File: //usr/local/CyberPanel/lib64/python3.10/site-packages/asyncssh/__pycache__/auth.cpython-310.pyc
o
�h�� � @ sx U d Z ddlmZmZmZmZmZ ddlmZmZm Z m
Z
m Z ddl m
Z
ddlmZmZ ddlmZ ddlmZmZmZ dd lmZ dd
lmZmZmZm Z m Z dd l m Z dd l m Z m!Z! ersdd
l"Z"ddl#m$Z$m%Z% ddl#m&Z& eee'e(f Z)ee'e'e'e)f Z*e
e(e*f Z+ee' Z,ee'e'f Z-dZ.dZ/dZ0dZ1dZ2dZ3dZ4dZ5dZ6dZ7g Z8ee9 e:d< i Z;ee9e d f e:d< i Z<ee9e d f e:d< G dd � d e �Z=G d d� de=�Z>G d d � d e>�Z?G d d!� d!e>�Z@G d"d#� d#e>�ZAG d$d%� d%e>�ZBG d&d'� d'e>�ZCG d(d)� d)e>�ZDG d*d+� d+e>�ZEG d,d� de=�ZFG d-d.� d.eF�ZGG d/d0� d0eF�ZHG d1d2� d2eF�ZIG d3d4� d4eF�ZJG d5d6� d6eF�ZKG d7d8� d8eF�ZLG d9d:� d:eF�ZMd;e9d<e e> d=e eF d>d
fd?d@�ZNd>ee9 fdAdB�ZOdCdDdEe9d>ee> fdFdG�ZPdCdHd>ee9 fdIdJ�ZQdCdHdKe'dEe9dLe d>eeF f
dMdN�ZRdOe?eGfdPe@eHfdQeAeIfdReBeJfdSeCeKfdTeDeLfdUeEeMffZSeSD ]ZTeNeT� �q�d
S )VzSSH authentication handlers� )�
TYPE_CHECKING� Awaitable�Dict�List�Optional)�Sequence�Tuple�Type�Union�cast� )� DEFAULT_LANG)�GSSBase�GSSError)� SSHLogger)�
ProtocolError�PasswordChangeRequired�get_symbol_names)�run_in_executor)�Boolean�String�UInt32� SSHPacket�SSHPacketHandler)�
SigningKey)�saslprep�
SASLPrepErrorN)�
SSHConnection�SSHClientConnection)�SSHServerConnection�< �= �? �@ �A �B �
_auth_methods�
ClientAuth�_client_auth_handlers�
ServerAuth�_server_auth_handlersc @ sx e Zd ZdZddded fdd�Zdd �d
ed ed ed
dfdd�Z e
d
e fdd��Z ded d
dfdd�Z
ddd�ZdS )�Authz Parent class for authentication�connr �coroNc C s || _ |j| _|�|�| _d S �N)�_conn�logger�_logger� create_task�_coro)�selfr, r- � r5 �C/usr/local/CyberPanel/lib/python3.10/site-packages/asyncssh/auth.py�__init__N s z
Auth.__init__T��trivial�pkttype�argsr9 �returnc G s | j j|g|�R | |d�� dS )zSend an auth packet)�handlerr9 N)r/ �send_userauth_packet)r4 r: r9 r; r5 r5 r6 � send_packetS s �zAuth.send_packetc C s | j S )z4A logger associated with this authentication handler)r1 �r4 r5 r5 r6 r0 Z s z Auth.loggerc C s | � � | j�|�| _dS )z Create an asynchronous auth taskN)�cancelr/ r2 r3 )r4 r- r5 r5 r6 r2 ` s zAuth.create_taskc C s | j r
| j �� d| _ dS dS )z%Cancel any authentication in progressN)r3 rA r@ r5 r5 r6 rA f s
�z Auth.cancel�r< N)�__name__�
__module__� __qualname__�__doc__r r7 �int�bytes�boolr? �propertyr r0 r2 rA r5 r5 r5 r6 r+ K s ��
�r+ c sx e Zd ZU dZded< dddef� fdd� Zdd
d �Zdd d
�Zddd�Z d dd�dede
e de dd fdd�Z
� ZS )r' z&Parent class for client authenticationr r/ r, �methodc s || _ t� �|| �� � d S r. )�_method�superr7 �_start�r4 r, rK �� __class__r5 r6 r7 s s zClientAuth.__init__r< Nc � � �t �)z2Abstract method for starting client authentication��NotImplementedErrorr@ r5 r5 r6 rN x � �zClientAuth._startc C � dS )zCallback when auth succeedsNr5 r@ r5 r5 r6 �auth_succeeded~ � zClientAuth.auth_succeededc C rV )zCallback when auth failsNr5 r@ r5 r5 r6 � auth_failed� rX zClientAuth.auth_failedT��keyr9 r; r[ r9 c � s* �| j j| jg|�R ||d��I dH dS )z"Send a user authentication requestrZ N)r/ �send_userauth_requestrL )r4 r[ r9 r; r5 r5 r6 � send_request� s ��zClientAuth.send_requestrB )rC rD rE rF �__annotations__rH r7 rN rW rY r r rI r] �
__classcell__r5 r5 rP r6 r' n s
����c @ � e Zd ZdZddd�ZdS )�_ClientNullAuthz'Client side implementation of null authr< Nc � s �| � � I dH dS )z Start client null authenticationN)r] r@ r5 r5 r6 rN � s �z_ClientNullAuth._startrB �rC rD rE rF rN r5 r5 r5 r6 ra � � ra c @ r` )�_ClientGSSKexAuthz3Client side implementation of GSS key exchange authr< Nc � sH �| j �� r| j�d� | j| j �� dd�I dH dS | j jdd� dS )z,Start client GSS key exchange authentication� Trying GSS key exchange authFrZ NT�� next_method)r/ �gss_kex_auth_requestedr0 �debug1r] �get_gss_context�
try_next_authr@ r5 r5 r6 rN � s �
�z_ClientGSSKexAuth._startrB rb r5 r5 r5 r6 rd � rc rd c s� e Zd ZdZee� d�Zdddef� fdd� Zdd
d �Z dd d
�Z
de de de dd fdd�Z
de de de dd fdd�Zde de de dd fdd�Zde de de dd fdd�Zee
eeeeeeiZ� ZS )�_ClientGSSMICAuthz*Client side implementation of GSS MIC auth�MSG_USERAUTH_GSSAPI_r, r rK c s t � �||� d | _d| _d S �NF)rM r7 �_gss�
_got_errorrO rP r5 r6 r7 � s
z_ClientGSSMICAuth.__init__r< Nc � sz �| j �� r4| j�d� | j �� | _| j�� d�dd� | jjD ��}| � t
t | jj��|�I dH dS | j j dd� dS )z#Start client GSS MIC authentication�Trying GSS MIC auth� c s � � | ]}t |�V qd S r. �r )�.0�mechr5 r5 r6 � <genexpr>� � � z+_ClientGSSMICAuth._start.<locals>.<genexpr>NTrf )
r/ �gss_mic_auth_requestedr0 ri rj ro �reset�join�mechsr] r �lenrk )r4 r| r5 r5 r6 rN � s �
"z_ClientGSSMICAuth._startc C sR | j dusJ �| j jr"| j�| j�}| jtt| j �|��dd� dS | �t � dS )z$Finish client GSS MIC authenticationNFr8 )
ro �provides_integrityr/ �get_userauth_request_datarL r? �MSG_USERAUTH_GSSAPI_MICr �sign�%MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE)r4 �datar5 r5 r6 �_finish� s
�z_ClientGSSMICAuth._finish�_pkttype�_pktid�packetc
� s� �|� � }|�� | jdusJ �|| jjvrtd��z%t| jj�I dH }|dus*J �| �tt |�� | jj
r=| � � W dS W dS t ye } z|j
rS| �tt |j
�� | jjdd� W Y d}~dS d}~ww )z&Process a GSS response from the serverNzMechanism mismatchTrf )�
get_string� check_endro r| r r �stepr? �MSG_USERAUTH_GSSAPI_TOKENr �completer� r �token�MSG_USERAUTH_GSSAPI_ERRTOKr/ rk )r4 r� r� r� rv r� �excr5 r5 r6 �_process_response� s& � � ��z#_ClientGSSMICAuth._process_responsec
� s� �|� � }|�� | jdusJ �z"t| jj|�I dH }|r%| �tt|�� | jjr0| � � W dS W dS t
yX } z|j rF| �t t|j �� | j
jdd� W Y d}~dS d}~ww )z#Process a GSS token from the serverNTrf )r� r� ro r r� r? r� r r� r� r r� r� r/ rk �r4 r� r� r� r� r� r5 r5 r6 �_process_token� s" �� ��z _ClientGSSMICAuth._process_tokenc C s@ |� � }|� � }|�� }|�� }|�� | j�d|� d| _dS )z#Process a GSS error from the server�GSS error from server: %sTN)�
get_uint32r� r� r0 ri rp )r4 r� r� r� �_�msgr5 r5 r6 �_process_error� s
z _ClientGSSMICAuth._process_errorc
� s� �|� � }|�� | jdusJ �z
t| jj|�I dH W dS tyC } z| js8| j�dt |�� W Y d}~dS W Y d}~dS d}~ww )z)Process a GSS error token from the serverNr� )
r� r� ro r r� r rp r0 ri �strr� r5 r5 r6 �_process_error_token s � ���z&_ClientGSSMICAuth._process_error_tokenrB )rC rD rE rF r �globals�_handler_namesrH r7 rN r� rG r r� r� r� r� � MSG_USERAUTH_GSSAPI_RESPONSEr� �MSG_USERAUTH_GSSAPI_ERRORr� �_packet_handlersr_ r5 r5 rP r6 rl � s>
�
�
�
�
�
�
�
� �rl c @ r` )�_ClientHostBasedAuthz-Client side implementation of host based authr< Nc
� s� �| j �� I dH \}}}|du r| j jdd� dS | j�d|||j� z| jt|j�t|j�t|�t|�|d�I dH W dS t y^ } z| j�dt
|�� | j �� W Y d}~dS d}~ww )z&Start client host based authenticationNTrf z=Trying host based auth of user %s on host %s with %s host key)r[ zHost based auth failed: %s) r/ �host_based_auth_requestedrk r0 ri � algorithmr] r � public_data�
ValueErrorr� )r4 �keypair� client_host�client_usernamer� r5 r5 r6 rN # s* ��� ���z_ClientHostBasedAuth._startrB rb r5 r5 r5 r6 r� rc r� c @ sR e Zd ZdZee� d�Zddd�Zddd�Zd e d
e d e
ddfd d
�Z e e iZ
dS )�_ClientPublicKeyAuthz-Client side implementation of public key auth�MSG_USERAUTH_PK_r< Nc � sn �| j �� I dH | _| jdu r| j jdd� dS | j�d| jj� | �td�t | jj�t | jj
��I dH dS )z&Start client public key authenticationNTrf �"Trying public key auth with %s keyF) r/ �public_key_auth_requested�_keypairrk r0 ri r� r] r r r� r@ r5 r5 r6 rN @ s �
�
�z_ClientPublicKeyAuth._startc
� s� �| j dusJ �| j�d| j j� z| jtd�t| j j�t| j j�| j dd�I dH W dS tyM } z| j�dt |�� | j
� � W Y d}~dS d}~ww )z Send signed public key requestNzSigning request with %s keyTFrZ zPublic key auth failed: %s) r� r0 ri r� r] r r r� r� r� r/ rk )r4 r� r5 r5 r6 �_send_signed_requestP s ��
���z)_ClientPublicKeyAuth._send_signed_requestr� r� r� c C sX |� � }|� � }|�� | jdusJ �|| jjks || jjkr#td��| �| �� � dS )z Process a public key ok responseNz Key mismatch)r� r� r� r� r� r r2 r� )r4 r� r� r� r� �key_datar5 r5 r6 �_process_public_key_oka s z+_ClientPublicKeyAuth._process_public_key_okrB )rC rD rE rF r r� r� rN r� rG r r� �MSG_USERAUTH_PK_OKr� r5 r5 r5 r6 r� ; s
�
��r� c
@ sf e Zd ZdZee� d�Zddd�Zdeded ed
e ddf
d d �Z
d
e de de ddfdd�Z
ee
iZdS )�_ClientKbdIntAuthz7Client side implementation of keyboard-interactive auth�MSG_USERAUTH_INFO_r< Nc � sV �| j �� I dH }|du r| j jdd� dS | j�d� | �td�t|��I dH dS )z0Start client keyboard interactive authenticationNTrf � Trying keyboard-interactive auth� )r/ �kbdint_auth_requestedrk r0 ri r] r )r4 �
submethodsr5 r5 r6 rN { s � z_ClientKbdIntAuth._start�name� instruction�lang�promptsc � sd �| j �||||�I dH }|du r| j jdd� dS | jttt|��d�dd� |D ��| d� dS )z7Receive and respond to a keyboard interactive challengeNTrf rr c s rs r. rt )ru �rr5 r5 r6 rw � rx z7_ClientKbdIntAuth._receive_challenge.<locals>.<genexpr>r8 )r/ �kbdint_challenge_receivedrk r? �MSG_USERAUTH_INFO_RESPONSEr r} r{ )r4 r� r� r� r� � responsesr5 r5 r6 �_receive_challenge� s �
��
�z$_ClientKbdIntAuth._receive_challenger� r� r� c C s� |� � }|� � }|� � }z|�d�}|�d�}|�d�} W n ty) td�d�w |�� }
g } t|
�D ]%} |� � }
|�� }z|
�d�}W n tyQ td�d�w | �||f� q4| �| � ||| | �� dS )z5Process a keyboard interactive authentication request�utf-8�asciiz)Invalid keyboard interactive info requestN)
r� �decode�UnicodeDecodeErrorr r� �range� get_boolean�appendr2 r� )r4 r� r� r� �
name_bytes�instruction_bytes�
lang_bytesr� r� r� � num_promptsr� r� � prompt_bytes�echo�promptr5 r5 r6 �_process_info_request� s8
�� ��
�z'_ClientKbdIntAuth._process_info_requestrB )rC rD rE rF r r� r� rN r� �
KbdIntPromptsr� rG r r� �MSG_USERAUTH_INFO_REQUESTr� r5 r5 r5 r6 r� v s
�
�
�
�"�r� c s� e Zd ZdZee� d�Zdddef� fdd� Zdd
d �Z d e
d
e
dd fdd�Z ddd�Z ddd�Z
dedededd fdd�ZeeiZ� ZS )�_ClientPasswordAuthz+Client side implementation of password auth�MSG_USERAUTH_PASSWD_r, r rK c s t � �||� d| _d S rn )rM r7 �_password_changerO rP r5 r6 r7 � s
z _ClientPasswordAuth.__init__r< Nc � sZ �| j �� I dH }|du r| j jdd� dS | j�d� | jtd�t|�dd�I dH dS )z$Start client password authenticationNTrf �Trying password authFr8 )r/ �password_auth_requestedrk r0 ri r] r r )r4 �passwordr5 r5 r6 rN � s � �z_ClientPasswordAuth._startr� r� c � s� �| j �||�I dH }|tkr| j jdd� dS | j�d� tt|�\}}d| _| j t
d�t |� d��t |� d��dd�I dH dS )zStart password changeNTrf �Trying to chsnge passwordr� Fr8 )
r/ �password_change_requested�NotImplementedrk r0 ri r �PasswordChangeResponser� r] r r �encode)r4 r� r� �result� old_password� new_passwordr5 r5 r6 �_change_password� s �
�z$_ClientPasswordAuth._change_passwordc C � | j r
d| _ | j�� d S d S rn )r� r/ �password_changedr@ r5 r5 r6 rW � � �z"_ClientPasswordAuth.auth_succeededc C r� rn )r� r/ �password_change_failedr@ r5 r5 r6 rY � r� z _ClientPasswordAuth.auth_failedr� r� r� c C s` |� � }|� � }z |�d�}|�d�}W n ty td�d�w | �� | �| �||�� dS )z!Process a password change requestr� r� z Invalid password change requestN)r� r� r� r rY r2 r� )r4 r� r� r� r� r� r� r� r5 r5 r6 �_process_password_change� s
�z,_ClientPasswordAuth._process_password_changerB )rC rD rE rF r r� r� rH r7 rN r� r� rW rY rG r r� � MSG_USERAUTH_PASSWD_CHANGEREQr� r_ r5 r5 rP r6 r� � s
�
� �r� c s� e Zd ZU dZded< dddededef� fdd � Ze ddd
e
fd d ��Z ded
d
fdd�Z dde
d
d
fdd�Z
ddd�Z� ZS )r) z&Parent class for server authenticationr r/ r, �usernamerK r� c s$ || _ || _t� �|| �|�� d S r. )� _usernamerL rM r7 rN �r4 r, r� rK r� rP r5 r6 r7 s zServerAuth.__init__r< c C s t �)z6Return whether this authentication method is supportedrS ��clsr, r5 r5 r6 � supported � zServerAuth.supportedNc � rR )z2Abstract method for starting server authenticationrS �r4 r� r5 r5 r6 rN rU zServerAuth._startF�partial_successc C s | j �|� dS )z+Send a user authentication failure responseN)r/ �send_userauth_failure)r4 r� r5 r5 r6 � send_failure" s zServerAuth.send_failurec � s �| j �� I dH dS )z+Send a user authentication success responseN)r/ �send_userauth_successr@ r5 r5 r6 � send_success' s �zServerAuth.send_success)FrB )rC rD rE rF r^ r� rH r r7 � classmethodrI r� rN r� r� r_ r5 r5 rP r6 r)
s
��c @ �8 e Zd ZdZedddefdd��Zdeddfd d
�ZdS ) �_ServerNullAuthz'Server side implementation of null authr, r r< c C rV )z>Return that null authentication is never a supported auth modeFr5 r� r5 r5 r6 r� 0 r� z_ServerNullAuth.supportedr� Nc � s �dS )z4Supported always returns false, so we never get hereNr5 r� r5 r5 r6 rN 6 s z_ServerNullAuth._start� rC rD rE rF r� rI r� r rN r5 r5 r5 r6 r� - �
r� c sZ e Zd ZdZdddededef� fdd� Zeddd e fd
d ��Z
ded d fd
d�Z � Z S )�_ServerGSSKexAuthz3Server side implementation of GSS key exchange authr, r r� rK r� c � t � �||||� |�� | _d S r. �rM r7 rj ro r� rP r5 r6 r7 = � z_ServerGSSKexAuth.__init__r< c C � |� � S )z;Return whether GSS key exchange authentication is supported)�gss_kex_auth_supportedr� r5 r5 r6 r� C � z_ServerGSSKexAuth.supportedNc � s� �|� � }|�� | j�d� | j�| j�}| jjr:| j� ||�r:| j�
| j | jj | jj
�I dH r:| �� I dH dS | �� dS )z,Start server GSS key exchange authenticationre N)r� r� r0 ri r/ r rL ro r� �verify�validate_gss_principalr� �user�hostr� r� )r4 r� �micr� r5 r5 r6 rN I s �
�� z_ServerGSSKexAuth._start)
rC rD rE rF r� rH r r7 r� rI r� rN r_ r5 r5 rP r6 r� : s
��r� c
s� e Zd ZdZee� d�Zdddedede dd f
� fd
d � Z
e ddde fd d
��Z
de dd fdd�Zd dd�Zdedede dd fdd�Zdedede dd fdd�Zdedede dd fdd�Zdedede dd fdd�ZeeeeeeeeiZ� ZS ) �_ServerGSSMICAuthz*Server side implementation of GSS MIC authrm r, r r� rK r� r< Nc r� r. r� r� rP r5 r6 r7 a r� z_ServerGSSMICAuth.__init__c C r� )z2Return whether GSS MIC authentication is supported)�gss_mic_auth_supportedr� r5 r5 r6 r� g r� z_ServerGSSMICAuth.supportedc � s� �t � }|�� }t|�D ] }|�|�� � q |�� d}| jjD ]
}||v r*|} nq |s3| �� dS | j �
d� | j� � | � t
t|�� dS )z#Start server GSS MIC authenticationNrq )�setr� r� �addr� r� ro r| r� r0 ri rz r? r� r )r4 r� r| �nr� �matchrv r5 r5 r6 rN m s$ � �
z_ServerGSSMICAuth._startc � s@ �| j �| j| jj| jj�I dH r| �� I dH dS | �� dS )z$Finish server GSS MIC authenticationN)r/ r� r� ro r r r� r� r@ r5 r5 r6 r� � s �
� z_ServerGSSMICAuth._finishr� r� c � s� �|� � }|�� zt| jj|�I dH }|r!| �tt|�� W dS W dS ty[ } z,| �t t
|j �t
|j �tt
|��tt�� |jrL| �tt|j�� | �� W Y d}~dS d}~ww )z#Process a GSS token from the clientN)r� r� r ro r� r? r� r r r� r �maj_code�min_coder� r
r� r� r� r� r5 r5 r6 r� � s$ �����z _ServerGSSMICAuth._process_tokenc C s6 |� � | jjr| jjs| �| �� � dS | �� dS )z7Process a GSS exchange complete message from the clientN)r� ro r� r~ r2 r� r� )r4 r� r� r� r5 r5 r6 �_process_exchange_complete� s z,_ServerGSSMICAuth._process_exchange_completec
� sf �|� � }|�� z
t| jj|�I dH W dS ty2 } z| j�dt|�� W Y d}~dS d}~ww )z)Process a GSS error token from the clientNzGSS error from client: %s) r� r� r ro r� r r0 ri r� r� r5 r5 r6 r� � s � ��z&_ServerGSSMICAuth._process_error_tokenc C sZ |� � }|�� | j�| j�}| jjr'| jjr'| j�||�r'| � | �
� � dS | � � dS )z!Process a GSS MIC from the clientN) r� r� r/ r rL ro r� r~ r� r2 r� r� )r4 r� r� r� r r� r5 r5 r6 � _process_mic� s � z _ServerGSSMICAuth._process_micrB )rC rD rE rF r r� r� r� rH r r7 r� rI r� rN r� rG r� r r� r r� r� r� r� r� r_ r5 r5 rP r6 r \ sN
���
�
�
�
�
�
�
�
� �r c @ r� ) �_ServerHostBasedAuthz-Server side implementation of host based authr, r r< c C r� )z5Return whether host based authentication is supported)�host_based_auth_supportedr� r5 r5 r6 r� � r� z _ServerHostBasedAuth.supportedr� Nc
� s� �|� � }|� � }|� � }|� � }|�� }|� � }|�� z|�d�}t|�d��} W n ttfy9 td�d�w | j� d| ||� | j
� | j ||| ||�I dH r[| �
� I dH dS | �� dS )z&Start server host based authenticationr� z Invalid host-based auth requestNz@Verifying host based auth of user %s on host %s with %s host key)r� �get_consumed_payloadr� r� r r� r r r0 ri r/ �validate_host_based_authr� r� r� )
r4 r� r� r� �client_host_bytes�client_username_bytesr� � signaturer� r� r5 r5 r6 rN � s2 �
��
� z_ServerHostBasedAuth._startr� r5 r5 r5 r6 r
� r� r
c @ r� ) �_ServerPublicKeyAuthz-Server side implementation of public key authr, r r< c C r� )z5Return whether public key authentication is supported)�public_key_auth_supportedr� r5 r5 r6 r� r� z _ServerPublicKeyAuth.supportedr� Nc � s� �|� � }|�� }|�� }|r|�� }|�� }nd}d}|�� |r*| j�d|� n| j�d|� | j�| j|||�I dH rV|rI| � � I dH dS | �
t t |�t |�� dS | �
� dS )z&Start server public key authenticationrr z Verifying request with %s keyr� N)r� r� r r� r0 ri r/ �validate_public_keyr� r� r? r� r r� )r4 r� � sig_presentr� r� r� r r5 r5 r6 rN s, �
� � z_ServerPublicKeyAuth._startr� r5 r5 r5 r6 r � r� r c @ s� e Zd ZdZee� d�Zedddefdd��Z de
dd fd
d �Z d e dd fd
d�Z
dedd fdd�Zdedede
dd fdd�ZeeiZd S )�_ServerKbdIntAuthz7Server side implementation of keyboard-interactive authr� r, r r< c C r� )z?Return whether keyboard interactive authentication is supported)�kbdint_auth_supportedr� r5 r5 r6 r� + r� z_ServerKbdIntAuth.supportedr� Nc � s� �|� � }|� � }|�� z |�d�}|�d�}W n ty% td�d�w | j�d� | j�| j ||�I dH }| �
|�I dH dS )z0Start server keyboard interactive authenticationr� r� z)Invalid keyboard interactive auth requestNr� ) r� r� r� r� r r0 ri r/ �get_kbdint_challenger� �_send_challenge)r4 r� r� �submethods_bytesr� r� � challenger5 r5 r6 rN 1 s" �
��
�z_ServerKbdIntAuth._startr c � s� �t |ttf�r0|\}}}}t|�}dd� |D �}| jtt|�t|�t|�t|�g|�R � dS |r;| �� I dH dS | � � dS )z2Send a keyboard interactive authentication requestc s s$ � | ]
\}}t |�t|� V qd S r. )r r )ru r� r� r5 r5 r6 rw L s � �z4_ServerKbdIntAuth._send_challenge.<locals>.<genexpr>N)
�
isinstance�tuple�listr} r? r� r r r� r� )r4 r r� r� r� r� r� �
prompts_bytesr5 r5 r6 r E s � � � � z!_ServerKbdIntAuth._send_challenger� c � s, �| j �| j|�I dH }| �|�I dH dS )z7Validate a keyboard interactive authentication responseN)r/ �validate_kbdint_responser� r )r4 r� �next_challenger5 r5 r6 �_validate_responseW s ��z$_ServerKbdIntAuth._validate_responser� r� c C sp |� � }g }t|�D ] }|�� }z|�d�}W n ty# td�d�w |�|� q
|�� | �| � |�� dS )z6Process a keyboard interactive authentication responser� z*Invalid keyboard interactive info responseN)
r� r� r� r� r� r r� r� r2 r$ ) r4 r� r� r� �
num_responsesr� r� �response_bytes�responser5 r5 r6 �_process_info_response^ s �� z(_ServerKbdIntAuth._process_info_response)rC rD rE rF r r� r� r� rI r� r rN �KbdIntChallenger �KbdIntResponser$ rG r( r� r� r5 r5 r5 r6 r & s
�
��r c @ r� ) �_ServerPasswordAuthz+Server side implementation of password authr, r r< c C r� )z3Return whether password authentication is supported)�password_auth_supportedr� r5 r5 r6 r� { r� z _ServerPasswordAuth.supportedr� Nc
� s �|� � }|�� }|r|�� nd}|�� zt|�d��}t|�d��}W n ttfy3 td�d�w z9|rJ| j� d� | j
� | j ||�I dH }n| j� d� | j
�
| j |�I dH }|rg| �� I dH W dS | �� W dS ty� } z| �tt|j�t|j�� W Y d}~dS d}~ww )z$Start server password authenticationrr r� z Invalid password auth requestNr� r� )r� r� r� r r� r� r r r0 ri r/ �change_passwordr� �validate_passwordr� r� r r? r� r r� r� ) r4 r� �password_change�password_bytes�new_password_bytesr� r� r� r� r5 r5 r6 rN � s< �
�
� ����z_ServerPasswordAuth._startr� r5 r5 r5 r6 r+ x r� r+ �alg�client_handler�server_handlerr< c C s t �| � |t| < |t| < dS )z!Register an authentication methodN)r& r� r( r* )r2 r3 r4 r5 r5 r6 �register_auth_method� s
r5 c C s dd� t D �S )z.Return a list of supported client auth methodsc S s g | ]}|d kr|�qS )� noner5 )ru rK r5 r5 r6 �
<listcomp>� s �z5get_supported_client_auth_methods.<locals>.<listcomp>)r( r5 r5 r5 r6 �!get_supported_client_auth_methods� s r8 r, r rK c C s |t v r t| | |�S dS )z/Look up the client authentication method to useN)r& r( )r, rK r5 r5 r6 �lookup_client_auth� s r9 r c C s* g }t D ]}t| �| �r|�|� q|S )z.Return a list of supported server auth methods)r& r* r� r� )r, � auth_methodsrK r5 r5 r6 �!get_supported_server_auth_methods� s
�r; r� r� c C s4 t �|�}|r|�| �r|| |||�S | �d� dS )z/Look up the server authentication method to useFN)r* �getr� r� )r, r� rK r� r= r5 r5 r6 �lookup_server_auth� s
r= r6 s gssapi-keyexs gssapi-with-mics hostbaseds publickeys keyboard-interactives password)UrF �typingr r r r r r r r r
r � constantsr
�gssr r �loggingr �miscr r r r r� r r r r r �
public_keyr r r �asyncio�
connectionr r r r� rI r� �KbdIntNewChallenger) r* r� r� r� r� r� r� r� r� r� r� r� r& rH r^ r( r* r+ r' ra rd rl r� r� r� r� r) r� r� r r
r r r+ r5 r8 r9 r; r= �_auth_method_list�_argsr5 r5 r5 r6 �<module> s� # {;HL#
"y()R-�
� �
�
�
��
��
�