File: //usr/libexec/kcare/python/kcarectl/auth.pyc
�
%��ic @ s d d l Z d d l Z d d l Z d d l Z d d l m Z m Z m Z m Z m Z m
Z
m Z m Z m
Z
d d l m Z m Z m Z e d � Z d � Z d � Z d � Z e d � Z e
j d
� � Z d � Z d � Z d
� Z d � Z d � Z d � Z d d � Z d � Z! d S( i����Ni ( t configt constantst errorst
http_utilst ipv6_supportt log_utilst platform_utilst serveridt utils( t HTTPErrort URLErrort urlencodec C s# d } y� t j � } | d k r; | s7 t j d � n d St j � d j | � } t j | � } t
j | j � � } t
j
| � } | d d k r� t j � t j � | s� t j d � q� n+ | s� t j | � t j d | d � n Wn, t k
r } | s t j | | � q n Xd S( Ns1 Error unregistering server: cannot find server ids& /unregister_server.plain?server_id={0}t successt trues Server was unregistereds Error unregistering server: t message( t NoneR t get_serveridR t logerrorR t get_registration_urlt formatR t urlopenR t nstrt readt data_as_dictt rm_serveridt clear_cachet loginfoR t print_cln_http_error( t silentt urlt server_idt responset contentt rest e( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt
unregister s,
c C se t j d � t j � } | d k r) d St j � t j � } d d l } | d k rg | j d � n | j j � t d d � } t d d � } t j
| j � | j j � � t j
| j � | j j � � t j
| j � | j
j � � xo t r`t j d
� t | � \ } } } | d k r� | r� t j | � t | � t j � | j d � q� q� Wd S( NsH Register auto-retry has been enabled, the system can be registered lateri i����s /dev/nullt rs a+i< i i i ( R t
print_wrappert ost forkt setsidt syst exitt stdoutt flusht opent dup2t filenot stdint stderrt Truet timet sleept
_try_registerR t
set_server_idt _set_auth_tokenR R ( R t pidR) t sit sot codeR t
auth_token( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _register_retry) s.
c C s6 | d k r2 t j d | � r2 t d | � � n | S( Ns ^[\w.-]+$s Invalid value received: %s( R t ret matcht
ValueError( t value( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _validate_urlsafe_encodingG s c C s� yu t j | � } | j j t j d � } t j t j | j
� � � } t | d � t | j d � � t | � f SWnO t
t f k
r� } t j | | � d St k
r� t j j d | � d SXd S( NR; R s) Exception while trying to register URL %s( NNN( NNN( R R t headerst getR t AUTH_TOKEN_HEADERR R R R R t intRB R R
R R t Exceptiont kcarelogt exception( R R R< R! R" ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyR5 M s 0
c C s� y t t � Wn! t k
r1 t j j d � n Xt j � } t d | f d | f g � } d j t
j � | � } t | � \ } } } | d k r� t
j | � t | � t
j � t j d � d S| d k r� t j d � n� | d k r� t j d
� n� | d k rt j d � nj | d
k r7t j d � nN | d k rSt j d � n2 | d k rot j d � n t j d j | � � | r�t | � d S| p�d S( Ns9 Exception while trying to unregister URL before register.t hostnamet keys {0}/register_server.plain?{1}i s Server Registeredi s Account Lockedi s Invalid Keyi s} You have reached maximum registered servers for this key. Please go to your CLN account, remove unused servers and try again.i s[ IP is not allowed. Please change allowed IP ranges for the key in KernelCare Key tab in CLNi sE This IP was already used for trial, you cannot use it for trial againi sf This IP was banned. Please contact support for more information at https://www.kernelcare.com/support/s Unknown Error {0}i����( R# R2 RG R RH RI R t get_hostnameR R R R R5 R R6 R7 R R R R= ( RK t retryRJ t queryR R; R R< ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt register[ s@
c C s t j t j � S( N( R t try_to_readR t AUTH_TOKEN_DUMP_PATH( ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _get_auth_token� s c C s! | s
d St j t j | � d S( N( R t atomic_writeR RQ ( R< ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyR7 � s c O s� | j d d � } | j d t � r- t } n t j } t j | � rX t j | | | � St j | t � t
� d | �} t j | d d �t j � | | | � S( Nt methodt
check_licenset counti (
t popR R2 t _check_auth_retryR t check_urlopen_retryt is_local_urlt urlopen_baset http_requestt get_http_auth_stringRR R RM ( R t argst kwargsRT t checkt request( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt urlopen_auth� s !c C sA t j � } | r= t j t j t j d j | d � � � � Sd S( Ns {0}:{1}t
kernelcare( R R R R t base64t b64encodet bstrR R ( R ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyR] � s +c C s8 t | t � r( | j d k r( t | � St j | | � S( Ni� i� ( i� i� ( t
isinstanceR R; t _handle_forbiddenR RY ( R" t state( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRX � s
c C s" d | k r t St j r t j � } t j � d } | rQ | d j | � 7} n y7 t j t
j | d t �j
� � } t j | � } Wn* t k
r� } t j | | d t �d SX| s� | j d � r� t j j d j | � � d S| d d k rt | d <t j d � t St � n d S(
s In case of 403 error we should check what's happen.
Case #1. We are trying to register unlicensed machine and should try to register trial.
Case #2. We have a valid license but access restrictions on server are not consistent yet
and we had to try later.
t licenses /check.plains ?server_id={0}t retry_on_500R+ NR; s Unexpected CLN response: {0}t 0t 1s$ Unable to access server. Retrying...( Rl Rm ( R2 R t CHECK_CLN_LICENSE_STATUSR R R R R R R R R t FalseR R R
R R RD RH t errorR t _register_trial( Ri R R R t infot ex( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRh � s* $
c C s$ t j � } | rt j � d j | � } y� t j | � } t j | j � � } t j
| � } | sx | j d � r� t j d j | � � d St
| d � } | d k r� t j d � d St d d � } | d k r� t j d � n | SWq t k
r} t j | | � d SXn t � Sd S( Ns /check.plain?server_id={0}R; s Unexpected CLN response: {0}i i s Key-based valid license foundt key_checkeds No valid key-based license found( R R R R R R R R R R R RD R% RF t _get_license_info_by_ipR
R R ( R R R R R! R; t license_typeR" ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt license_info� s,
i c C s t j � d } y�t j | � } t j | j � � } t j | � } | d j � d k r�t | d � } | d k r� t j
d j | d � � d S| d k r� | d } t j | d � j
d
� } t j
d j | | � � d S| d k r?| d k r?| d } t j | d � j
d
� } t j
d
j | | � � n | d k r�| d k r�d | k r�t j
d j | d � � q�t j
d � q�n( | j d d � } t j
d j | � � WnT t k
r�} t j | | � n2 t k
r}
t j
d j |
| j � � � n Xd S( Ns /check.plainR R
R; i s Valid license found for IP {0}t ipi t expire_dates %Y-%m-%ds? You have a trial license for the IP {0} that will expire on {1}i s0 Your trial license for the IP {0} expired on {1}i s The IP {0} hasn't been licenseds This server hasn't been licensedR t s" Error retrieving license info: {0}s1 Unexpected CLN response, cannot find {0} key:
{1}( R R R R R R R R t lowerRF R% R t parse_response_datet strftimeRD R
R R t KeyErrort strip( Rt R R R R! R; Rx t expires_strR R" RK ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRu � s<
#c C s� t j j t j d � } t j j | � r. d Sy,t j t j � d � } t
j t
j | j
� � � } y� | d j � d k r� t
j | d d t �t j � | d d k r� t j | d | d � � n t j d
j | d � � d S| d d k r$t
j | d d t �t j d � � n t j d
� � Wn" t k
rX} t j | � � n XWn% t k
r�} t j | j � � n Xd S( Ns trial-requesteds /trial.plainR R
Rz t
ensure_dirt expiredRx t createds3 Requesting trial license for IP {0}. Please wait...t nas Invalid Licensei����( R& t patht joinR t PATCH_CACHEt existsR R R R R R R R R{ RS R2 R R t AlreadyTrialedExceptionR R R R t
KcareErrort UnableToGetLicenseExceptionR~ R R; ( t
trial_markR R! t keR" ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRq s,
(" Rd R& R> R3 Rz R R R R R R R R R t py23R R
R Ro R# R= RB R5 RO t cachedRR R7 Rb R] RX Rh Rw Ru Rq ( ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt <module> s& @ .
) #