o l>j. @sdZddlmZddlZddlmZddlmZmZm Z ddl m Z m Z m Z mZmZmZmZmZmZmZmZmZmZmZddlmZmZejdd Zejd d Zd ZdUddZ ej!edde ddVddZ"dWddZ#dXd"d#Z$dYd%d&Z%e&d!ddddd'e e fdZd6d7Z'e&d8dddddd'ddd'e e f d[dAdBZ(d\dDdEZ)e&dFej*d'dGdHd ej*d'dIdJd ej*d'dKdLd ddddd'e e f d]dPdQZ+e&dRdde e fd^dSdTZ,dS)_z$Authentication and session commands.) annotationsN)PyiCloudService)CLIAbortCLIState get_state)DEFAULT_LOG_LEVELDEFAULT_OUTPUT_FORMATAcceptTermsOptionChinaMainlandOptionHttpProxyOptionHttpsProxyOptionInteractiveOptionLogLevelOptionNoVerifySslOptionOutputFormatOptionPasswordOptionSessionDirOptionUsernameOptionstore_command_options)console_kv_table console_tablez#Manage authentication and sessions.)helpz"Manage stored keyring credentials.zTrusted Sessionctx typer.ContextreturnNonecCs$|jdurt|tdS)z5Show subgroup help when invoked without a subcommand.N)invoked_subcommandtyperechoget_helpExit)rr!O/home/thesage/.local/lib/python3.10/site-packages/pyicloud/cli/commands/auth.py _group_root!s r#keyringT)nameinvoke_without_commandcallbackpathobjectexistscCs|r|S|dS)zNRender a canonical storage path with an inline missing marker for text output.z (missing)r!)r(r*r!r!r"_storage_path_display1s r+payloaddict[str, object]list[tuple[str, object]]c Cshd|dfd|dft|dfd|dfd|d fd |d fd t|d |dfdt|d|dfgS)z1Build text-mode rows for one auth status payload.Account account_name Authenticated authenticatedtrusted_sessionz Requires 2FA requires_2faz Requires 2SA requires_2saPassword in Keyringhas_keyring_password Session File session_pathhas_session_file Cookie Jarcookiejar_pathhas_cookiejar_file)TRUSTED_SESSIONr+)r,r!r!r"_auth_status_rows9s&      r?staterstatuscCs&|j||jd|||}|S)N)r0r7)r0r7auth_storage_info)r@apirAr,r!r!r" _auth_payloadTs rDboolc sjsr}|s jrdgddSjdSfdd|D}jrEt|dkr;|ddSd|ddSt|dkr\|d}jtdt |dSjt d d t d d d gdd|DdSdS)zRCheck if the current state has an authenticated session, and print details if not.Fr2accountscsg|] \}}t||qSr!)rD).0rCrAr@r!r" isz._auth_status_authenticated..rT Auth StatuszActive iCloud Sessionsr/r6zSession File ExistszCookie Jar ExistscSs.g|]}|d|d|d|d|dfqS)r0r3r7r:r=r!)rHr,r!r!r"rJs) has_explicit_usernameactive_session_probes json_output write_jsonconsoleprintnot_logged_in_messagelenrr?rr>)r@ active_probespayloadsr,r!rIr"_auth_status_authenticated^sP  rWFusernamer session_dirr http_proxyr https_proxyr no_verify_sslr output_formatr log_levelrc Cst||||||||dt|}t|sdS|} | } | dr(|| n|t|| | } |jr<| | dS|j t dt | dS)z3Show the current authentication and session status.rXrYrZr[r\r]r^Nr2rL)rrrW get_probe_apiget_auth_statusremember_accountprune_local_accountsrDrOrPrQrRrr?) rrXrYrZr[r\r]r^r@rCrAr,r!r!r" auth_statuss8     rdloginpasswordrchina_mainlandr interactiver accept_termsr c Cst|||||||||| | | d t|} | } t| | d| j| j| jd}| jr0| |dS| j d| j t dd|dft |d fd |d fd |d fgdS)z*Authenticate and persist a usable session.) rXrYrfrgrhrirZr[r\r]r^T)r2r3r4r5NzAuthenticated session is ready.z Auth Sessionr/r0r3r8r9r;r<) rr get_login_apirDis_trusted_sessionr4r5rOrPrQrRrr>)rrXrYrfrgrhrirZr[r\r]r^r@rCr,r!r!r" auth_loginsN      rlPyiCloudService | NonecCsn|}|s|jr|dgddS|j|dSt|dkr/t|dd|D|d\}}|S)NFrFrKcSsg|]\}}|jqSr!)r0)rHrC_statusr!r!r"rJsz-_auth_logout_find_account..r) rNrOrPrQrRrSrTr#multiple_logged_in_accounts_message)r@rUrCrnr!r!r"_auth_logout_find_accounts   rplogoutz--keep-trustedz2Preserve trusted-browser state for the next login.z--all-sessionsz)Attempt to sign out all browser sessions.z--remove-keyringzADelete the stored password for the selected account after logout. keep_trusted all_sessionsremove_keyringc  Cs2t||||||| | dt|} | jr| } | n t| } | dur&dS| | z | j||dd} WntyF}zt d|d}~wwd}|rQ| | j }| | j | j j| j j|d| }| jrm| |dS|dr{|r{| jd dS|dr| jd dS|r| jd dS| jd dS) z,Log out and clear local session persistence.r_NT)rrrsclear_local_sessionz$Failed to clear local session state.F)r0r9r<stored_password_removedremote_logout_confirmedz?Logged out, cleared local session, and removed stored password.z%Logged out and cleared local session.zPCleared local session, removed stored password; remote logout was not confirmed.z7Cleared local session; remote logout was not confirmed.)rrrMr`rarprbrqOSErrorrdelete_keyring_passwordr0rcsessionr9r<rOrPrQrR)rrrrsrtrXrYrZr[r\r]r^r@rCresultexckeyring_removedr,r!r!r" auth_logoutsj        r~deletecCsrt|||||dt|}|jstd||j}|j|d}|jr*||dS|j |r4ddSddS)z!Delete a stored keyring password.)rXrYr]r^z:The --username option is required for auth keyring delete.)r0rvNz%Deleted stored password from keyring.z.No stored password was found for that account.) rrrMrryrXrOrPrQrR)rrXrYr]r^r@deletedr,r!r!r"auth_keyring_deleteds.   r)rrrr)r(r)r*r)rr))r,r-rr.)r@rrAr-rr-)r@rrrE)rrrXrrYrrZr r[r r\rr]rr^rrr)rrrXrrYrrfrrgr rhr rir rZr r[r r\rr]rr^rrr)r@rrrm)rrrrrErsrErtrErXrrYrrZr r[r r\rr]rr^rrr) rrrXrrYrr]rr^rrr)-__doc__ __future__rr pyicloud.baserpyicloud.cli.contextrrrpyicloud.cli.optionsrrr r r r r rrrrrrrpyicloud.cli.outputrrTyperapp keyring_appr>r# add_typerr+r?rDrWcommandrdrlrpOptionr~rr!r!r!r"s  @       5, ;U