|||d d {}|jt|S7#tj$r=}t|jjd |jj  d }~wtj"$r}tdd| d }~wwxYww)z%Async version of _request_token_sync.rHrIrJr)rMr%F) llm_providerr&rNrONrSr.rTrU)rVrWrXrr9r r GIGACHATrYrZr[r\r]rr^r/r_r`ras rrErEs"+/TZZ\";G E"DCXN .%.. %( !' HgDZ\ ]]!!#$X..^    ..6qzz6GH      >qcB   sG?D5B7B8BDBD,8C$$D:D  DDr^c>|j}|jdxs|jd}|jdxs|jd}|stdd|t|tr t |}t jd||fS) zParse OAuth token response.tok access_tokenexprArTzInvalid token response: r.z+GigaChat access token obtained successfully)jsongetr isinstancerVintrr9)r^rQrirAs rr[r[s--/D((5/ETXXn-EL%:DHH\$:J .tf5  *c"_ FG  ##r)NNN)'rr8rWtypingrr\litellm._loggingrlitellm.caching.cachingr)litellm.llms.base_llm.chat.transformationr&litellm.llms.custom_httpx.http_handlerrrr litellm.secret_managers.mainr litellm.types.utilsr r __annotations__rrrrrVrr!r#r'rCrFtuplernr:rEResponser[rrrrys  +1F 8,O5N,+!&%$o e%)()X#*X DsD >C> ;+; #/t/ :/Dj/ /f#!t! :!Dj! !H" " " "  38_ " J         38_  F$ENN$uS#X$r