# hJ S r SSKrSSKrSSKrSSKrSSKJr SSKrSSKr SSK J
r
J r SSK J
r
JrJr SSKJr \R, " \5 rS?S jrS
rS rS?S jr S
r S r S r S r " S S\ 5 r! " S S\
\"5 r# " S S\#5 r$ " S S\"5 r%\S:X Ga SSK&r&SSK'r'SSK(J)r) \RT " \RV S 9 \&RX " \&RZ \ S - S 9=r.r/\.Ra S S S!S"9 \.Ra S#S$S%9 \.Ra S&\1SS'S(9 \.Ra S)\1S*S+S(9 \.Ra S,S-S.S/9 \.Ra S0SS1S/9 \/Re 5 r3\)" S2\3Rh 0\3Rj 5 r6\%" \3Rn S39 r8\6Rs \3Rt ( a \3Rt Rw 5 OSS4Ry \3Rz \8R} 5 S59S69r?\@" \'R " \8R \?S7 S8S9S:\3R \?S; S<9S=S>95 SSS5 gg! \ a SSKJ
r
J r SSK
J
r
Jr SSKJr SSKJr GNf = f! , ( d f g= f)@a$ A one-stop helper for desktop app to acquire an authorization code.
It starts a web server to listen redirect_uri, waiting for auth code.
It optionally opens a browser window to guide a human user to manually login.
After obtaining an auth code, the web server will automatically shut down.
N)Template)
HTTPServerBaseHTTPRequestHandler)urlparseparse_qs urlencode)escape)r r )r c [ U S9 nUR USS9R S5 sS S S 5 $ ! , ( d f g = f)Nportz
Open this link to Sign In
(You may want to use incognito window)
Abort
)auth_uriwelcome_templatecode)AuthCodeReceiverget_auth_responseget) listen_portr
receivers I/var/www/html/env/lib/python3.13/site-packages/msal/oauth2cli/authcode.pyobtain_auth_coder s> { +x)) " * c&k
, + +s 3
Ac \ [ S5 n U R 5 HD nUR SS5 S R 5 nUR 5 S:w d M< S S S 5 g S S S 5 [
R R S5 $ ! , ( d f N-= f! [ a N>- (( $
#
sA B A B
B
B $B
&B
BB B
B+*B+c SS K n U R 5 n[ USUS 5 R 5 n[ USUS 5 R 5 nUS:H =( a SU; $ )Nr systemreleaser linux microsoft)platformunamegetattrlower)r, r-
platform_namer) s r is_wslr1 8 s^
NN EE8U1X6<<>MeYa1779G G # > w(>> c . SSK nU( a! UR U5 R U 5 nOUR U 5 nU( d? [ 5 ( a0 SSKnUR SSSSR
U 5 /5 nUS:H nU$ U$ ! [ a U$ f = f)zJBrowse uri with named browser. Default browser is customizable by $BROWSERr Nzpowershell.exez
-NoProfilez-CommandzStart-Process "{}")
webbrowserr r r1
subprocesscallformatFileNotFoundError)r
browser_namer4 browser_openedr5 exit_codes r _browser< D s # 5::8D $ 2 fhh #!<=Q=X=XYa=bceI &!^N > ! s -B
BBc U R 5 VVs0 s H1 u pU[ U[ 5 ( a [ U5 S:X a US OU_M3 snn$ s snnf )z;Flatten parse_qs()'s single-item lists into the item itself r )items
isinstancelistlen)qskvs r _qs2kvrF [ sR HHJ DA
z!T**s1v{qt A s 8Ac $ U R S5 $ )N<)
startswithtexts r _is_htmlrL a s ??3 r2 c l U R 5 VVs0 s H u pU[ U5 _M snn$ s snnf N)r? r )key_value_pairsrD rE s r _escaperP e s/ %4%:%:%< =%>RVVG__ "2JM LL0- @{{%%$++*@*@MDUDUV]D^*^ (()9: | !KK 8 8)-)C)C H - -.. '
6I -I(()A)A)NI)NO,9 ) $ $T[[%=%= >r2 c U R U( a SOS5 [ U5 ( a SOSnU R SU5 U R 5 U R R UR
S5 5 g )N i z text/htmlz
text/plainz Content-typezutf-8)
send_responserL send_header end_headerswfilewriteencode)ri bodyis_ok content_types r rb $_AuthCodeHandler._send_full_response sZ %3S1&.tnn{, 6
W-.r2 c N [ R " U/[ [ U5 Q76 g rN )r^ r_ maprU )ri r7 argss r log_message _AuthCodeHandler.log_message s V3c)T 23r2 r\ N)T)__name__
__module__ __qualname____firstlineno__rk rb r| __static_attributes__r\ r2 r rW rW n s ?0/4r2 rW c . ^ \ rS rSrU 4S jrS rSrU =r$ )_AuthCodeHttpServer c > Uu pEU( a* [ R S:X d [ 5 ( a SU l [ [
U ] " U/UQ70 UD6 g )Nwin32F)sysr, r1 allow_reuse_addresssuperr __init__)ri server_addressr{ kwargs_r __class__s r r _AuthCodeHttpServer.__init__ sB S\\W,
(-D $
!41.R4R6Rr2 c [ S5 e)Nz"Timeout. No auth response arrived.) RuntimeErrorri s r handle_timeout"_AuthCodeHttpServer.handle_timeout s ?@@r2 )r )r~ r r r r r r
__classcell__)r s @r r r s SA Ar2 r c , \ rS rSr\R
rSrg)_AuthCodeHttpServer6 r\ N)r~ r r r socketAF_INET6address_familyr r\ r2 r r r s __Nr2 r c R \ rS rSrS S jrS rS S jr S
S jrS rS r S r
S
r g)r Nc [ 5 ( a SOSn[ U=( d / 5 U l SU; a [ O[ nU" X1=( d S4[
5 U l SU l g)a Create a Receiver waiting for incoming auth response.
:param port:
The local web server will listen at http://...:
You need to use the same port when you register with your app.
If your Identity Provider supports dynamic port, you can use port=0 here.
Port 0 means to use an arbitrary unused port, per this official example:
https://docs.python.org/2.7/library/socketserver.html#asynchronous-mixins
:param scheduled_actions:
For example, if the input is
``[(10, lambda: print("Got stuck during sign in? Call 800-000-0000"))]``
then the receiver would call that lambda function after
waiting the response for 10 seconds.
z0.0.0.0 127.0.0.1r r FN)r& sorted_scheduled_actionsr r rW _server_closing)ri r scheduled_actionsaddressServers r r AuthCodeReceiver.__init__ sV 1 2 2) #)):)@b"A ), %=P w 24DE
r2 c 4 U R R S $ )z*The port this server actually listening tor> )r r r s r get_portAuthCodeReceiver.get_port s ||**1--r2 c 0 n[ R " U R U4US9nSUl UR 5 [
R
" 5 nU( a [
R
" 5 U-
U: a O [
R " S5 UR 5 ( d OU R ( a [
R
" 5 U-
U R S S : ac U R R S5 u pgU" 5 U R ( a. [
R
" 5 U-
U R S S : a Mc U( a [
R
" 5 U-
U: a M OM U=( d S$ )a Wait and return the auth response. Raise RuntimeError when timeout.
:param str auth_uri:
If provided, this function will try to open a local browser.
:param int timeout: In seconds. None means wait indefinitely.
:param str state:
You may provide the state you used in auth_uri,
then we will use it to validate incoming response.
:param str welcome_template:
If provided, your end user will see it instead of the auth_uri.
When present, it shall be a plaintext or html template following
`Python Template string syntax `_,
and include some of these placeholders: $auth_uri and $abort_uri.
:param str success_template:
The page will be displayed when authentication was largely successful.
Placeholders can be any of these:
https://tools.ietf.org/html/rfc6749#section-5.1
:param str error_template:
The page will be displayed when authentication encountered error.
Placeholders can be any of these:
https://tools.ietf.org/html/rfc6749#section-5.2
:param callable auth_uri_callback:
A function with the shape of lambda auth_uri: ...
When a browser was unable to be launch, this function will be called,
so that the app could tell user to manually visit the auth_uri.
:param str browser_name:
If you did
``webbrowser.register("xyz", None, BackgroundBrowser("/path/to/browser"))``
beforehand, you can pass in the name "xyz" to use that browser.
The default value ``None`` means using default browser,
which is customizable by env var $BROWSER.
:return:
The auth response of the first leg of Auth Code flow,
typically {"code": "...", "state": "..."} or {"error": "...", ...}
See https://tools.ietf.org/html/rfc6749#section-4.1.2
and https://openid.net/specs/openid-connect-core-1_0.html#AuthResponse
Returns None when the state was mismatched, or when timeout occurred.
)targetr{ r Tr> r N)
threadingThread_get_auth_responsedaemonstarttimesleepis_aliver pop)ri timeoutr resulttbeginr callbacks r r "AuthCodeReceiver.get_auth_response s j **&6
K 18tyy{U"W,d JJqM::<<** e+d.E.Ea.H.KK " 5 5 9 9! <
** e+d.E.Ea.H.KK 29tyy{U"W,d ~ r2 c
SR U R 5 S9n
SR U
S9n [ R SU 5 [ U=( d S5 R X+S9U R l U( aw U( a U
OUn [ R SU - 5 S n
[ XS
9n
U
( dA U( d2 [ R S R XU R 5 S
95 OU" U 5 [ U=( d S5 U R l [ U=( d S5 U R l
X0R l 0 U R l X@R l U R" ( dI U R R% 5 U R R ( a OU R" ( d MI UR' U R R 5 g ! [ R S 5 GNY= f)Nzhttp://localhost:{p})pz{loc}?error=abort)loczAbort by visit %s )r
abort_uriz*Open a browser on this device to visit: %sF)r9 z_browse(...) unsuccessfula Found no browser in current environment. If this program is being run inside a container which either (1) has access to host network (i.e. started by `docker run --net=host -it ...`), or (2) published port {port} to host network (i.e. started by `docker run -p 127.0.0.1:{port}:{port} -it ...`), you can use browser on host to visit the following link. Otherwise, this auth attempt would either timeout (current timeout setting is {timeout}) or be aborted by CTRL+C. Auth URI: {auth_uri})r
r r z8Authentication completed. You can close this window now.z?Authentication failed. $error: $error_description. ($error_uri))r7 r r^ r_ r rf r rh infor< exceptionwarningrc rd r rg ra r handle_requestupdate)ri r r
r r[ r rc rd auth_uri_callbackr9 welcome_urir _urir: s r r #AuthCodeReceiver._get_auth_response s
-33dmmo3F '..;.? ()4$,-=-C$D$T$T %U %4 ! "2;D KKDtK L "N
>!(!I
"(NN H IO%) IO IR S &d+(01A 2G F)H %&.~ 0N M'O # ' %' ""' --
LL ' ' )||))
---
dll001I
> !<=s G( (Hc F SU l U R R 5 g)zGEither call this eventually; or use the entire class as context managerTN)r r server_closer s r closeAuthCodeReceiver.closeP s
!!#r2 c U $ rN r\ r s r __enter__AuthCodeReceiver.__enter__U s r2 c $ U R 5 g rN )r )ri exc_typeexc_valexc_tbs r __exit__AuthCodeReceiver.__exit__X s
r2 )r r r )NNrN )NNNNNNNN) r~ r r r r r r r r r r r r\ r2 r r r s9 ! F.
C J MQIM " 42l$
r2 r __main__r> )Client)levelz/The auth code received will be shown at stdout.)formatter_class descriptionz
--endpointz The auth endpoint for your app.z>https://login.microsoftonline.com/common/oauth2/v2.0/authorize)helpdefault client_idz!The client_id of your application)r z--portzThe port in redirect_uri)typer r z --timeout< zTimeout value, in secondz--hostr zThe host of redirect_uri)r r z--scopezThe scope listauthorization_endpointr zhttp://{h}:{p})hr )scope redirect_urir
zASign In, or AbortOh no. $error