Dj3UdZddlmZddlZddlmZejeje dZ e e d5Z e Zded<e Zded <e Zded <e D]Zed Zered rAed reeddtedreeddee dddn #1swxYwYeedeDzdeDzZddZddZdS)a6 These functions validate RP_ID and APP_ID according to simplified TLD+1 rules, using a bundled copy of the public suffix list fetched from: https://publicsuffix.org/list/public_suffix_list.dat Advanced APP_ID values pointing to JSON files containing valid facets are not supported by this implementation. ) annotationsN)urlparsezpublic_suffix_list.datrbzset[str] _suffix_set _wildcard_set_exception_setutf8z//!*.ch|]}d|S)r ).0ws E/home/thesage/.hermes/venv/lib/python3.11/site-packages/fido2/rpid.py r=s333888333ch|]}d|S)r r)res rrr=s6W6W6W1w1ww6W6W6Wrdomainstrreturnboolc|tvrdS|tvrdS|dd}t|dkr|dtvrdSdS)zvCheck if a domain is a public suffix per the PSL algorithm. https://github.com/publicsuffix/list/wiki/Format FT.r r )rrsplitlenr)rpartss r_is_public_suffixr As^ u t LLa E 5zzQ58}44t 5rrp_idoriginc|sdSt|}|j}|jdkr1|j|fdkr$|jdkr|r|dsdS||krdS|r)|d|zrt |sdSdS)zChecks if a Webauthn RP ID is usable for a given origin. :param rp_id: The RP ID to validate. :param origin: The origin of the request. :return: True if the RP ID is usable by the origin, False if not. Fhttps)http localhostr%z .localhostTr)rhostnameschemeendswithr )r!r"urlhosts r verify_rp_idr,Ps u 6  C rBsP8#""""" !!!!!! GLL224L M M  T)T $aCEEK!!!!!ceeM####"suuN$$$$ $ $f%%++-- **400     S ! ! $   vabbz * * * *   t $ $ $   fQRRj ) ) ) ) OOF # # # # $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 633]33336W6W6W6W6WW      sC-E  EE