U
|
Þ=®dHI ã @ s´ U d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
|
Z d dl Z d dl mZ d dlmZ d dlmZ d dlmZ d dlmZ d dlmZ d d
|
lmZ d d lmZ d d l m Z d d l m Z d dl m!Z! d dl"m#Z# d dl$m%Z% ddl&m'Z' ddl(m)Z) ddl(m*Z* ddl(m+Z+ e j,rVd dl-m.Z. d dl-m/Z/ d dl-m0Z0 dZ1dddd d Z2da3d e4d < d d d!d"Z5G d#d$ d$Z6d%d&d'd(d)Z7G d*d+ d+Z8dS ),é )Ú annotationsN)Ú ExitStack)ÚBytesIO)Úchain)Úbasename)Újoin)Úadler32é )Ú_log)ÚNotFound)Ú parse_cookie)Úgen_salt)Ú send_file)ÚRequest)ÚResponseé )ÚConsole)ÚDebugFrameSummary)ÚDebugTraceback)Úrender_console_html)Ú StartResponse)ÚWSGIApplication)ÚWSGIEnvironmenti: Ústr)ÚpinÚreturnc C s$ t | d dd¡¡ ¡ d d
S )Nz added saltúutf-8Úreplaceé )ÚhashlibÚsha1ÚencodeÚ hexdigest)r © r# úNd:\z\workplace\vscode\pyvenv\venv\Lib\site-packages\werkzeug/debug/__init__.pyÚhash_pin) s r% ústr | bytes | NoneÚ _machine_id©r c C s$ t d k r t S dddd} | a t S )Nr& r( c
|
S s¼ d} dD ]T}z&t |d}| ¡ ¡ }W 5 Q R X W n tk
|
rJ Y qY nX |r| |7 } q^qz4t dd }| | ¡ ¡ d¡d 7 } W 5 Q R X W n tk
|
r¦ Y nX | r°| S zTddlm}m} |d d
|
d d d g|d ¡ d }t
|
d|¡}|d k r| d¡W S W n tt fk
|
r Y nX t jdkr¸dd l}zl| |jdd|j|jB ¡H} | | d¡\}
|
} | |jkr|
|
d¡W 5 Q R £ W S |
|
W 5 Q R £ W S Q R X W n tk
|
r¶ Y nX d S )Nó )z/etc/machine-idz /proc/sys/kernel/random/boot_idÚrbz/proc/self/cgroupó /r r )ÚPopenÚPIPEZioregz-cZIOPlatformExpertDevicez-dÚ2)Ústdouts "serial-number" = <([^>]+)r Úwin32z SOFTWARE\Microsoft\CryptographyZ MachineGuidr )ÚopenÚreadlineÚstripÚOSErrorÚ
|
rpartitionÚ
|
subprocessr, r- Ú communicateÚreÚsearchÚgroupÚ ImportErrorÚsysÚplatformÚwinregÚOpenKeyÚHKEY_LOCAL_MACHINEÚKEY_READÚKEY_WOW64_64KEYÚ QueryValueExÚREG_SZr! ) ÚlinuxÚfilenameÚfÚvaluer, r- ÚdumpÚmatchr> ZrkZguidZ guid_typer# r# r$ Ú _generate6 s^
|
( ÿþ
|
|
ü z!get_machine_id.<locals>._generate)r' )rK r# r# r$ Úget_machine_id0 s
|
CrL c @ s. e Zd ZdZddddZdddd d
|
Zd S ) Ú _ConsoleFramez]Helper class so that we can reuse the frame console code for the
|
standalone console.
|
zdict[str, t.Any])Ú namespacec C s t || _d| _d S )Nr )r ÚconsoleÚid)ÚselfrN r# r# r$ Ú__init__ s
|
z_ConsoleFrame.__init__r zt.Any)Úcoder c C s | j |¡S ©N)rO Úeval)rQ rS r# r# r$ rU s z_ConsoleFrame.evalN)Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__rR rU r# r# r# r$ rM } s rM r z%tuple[str, str] | tuple[(None, None)])Úappr c s¶ t j d¡}d}d|dkr dS |dk rJ| dd¡ ¡ rJd|krF|}n|t| dt t| ¡j j
|
}z t ¡ }W n t tfk
|
r d}Y nX tj |¡}||t| dt| jt|d dg}tt ¡ t g}t ¡ }t||D ](} | sèqÞt| trü| d
|
¡} | | ¡ qÞ| d ¡ d | ¡ dd
}
|
dkrV| d¡ t | ¡ dddd
|dkr®dD ]D t dkrdd fddt!dt D ¡} q®qd}||
|
fS )aQ Given an application object this returns a semi-stable 9 digit pin
|
code and a random key. The hope is that this is stable between
|
restarts to not make debugging particularly frustrating. If the pin
|
was forcefully disabled this returns `None`.
|
|
Second item in the resulting tuple is the cookie name for remembering.
|
ZWERKZEUG_DEBUG_PINNÚoff)NNú-Ú rW rV Ú__file__r s
|
cookiesaltZ__wzdé s pinsalté Z09dé )é é é r c 3 s& | ] }||
d ¡V qdS )Ú0N)Úrjust)Ú.0Úx©Z
|
group_sizeÚnumr# r$ Ú <genexpr>Õ s ÿz*get_pin_and_cookie_name.<locals>.<genexpr>)"ÚosÚenvironÚgetr Ú isdecimalÚgetattrÚtÚcastÚobjectÚ __class__rW ÚgetpassÚgetuserr; ÚKeyErrorr< ÚmodulesÚtyperV r ÚuuidÚgetnoderL r r r Ú
|
isinstancer! Úupdater" ÚintÚlenr Úrange) rZ r ÚrvÚmodnameÚusernameÚmodZprobably_public_bitsZ private_bitsÚhÚbitZ cookie_namer# ri r$ Úget_pin_and_cookie_name sT
|
|
|
ü
|
|
|
|
|
|
|
þ
|
r c @ s e Zd ZU dZded< ded< d8d
|
d ddd d d d d d ddZeddddZejdd dddZeddddZ dddd d d Z
|
d dd d!d"d#d$Z d d!d%d&d'Z d dd!d(d)d*Z dd+d,d-d.Zd dd/d0Zd d!d%d1d2Zd!dd3d4Zddd5d d6d7ZdS )9ÚDebuggedApplicationa4 Enables debugging support for a given application::
|
|
from werkzeug.debug import DebuggedApplication
|
from myapp import app
|
app = DebuggedApplication(app, evalex=True)
|
|
The ``evalex`` argument allows evaluating expressions in any frame
|
of a traceback. This works by preserving each frame with its local
|
state. Some state, such as context globals, cannot be restored with
|
the frame by default. When ``evalex`` is enabled,
|
``environ["werkzeug.debug.preserve_context"]`` will be a callable
|
that takes a context manager, and can be called multiple times.
|
Each context manager will be entered before evaluating code in the
|
frame, then exited again, so they can perform setup and cleanup for
|
each call.
|
|
:param app: the WSGI application to run debugged.
|
:param evalex: enable exception evaluation feature (interactive
|
debugging). This requires a non-forking server.
|
:param request_key: The key that points to the request object in this
|
environment. This parameter is ignored in current
|
versions.
|
:param console_path: the URL for a general purpose console.
|
:param console_init_func: the function that is executed before starting
|
the general purpose console. The return value
|
is used as initial namespace.
|
:param show_hidden_frames: by default hidden traceback frames are skipped.
|
You can show them by setting this parameter
|
to `True`.
|
:param pin_security: can be used to disable the pin based security system.
|
:param pin_logging: enables the logging of the pin system.
|
|
.. versionchanged:: 2.2
|
Added the ``werkzeug.debug.preserve_context`` environ key.
|
r Ú_pinÚ _pin_cookieFúwerkzeug.requestú/consoleNTr Úboolz't.Callable[[], dict[str, t.Any]] | NoneÚNone) rZ ÚevalexÚ request_keyÚ console_pathÚconsole_init_funcÚshow_hidden_framesÚ pin_securityÚ pin_loggingr c C s |sd }|| _ || _i | _i | _|| _|| _|| _|| _td| _ d| _
|
|| _ |rt j d¡dkr|rtdd | jd krtdd qtdd | j nd | _d S )
|
Nr_ r ZWERKZEUG_RUN_MAINÚtrueÚwarningz * Debugger is active!z- * Debugger PIN disabled. DEBUGGER UNSECURED!Úinfoz * Debugger PIN: %s)rZ r ÚframesÚframe_contextsr r r r r ÚsecretÚ_failed_pin_authr rl rm rn r
|
r ) rQ rZ r r r r r r r r# r# r$ rR s(
|
|
|
z DebuggedApplication.__init__z
|
str | Noner( c C s& t | ds t| j}|\| _| _| jS )Nr ©Úhasattrr rZ r r ©rQ Z
|
pin_cookier# r# r$ r , s
|
|
zDebuggedApplication.pin)rH r c C s
|
|| _ d S rT )r )rQ rH r# r# r$ r 3 s c C s& t | ds t| j}|\| _| _| jS )zThe name of the pin cookie.r r r r# r# r$ Úpin_cookie_name7 s
|
|
z#DebuggedApplication.pin_cookie_namer r zt.Iterator[bytes])rm Ústart_responser c c s< g }| j r|j|d< d}z,| ||¡}|E dH t|drB| ¡ W nò tk
|
r6 } zÒt|drj| ¡ t|d| j d}|jD ] }|| j t
|
|< || j t
|
|< qt | |¡}|j| j | j|d} t| ddd }
|
z|
|
||E dH W n$ tk
|
r |d
|
d ¡ Y nX |d
|
d | ¡ ¡¡ W 5 d}~X Y nX dS ) z6Run the application and conserve the traceback frames.z werkzeug.debug.preserve_contextNÚcloser )ÚskipZhide)r r Úevalex_trustediô ú text/html)ÚstatusÚmimetypez wsgi.errorszpDebugging middleware caught exception in streamed response at a point where response headers were already sent.
|
r] )r ÚappendrZ r r¢ Ú Exceptionr r Z
|
all_framesr rP r r Úcheck_pin_trustZrender_debugger_htmlr r Úwriter Zrender_traceback_text) rQ rm r¡ ÚcontextsZapp_iterÚeÚtbÚframeÚ
|
is_trustedÚhtmlÚresponser# r# r$ Údebug_application? s<
|
|
|
|
|
ýÿ
|
z%DebuggedApplication.debug_applicationr z!DebugFrameSummary | _ConsoleFramer )ÚrequestÚcommandr¯ r c
|
C sV | j t|g ¡}t 4}|D ]}| |¡ q t| |¡ddW 5 Q R £ S Q R X dS )z Execute a command in a console.r¥ ©r§ N)r rn rP r Ú enter_contextr rU )rQ r´ rµ r¯ r¬ Z
|
exit_stackÚcmr# r# r$ Úexecute_commando s
|
z#DebuggedApplication.execute_command)r´ r c C sh d| j krB| jdkri }n t| ¡ }| d| j¡ t|| j d< t| |j¡}t t
|
| j |dddS )zDisplay a standalone shell.r NrZ )r r¤ r¥ r¶ ) r r ÚdictÚ
|
setdefaultrZ rM r rª rm r r r )rQ r´ Únsr° r# r# r$ Údisplay_console~ s
|
|
þz#DebuggedApplication.display_console)r´ rF r c C sr t dt|}zt t|¡}W n tk
|
r8 t Y S X |dkrHt S tt|d@ }t t
|
||j ||dS dS )z0Return a static resource from the shared folder.ZsharedNl ÿÿ )Z download_nameÚetag) r r ÚpkgutilÚget_dataÚ __package__r4 r r r r r rm )rQ r´ rF ÚpathÚdatar¾ r# r# r$ Ú get_resource s ÿz DebuggedApplication.get_resourcez bool | None)rm r c C s | j dkrdS t| | j¡}|r*d|kr.dS | dd¡\}}z t|}W n tk
|
r` Y dS X |t| j krtdS t ¡ t |k S )a! Checks if the request passed the pin test. This returns `True` if the
|
request is trusted on a pin/cookie basis and returns `False` if not.
|
Additionally if the cookie's stored pin hash is wrong it will return
|
`None` so that appropriate action can be taken.
|
NTú|Fr )
|
r r rn r Úsplitr~ Ú
|
ValueErrorr% ÚtimeÚPIN_TIME)rQ rm ÚvalZts_strZpin_hashÚtsr# r# r$ rª s
|
z#DebuggedApplication.check_pin_trustc C s* t | jdkrdnd¡ | jd7 _d S )Nrb g @g à?r )rÈ Úsleepr ©rQ r# r# r$ Ú_fail_pin_auth´ s z"DebuggedApplication._fail_pin_authc C sð d}d}| |j¡}t t| j¡}d}|dkr<| ¡ d}nT|rFd}nJ| jdkrVd}n:|jd }| ¡
|
dd¡|
|
dd¡krd| _d}n| ¡ t t ||d ¡d
|
d }|rÜ|j| jtt ¡ d t| dd |jd n|rì| | j¡ |S )zAuthenticates with the pin.FNTé
|
r r\ r] r )ÚauthÚ exhaustedzapplication/jsonr¶ rÅ ZStrict)ÚhttponlyÚsamesiteÚsecure)rª rm rq rr r r rÎ r Úargsr3 r r ÚjsonÚdumpsÚ
|
set_cookier r~ rÈ r% Z is_secureZ delete_cookie) rQ r´ rÑ rÐ Útrustr Ú
|
bad_cookieZ entered_pinr r# r# r$ Úpin_auth¸ s@
|
|
þû z DebuggedApplication.pin_authc C s0 | j r(| jdk r(tdd tdd| j tdS )zLog the pin if needed.Nr z= * To enable the debugger you need to enter the security pin:z * Debugger pin code: %sr] )r r r
|
r rÍ r# r# r$ Úlog_pin_requestë s ÿz#DebuggedApplication.log_pin_requestzt.Iterable[bytes]c C s t |}| j}|j d¡dkrè|j d¡}|j d¡}|j d¡}| j |jjdtd¡}|dkrt|rt| ||¡}nr|d kr|| jkr| |¡}nT|d
|
kr®|| jkr®| ¡ }n8| j
|
ræ|d k ræ|d k ræ| j|kræ| |¡ræ| |||¡}n,| j
|
r| j d k r|j| j kr| |¡}|||S ) zDispatch the requests.Z __debugger__ÚyesÚcmdrG ÚsÚfrm)ry ÚresourceZpinauthZprintpinN)r r³ rÕ rn r r~ rÄ r rÛ rÜ r rª r¹ r r r½ ) rQ rm r¡ r´ r² rÞ Úargr r¯ r# r# r$ Ú__call__ô s@
|
ÿþýüûÿþ
|
ý
|
z DebuggedApplication.__call__)Fr r NFTT)rV rW rX rY Ú__annotations__rR Úpropertyr Úsetterr r³ r¹ r½ rÄ rª rÎ rÛ rÜ rã r# r# r# r$ r à s4
|
$ ÷ $03 r )9Ú
|
__future__r ru r rÖ rl r¿ r8 r< rÈ Útypingrq rz Ú
|
contextlibr Úior Ú itertoolsr Úos.pathr r Úzlibr Ú _internalr
|
Ú
|
exceptionsr Úhttpr Úsecurityr Úutilsr Zwrappers.requestr Zwrappers.responser rO r Ztbtoolsr r r Ú TYPE_CHECKINGZ_typeshed.wsgir r r rÉ r% r' rä rL rM r r r# r# r# r$ Ú<module> sN M V
|
