U
|
Þ=®dH¾ ã A @ s@ d dl mZ d dlZd dlZd dlZd dlZd dlm Z d dlmZ d dlm
|
Z
|
d dlm Z d dlm Z d dl mZ d d lmZ d d
|
l
|
mZ d d l
|
mZ d d lmZ d d lmZ d dlmZ ddlmZ ddlmZ ddlm Z ej ròd dl m Z e dZ!e "d¡Z#e ddddddd d d d g
|
Z$e d d!d"d#d$d%d&d'gZ%d(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdh@Z&G didj djeZ'G dkdl dleZ(ddndodpdqdrdsdtZ)ddqdudqdvdwdxZ*dodydqdzd{d|Z+dd}dudqd~ddZ,ddqdddZ-dqd
dddZ.ddqdddddZ/e "dej0ej1B ¡Z2e "dej0ej1B ¡Z3e "dej0¡Z4doddddZ5ej6dddZ7ej8doddddZ9ej8dodddddZ9ddodddddZ9ej6dddZ:ej;ej<e:gdf Z=ej8d dodd d¡d¢d£d¤Z>ej8dodd¥dd¢d¦d¤Z>d dodd§dd¢d¨d¤Z>ej6d©ddZ?ej;ej<e?gdf Z@ej8d dodªd dd¢d«d¬ZAej8dodªdd©d¢d®d¬ZAd dodªd¯d©d¢d°d¬ZAd dod±d²d³d´dµZBdod¶dd·d¸ZCd!dod¹dºd³d»d¼ZDdod½dd¾d¿ZEd"dodpdÀdÁdÂdÃZFd#dodÄdÅd³dÆdÇZGd$dqdpdqdÉdÊdËZHdodÌdÍdÎdÏZIdodÐddÑdÒZJdÓdqdÔdÕdÖZKdod×ddØdÙZLd%dÚdqdÛdÜdÝZMd&dodÞddßdàZNd'dádodâdãdäZOd(dådodædçdpdpdèdédêZPd)dìdíd dîdïdðZQdìd dñdòdóZRdqdpddôdõZSdqdpddöd÷ZTd*dødododùdúdûdüdýZUe "dþejV¡ZWe "dÿejV¡ZXd ddZYeY Zdd e[dde[ddD ¡ d+dqdqdád dododpdpdodpd dodqd ddZ\ddddpdddZ]ddl^m_Z` ddlambZc dS (, é )Ú annotationsN©Údate)Údatetime)Útime)Ú timedelta)Útimezone)ÚEnum)Úsha1)Úmktime)Ú struct_time)Úquote)Úunquote)Úparse_http_listé )Ú
|
_dt_as_utc)Ú _plain_float)Ú
|
_plain_int)ÚWSGIEnvironmentzM!#$%&'*+-.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ^_`abcdefghijklmnopqrstuvwxyz|~z&([Ww]/)?(?:"(.*?)"|(.*?))(?:\s*,\s*|$)Zallowzcontent-encodingzcontent-languagezcontent-lengthúcontent-locationz content-md5z content-rangez content-typeÚexpiresz last-modifiedÚ
|
connectionz
|
keep-alivezproxy-authenticatezproxy-authorizationÚteÚtrailerztransfer-encodingÚupgradeÚContinuezSwitching ProtocolsÚ
|
Processingz Early HintsÚOKÚCreatedÚAcceptedz Non Authoritative Informationz
|
No Contentz Reset ContentzPartial Contentz Multi StatuszAlready ReportedzIM UsedzMultiple ChoiceszMoved PermanentlyÚFoundz See Otherz Not Modifiedz Use Proxyz Switch ProxyzTemporary RedirectzPermanent Redirectz Bad RequestÚ UnauthorizedzPayment RequiredÚ Forbiddenz Not FoundzMethod Not AllowedzNot Acceptablez Proxy Authentication RequiredzRequest TimeoutÚConflictÚGonezLength RequiredzPrecondition FailedzRequest Entity Too LargezRequest URI Too LongzUnsupported Media Typez Requested Range Not SatisfiablezExpectation Failedz I'm a teapotzMisdirected RequestzUnprocessable EntityÚLockedzFailed Dependencyz Too EarlyzUpgrade RequiredzPrecondition RequiredzToo Many Requestsz Request Header Fields Too Largez
|
Retry Withz Unavailable For Legal ReasonszInternal Server ErrorzNot Implementedz Bad GatewayzService UnavailablezGateway TimeoutzHTTP Version Not SupportedzVariant Also NegotiateszInsufficient Storagez Loop Detectedz Not Extendedz Network Authentication Failed)@éd ée éf ég éÈ éÉ éÊ éË éÌ éÍ éÎ éÏ éÐ éâ i, i- i. i/ i0 i1 i2 i3 i4 i i i i i i i i i i i i i i i i i i¡ i¢ i¥ i¦ i§ i¨ i© iª i¬ i i¯ iÁ ià iô iõ iö i÷ iø iù iú iû iü iþ iÿ c @ s e Zd ZdZdZdZdS )ÚCOEPz Cross Origin Embedder Policiesú unsafe-nonez require-corpN)Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__Ú UNSAFE_NONEZ REQUIRE_CORP© r; r; úDd:\z\workplace\vscode\pyvenv\venv\Lib\site-packages\werkzeug/http.pyr4 } s r4 c @ s e Zd ZdZdZdZdZdS )ÚCOOPz Cross Origin Opener Policiesr5 zsame-origin-allow-popupsz same-originN)r6 r7 r8 r9 r: ZSAME_ORIGIN_ALLOW_POPUPSZ SAME_ORIGINr; r; r; r< r= s r= Tzt.Anyz
|
str | NoneÚboolÚstr)ÚvalueÚ extra_charsÚ allow_tokenÚreturnc C s t | tr$tjdtdd | d¡} |dk r<tjdtdd t| } | sLdS |rrt}|rd|t|O }| | ¡rr| S |
|
dd ¡
|
d
|
d ¡} d
|
| d
|
S ) a Add double quotes around a header value. If the header contains only ASCII token
|
characters, it will be returned unchanged. If the header contains ``"`` or ``\``
|
characters, they will be escaped with an additional ``\`` character.
|
|
This is the reverse of :func:`unquote_header_value`.
|
|
:param value: The value to quote. Will be converted to a string.
|
:param allow_token: Disable to quote the value even if it only has token characters.
|
|
.. versionchanged:: 2.3
|
The value is quoted if it is the empty string.
|
|
.. versionchanged:: 2.3
|
Passing bytes is deprecated and will not be supported in Werkzeug 3.0.
|
|
.. versionchanged:: 2.3
|
The ``extra_chars`` parameter is deprecated and will be removed in Werkzeug 3.0.
|
|
.. versionadded:: 0.5
|
úFPassing bytes is deprecated and will not be supported in Werkzeug 3.0.é ©Ú
|
stacklevelÚlatin1NzNThe 'extra_chars' parameter is deprecated and will be removed in Werkzeug 3.0.z""ú\ú\\ú"ú\") Ú
|
isinstanceÚbytesÚwarningsÚwarnÚDeprecationWarningÚdecoder? Ú _token_charsÚsetÚ
|
issupersetÚreplace)r@ rA rB Z token_charsr; r; r< Úquote_header_value s0
|
ý
|
ü
|
rW z bool | None)r@ Ú is_filenamerC c C sl |dk rt jdtdd t| dkrh| d | d kr@dkrhn n$| dd
} |sh| d d
|
¡ d d¡S | S ) aB Remove double quotes and decode slash-escaped ``"`` and ``\`` characters in a
|
header value.
|
|
This is the reverse of :func:`quote_header_value`.
|
|
:param value: The header value to unquote.
|
|
.. versionchanged:: 2.3
|
The ``is_filename`` parameter is deprecated and will be removed in Werkzeug 3.0.
|
NzNThe 'is_filename' parameter is deprecated and will be removed in Werkzeug 3.0.rE rF r éÿÿÿÿrK r rJ rI rL )rO rP rQ ÚlenrV )r@ rX r; r; r< Úunquote_header_valueÇ s ü, r[ zt.Mapping[str, t.Any])ÚheaderÚoptionsrC c C sv g }| dk r| | ¡ | ¡ D ]L\}}|dkr0q |d dkrR| | d| ¡ q | | dt| ¡ q d |¡S )aA Produce a header value and ``key=value`` parameters separated by semicolons
|
``;``. For example, the ``Content-Type`` header.
|
|
.. code-block:: python
|
|
dump_options_header("text/html", {"charset": "UTF-8"})
|
'text/html; charset=UTF-8'
|
|
This is the reverse of :func:`parse_options_header`.
|
|
If a value contains non-token characters, it will be quoted.
|
|
If a value is ``None``, the parameter is skipped.
|
|
In some keys for some headers, a UTF-8 value can be encoded using a special
|
``key*=UTF-8''value`` form, where ``value`` is percent encoded. This function will
|
not produce that format automatically, but if a given key ends with an asterisk
|
``*``, the value is assumed to have that form and will not be quoted further.
|
|
:param header: The primary header value.
|
:param options: Parameters to encode as ``key=value`` pairs.
|
|
.. versionchanged:: 2.3
|
Keys with ``None`` values are skipped rather than treated as a bare key.
|
|
.. versionchanged:: 2.2.3
|
If a key ends with ``*``, its value will not be quoted.
|
NrY Ú*ú=ú; )ÚappendÚitemsrW Újoin)r\ r] ÚsegmentsÚkeyr@ r; r; r< Údump_options_headerã s
|
rf z$dict[str, t.Any] | t.Iterable[t.Any])ÚiterablerB rC c s® dk rt jdtdd nd t| trg }| ¡ D ]Z\}}|dkrP| |¡ q4|d dkrr| | d| ¡ q4| | dt| d ¡ q4n fd
|
d | D }d |¡S ) aN Produce a header value from a list of items or ``key=value`` pairs, separated by
|
commas ``,``.
|
|
This is the reverse of :func:`parse_list_header`, :func:`parse_dict_header`, and
|
:func:`parse_set_header`.
|
|
If a value contains non-token characters, it will be quoted.
|
|
If a value is ``None``, the key is output alone.
|
|
In some keys for some headers, a UTF-8 value can be encoded using a special
|
``key*=UTF-8''value`` form, where ``value`` is percent encoded. This function will
|
not produce that format automatically, but if a given key ends with an asterisk
|
``*``, the value is assumed to have that form and will not be quoted further.
|
|
.. code-block:: python
|
|
dump_header(["foo", "bar baz"])
|
'foo, "bar baz"'
|
|
dump_header({"foo": "bar baz"})
|
'foo="bar baz"'
|
|
:param iterable: The items to create a header from.
|
|
.. versionchanged:: 2.3
|
The ``allow_token`` parameter is deprecated and will be removed in Werkzeug 3.0.
|
|
.. versionchanged:: 2.2.3
|
If a key ends with ``*``, its value will not be quoted.
|
NzO'The 'allow_token' parameter is deprecated and will be removed in Werkzeug 3.0.rE rF TrY r^ r_ ©rB c s g | ]}t | d qS )rh )rW ©Ú.0Úxrh r; r< Ú
|
<listcomp>K s z dump_header.<locals>.<listcomp>z, ) rO rP rQ rM Údictrb ra rW rc )rg rB rb re r@ r; rh r< Ú dump_header s& #ü
|
ÿrn zds.ContentSecurityPolicy)r\ rC c C s d dd | ¡ D ¡S )zäDump a Content Security Policy header.
|
|
These are structured into policies such as "default-src 'self';
|
script-src 'self'".
|
|
.. versionadded:: 1.0.0
|
Support for Content Security Policy headers was added.
|
|
r` c s s | ]\}}| d | V qdS )ú Nr; ©rj re r@ r; r; r< Ú <genexpr>Z s z"dump_csp_header.<locals>.<genexpr>)rc rb ©r\ r; r; r< Údump_csp_headerP s
|
rs z list[str])r@ rC c C sX g }t | D ]F}t|dkrH|d |d kr8dkrHn n |dd
}| |¡ q |S )aØ Parse a header value that consists of a list of comma separated items according
|
to `RFC 9110 <https://httpwg.org/specs/rfc9110.html#abnf.extension>`__.
|
|
This extends :func:`urllib.request.parse_http_list` to remove surrounding quotes
|
from values.
|
|
.. code-block:: python
|
|
parse_list_header('token, "quoted value"')
|
['token', 'quoted value']
|
|
This is the reverse of :func:`dump_header`.
|
|
:param value: The header value to parse.
|
rE r rY rK r )Ú_parse_list_headerrZ ra )r@ ÚresultÚitemr; r; r< Úparse_list_header] s , rw ztype[dict] | Nonezdict[str, str])r@ ÚclsrC c C s |dkrt }ntjdtdd | }t| trHtjdtdd | d¡} t| D ]Ê}| d¡\}}} | ¡ }|szd||< qP| ¡ } d}|d d krÔ|dd
}t
|
| ¡}|rÀ| ¡ \}} | ¡ }|d
|
krÔt| |d } t| dkr| d | d krd krn n | dd
} | ||< qP|S )aË Parse a list header using :func:`parse_list_header`, then parse each item as a
|
``key=value`` pair.
|
|
.. code-block:: python
|
|
parse_dict_header('a=b, c="d, e", f')
|
{"a": "b", "c": "d, e", "f": None}
|
|
This is the reverse of :func:`dump_header`.
|
|
If a key does not have a value, it is ``None``.
|
|
This handles charsets for values as described in
|
`RFC 2231 <https://www.rfc-editor.org/rfc/rfc2231#section-3>`__. Only ASCII, UTF-8,
|
and ISO-8859-1 charsets are accepted, otherwise the value remains quoted.
|
|
:param value: The header value to parse.
|
|
.. versionchanged:: 2.3
|
Added support for ``key*=charset''value`` encoded items.
|
|
.. versionchanged:: 2.3
|
Passing bytes is deprecated, support will be removed in Werkzeug 3.0.
|
|
.. versionchanged:: 2.3
|
The ``cls`` argument is deprecated and will be removed in Werkzeug 3.0.
|
|
.. versionchanged:: 0.9
|
The ``cls`` argument was added.
|
NzFThe 'cls' parameter is deprecated and will be removed in Werkzeug 3.0.rE rF z@Passing bytes is deprecated and will be removed in Werkzeug 3.0.rH r_ rY r^ > úutf-8Úasciiúus-asciiú
|
iso-8859-1©Úencodingr rK r )rm rO rP rQ rM rN rR rw Ú partitionÚstripÚ_charset_value_reÚmatchÚgroupsÚlowerr rZ )r@ rx ru rv re Z has_valuer~ r r; r; r< Úparse_dict_headerx sF ý
|
ý
|
|
2
|
r
aë
|
# don't match multiple empty parts, that causes backtracking
|
\s*;\s* # find the part delimiter
|
(?:
|
([\w!#$%&'*+\-.^`|~]+) # key, one or more token chars
|
= # equals, with no space on either side
|
( # value, token or quoted string
|
[\w!#$%&'*+\-.^`|~]+ # one or more token chars
|
|
|
"(?:\\\\|\\"|.)*?" # quoted string, consuming slash escapes
|
)
|
)? # optionally match key=value, to account for empty parts
|
zÖ
|
([\w!#$%&*+\-.^`|~]*)' # charset part, could be empty
|
[\w!#$%&*+\-.^`|~]*' # don't care about language part, usually empty
|
([\w!#$%&'*+\-.^`|~]+) # one or more token chars with percent encoding
|
z\*(\d+)$ztuple[str, dict[str, str]]c C s^ | dkrdi fS | d¡\} }}| ¡ } | ¡ }| r8|s@| i fS d| }i }d}d}t |¡D ]ô\}}|snq`| ¡ }|d dkrÐ|dd
}t |¡}|r°| ¡ \}}| ¡ }|s¸|}|dkrÐ|}t||d}|d |d krîd krn n$|d
|
d
d d ¡ d d ¡ dd ¡}t
|
|¡}|rL|d| ¡
}| |d¡| ||< q`|||< q`| |fS )a Parse a header that consists of a value with ``key=value`` parameters separated
|
by semicolons ``;``. For example, the ``Content-Type`` header.
|
|
.. code-block:: python
|
|
parse_options_header("text/html; charset=UTF-8")
|
('text/html', {'charset': 'UTF-8'})
|
|
parse_options_header("")
|
("", {})
|
|
This is the reverse of :func:`dump_options_header`.
|
|
This parses valid parameter parts as described in
|
`RFC 9110 <https://httpwg.org/specs/rfc9110.html#parameter>`__. Invalid parts are
|
skipped.
|
|
This handles continuations and charsets as described in
|
`RFC 2231 <https://www.rfc-editor.org/rfc/rfc2231#section-3>`__, although not as
|
strictly as the RFC. Only ASCII, UTF-8, and ISO-8859-1 charsets are accepted,
|
otherwise the value remains quoted.
|
|
Clients may not be consistent in how they handle a quote character within a quoted
|
value. The `HTML Standard <https://html.spec.whatwg.org/#multipart-form-data>`__
|
replaces it with ``%22`` in multipart form data.
|
`RFC 9110 <https://httpwg.org/specs/rfc9110.html#quoted.strings>`__ uses backslash
|
escapes in HTTP headers. Both are decoded to the ``"`` character.
|
|
Clients may not be consistent in how they handle non-ASCII characters. HTML
|
documents must declare ``<meta charset=UTF-8>``, otherwise browsers may replace with
|
HTML character references, which can be decoded using :func:`html.unescape`.
|
|
:param value: The header value to parse.
|
:return: ``(value, options)``, where ``options`` is a dict
|
|
.. versionchanged:: 2.3
|
Invalid parts, such as keys with no value, quoted keys, and incorrectly quoted
|
values, are discarded instead of treating as ``None``.
|
|
.. versionchanged:: 2.3
|
Only ASCII, UTF-8, and ISO-8859-1 are accepted for charset values.
|
|
.. versionchanged:: 2.3
|
Escaped quotes in quoted values, like ``%22`` and ``\"``, are handled.
|
|
.. versionchanged:: 2.2
|
Option names are always converted to lowercase.
|
|
.. versionchanged:: 2.2
|
The ``multiple`` parameter was removed.
|
|
.. versionchanged:: 0.15
|
:rfc:`2231` parameter continuations are handled.
|
|
.. versionadded:: 0.5
|
NÚ ú;rY r^ > ry rz r{ r| r} r rK r rJ rI rL z%22)r r Ú _parameter_reÚfindallr r r r r rV Ú_continuation_reÚsearchÚstartÚget) r@ Ú_Úrestr] r~ Zcontinued_encodingÚpkÚpvr r; r; r< Úparse_options_headerí sD 9
|
|
"$
|
|
r Ú _TAnyAcceptz ds.Accept)Úboundc C s d S ©Nr; )r@ r; r; r< Úparse_accept_headerl s r ztype[_TAnyAccept]c C s d S r r; )r@ rx r; r; r< r q s ztype[_TAnyAccept] | Nonec C s¶ |dkr t t jt tj¡}| s(|dS g }t| D ]x}t|\}}d|krzt| d¡}W n t
|
k
|
rv Y q4Y nX |dk s4|dkrq4nd}|rt ||}| ||f¡ q4||S )ak Parse an ``Accept`` header according to
|
`RFC 9110 <https://httpwg.org/specs/rfc9110.html#field.accept>`__.
|
|
Returns an :class:`.Accept` instance, which can sort and inspect items based on
|
their quality parameter. When parsing ``Accept-Charset``, ``Accept-Encoding``, or
|
``Accept-Language``, pass the appropriate :class:`.Accept` subclass.
|
|
:param value: The header value to parse.
|
:param cls: The :class:`.Accept` class to wrap the result in.
|
:return: An instance of ``cls``.
|
|
.. versionchanged:: 2.3
|
Parse according to RFC 9110. Items with invalid ``q`` values are skipped.
|
NÚqr r ) ÚtÚcastÚTyper ÚdsÚAcceptrw r r ÚpopÚ
|
ValueErrorrf ra )r@ rx ru rv r] r r; r; r< r v s&
|
|
Ú_TAnyCCz ds.cache_control._CacheControlÚ _t_cc_updateÚNonezds.RequestCacheControl)r@ Ú on_updaterx rC c C s d S r r; ©r@ r¢ rx r; r; r< Úparse_cache_control_header s r¤ z type[_TAnyCC]c C s d S r r; r£ r; r; r< r¤ ´ s ztype[_TAnyCC] | Nonec C s8 |dkr t t jt tj¡}| s*|d|S |t| |S )a Parse a cache control header. The RFC differs between response and
|
request cache control, this method does not. It's your responsibility
|
to not use the wrong control statements.
|
|
.. versionadded:: 0.5
|
The `cls` was added. If not specified an immutable
|
:class:`~werkzeug.datastructures.RequestCacheControl` is returned.
|
|
:param value: a cache control header to be parsed.
|
:param on_update: an optional callable that is called every time a value
|
on the :class:`~werkzeug.datastructures.CacheControl`
|
object is changed.
|
:param cls: the class for the returned object. By default
|
:class:`~werkzeug.datastructures.RequestCacheControl` is used.
|
:return: a `cls` object.
|
Nr; )r r r r r ZRequestCacheControlr
r£ r; r; r< r¤ » s
|
|
Ú_TAnyCSPÚ _t_csp_updatec C s d S r r; r£ r; r; r< Úparse_csp_headerÝ s r§ ztype[_TAnyCSP]c C s d S r r; r£ r; r; r< r§ ä s ztype[_TAnyCSP] | Nonec C s |dkr t t jt tj¡}| dkr.|d|S g }| d¡D ]>}| ¡ }d|kr<| ¡ dd¡\}} | | ¡ | ¡ f¡ q<|||S )aß Parse a Content Security Policy header.
|
|
.. versionadded:: 1.0.0
|
Support for Content Security Policy headers was added.
|
|
:param value: a csp header to be parsed.
|
:param on_update: an optional callable that is called every time a value
|
on the object is changed.
|
:param cls: the class for the returned object. By default
|
:class:`~werkzeug.datastructures.ContentSecurityPolicy` is used.
|
:return: a `cls` object.
|
Nr; r ro r ) r r r r¥ r ZContentSecurityPolicyÚsplitr ra )r@ r¢ rx rb ÚpolicyÚ directiver; r; r< r§ ë s
|
z't.Callable[[ds.HeaderSet], None] | Nonez ds.HeaderSet)r@ r¢ rC c C s | st d|¡S t t| |¡S )a Parse a set-like header and return a
|
:class:`~werkzeug.datastructures.HeaderSet` object:
|
|
>>> hs = parse_set_header('token, "quoted value"')
|
|
The return value is an object that treats the items case-insensitively
|
and keeps the order of the items:
|
|
>>> 'TOKEN' in hs
|
True
|
>>> hs.index('quoted value')
|
1
|
>>> hs
|
HeaderSet(['token', 'quoted value'])
|
|
To create a header from the :class:`HeaderSet` again, use the
|
:func:`dump_header` function.
|
|
:param value: a set header to be parsed.
|
:param on_update: an optional callable that is called every time a
|
value on the :class:`~werkzeug.datastructures.HeaderSet`
|
object is changed.
|
:return: a :class:`~werkzeug.datastructures.HeaderSet`
|
N)r Z HeaderSetrw )r@ r¢ r; r; r< Úparse_set_header s r« zds.Authorization | Nonec C s& ddl m} tjdtdd | | ¡S )aé Parse an HTTP basic/digest authorization header transmitted by the web
|
browser. The return value is either `None` if the header was invalid or
|
not given, otherwise an :class:`~werkzeug.datastructures.Authorization`
|
object.
|
|
:param value: the authorization header to parse.
|
:return: a :class:`~werkzeug.datastructures.Authorization` object or `None`.
|
|
.. deprecated:: 2.3
|
Will be removed in Werkzeug 3.0. Use :meth:`.Authorization.from_header` instead.
|
r )Ú Authorizationzx'parse_authorization_header' is deprecated and will be removed in Werkzeug 2.4. Use 'Authorization.from_header' instead.rE rF )Údatastructuresr¬ rO rP rQ Ú from_header)r@ r¬ r; r; r< Úparse_authorization_header0 s ür¯ z-t.Callable[[ds.WWWAuthenticate], None] | Nonezds.WWWAuthenticatec C s@ ddl m} tjdtdd | | ¡}|dkr6|d}||_|S )a0 Parse an HTTP WWW-Authenticate header into a
|
:class:`~werkzeug.datastructures.WWWAuthenticate` object.
|
|
:param value: a WWW-Authenticate header to parse.
|
:param on_update: an optional callable that is called every time a value
|
on the :class:`~werkzeug.datastructures.WWWAuthenticate`
|
object is changed.
|
:return: a :class:`~werkzeug.datastructures.WWWAuthenticate` object.
|
|
.. deprecated:: 2.3
|
Will be removed in Werkzeug 3.0. Use :meth:`.WWWAuthenticate.from_header`
|
instead.
|
r )ÚWWWAuthenticatez}'parse_www_authenticate_header' is deprecated and will be removed in Werkzeug 2.4. Use 'WWWAuthenticate.from_header' instead.rE rF NÚbasic)Zdatastructures.authr° rO rP rQ r® Z
|
_on_update)r@ r¢ r° Úrvr; r; r< Ú parse_www_authenticate_headerI s ü
|
r³ z
|
ds.IfRangec C s: | s t ¡ S t| }|dk r(t j|dS t t| d ¡S )zùParses an if-range header which can be an etag or a date. Returns
|
a :class:`~werkzeug.datastructures.IfRange` object.
|
|
.. versionchanged:: 2.0
|
If the value represents a datetime, it is timezone-aware.
|
|
.. versionadded:: 0.7
|
Nr r )r ZIfRangeÚ
|
parse_dateÚ unquote_etag)r@ r r; r; r< Úparse_if_range_headerk s r¶ zds.Range | None)r@ Úmake_inclusiverC c C s | r d| krdS g }d}| dd¡\}}| ¡ ¡ }| d¡D ]4}| ¡ }d|krZ dS | d¡r¢|dk rr dS z t|}W n tk
|
r Y dS X d}d}nÄd|krf| dd¡\} }
|
| ¡ } |
|
¡ }
|
z t| }W n tk
|
rð Y dS X ||k s|dk r dS |
|
rPzt|
|
d }W n tk
|
r< Y dS X ||krT dS nd}|dk rb|nd}| ||f¡ q>t ||¡S )a Parses a range header into a :class:`~werkzeug.datastructures.Range`
|
object. If the header is missing or malformed `None` is returned.
|
`ranges` is a list of ``(start, stop)`` tuples where the ranges are
|
non-inclusive.
|
|
.. versionadded:: 0.7
|
r_ Nr r ú,ú-rY ) r¨ r r Ú
|
startswithr r ra r ZRange) r@ r· ÚrangesZlast_endÚunitsÚrngrv ÚbeginÚendZ begin_strZend_strr; r; r< Úparse_range_header} sP
|
|
|
|
|
|
|
rÀ z*t.Callable[[ds.ContentRange], None] | Nonezds.ContentRange | Nonec C s. | dkr dS z | pd ¡ dd¡\}}W n tk
|
r> Y dS X d|krLdS | dd¡\}}|dkrjd}n$z t|}W n tk
|
r Y dS X |dkrºtdd|s¦dS tj|dd||dS d|krÆdS | dd¡\}}zt|} t|d }
|
W n tk
|
r Y dS X t| |
|
|r*tj|| |
|
||dS dS )a Parses a range header into a
|
:class:`~werkzeug.datastructures.ContentRange` object or `None` if
|
parsing is not possible.
|
|
.. versionadded:: 0.7
|
|
:param value: a content range header to be parsed.
|
:param on_update: an optional callable that is called every time a value
|
on the :class:`~werkzeug.datastructures.ContentRange`
|
object is changed.
|
Nr r ú/r^ )r¢ r¹ )r r¨ r r Úis_byte_range_validr Z ContentRange) r@ r¢ r¼ Zrangedefr½ Z
|
length_strÚlengthZ start_strZstop_strr Ústopr; r; r< Úparse_content_range_header¸ s< rÅ F)ÚetagÚweakrC c C s. d| krt dd| d} |r*d| } | S )ziQuote an etag.
|
|
:param etag: the etag to quote.
|
:param weak: set to `True` to tag it "weak".
|
rK z invalid etagúW/)r ©rÆ rÇ r; r; r< Ú
|
quote_etagî s
|
rÊ z&tuple[str, bool] | tuple[(None, None)])rÆ rC c C sj | sdS | ¡ } d}| d¡r.d}| dd
} | dd
| dd
krRd krbn n | dd
} | |fS )
|
zØUnquote a single etag:
|
|
>>> unquote_etag('W/"bar"')
|
('bar', True)
|
>>> unquote_etag('"bar"')
|
('bar', False)
|
|
:param etag: the etag identifier to unquote.
|
:return: a ``(etag, weak)`` tuple.
|
)NNF)rÈ zw/TrE Nr rY rK )r rº rÉ r; r; r< rµ ü s
|
( rµ zds.ETagsc C s | s t ¡ S g }g }t| }d}||k rt | |¡}|dkr>q| ¡ \}}}|dkr`t jddS |rh|}|rx| |¡ n
|
| |¡ | ¡ }q t ||¡S )z
Parse an etag header.
|
|
:param value: the tag header to parse
|
:return: an :class:`~werkzeug.datastructures.ETags` object.
|
r Nr^ T)Zstar_tag)r ZETagsrZ Ú_etag_rer r ra r¿ ) r@ ÚstrongrÇ r¿ Úposr Zis_weakÚquotedÚrawr; r; r< Ú parse_etags s(
|
|
rÐ rN )ÚdatarC c C s t | ¡ S )zGenerate an etag for some data.
|
|
.. versionchanged:: 2.0
|
Use SHA-1. MD5 may not be available in some environments.
|
)r
|
Ú hexdigest)rÑ r; r; r< Ú generate_etag2 s rÓ zdatetime | Nonec C sT | dkr dS zt j | ¡}W n ttfk
|
r6 Y dS X |jdkrP|jtjdS |S )aK Parse an :rfc:`2822` date into a timezone-aware
|
:class:`datetime.datetime` object, or ``None`` if parsing fails.
|
|
This is a wrapper for :func:`email.utils.parsedate_to_datetime`. It
|
returns ``None`` if parsing fails instead of raising an exception,
|
and always returns a timezone-aware datetime object. If the string
|
doesn't have timezone information, it is assumed to be UTC.
|
|
:param value: A string with a supported date format.
|
|
.. versionchanged:: 2.0
|
Return a timezone-aware datetime object. Use
|
``email.utils.parsedate_to_datetime``.
|
N©Útzinfo) ÚemailÚutilsÚparsedate_to_datetimeÚ TypeErrorr rÕ rV r Úutc)r@ Údtr; r; r< r´ ; s
|
r´ z2datetime | date | int | float | struct_time | None)Ú timestamprC c C sd t | trBt | ts*tj| t tjd} nt| } tj j
|
| ddS t | t rTt | } tj j | ddS )aª Format a datetime object or timestamp into an :rfc:`2822` date
|
string.
|
|
This is a wrapper for :func:`email.utils.format_datetime`. It
|
assumes naive datetime objects are in UTC instead of raising an
|
exception.
|
|
:param timestamp: The datetime or timestamp to format. Defaults to
|
the current time.
|
|
.. versionchanged:: 2.0
|
Use ``email.utils.format_datetime``. Accept ``date`` objects.
|
rÔ T)Úusegmt)rM r r Úcombiner r rÚ r rÖ r× Úformat_datetimer r Ú
|
formatdate)rÜ r; r; r< Ú http_dateX s
|
|
|
rá ztimedelta | Nonec C s` | sdS z t | }W n tk
|
r* Y dS X |dk r8dS z t|dW S tk
|
rZ Y dS X dS )züParses a base-10 integer count of seconds into a timedelta.
|
|
If parsing fails, the return value is `None`.
|
|
:param value: a string consisting of an integer represented in base-10
|
:return: a :class:`datetime.timedelta` object or `None`.
|
Nr )Úseconds)Úintr r Ú OverflowError)r@ râ r; r; r< Ú parse_agex s rå ztimedelta | int | None)ÚagerC c C sD | dkr dS t | tr$t| ¡ } nt| } | dk r<tdt| S )zÛFormats the duration as a base-10 integer.
|
|
:param age: should be an integer number of seconds,
|
a :class:`datetime.timedelta` object, or,
|
if the age is unknown, `None` (default).
|
Nr zage cannot be negative)rM r rã Ú total_secondsr r? )ræ r; r; r< Údump_age s
|
rè r z bytes | Nonezdatetime | str | None)ÚenvironrÆ rÑ Ú last_modifiedÚignore_if_rangerC c C s: t j| d¡| d¡| d¡| d¡| d¡||||d S )a2 Convenience method for conditional requests.
|
|
:param environ: the WSGI environment of the request to be checked.
|
:param etag: the etag for the response for comparison.
|
:param data: or alternatively the data of the response to automatically
|
generate an etag using :func:`generate_etag`.
|
:param last_modified: an optional date of the last modification.
|
:param ignore_if_range: If `False`, `If-Range` header will be taken into
|
account.
|
:return: `True` if the resource was modified, otherwise `False`.
|
|
.. versionchanged:: 2.0
|
SHA-1 is used to generate an etag value for the data. MD5 may
|
not be available in some environments.
|
|
.. versionchanged:: 1.0.0
|
The check is run for methods other than ``GET`` and ``HEAD``.
|
Z
|
HTTP_RANGEZ HTTP_IF_RANGEZHTTP_IF_MODIFIED_SINCEZHTTP_IF_NONE_MATCHZ HTTP_IF_MATCH) Z
|
http_rangeZ http_if_rangeZhttp_if_modified_sinceZhttp_if_none_matchZ http_if_matchrÆ rÑ rê rë )Ú _sansio_httpÚis_resource_modifiedr )ré rÆ rÑ rê rë r; r; r< rí ¢ s ÷rí ©r r z"ds.Headers | list[tuple[str, str]]zt.Iterable[str])ÚheadersÚallowedrC c s, dd D fdd| D | dd
< dS )a Remove all entity headers from a list or :class:`Headers` object. This
|
operation works in-place. `Expires` and `Content-Location` headers are
|
by default not removed. The reason for this is :rfc:`2616` section
|
10.3.5 which specifies some entity headers that should be sent.
|
|
.. versionchanged:: 0.5
|
added `allowed` parameter.
|
|
:param headers: a list or :class:`Headers` object.
|
:param allowed: a list of headers that should still be allowed even though
|
they are entity headers.
|
c S s h | ] }| ¡ qS r; )r ri r; r; r< Ú <setcomp>Ø s z(remove_entity_headers.<locals>.<setcomp>c s, g | ]$\}}t |r | ¡ kr||fqS r; )Úis_entity_headerr rp ©rð r; r< rl Ù s þz)remove_entity_headers.<locals>.<listcomp>Nr; )rï rð r; ró r< Úremove_entity_headersÈ s
|
þrô )rï rC c C s dd | D | dd
< dS )zÌRemove all HTTP/1.1 "Hop-by-Hop" headers from a list or
|
:class:`Headers` object. This operation works in-place.
|
|
.. versionadded:: 0.5
|
|
:param headers: a list or :class:`Headers` object.
|
c S s g | ]\}}t |s||fqS r; )Úis_hop_by_hop_headerrp r; r; r< rl è s z-remove_hop_by_hop_headers.<locals>.<listcomp>Nr; )rï r; r; r< Úremove_hop_by_hop_headersà s ÿrö c C s | ¡ tkS )z¯Check if a header is an entity header.
|
|
.. versionadded:: 0.5
|
|
:param header: the header to test.
|
:return: `True` if it's an entity header, `False` otherwise.
|
)r Ú_entity_headersrr r; r; r< rò í s rò c C s | ¡ tkS )zÍCheck if a header is an HTTP/1.1 "Hop-by-Hop" header.
|
|
.. versionadded:: 0.5
|
|
:param header: the header to test.
|
:return: `True` if it's an HTTP/1.1 "Hop-by-Hop" header, `False` otherwise.
|
)r Ú_hop_by_hop_headersrr r; r; r< rõ ø s rõ z WSGIEnvironment | str | Noneztype[ds.MultiDict] | Nonezds.MultiDict[str, str])r\ ÚcharsetÚerrorsrx rC c C sb t | tr| d¡}n(t | tr:tjdtdd | ¡ }n| }|rP| d¡ ¡ }t j
|
||||dS )a} Parse a cookie from a string or WSGI environ.
|
|
The same key can be provided multiple times, the values are stored
|
in-order. The default :class:`MultiDict` will have the first value
|
first, and all values can be retrieved with
|
:meth:`MultiDict.getlist`.
|
|
:param header: The cookie header as a string, or a WSGI environ dict
|
with a ``HTTP_COOKIE`` key.
|
:param cls: A dict-like class to store the parsed cookies in.
|
Defaults to :class:`MultiDict`.
|
|
.. versionchanged:: 2.3
|
Passing bytes, and the ``charset`` and ``errors`` parameters, are deprecated and
|
will be removed in Werkzeug 3.0.
|
|
.. versionchanged:: 1.0
|
Returns a :class:`MultiDict` instead of a ``TypeConversionDict``.
|
|
.. versionchanged:: 0.5
|
Returns a :class:`TypeConversionDict` instead of a regular dict. The ``cls``
|
parameter was added.
|
Z HTTP_COOKIErD rE rF rH )Úcookierù rú rx ) rM rm r rN rO rP rQ rR Úencoderì Ú parse_cookie)r\ rù rú rx rû r; r; r< rý s$
|
|
ý
|
ÿrý z#[\w!#$%&'()*+\-./:<=>?@\[\]^`{|}~]*s [\x00-\x19\",;\\\x7f-\xff]s \"s \\)ó "ó \c c s" | ]}| d d¡d| fV qdS )r Úbigs \%03oN)Úto_bytes)rj Úvr; r; r< rq 7 s ÿrq é s ,;é é r rÁ éý z#str | datetime | int | float | Nonerã ) re r@ Úmax_ager ÚpathÚdomainÚsecureÚhttponlyrù Ú sync_expiresÚmax_sizeÚsamesiterC c C sD |dk rt jdtdd nd}t| tr@t jdtdd | ¡ } t|trbt jdtdd | ¡ }|dk rxt|d|d }|r| d
|
¡d d ¡ d ¡ d¡}t|t
|
r²t | ¡ }|dk rÎt|t sôt|}n&|dk rô| rôttjtjd ¡ | }| dk r| ¡ } | dkrtdt |¡sLt dd | |¡¡ d¡}d| d}| ¡ d¡ d| g} d|fd|fd|fd|fd|fd |fd | ffD ]N\} }|dks|d kr´q|d krÌ| | ¡ q| | d| ¡ qd | ¡}t |}|
|
r@||
|
kr@t |}t jd!| d"| d#|| d$| d%|
|
d& dd |S )'a¯
|
Create a Set-Cookie header without the ``Set-Cookie`` prefix.
|
|
The return value is usually restricted to ascii as the vast majority
|
of values are properly escaped, but that is no guarantee. It's
|
tunneled through latin1 as required by :pep:`3333`.
|
|
The return value is not ASCII safe if the key contains unicode
|
characters. This is technically against the specification but
|
happens in the wild. It's strongly recommended to not use
|
non-ASCII values for the keys.
|
|
:param max_age: should be a number of seconds, or `None` (default) if
|
the cookie should last only as long as the client's
|
browser session. Additionally `timedelta` objects
|
are accepted, too.
|
:param expires: should be a `datetime` object or unix timestamp.
|
:param path: limits the cookie to a given path, per default it will
|
span the whole domain.
|
:param domain: Use this if you want to set a cross-domain cookie. For
|
example, ``domain=".example.com"`` will set a cookie
|
that is readable by the domain ``www.example.com``,
|
``foo.example.com`` etc. Otherwise, a cookie will only
|
be readable by the domain that set it.
|
:param secure: The cookie will only be available via HTTPS
|
:param httponly: disallow JavaScript to access the cookie. This is an
|
extension to the cookie standard and probably not
|
supported by all browsers.
|
:param charset: the encoding for string values.
|
:param sync_expires: automatically set expires if max_age is defined
|
but expires not.
|
:param max_size: Warn if the final header value exceeds this size. The
|
default, 4093, should be safely `supported by most browsers
|
<cookie_>`_. Set to 0 to disable this check.
|
:param samesite: Limits the scope of the cookie such that it will
|
only be attached to requests if those requests are same-site.
|
|
.. _`cookie`: http://browsercookielimits.squawky.net/
|
|
.. versionchanged:: 2.3.3
|
The ``path`` parameter is ``/`` by default.
|
|
.. versionchanged:: 2.3.1
|
The value allows more characters without quoting.
|
|
.. versionchanged:: 2.3
|
``localhost`` and other names without a dot are allowed for the domain. A
|
leading dot is ignored.
|
|
.. versionchanged:: 2.3
|
The ``path`` parameter is ``None`` by default.
|
|
.. versionchanged:: 2.3
|
Passing bytes, and the ``charset`` parameter, are deprecated and will be removed
|
in Werkzeug 3.0.
|
|
.. versionchanged:: 1.0.0
|
The string ``'None'`` is accepted for ``samesite``.
|
NzJThe 'charset' parameter is deprecated and will be removed in Werkzeug 3.0.rE rF ry zeThe 'key' parameter must be a string. Bytes are deprecated and will not be supported in Werkzeug 3.0.zgThe 'value' parameter must be a string. Bytes are deprecated and will not be supported in Werkzeug 3.0.z%!$&'()*+,/:=@)Úsafer~ ú:r Ú.Úidnarz )Útz> r¡ ÚLaxÚStrictz,SameSite must be 'Strict', 'Lax', or 'None'.c S s t | ¡ S r )Ú_cookie_slash_mapÚgroup)Úmr; r; r< Ú<lambda>¾ ó z dump_cookie.<locals>.<lambda>rK rH r_ ÚDomainZExpireszMax-AgeÚSecureÚHttpOnlyÚPathÚSameSiteFTr` zThe 'z%' cookie is too large: the value was z bytes but the header required z! extra bytes. The final size was z bytes but the limit is z> bytes. Browsers may silently ignore cookies larger than this.) rO rP rQ rM rN rR r r Úlstriprü r rã rç r? rá r Únowr rÚ rÜ Útitler Ú_cookie_no_quote_reÚ fullmatchÚ_cookie_slash_reÚsubra rc rZ )re r@ r r r r r
|
r rù r r r ÚbufÚkr r² Z cookie_sizeZ
|
value_sizer; r; r< Ú dump_cookie= s Hü
|
ü
|
ü
|
|
|
|
|
ÿþ ù
|
|
|
&ûr) z
|
int | None)r rÄ rà rC c C sp | dk|dkkrdS | dkr,|dkp*|dkS |dkrLd| koF|k S S | |krXdS d| koj|k S S )zcChecks if a given byte content range is valid for the given length.
|
|
.. versionadded:: 0.7
|
NFr r; )r rÄ rà r; r; r< r ì s r )r )Úhttp)NT)N)N)N)N)N)NN)N)NN)N)N)T)N)F)N)N)N)NNNT)rî )NNN) r NNrÁ NFFNTr N)dÚ
|
__future__r Ú email.utilsrÖ ÚreÚtypingr rO r r r r r Úenumr Úhashlibr
|
r r Ú urllib.parser r Úurllib.requestr rt Ú _internalr r r Ú TYPE_CHECKINGZ_typeshed.wsgir Ú frozensetrS ÚcompilerË r÷ rø ZHTTP_STATUS_CODESr4 r= rW r[ rf rn rs rw r
ÚASCIIÚVERBOSEr r r r ÚTypeVarr Úoverloadr r ÚOptionalÚCallabler r¤ r¥ r¦ r§ r« r¯ r³ r¶ rÀ rÅ rÊ rµ rÐ rÓ r´ rá rå rè rí rô rö rò rõ rý ÚAr# r% r ÚupdateÚranger) r r r r Zsansior* rì r; r; r; r< Ú<module> s´ ÿ
|
öÿøÿ ÀD
|
ý; 0þ? X
|
ò
|
ú |ÿ3ÿ ý ÿ ý&þ!þ"ÿ=þ6 ÿ û(þ ü1þ ô2 0
|
