o l>j3@s:UdZddlmZddlZddlmZejeje dZ e e dTZ e Zded<e Zded <e Zded <e D]4Zed ZerKed rLq;ed r[eeddq;edrjeeddq;eeq;Wdn1szwYeeddeDBddeDBZdddZdddZdS) a6 These functions validate RP_ID and APP_ID according to simplified TLD+1 rules, using a bundled copy of the public suffix list fetched from: https://publicsuffix.org/list/public_suffix_list.dat Advanced APP_ID values pointing to JSON files containing valid facets are not supported by this implementation. ) annotationsN)urlparsezpublic_suffix_list.datrbzset[str] _suffix_set _wildcard_set_exception_setutf8z//!*.cCh|]}d|qS)r ).0wrr?/home/thesage/.local/lib/python3.10/site-packages/fido2/rpid.py =rcCr )r r)rerrrr=rdomainstrreturnboolcCsD|tvrdS|tvr dS|dd}t|dkr |dtvr dSdS)zvCheck if a domain is a public suffix per the PSL algorithm. https://github.com/publicsuffix/list/wiki/Format FT.r r )rrsplitlenr)rpartsrrr_is_public_suffixAs rrp_idorigincCsx|sdSt|}|j}|jdkr%|j|fdkr%|jdkr#|r#|ds%dS||kr+dS|r:|d|r:t|s:dSdS)zChecks if a Webauthn RP ID is usable for a given origin. :param rp_id: The RP ID to validate. :param origin: The origin of the request. :return: True if the RP ID is usable by the origin, False if not. Fhttps)http localhostr!z .localhostTr)rhostnameschemeendswithr)rrurlhostrrr verify_rp_idPs r()rrrr)rrrrrr)__doc__ __future__ros urllib.parserpathjoindirname__file__ tld_fnameopenfsetr__annotations__rr_linedecodestrip_entry startswithaddsortedsuffixesrr(rrrrs2