U /e%@sdZddlmZddlZeeZddlZddl m Z ddl m Z ddl mZmZmZmZmZmZmZddlmZddlmZd d lmZerd d lmZd Zed eZGdddZ Gddde Z!Gddde Z"dddddZ#dddddZ$dS)zK Provide a hook for supplying authorization mechanisms to a Bokeh server. ) annotationsN)isfile) ModuleType) TYPE_CHECKING AwaitableCallableListNewTypeTupleType)HTTPServerRequest)RequestHandler)make_globally_unique_id)PathLike) AuthModule AuthProviderNullAuthUserc@seZdZdZddddZeddddZed dd d Zed dd dZeddddZ eddddZ eddddZ eddddZ eddddZ ddddZdS)ra Abstract base class for implementing authorization hooks. Subclasses must supply one of: ``get_user`` or ``get_user_async``. Subclasses must also supply one of ``login_url`` or ``get_login_url``. Optionally, if ``login_url`` provides a relative URL, then ``login_handler`` may also be supplied. The properties ``logout_url`` and ``get_logout_handler`` are analogous to the corresponding login properties, and are optional. .. autoclasstoc:: None)returncCs |dSN) _validateselfr>/tmp/pip-unpacked-wheel-f5fndrjf/bokeh/server/auth_provider.py__init__JszAuthProvider.__init__z&List[Tuple[str, Type[RequestHandler]]]cCsTg}|jr*|jdk st||j|jf|jrP|jdk s>t||j|jf|S)z3 URL patterns for login/logout endpoints. N) login_handler login_urlAssertionErrorappendlogout_handler logout_url)r endpointsrrrr$MszAuthProvider.endpointsz)Callable[[HTTPServerRequest], str] | NonecCsdS)a; A function that computes a URL to redirect unathenticated users to for login. This property may return None, if a ``login_url`` is supplied instead. If a function is returned, it should accept a ``RequestHandler`` and return a login URL for unathenticated users. Nrrrrr get_login_url[s zAuthProvider.get_login_urlz*Callable[[HTTPServerRequest], User] | NonecCsdS)a A function to get the current authenticated user. This property may return None, if a ``get_user_async`` function is supplied instead. If a function is returned, it should accept a ``RequestHandler`` and return the current authenticated user. Nrrrrrget_useris zAuthProvider.get_userz5Callable[[HTTPServerRequest], Awaitable[User]] | NonecCsdS)a  An async function to get the current authenticated user. This property may return None, if a ``get_user`` function is supplied instead. If a function is returned, it should accept a ``RequestHandler`` and return the current authenticated user. Nrrrrrget_user_asyncvs zAuthProvider.get_user_asynczType[RequestHandler] | NonecCsdS)a A request handler class for a login page. This property may return None, if ``login_url`` is supplied instead. If a class is returned, it must be a subclass of RequestHandler, which will used for the endpoint specified by ``logout_url`` Nrrrrrrs zAuthProvider.login_handlerz str | NonecCsdS)z A URL to redirect unauthenticated users to for login. This proprty may return None, if a ``get_login_url`` function is supplied instead. NrrrrrrszAuthProvider.login_urlcCsdS)z A request handler class for a logout page. This property may return None. If a class is returned, it must be a subclass of RequestHandler, which will used for the endpoint specified by ``logout_url`` Nrrrrrr"s zAuthProvider.logout_handlercCsdS)zf A URL to redirect authenticated users to for logout. This proprty may return None. Nrrrrrr#szAuthProvider.logout_urlcCs|jr|jrtd|js |jr4|js4|js4td|jrH|jrHtd|jr\|jr\td|jrvt|jtsvtd|jrt|jstd|j rt|j tstd|j rt|j stddS) Nz9Only one of get_user or get_user_async should be suppliedzWWhen user authentication is enabled, one of login_url or get_login_url must be suppliedzs(    $      :(