+ VCi>)Rt^RIt^RIt^RIt^RIHtHt^RIHt^RI H t H t ^RI H t ^RIHt^RIHt]P$!]4t!RR ] 4tR#) z oauthlib.oauth2.rfc6749.endpoint.metadata ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ An implementation of the `OAuth 2.0 Authorization Server Metadata`. .. _`OAuth 2.0 Authorization Server Metadata`: https://tools.ietf.org/html/rfc8414 N) grant_typesutils)AuthorizationEndpoint) BaseEndpointcatch_errors_and_unavailability)IntrospectEndpoint)RevocationEndpoint) TokenEndpointcna]tRt^toRt/R3Rlt]R Rl4tRRltRt Rt R t R t R t R tVtR#)MetadataEndpointaOAuth2.0 Authorization Server Metadata endpoint. This specification generalizes the metadata format defined by `OpenID Connect Discovery 1.0` in a way that is compatible with OpenID Connect Discovery while being applicable to a wider set of OAuth 2.0 use cases. This is intentionally parallel to the way that OAuth 2.0 Dynamic Client Registration Protocol [`RFC7591`_] generalized the dynamic client registration mechanisms defined by OpenID Connect Dynamic Client Registration 1.0 in a way that is compatible with it. .. _`OpenID Connect Discovery 1.0`: https://openid.net/specs/openid-connect-discovery-1_0.html .. _`RFC7591`: https://tools.ietf.org/html/rfc7591 Tc\V\4'gQhVFp\V\4'dKQh \P!V4W0nWnW nVP4VnR#)N) isinstancedictr__init__ raise_errors endpointsinitial_claimsvalidate_metadata_serverclaims)selfrrrendpoints&&&& L/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/metadata.pyrMetadataEndpoint.__init__(sc&$''''!Hh 55 55" d#("$335 Nc TRRRR/pV\P!VP4^3#)z!Create metadata response z Content-Typezapplication/jsonzAccess-Control-Allow-Origin*)jsondumpsr)ruri http_methodbodyheaderss&&&&&rcreate_metadata_response)MetadataEndpoint.create_metadata_response3s2 . )3  4;;/44rcXVP'gR#W!9d%V'd\RPV44hR#V'd\P!W,4'g"\RPW!V,44hRW,9gRW,9gRW,9d"\RPW!V,44hR#V'dAW,P R4'g"\RPW!V,44hR#V'd\ W,\4'g"\R PW!V,44hW,F;p\ V\4'dK\R PW!V,V44h R#R#) Nzkey {} is a mandatory metadata.zkey {}: {} must be an HTTPS URL?&#z8key {}: {} must not contain query or fragment componentshttpzkey {}: {} must be an URLzkey {}: {} must be an Arrayz/array {}: {} must contains only string (not {})) r ValueErrorformatris_secure_transport startswithr liststr)rarraykey is_requiredis_listis_url is_issuerelems&&&&&&& rvalidate_metadata"MetadataEndpoint.validate_metadata>sS      !B!I!I#!NOO,,UZ88 !B!I!I#UXz!Z[[ej C5:$5 9J ![!b!bcfnqhr!stt:K:((00 !!E!EcQT:!VWW !$,,$%V%]%]^ailcmos%tuu#rc VPPVPP44VPRRR.4VP VRRR7VP VRRR7VP VRRRR7R #) z If the token endpoint is used in the grant type, the value of this parameter MUST be the same as the value of the "grant_type" parameter passed to the token endpoint defined in the grant type definition. %token_endpoint_auth_methods_supportedclient_secret_postclient_secret_basicTr20token_endpoint_auth_signing_alg_values_supportedtoken_endpointr1r3N) _grant_typesextendkeys setdefaultr6rrrs&&&rvalidate_metadata_token(MetadataEndpoint.validate_metadata_tokenWs   !6!6!;!;!=>ADXZoCpq v'NX\] v'Ycgh v'7TRVWrc VPR\\RVPP 4444VPRRR.4RVR,9dVP P R4VPVRRRR7VPVRRR 7R VR,9dVPR ,p\V\P4'g\VR 4'd VPpVPR \VPP 444VPVR RR 7VPVR RRR7R#)response_types_supportedc VR8g#)none)xs&rBMetadataEndpoint.validate_metadata_authorization..gsV rresponse_modes_supportedqueryfragmenttokenimplicitT)r1r2r<code default_grant code_challenge_methods_supportedauthorization_endpointr?N)rCr-filter_response_typesrBr@appendr6r rAuthorizationCodeGranthasattrrU_code_challenge_methods)rrr code_grants&&& rvalidate_metadata_authorization0MetadataEndpoint.validate_metadata_authorizationes@4v&;X=U=U=Z=Z=\]^ `4w 6KL f78 8    $ $Z 0 v'At]ab v'A4P V67 7!11&9Jj+*L*LMMRYZdfuRvRv'55   @":#E#E#J#J#LM O  " "6+MW[ " \ v'?TZ^_rcVPRRR.4VPVRRR7VPVRRR7VPVRRRR7R#) *revocation_endpoint_auth_methods_supportedr:r;Tr<5revocation_endpoint_auth_signing_alg_values_supportedrevocation_endpointr?NrCr6rDs&&&rvalidate_metadata_revocation-MetadataEndpoint.validate_metadata_revocation|sfF/1FG I v'S]ab v'^hlm v'<$W[\rcVPRRR.4VPVRRR7VPVRRR7VPVRRRR7R#) -introspection_endpoint_auth_methods_supportedr:r;Tr<8introspection_endpoint_auth_signing_alg_values_supportedintrospection_endpointr?NrerDs&&&rvalidate_metadata_introspection0MetadataEndpoint.validate_metadata_introspectionsfI/1FG I v'V`de v'akop v'?TZ^_rc 0\P!VP4pVPVRRRR7VPVRRR7VPVRRR7VPVRRR7VPVR RR7VPVR RR7VPVR RR7.VnVP Fp\ V\4'dVPW4\ V\4'dVPW4\ V\4'dVPW4\ V\4'gKVPW4K VPR VP4VPVR RR7V#) aN Authorization servers can have metadata describing their configuration. The following authorization server metadata values are used by this specification. More details can be found in `RFC8414 section 2`_ : issuer REQUIRED authorization_endpoint URL of the authorization server's authorization endpoint [`RFC6749#Authorization`_]. This is REQUIRED unless no grant types are supported that use the authorization endpoint. token_endpoint URL of the authorization server's token endpoint [`RFC6749#Token`_]. This is REQUIRED unless only the implicit grant type is supported. scopes_supported RECOMMENDED. response_types_supported REQUIRED. Other OPTIONAL fields: jwks_uri, registration_endpoint, response_modes_supported grant_types_supported OPTIONAL. JSON array containing a list of the OAuth 2.0 grant type values that this authorization server supports. The array values used are the same as those used with the "grant_types" parameter defined by "OAuth 2.0 Dynamic Client Registration Protocol" [`RFC7591`_]. If omitted, the default value is "["authorization_code", "implicit"]". token_endpoint_auth_methods_supported token_endpoint_auth_signing_alg_values_supported service_documentation ui_locales_supported op_policy_uri op_tos_uri revocation_endpoint revocation_endpoint_auth_methods_supported revocation_endpoint_auth_signing_alg_values_supported introspection_endpoint introspection_endpoint_auth_methods_supported introspection_endpoint_auth_signing_alg_values_supported code_challenge_methods_supported Additional authorization server metadata parameters MAY also be used. Some are defined by other specifications, such as OpenID Connect Discovery 1.0 [`OpenID.Discovery`_]. .. _`RFC8414 section 2`: https://tools.ietf.org/html/rfc8414#section-2 .. _`RFC6749#Authorization`: https://tools.ietf.org/html/rfc6749#section-3.1 .. _`RFC6749#Token`: https://tools.ietf.org/html/rfc6749#section-3.2 .. _`RFC7591`: https://tools.ietf.org/html/rfc7591 .. _`OpenID.Discovery`: https://openid.net/specs/openid-connect-discovery-1_0.html issuerT)r1r4jwks_uri)r3scopes_supportedr<service_documentationui_locales_supported op_policy_uri op_tos_urigrant_types_supported)copydeepcopyrr6r@rr r rErr_rrfrrlrCrDs& rr)MetadataEndpoint.validate_metadata_serversjTt223 vxTTR vz$? v'94H v'>tL v'=tL vtD v|DAH(M22,,V>($9::44VF($67711&C($67744VF' 143D3DE v'>M r)r@rrrr)GETNN)FFFF)__name__ __module__ __qualname____firstlineno____doc__rrr"r6rEr_rfrlr__static_attributes____classdictcell__) __classdict__s@rr r sT *,$ 6%5%5v2 X`.]`bbrr )rrwrloggingrr authorizationrbaserr introspectr revocationrrRr getLoggerr{logr rKrrrsE !0?**  !W|Wr