B

���g(��@s�dd
lm
Z

ddlZddlZddlZddlZddlZddlZddlZddl	Z	ddl
mZ
ddl
m
Z

ddl
mZ
ddlmZ
ejr�ddlmZ
dd	lmZ
dd
lmZ
ddlmZ
ddlmZ
dd
lmZ
ddlmZm Z m!Z!
ddl"m#Z#
ddl$m%Z%
yddl&Z&e&j'Z(Wn.e)e*fk
�
r6


dZ&Gdd�de+�Z(YnXddl,m-Z-
ddl,m.Z.
ddl,m/Z/
ddl0m1Z1
ddl2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8
ddl9m:Z:m;Z;m<Z<m=Z=
ddl>m?Z?
ddlm@ZA
ddlmBZBmCZCmDZDmEZEmFZF
ddlGmHZHmIZI
ddlJmKZK
eLZLeMZMe�NeO�
ZPddd �ZQe�Rd!dd�ZSe�Td"�
ZUeVed#�ZWGd$d%�d%e�ZGd&d'�d'e�ZXGd(d)�d)ejY�ZZd*d+�
d,d-d-d.d.d/d/d/d/d/d0d1d/d/d2d3d)d4�d5d6�Z[dKd7d8d3d9d:�d;d<�Z\d=d/d>d?�d@dA�Z]d8dB�
dCdD�Z^GdEdF�dF�Z_e&�s�e_ZXeXZ`dLdGd/d8dH�dIdJ�ZadS)M�)
�annotationsN)
�HTTPConnection)
�
HTTPException)
�ResponseNotReady)
�timeout)
�Literal�
)
�HTTPResponse)
�_TYPE_PEER_CERT_RET_DICT)
�SSLTransport)
�HTTPHeaderDict)
�assert_header_parsing)�_DEFAULT_TIMEOUT�
_TYPE_TIMEOUT�Timeout)
�to_str)
�
wait_for_readc
@seZ
dZd
S)�BaseSSLErrorN)�__name__�
__module__�__qualname__�rr�</usr/local/lib/python3.7/site-packages/urllib3/connection.pyr$s
r)
�
_TYPE_BODY)
�ProxyConfig)
�_ResponseOptions)
�__version__)�ConnectTimeoutError�HeaderParsingError�NameResolutionError�NewConnectionError�
ProxyError�SystemTimeWarning)�SKIP_HEADER�SKIPPABLE_HEADERS�
connection�ssl_)
�body_to_chunks)
�assert_fingerprint)�create_urllib3_context�is_ipaddress�resolve_cert_reqs�resolve_ssl_version�ssl_wrap_socket)�CertificateError�match_hostname)
�Url�Pi�
)�http�httpsi�z[^-!#$%&'*+.^_`|~0-9a-zA-Z]�auditcs�
eZ
dZUd
ZedZded<ejej	dfg
Z
ded<dZd	ed
<dZded
<ded<ded<ded<d	ed<ded<ded<ded<ded<dOe
dde
ddd�dddddd d!d"d#d$�	�f
d%d&�Zedd'�
d(d)��
Zejdd#d*�d+d)��
Zd,d'�
d-d.�ZdPddd/dd#d0��f
d1d2�
Zd#d'�
d3d4�Zed	d'�
d5d6��
Zed	d'�
d7d8��
Zed	d'�
d9d:��
Zd#d'�
�f
d;d<�ZdQddd	d	d#d=��f
d>d?�
Zddd#d@��f
dAdB�ZdRddCdCdCdD�dddEd/d	d	d	d	d#dF�	dGdH�ZdSdddEd/d#dI�dJdK�ZdLd'�
�f
dMdN�Z�ZS)Tra�
    Based on :class:`http.client.HTTPConnection` but provides an extra constructor
    backwards-compatibility layer between older and newer Pythons.

    Additional keyword parameters are used to configure attributes of the connection.
    Accepted parameters include:

    - ``source_address``: Set the source address for the current connection.
    - ``socket_options``: Set specific options on the underlying socket. If not specified, then
      defaults are loaded from ``HTTPConnection.default_socket_options`` which includes disabling
      Nagle's algorithm (sets TCP_NODELAY to 1) unless the connection is behind a proxy.

      For example, if you wish to enable TCP Keep Alive in addition to the defaults,
      you might pass:

      .. code-block:: python

         HTTPConnection.default_socket_options + [
             (socket.SOL_SOCKET, socket.SO_KEEPALIVE, 1),
         ]

      Or you may want to disable the defaults by passing an empty list (e.g., ``[]``).
    r2ztyping.ClassVar[int]�default_portrz0typing.ClassVar[connection._TYPE_SOCKET_OPTIONS]�default_socket_optionsF�bool�is_verifiedNzbool | None�proxy_is_verified�int�	blocksizeztuple[str, int] | None�source_addressz&connection._TYPE_SOCKET_OPTIONS | None�socket_options�_has_connected_to_proxyz_ResponseOptions | None�_response_optionsz
str | None�_tunnel_hostz
int | None�_tunnel_port�_tunnel_schemei@)rr<r;r=�proxy�proxy_config�strrz&None | connection._TYPE_SOCKET_OPTIONSz
Url | NonezProxyConfig | None�None)	�host�portrr<r;r=rCrD�returnc	sPt�j
|
|t�|�
||d
�
||_||_||_d|_d|_d|_	d|_
d|_dS)N)rGrHrr<r;F)�super�__init__r�resolve_default_timeoutr=rCrDr>r?r@rArB)	�selfrGrHrr<r;r=rCrD)
�	__class__rrrK�s











zHTTPConnection.__init__)
rIc

Cs|j�
d
�
S)a�
        Getter method to remove any trailing dots that indicate the hostname is an FQDN.

        In general, SSL certificates don't include the trailing dot indicating a
        fully-qualified domain name, and thus, they don't validate properly when
        checked against a domain name that includes the dot. In addition, some
        servers may not expect to receive the trailing dot when provided.

        However, the hostname with trailing dot is critical to DNS resolution; doing a
        lookup with the trailing dot will properly only resolve the appropriate FQDN,
        whereas a lookup without a trailing dot will search the system's search domain
        list. Thus, it's important to keep the original host around for use only in
        those cases where it's appropriate (i.e., when doing DNS lookup to establish the
        actual TCP connection across which we're going to send HTTP requests).
        �
.)�	_dns_host�rstrip)
rMrrrrG�szHTTPConnection.host)�valuerIcCs
|
|_d
S)z�
        Setter for the `host` property.

        We assume that only urllib3 uses the _dns_host attribute; httplib itself
        only uses `host`, and it seems reasonable that other libraries follow suit.
        N)
rP)rMrRrrrrG�sz
socket.socketc

Cs�y$tj
|j|jf|j|j|jd
�}
Wn�tjk
rX
}
zt	|j
||�|�Wdd}~XYnrtk
r�
}
z"t|d|j
�d|j�d��|�Wdd}~XYn4t
k
r�
}
zt|d|���|�Wdd}~XYnXtr�t�d||j
|j�
|
S)zoEstablish a socket connection and set nodelay settings on it.

        :return: New socket connection.
        )r<r=NzConnection to z timed out. (connect timeout=�
)z&Failed to establish a new connection: zhttp.client.connect)r%�create_connectionrPrHrr<r=�socket�gaierrorrrG�
SocketTimeoutr�OSErrorr �_HAS_SYS_AUDIT�sysr4)rM�sock�
errr�	_new_conn�s(






 








zHTTPConnection._new_connztyping.Mapping[str, str] | None)rGrH�headers�schemerIcs4|d
krtd|�d��
�
t
�j|
||d�
||_dS)N)r2r3z$Invalid proxy scheme for tunneling: z", must be either 'http' or 'https')rHr^)�
ValueErrorrJ�
set_tunnelrB)rMrGrHr^r_)
rNrrra�s



zHTTPConnection.set_tunnelc

Cs.|��|_
|jrd
|_|��
t|j�
|_dS)NT)r]r[r@r>�_tunnelr7rC)
rMrrr�connect�s



zHTTPConnection.connectc

Cs
|jdkS)
N)
r[)
rMrrr�	is_closed
szHTTPConnection.is_closedc

Cs|jdkrd
St
|jdd�S)NFg)
r)r[r)
rMrrr�is_connected
s


zHTTPConnection.is_connectedc


Cs|jS)
N)
r>)
rMrrr�has_connected_to_proxy

sz%HTTPConnection.has_connected_to_proxyc

sFzt��
�
Wdd|_d
|_d|_d
|_d|_d|_d|_d|_	XdS)NF)
rJ�closer[r8r9r>r?r@rArB)
rM)
rNrrrg
s








zHTTPConnection.close)�method�url�	skip_host�skip_accept_encodingrIcs<t�
|
�
}|r(td
|
�d|���d��
�
t�j|
|||d�S)�z+Method cannot contain non-token characters z (found at least rS)rjrk)�_CONTAINS_CONTROL_CHAR_RE�searchr`�grouprJ�
putrequest)rMrhrirjrk�match)
rNrrrp
s





zHTTPConnection.putrequest)�header�valuesrIcsbtd
d�|D�
�
s&t
�j|
f
|��
n8t|
���
tkr^d�dd�tt�
D�
�
}td|�d��
�
dS)	rlc
ss |]}
t|
t
�o|
tkV
qdS)
N)�
isinstancerEr#)�.0�
vrrr�	<genexpr>3
sz+HTTPConnection.putheader.<locals>.<genexpr>z', 'c
Ssg|]}
t�
|
�
�qSr)rE�title)rurrrrr�
<listcomp>7
sz,HTTPConnection.putheader.<locals>.<listcomp>z(urllib3.util.SKIP_HEADER only supports '�
'N)	�anyrJ�	putheaderr�lowerr$�join�sortedr`)rMrrrsZskippable_headers)
rNrrr|1
s




zHTTPConnection.putheaderT)�chunked�preload_content�decode_content�enforce_content_lengthz_TYPE_BODY | None)	rhri�bodyr^r�r�r�r�rIcCs�
|jdk	r|j�
|j�

t|
||||d
�|_|dkr8i}tdd�|D�
�
}	d|	k}
d|	k}|j|
||
|d�
t||
|jd�}|j	}
|j
}|r�d|	kr�|�d	d
�
nRd|	kr�d}nDd|	kr�d
}n6d}|dkr�|
dk	r�d
}|�d	d
�
n|�dt|�
�
d|	k�
r|�dt
��
x"|��D]\}}|�||�
�
qW|��
|
dk	�
r�xV|
D]N}|�
sV�
qHt|t��
rl|�d�
}|�
r�|�dt|�
|f�

n
|�|�

�
qHW|�
r�|�d�

dS)N)�request_method�request_urlr�r�r�c
ss|]}
t|
�
��
V
qdS)
N)rr})ru�
krrrrwb
sz)HTTPConnection.request.<locals>.<genexpr>zaccept-encodingrG)rkrj)rhr;ztransfer-encodingzTransfer-Encodingr�zcontent-lengthFTzContent-Lengthz
user-agentz
User-Agentzutf-8s%x
%b
s0

)r[�
settimeoutrrr?�	frozensetrpr'r;�chunks�content_lengthr|rE�_get_default_user_agent�items�
endheadersrt�encode�send�len)rMrhrir�r^r�r�r�r��header_keysrkrjZ
chunks_and_clr�r�rrrR�chunkrrr�request?
s^








































zHTTPConnection.request)rhrir�r^rIcCs(tj
d
tdd�
|j|
|||dd�
dS)z�
        Alternative to the common request method, which sends the
        body with chunked encoding and not as one block
        z�HTTPConnection.request_chunked() is deprecated and will be removed in urllib3 v2.1.0. Instead use HTTPConnection.request(..., chunked=True).�)�category�
stacklevelT)r�r^r�N)�warnings�warn�DeprecationWarningr�)rMrhrir�r^rrr�request_chunked�
s


zHTTPConnection.request_chunkedr	c

s�|jd
krt
��
|j}
d
|_|j�|j�

ddlm}
t���}yt	|j
�

Wn@ttfk
r�
}
zt
jdt||
j�|dd�
Wd
d
}~XYnXt|j
���
}||||j|j|j|
j|
j||
j|
j|
jd�}|S)a
        Get the response from the server.

        If the HTTPConnection is in the correct state, returns an instance of HTTPResponse or of whatever object is returned by the response_class variable.

        If a request has not been sent or if a previous response has not be handled, ResponseNotReady is raised. If the HTTP response indicates that the connection should be closed, then it will be closed before the response is returned. When the connection is closed, the underlying socket is closed.
        Nr)
r	z$Failed to parse headers (url=%s): %sT)
�exc_info)r�r^�status�version�reasonr�r��original_responser�r�r�)r?rr[r�r�responser	rJ�getresponser
�msgr�	TypeError�log�warning�_url_from_connectionr�rr�r�r�r�r�r�r�r�)rMZresp_optionsr	�httplib_response�hper^r�)
rNrrr��
s:























zHTTPConnection.getresponse)
N)NNr2)FF)NN)NN)rrr�__doc__�port_by_schemer5�__annotations__rU�IPPROTO_TCP�TCP_NODELAYr6r8r9rrK�propertyrG�setterr]rarcrdrerfrgrpr|r�r�r��
__classcell__rr)
rNrrSsV










(
"

	




$[
rcs.
eZ
dZUd
ZedZdZded<dZded<dZ	ded<dZ
d	ed
<dZded<dZded
<dZ
ded<dZded<d*eddejddddddddddddddddd�dddddddddddddddd	dddddddd��f
dd�Zd+ddddddddd	dd�
d d!�Zdd"�
d#d$�Zdd%d&d'�d(d)�Z�ZS),�HTTPSConnectionz�
    Many of the parameters to this constructor are passed to the underlying SSL
    socket by means of :py:func:`urllib3.util.ssl_wrap_socket`.
    r3Nzint | str | None�	cert_reqsz
str | None�ca_certs�ca_cert_dirzNone | str | bytes�ca_cert_data�ssl_versionz
int | None�ssl_minimum_version�ssl_maximum_versionr(i@)rr<r;r=rCrDr��assert_hostnamer(�server_hostname�ssl_contextr�r�r�r�r�r��	cert_file�key_file�key_passwordrErztuple[str, int] | Noner:z&None | connection._TYPE_SOCKET_OPTIONSz
Url | NonezProxyConfig | NonezNone | str | Literal[False]zssl.SSLContext | NonerF)rGrHrr<r;r=rCrDr�r�r(r�r�r�r�r�r�r�r�r�r�r�rIc
s�t�j
|
|||||||d
�
||_||_||_|
|_||_|
|_||_||_	||_
||_|oftj
�|�
|_|oxtj
�|�
|_||_|	dkr�|jdk	r�|jj}	ntd�
}	|	|_dS)N)rHrr<r;r=rCrD)rJrKr�r�r�r�r�r�r(r�r�r��os�path�
expanduserr�r�r��verify_moder+r�)rMrGrHrr<r;r=rCrDr�r�r(r�r�r�r�r�r�r�r�r�r�r�)
rNrrrK�
s6
























zHTTPSConnection.__init__)
r�r�r�r�r�r�r(r�r�rIc

Cs�tj
d
tdd�
|dkr4|jdk	r,|jj}ntd�
}|
|_||_||_||_	||_
||_|oftj
�|�
|_|oxtj
�|�
|_|	|_dS)zX
        This method should only be called once, before the connection is used.
        z�HTTPSConnection.set_cert() is deprecated and will be removed in urllib3 v2.1.0. Instead provide the parameters to the HTTPSConnection constructor.r�)r�r�N)r�r�r�r�r�r+r�r�r�r�r�r(r�r�r�r�r�r�)
rMr�r�r�r�r�r�r(r�r�rrr�set_cert8s"













zHTTPSConnection.set_cert)
rIc
Cs�|��|_
}
|j}d
}|jdk	rX|jdkrD|�|j|
�|_
}
d}d|_|��
|j}|jdk	rh|j}t	j
��tk}|r�t
�dt�d�t�
t|
|j|j|j|j|j|j|j|j|j|j||j||j|jd�}|j|_
|j|_t |j!�
|_dS)NFr3TzSystem time is way off (before z5). This will probably lead to SSL verification errors)r[r�r�r�r�r�r�r�r�r�r�r�r��
tls_in_tlsr�r()"r]r[rGr@rB�_connect_tls_proxyr>rbr��datetime�date�today�RECENT_DATEr�r�r"�#_ssl_wrap_socket_and_match_hostnamer�r�r�r�r�r�r�r�r�r�r�r�r(rUr8r7rC)rMr[r�r��is_time_off�sock_and_verifiedrrrrcasJ




























zHTTPSConnection.connectz
socket.socketz
ssl.SSLSocket)�hostnamer[rIcCs\t�
t|j�}|j}t||j|j|j|j	|j
|j|j|
||j
|jd
d
d
dd�}|j|_|jS)zY
        Establish a TLS connection to the proxy using the provided SSL context.
        NF)r�r�r�r�r�r�r�r�r�r�r(r�r�r�r�)�typing�castrrDr�r�r�r�r�r�r�r�r�r�r(r8r9rU)rMr�r[rDr�r�rrrr��s*

















z"HTTPSConnection._connect_tls_proxy)
N)	NNNNNNNNN)rrrr�r�r5r�r�r�r�r�r�r�r�r(rrr6rKr�rcr�r�rr)
rNrr��
sT

























D%







";r�c@s"eZ
dZUd
Zded<ded<dS)�_WrappedAndVerifiedSocketz[
    Wrapped socket and whether the connection is
    verified after the TLS handshake
    zssl.SSLSocket | SSLTransportrUr7r8N)rrrr�r�rrrrr��s

r�F)
r�z
socket.socketzNone | str | intz
int | Nonez
str | NonezNone | str | byteszNone | str | Literal[False]zssl.SSLContext | Noner7)r[r�r�r�r�r�r�r�r�r�r�r�r(r�r�r�rIc
Cs�
d
}|dkr*d}tt
|�
||t|
�
d�}n|}t|
�
|_|sT|sT|d
ksTtjsTtjsZd
|_|s||	s||
s||r|t|d�r||�	�
|
dk	r�|
�
d�
}d|kr�|d|�d�
�}t|�
r�|}
t
||||||	|
|
||d�
}y�|r�t|jdd	�
|�
nX|jtjk�
rB|j�
sB|d
k	�
rB|��}|�
rd
}nt|d
d
��
p.d
}t||�
p<|
|�
t||jtjk�
pZt|�
d�Stk
�
r~


|��
�YnXdS)a2
Logic for constructing an SSLContext from all TLS parameters, passing
    that down into ssl_wrap_socket, and then doing certificate verification
    either via hostname or fingerprint. This function exists to guarantee
    that both proxies and targets have the same behavior when connecting via TLS.
    FNT)r�r�r�r��load_default_certsz[]�
%)
r[�keyfile�certfiler�r�r�r�r�r�r�)
�binary_form�hostname_checks_common_name)rUr8)r)r,r+r�r&�IS_PYOPENSSL�HAS_NEVER_CHECK_COMMON_NAME�check_hostname�hasattrr��strip�rfindr*r-�_assert_fingerprint�getpeercert�ssl�	CERT_NONE�getattr�_match_hostnamer��
CERT_REQUIREDr7�
BaseExceptionrg)r[r�r�r�r�r�r�r�r�r�r�r�r(r�r�r��default_ssl_context�context�
normalized�ssl_sock�certr�rrrr��sz













































r�z_TYPE_PEER_CERT_RET_DICT | NonerErF)r��asserted_hostnamer�rIc
Csd|
�d
�
}t
|�
r|}
yt||
|�
Wn8tk
r^
}
zt�d|
|�
||_�Wdd}~XYnXdS)Nz[]z@Certificate did not match expected hostname: %s. Certificate: %s)r�r*r/r.r�r��
_peer_cert)r�r�r��stripped_hostnamer\rrrr�Bs









r��	Exceptionr!)�err�proxy_schemerIcCsXd
�t
�dt|�
����
}d|kp(d|k}d}td|rB|
dkrB|nd��|�}||_|S)	N�
 z[^a-z]zwrong version numberzunknown protocolz�. Your proxy appears to only use HTTP and not HTTPS, try changing your proxy URL to be HTTP. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#https-proxy-error-http-proxyzUnable to connect to proxyr3rl)r~�re�splitrEr}r!�	__cause__)r�r�Zerror_normalizedZis_likely_http_proxyZhttp_proxy_warningZnew_errrrr�_wrap_proxy_error\s


r�)
rIcCs
d
t��S)Nzpython-urllib3/)
rrrrrr�ts
r�c
@seZ
dZd
ZdS)�DummyConnectionz-Used to detect a failed ConnectionCls import.N)rrrr�rrrrr�xs
r�z HTTPConnection | HTTPSConnection)�connr�rIcCs(t|t
�rd
nd}t||j|j|
d�jS)zUReturns the URL from a given connection. This is mainly used for testing and logging.r3r2)r_rGrHr�)rtr�r0rGrHri)r�r�r_rrrr��sr�)
F)
N)b�
__future__rr��loggingr�r�rUrZr�r��http.clientr�_HTTPConnectionrrrrW�
TYPE_CHECKING�typing_extensionsrr�r	Z	util.ssl_r
Zutil.ssltransportr�_collectionsrZ
util.responser
Zutil.timeoutrrrZ	util.utilrZ	util.waitrr��SSLErrorr�ImportError�AttributeErrorr�Z_base_connectionrrr�_versionr�
exceptionsrrrr r!r"�utilr#r$r%r&Zutil.requestr'r(r�r)r*r+r,r-Zutil.ssl_match_hostnamer.r/Zutil.urlr0�ConnectionError�BrokenPipeError�	getLoggerrr�r�r�r��compilermr�rYr��
NamedTupler�r�r�r�r�r��VerifiedHTTPSConnectionr�rrrr�<module>
s|

























 








P4p