wOgF6dZddlZddlZ ddlmZn#e$r ddlmZYnwxYwddlmZddl m Z ddl m Z m Z ddlmZmZejeZdZd Zd Zd Zd Zd ZdZdZgdZgdZdZeej dZ!e"dedddddddddd Z#dZ$dZ%dZ&dZ'dZ(dZ)dZ*d Z+d!Z,d"Z-d#Z.d*d$Z/d%Z0d+d&Z1d'Z2d(Z3d)Z4dS),z core ~~~~ Core functionality shared between the extension and the decorator. :copyright: (c) 2016 by Cory Dolphin. :license: MIT, see LICENSE for more details. N)Iterable) timedelta) string_types)request current_app)Headers MultiDictzAccess-Control-Allow-OriginzAccess-Control-Allow-MethodszAccess-Control-Allow-HeaderszAccess-Control-Expose-Headersz Access-Control-Allow-CredentialszAccess-Control-Max-AgezAccess-Control-Request-MethodzAccess-Control-Request-Headers)GETHEADPOSTOPTIONSPUTPATCHDELETE) CORS_ORIGINS CORS_METHODSCORS_ALLOW_HEADERSCORS_EXPOSE_HEADERSCORS_SUPPORTS_CREDENTIALS CORS_MAX_AGECORS_SEND_WILDCARDCORS_AUTOMATIC_OPTIONSCORS_VARY_HEADERCORS_RESOURCESCORS_INTERCEPT_EXCEPTIONSCORS_ALWAYS_SEND_FLASK_CORS_EVALUATED*FTz/*) originsmethods allow_headersexpose_headerssupports_credentialsmax_age send_wildcardautomatic_options vary_header resourcesintercept_exceptions always_sendct|tr3d|D}d}t||dSt|trt |ifgSt|t r d|DSt|trt |ifgStd)Nc6g|]\}}t||fSre_fix.0kvs I/var/www/AppWebDeiv/myenv/lib/python3.11/site-packages/flask_cors/core.py z#parse_resources..Fs&BBB1fQii^BBBcD|\}}tt|SN)lenget_regexp_pattern)pair maybe_regex_s r5pattern_lengthz'parse_resources..pattern_lengthKs"!NK)+6677 7r7T)keyreversec0g|]}t|ifSr.r/)r2rs r5r6z#parse_resources..Ws"333AB333r7z(Unexpected value for resources argument.) isinstancedictitemssortedrr0r RegexObject ValueError)r)r?s r5parse_resourcesrJBs)T""ECB 0A0ABBB  8 8 8i("$$$ $ I| , , E ""B'(( Ix ( ( E333333 I , ,E ""B'((CDDDr7cP |jS#t$rt|cYSwxYw)z Helper that returns regexp pattern from given value. :param regexp: regular expression to stringify :type regexp: _sre.SRE_Pattern or str :returns: string representation of given regexp pattern :rtype: str )patternAttributeErrorstr)regexps r5r;r;bs<~ 6{{s  %%c4|d}d|v}|rtd||r2|drtddgSt||rtd|gStddS|d r5|r|d rdSdgSt d |DStd dS) Nr .*z&CORS request received with 'Origin' %sr&z=Allowed origins are set to '*'. Sending wildcard CORS header.rz:The request's Origin header matches. Sending CORS headers.zBThe request's Origin header does not match any of allowed origins.r+r$c0g|]}t||Sr.)probably_regex)r2os r5r6z$get_cors_origins..s%GGG^A5F5FG1GGGr7zThe request did not contain an 'Origin' header. This means the browser or client did not request CORS, ensure the Origin Header is set.)getLOGdebug try_match_anyrG)optionsrequest_originr wildcards r5get_cors_originsr\qsDkk)$$GH' :NKKK   O44  IIU V V V5L>7 3 3  IIR U U U## # IIZ [ [ [4 ] # #  I{{122 tu GGgGGGHH H \ ] ] ]tr7c|rTd|dD}tfd|}dt|SdS)Nc6g|]}|Sr.)strip)r2hs r5r6z%get_allow_headers..s MMM17799MMMr7,cJt|dS)Nr")rXrU)r`rYs r5z#get_allow_headers..smAw{{?'C'CDDr7, )splitfilterjoinrG)rYacl_request_headersrequest_headersmatching_headerss` r5get_allow_headersrksp 3MM.A.G.G.L.LMMM" D D D D    yy 011222 4r7crt||d}t}|s|S|D]}|t||d|t <|dr d|t <|dkr|td}|r||dvrkt||t|t<|d|t<|d|t<ntd |d r|td krnt!|d d ksHt!|d ks5t#t%t&|d r|ddtd|DS)NOriginr#r$truer rr!r%ztThe request's Access-Control-Request-Method header does not match allowed methods. CORS headers will not be applied.r(rr Varyc3(K|] \}}|||fVdSr9r.r1s r5 z#get_cors_headers..s/==11=aV======r7)r\rUr add ACL_ORIGINACL_EXPOSE_HEADERSACL_CREDENTIALSACL_REQUEST_METHODupperrkACL_REQUEST_HEADERSACL_ALLOW_HEADERS ACL_MAX_AGE ACL_METHODSrVinfor:anymaprSrF)rYrirequest_methodorigins_to_setheadersoriginacl_request_methods r5get_cors_headersrs%g/B/B8/L/LMMNkkG  (( J''''")++.>"?"?G {{)***#) "",001CRHHNNPP  M"4 I8N8N"N"N *;7ODWDWXkDlDl)m)mG% &#*;;y#9#9GK #*;;y#9#9GK HHL M M M{{=!! * : # % % '++i(())A--.!!A%%#ngkk)&<&<==>>& KK ) ) ) == === = ==r7ct|trtd|St |jt s3t |jtst|j|_t|tjtj }tdt|| D] \}}|j ||!|S)z Performs the actual evaluation of Flas-CORS options and actually modifies the response object. This function is used both in the decorator and the after_request callback z*CORS have been already evaluated, skippingzSettings CORS headers: %s)hasattrFLASK_CORS_EVALUATEDrVrWrDrrr rrmethodrNrFrs)resprYheaders_to_setr3r4s r5set_cors_headersrst)** >??? t|W - -/dlI66/ .. %gwOONII)3~+>+>???$$&&1 A Kr7cpttrdSgd}tfd|DS)NT) r\]?$^[r()c3 K|]}|vV dSr9r.)r2cr=s r5rrz!probably_regex..s(AAA$AAAAAAr7)rDrHr~)r=common_regex_charss` r5rSrSsM+{++CtPPPAAAA.@AAABBBr7c|dkrdn|S)z Replace the invalid regex r'*' with the valid, wildcard regex r'/.*' to enable the CORS app extension to have a more user friendly api. rrQr.)regs r5r0r0s 4KK55S(r7c:tfd|DS)Nc38K|]}t|VdSr9) try_match)r2rLinsts r5rrz try_match_any..s-@@Gyw''@@@@@@r7)r~)rpatternss` r5rXrXs& @@@@x@@@ @ @@r7c8t|trtj||St |r!tj||tjS ||kS#t$r ||kcYSwxYw)zASafely attempts to match a pattern or string to a request origin.)flags)rDrHrematchrS IGNORECASElowerrM)rZr=s r5rrs+{++1x ^444  $ $1x ^2=IIII 1!''))[->->-@-@@ @ 1 1 1![0 0 0 0 1s)BBBct}|t||r|D]}||t |S)z Compute CORS options for an application by combining the DEFAULT_OPTIONS, the app's configuration-specified options and any dictionaries passed. The last specified option wins. )DEFAULT_OPTIONScopyupdateget_app_kwarg_dictserialize_options) appInstancedictsrYds r5get_cors_optionsr sj ""$$G NN%k22333   A NN1     W % %%r7c^|pt}t|difdtDS)z;Returns the dictionary of CORS specific app configurations.configci|]S}||dd|TS)Ncors_r)rUrreplace)r2r3 app_configs r5 z&get_app_kwarg_dict..6s[    >>!   (  '2&& q(9(9 ( ( (r7)rgetattrCONFIG_OPTIONS)rapprs @r5rr/sK  %+Ch++J       r7c|dSt|tsAt|tr,ddt |DSt |S)z A more flexible str function which intelligently handles stringifying strings, lists and other iterables. The results are lexographically sorted to ensure generated responses are consistent when iterables such as Set are used. Nrdc34K|]}t|VdSr9)rN)r2items r5rrzflexible_str..Hs(;;tT;;;;;;r7)rDrrrgrGrN)objs r5 flexible_strr=sd {t \ * *3))yy;;vc{{;;;;;;3xxr7cr||vr2t||}|r|n|||<dSdSr9)rrx) options_dictr@rxvalues r5serialize_optionrMsH l\#.//-2=EKKMMM Sr7cft|tr|gSt|ts|gS|S)zT Wraps scalars or string types as a list, or returns the iterable instance. )rDrr)rs r5ensure_iterablerSs;$ %%v h ' 'v  r7c4dt|DS)Nc,g|]}t|Sr.r/)r2xs r5r6z(sanitize_regex_param.._s 6 6 6!F1II 6 6 6r7)r)params r5sanitize_regex_paramr^s 6 6u55 6 6 66r7c|pi}|D]&}|tvrtd|'t |d|d<t |d|d<d|dvr|dr|drtdt|dt|d d t|d tr7tt|d  |d <|S) zL A helper method to serialize and processes the options dictionary. z'Unknown option passed to Flask-CORS: %sr r"rQr$r&z}Cannot use supports_credentials in conjunction withan origin string of '*'. See: http://www.w3.org/TR/cors/#resource-requestsr#r!T)rxr%)rkeysrrVwarningrrUrIrrDrrNint total_seconds)optsrYr@s r5rrbsKzr!!Gyy{{HH o % % KKA3 G G G.gkk).D.DEEGI3GKK4P4PQQGO  """w/E'F"7SbKc"HII I W.///Wit4444'++i(()44J WY%7%E%E%G%G!H!HII  Nr7r9)F)5__doc__rloggingcollections.abcr ImportError collectionsdatetimersixrflaskrrwerkzeug.datastructuresrr getLogger__name__rVrtr|rzrurvr{rwry ALL_METHODSrrtypecompilerHrErrJr;r\rkrrrSr0rXrrrrrrrrr.r7r5rs %(((((((%%%$$$$$$$$%&&&&&&&&66666666g!!+ , 244& 56JJJ &&&/d:2:b>>"" $s*%(&*,1#%*)-#'!&,0#' ) ) )EEE@   ---`   ->->->`<CCC)))AAA 1 1 1 & & &        >>>>   777s  !!