o
    ßý°j_O  ã                   @  sÆ  U d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl	Z	d dl
Zd dlZd dlmZ d dlmZ d dlmZ d dlmZ d dlmZ d dlmZ d d	lmZ d
dlmZ d
dlmZ d
dlmZ d
dlm Z  d
dl!m"Z" d
dl#m$Z$ d
dl%m&Z& d
dl'm(Z( d
dl)m*Z* ddl+m,Z, ddl-m.Z. ddl-m/Z/ ddl-m0Z0 ej1r¼d dl2m3Z3 d dl2m4Z4 d dl2m5Z5 dZ6d/d d!„Z7da8d"e9d#< d0d$d%„Z:G d&d'„ d'ƒZ;d1d+d,„Z<G d-d.„ d.ƒZ=dS )2é    )ÚannotationsN)Ú	ExitStack)ÚBytesIO)Úchain)ÚValue)Úbasename)Újoin)Úadler32é   )Ú_log)ÚNotFound)ÚSecurityError)Úparse_cookie)Úhost_is_trusted)Úgen_salt)Ú	send_file)ÚRequest)ÚResponseé   )ÚConsole)ÚDebugFrameSummary)ÚDebugTraceback)Úrender_console_html)ÚStartResponse)ÚWSGIApplication)ÚWSGIEnvironmenti€:	 ÚpinÚstrÚreturnc                 C  s$   t  | › d� dd¡¡ ¡ d d… S )Nz added saltzutf-8Úreplaceé   )ÚhashlibÚsha1ÚencodeÚ	hexdigest)r   © r%   úŠ/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/werkzeug/debug/__init__.pyÚhash_pin,   s   $r'   ústr | bytes | NoneÚ_machine_idc                  C  s    t d urt S ddd„} | ƒ a t S )Nr   r(   c               	   S  sà  d} dD ]1}zt |dƒ�}| ¡  ¡ }W d   ƒ n1 sw   Y  W n	 ty,   Y qw |r5| |7 }  nqz$t ddƒ�}| | ¡  ¡  d¡d 7 } W d   ƒ n1 sTw   Y  W n	 tyc   Y nw | rh| S z*ddlm} dd	lm} |g d
¢|d� ¡ d }t	 
d|¡}|d ur‘| d¡W S W n ttfy�   Y nw tjdkrîdd l}z<| |jdd|j|jB ¡�$}	| |	d¡\}
}||jkrÏ|
 ¡ W  d   ƒ W S |
W  d   ƒ W S 1 sÜw   Y  W d S  tyí   Y d S w d S )Nó    )z/etc/machine-idz/proc/sys/kernel/random/boot_idÚrbz/proc/self/cgroupó   /r
   r   )ÚPIPE)ÚPopen)Úioregz-cÚIOPlatformExpertDevicez-dÚ2)Ústdouts   "serial-number" = <([^>]+)r   Úwin32zSOFTWARE\Microsoft\CryptographyÚMachineGuid)ÚopenÚreadlineÚstripÚOSErrorÚ
rpartitionÚ
subprocessr-   r.   ÚcommunicateÚreÚsearchÚgroupÚImportErrorÚsysÚplatformÚwinregÚOpenKeyÚHKEY_LOCAL_MACHINEÚKEY_READÚKEY_WOW64_64KEYÚQueryValueExÚREG_SZr#   )ÚlinuxÚfilenameÚfÚvaluer-   r.   ÚdumpÚmatchrB   ÚrkÚguidÚ	guid_typer%   r%   r&   Ú	_generate9   sz   ÿ€ÿþÿ€ÿÿþÿÿ

ü
õ$óýýz!get_machine_id.<locals>._generate©r   r(   )r)   )rR   r%   r%   r&   Úget_machine_id3   s
   
DrT   c                   @  s$   e Zd ZdZddd„Zdd
d„ZdS )Ú_ConsoleFramez]Helper class so that we can reuse the frame console code for the
    standalone console.
    Ú	namespaceúdict[str, t.Any]c                 C  s   t |ƒ| _d| _d S )Nr   )r   ÚconsoleÚid)ÚselfrV   r%   r%   r&   Ú__init__†   s   

z_ConsoleFrame.__init__Úcoder   r   út.Anyc                 C  s   | j  |¡S ©N)rX   Úeval)rZ   r\   r%   r%   r&   r_   Š   s   z_ConsoleFrame.evalN)rV   rW   )r\   r   r   r]   )Ú__name__Ú
__module__Ú__qualname__Ú__doc__r[   r_   r%   r%   r%   r&   rU   �   s    
rU   Úappr   ú#tuple[str, str] | tuple[None, None]c              
     s°  t j d¡}d}d‰|dkrdS |dur%| dd¡ ¡ r%d|v r#|}n|‰t| dt t| ¡j	j
ƒ}zt ¡ }W n tttfyE   d}Y nw tj |¡}||t| dt| ƒjƒt|d	dƒg}tt ¡ ƒtƒ g}t ¡ }t||ƒD ]}	|	stqot|	tƒr}|	 ¡ }	| |	¡ qo| d
¡ d| ¡ dd… › �}
ˆdu r©| d¡ t| ¡ dƒd›dd… ‰|du rÔdD ]"‰ t ˆƒˆ  dkrÑd !‡ ‡fdd„t"dt ˆƒˆ ƒD ƒ¡} ||
fS q¯ˆ}||
fS )aQ  Given an application object this returns a semi-stable 9 digit pin
    code and a random key.  The hope is that this is stable between
    restarts to not make debugging particularly frustrating.  If the pin
    was forcefully disabled this returns `None`.

    Second item in the resulting tuple is the cookie name for remembering.
    ÚWERKZEUG_DEBUG_PINNÚoff)NNú-Ú ra   r`   Ú__file__s
   cookiesaltÚ__wzdé   s   pinsalté   Ú09dé	   )é   é   é   r   c                 3  s(   � | ]}ˆ||ˆ  …   ˆ d ¡V  qdS )Ú0N)Úrjust)Ú.0Úx©Ú
group_sizeÚnumr%   r&   Ú	<genexpr>Ú   s
   € ÿ
ÿz*get_pin_and_cookie_name.<locals>.<genexpr>)#ÚosÚenvironÚgetr   Ú	isdecimalÚgetattrÚtÚcastÚobjectÚ	__class__ra   ÚgetpassÚgetuserr?   ÚKeyErrorr8   r@   ÚmodulesÚtyper`   r   ÚuuidÚgetnoderT   r!   r"   r   Ú
isinstancer#   Úupdater$   ÚintÚlenr   Úrange)rd   r   ÚrvÚmodnameÚusernameÚmodÚprobably_public_bitsÚprivate_bitsÚhÚbitÚcookie_namer%   rw   r&   Úget_pin_and_cookie_nameŽ   sZ   
ÿ
ü



þ÷r™   c                   @  sÌ   e Zd ZU dZded< ded< 							
	
dBdCdd„ZedDdd„ƒZejdEdd„ƒZedFdd„ƒZ	dGd%d&„Z
dHd-d.„ZdId/d0„ZdJd2d3„ZdKd5d6„ZdLd7d8„ZdMd9d:„ZdId;d<„ZdId=d>„ZdNd@dA„Zd	S )OÚDebuggedApplicationa4  Enables debugging support for a given application::

        from werkzeug.debug import DebuggedApplication
        from myapp import app
        app = DebuggedApplication(app, evalex=True)

    The ``evalex`` argument allows evaluating expressions in any frame
    of a traceback. This works by preserving each frame with its local
    state. Some state, such as context globals, cannot be restored with
    the frame by default. When ``evalex`` is enabled,
    ``environ["werkzeug.debug.preserve_context"]`` will be a callable
    that takes a context manager, and can be called multiple times.
    Each context manager will be entered before evaluating code in the
    frame, then exited again, so they can perform setup and cleanup for
    each call.

    :param app: the WSGI application to run debugged.
    :param evalex: enable exception evaluation feature (interactive
                   debugging).  This requires a non-forking server.
    :param request_key: The key that points to the request object in this
                        environment.  This parameter is ignored in current
                        versions.
    :param console_path: the URL for a general purpose console.
    :param console_init_func: the function that is executed before starting
                              the general purpose console.  The return value
                              is used as initial namespace.
    :param show_hidden_frames: by default hidden traceback frames are skipped.
                               You can show them by setting this parameter
                               to `True`.
    :param pin_security: can be used to disable the pin based security system.
    :param pin_logging: enables the logging of the pin system.

    .. versionchanged:: 2.2
        Added the ``werkzeug.debug.preserve_context`` environ key.
    ú
str | NoneÚ_pinr   Ú_pin_cookieFúwerkzeug.requestú/consoleNTrd   r   ÚevalexÚboolÚrequest_keyÚconsole_pathÚconsole_init_funcú't.Callable[[], dict[str, t.Any]] | NoneÚshow_hidden_framesÚpin_securityÚpin_loggingr   ÚNonec	           	      C  s®   |sd }|| _ || _i | _i | _|| _|| _|| _|| _tdƒ| _	t
dƒ| _|| _|rMtj d¡dkrL|rLtddƒ | jd u rEtddƒ ntdd	| jƒ nd | _d
dg| _d S )Nrl   ÚBÚWERKZEUG_RUN_MAINÚtrueÚwarningz * Debugger is active!z- * Debugger PIN disabled. DEBUGGER UNSECURED!Úinfoz * Debugger PIN: %sz
.localhostz	127.0.0.1)rd   r    ÚframesÚframe_contextsr¢   r£   r¤   r¦   r   Úsecretr   Ú_failed_pin_authr¨   r{   r|   r}   r   r   Útrusted_hosts)	rZ   rd   r    r¢   r£   r¤   r¦   r§   r¨   r%   r%   r&   r[     s.   



€
zDebuggedApplication.__init__c                 C  s&   t | dƒst| jƒ}|\| _| _| jS )Nrœ   ©Úhasattrr™   rd   rœ   r�   ©rZ   Ú
pin_cookier%   r%   r&   r   9  s   

zDebuggedApplication.pinrL   c                 C  s   |d u r	d | _ d S || _ d S r^   )rœ   )rZ   rL   r%   r%   r&   r   @  s   

c                 C  s&   t | dƒst| jƒ}|\| _| _| jS )zThe name of the pin cookie.r�   r´   r¶   r%   r%   r&   Úpin_cookie_nameH  s   

z#DebuggedApplication.pin_cookie_namer|   r   Ústart_responser   út.Iterator[bytes]c                 c  sJ  � g }| j r|j|d< d}z|  ||¡}|E dH  t|dƒr%| ¡  W dS W dS  ty¤ } zqt|dƒr8| ¡  t|d| j d�}|jD ]}|| j	t
|ƒ< || jt
|ƒ< qDt|  |¡ƒ}|j| j oe|  |¡| j|d�}	t|	ddd	�}
z
|
||ƒE dH  W n tyŒ   |d
  d¡ Y nw |d
  d | ¡ ¡¡ W Y d}~dS d}~ww )z6Run the application and conserve the traceback frames.zwerkzeug.debug.preserve_contextNÚcloser   )ÚskipÚhide)r    r±   Úevalex_trustediô  ú	text/html)ÚstatusÚmimetypezwsgi.errorszpDebugging middleware caught exception in streamed response at a point where response headers were already sent.
ri   )r    Úappendrd   rµ   r»   Ú	Exceptionr   r¦   Ú
all_framesr¯   rY   r°   r¡   Úcheck_pin_trustÚrender_debugger_htmlÚcheck_host_trustr±   r   Úwriter   Úrender_traceback_text)rZ   r|   r¹   ÚcontextsÚapp_iterÚeÚtbÚframeÚ
is_trustedÚhtmlÚresponser%   r%   r&   Údebug_applicationP  sF   €


ÿ

ýÿû&€áz%DebuggedApplication.debug_applicationÚrequestr   ÚcommandrÎ   ú!DebugFrameSummary | _ConsoleFramer   c                 C  st   |   |j¡s	tƒ S | j t|ƒg ¡}tƒ �}|D ]}| |¡ qt| 	|¡dd�W  d  ƒ S 1 s3w   Y  dS )zExecute a command in a console.r¿   ©rÁ   N)
rÇ   r|   r   r°   r}   rY   r   Úenter_contextr   r_   )rZ   rÓ   rÔ   rÎ   rÊ   Ú
exit_stackÚcmr%   r%   r&   Úexecute_command€  s   $üz#DebuggedApplication.execute_commandc                 C  sz   |   |j¡s	tƒ S d| jvr*| jdu ri }nt|  ¡ ƒ}| d| j¡ t|ƒ| jd< t	|  
|j¡ƒ}tt| j|d�dd�S )zDisplay a standalone shell.r   Nrd   )r±   r¾   r¿   rÖ   )rÇ   r|   r   r¯   r¤   ÚdictÚ
setdefaultrd   rU   r¡   rÅ   r   r   r±   )rZ   rÓ   ÚnsrÏ   r%   r%   r&   Údisplay_console’  s   

þz#DebuggedApplication.display_consolerJ   c                 C  sl   t dt|ƒƒ}zt t|¡}W n ty   tƒ  Y S w |du r#tƒ S tt|ƒd@ ƒ}t	t
|ƒ|j||d�S )z0Return a static resource from the shared folder.ÚsharedNl   ÿÿ )Údownload_nameÚetag)r   r   ÚpkgutilÚget_dataÚ__package__r8   r   r   r	   r   r   r|   )rZ   rÓ   rJ   ÚpathÚdatará   r%   r%   r&   Úget_resource¤  s   
ÿÿz DebuggedApplication.get_resourceúbool | Nonec                 C  s’   | j du rdS | jjdkrdS t|ƒ | j¡}|rd|vrdS | dd¡\}}zt|ƒ}W n
 ty7   Y dS w |t	| j ƒkrAdS t
 
¡ t |k S )a!  Checks if the request passed the pin test.  This returns `True` if the
        request is trusted on a pin/cookie basis and returns `False` if not.
        Additionally if the cookie's stored pin hash is wrong it will return
        `None` so that appropriate action can be taken.
        NTé
   Fú|r   )r   r²   rL   r   r}   r¸   Úsplitr�   Ú
ValueErrorr'   ÚtimeÚPIN_TIME)rZ   r|   ÚvalÚts_strÚpin_hashÚtsr%   r%   r&   rÅ   µ  s    
ÿz#DebuggedApplication.check_pin_trustc                 C  s   t | d¡| jƒS )NÚ	HTTP_HOST)r   r}   r³   )rZ   r|   r%   r%   r&   rÇ   Ð  s   z$DebuggedApplication.check_host_trustc                 C  s^   | j  ¡ � | j j}|d | j _W d   ƒ n1 sw   Y  t |dkr*d¡ d S d¡ d S )Nr   rp   g      @g      à?)r²   Úget_lockrL   rí   Úsleep)rZ   Úcountr%   r%   r&   Ú_fail_pin_authÓ  s
   þ z"DebuggedApplication._fail_pin_authc           	      C  s  |   |j¡s	tƒ S d}d}|  |j¡}t t| j¡}d}|du r'|  ¡  d}n,|r,d}n'| j	j
dkr5d}n|jd }| ¡  dd¡| dd¡krOd| j	_
d}n|  ¡  tt ||d	œ¡d
d�}|rz|j| jtt ¡ ƒ› dt|ƒ› �dd|jd� |S |r‚| | j¡ |S )zAuthenticates with the pin.FNTré   r   rh   ri   r   )ÚauthÚ	exhaustedzapplication/jsonrÖ   rê   ÚStrict)ÚhttponlyÚsamesiteÚsecure)rÇ   r|   r   rÅ   r€   r�   r   r   r÷   r²   rL   Úargsr7   r   r   ÚjsonÚdumpsÚ
set_cookier¸   r�   rí   r'   Ú	is_secureÚdelete_cookie)	rZ   rÓ   rù   rø   Útrustr   Ú
bad_cookieÚentered_pinr�   r%   r%   r&   Úpin_authÚ  sF   
þû	þzDebuggedApplication.pin_authc                 C  sB   |   |j¡s	tƒ S | jr| jdurtddƒ tdd| jƒ tdƒS )zLog the pin if needed.Nr®   z= * To enable the debugger you need to enter the security pin:z * Debugger pin code: %sri   )rÇ   r|   r   r¨   r   r   r   )rZ   rÓ   r%   r%   r&   Úlog_pin_request  s   ÿz#DebuggedApplication.log_pin_requestút.Iterable[bytes]c           	      C  s  t |ƒ}| j}|j d¡dkru|j d¡}|j d¡}|j d¡}| j |jjdtd�¡}|dkr:|r:|  ||¡}nN|d	krI|| jkrI|  |¡}n?|d
krX|| jkrX|  	|¡}n0| j
rt|durt|durt| j|krt|  |¡rt|  |||¡}n| j
rˆ| jdurˆ|j| jkrˆ|  |¡}|||ƒS )zDispatch the requests.Ú__debugger__ÚyesÚcmdrK   ÚsÚfrm)rˆ   ÚresourceÚpinauthÚprintpinN)r   rÒ   rþ   r}   r¯   r�   rç   r±   r  r  r    rÅ   rÚ   r£   rå   rÞ   )	rZ   r|   r¹   rÓ   rÑ   r  Úargr±   rÎ   r%   r%   r&   Ú__call__  s8   ÿ
ÿ€ÿ


zDebuggedApplication.__call__)Frž   rŸ   NFTT)rd   r   r    r¡   r¢   r   r£   r   r¤   r¥   r¦   r¡   r§   r¡   r¨   r¡   r   r©   )r   r›   )rL   r›   r   r©   )r   r   )r|   r   r¹   r   r   rº   )rÓ   r   rÔ   r   rÎ   rÕ   r   r   )rÓ   r   r   r   )rÓ   r   rJ   r   r   r   )r|   r   r   rè   )r|   r   r   r¡   )r   r©   )r|   r   r¹   r   r   r	  )r`   ra   rb   rc   Ú__annotations__r[   Úpropertyr   Úsetterr¸   rÒ   rÚ   rÞ   rç   rÅ   rÇ   r÷   r  r  r  r%   r%   r%   r&   rš   å   s8   
 $÷,

0






6rš   )r   r   r   r   rS   )rd   r   r   re   )>Ú
__future__r   r„   r!   rÿ   r{   râ   r<   r@   rí   Útypingr€   r‰   Ú
contextlibr   Úior   Ú	itertoolsr   Úmultiprocessingr   Úos.pathr   r   Úzlibr	   Ú	_internalr   Ú
exceptionsr   r   Úhttpr   Úsansio.utilsr   Úsecurityr   Úutilsr   Úwrappers.requestr   Úwrappers.responser   rX   r   Útbtoolsr   r   r   ÚTYPE_CHECKINGÚ_typeshed.wsgir   r   r   rî   r'   r)   r  rT   rU   r™   rš   r%   r%   r%   r&   Ú<module>   sT    

N
W