o

;j<f�@s�
dZd
dl
Zd
dlZd
dlZd
dlZd
dlmZmZm	Z	m
Z
mZmZm
Z
mZ
d
dlmZ
d
dlmZ
d
dlmZ
d
dlmZ
d
dlmZmZ
d
d	lmZ
d
d
lmZ
d
dlmZ
dd
l m!Z!
ddl"m#Z#m$Z$
ddl%m&Z&
ddl'm(Z(m)Z)mZm*Z*m+Z+m,Z,mZm-Z-m.Z.mZ
ddl/m0Z0
ddl1m2Z2
ddl3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9
zd
dl:m;Z;
Wn
e<y�


dd�Z;Yn
wej=r�ddl/m>Z>
dZ?dZ@d
ZAdZB							 	!	"	#d*d$d%�ZCGd&d'�d'�ZDGd(d)�d)eD�ZEdS)+z�
requests.adapters
~~~~~~~~~~~~~~~~~

This module contains the transport adapters that Requests uses to define
and maintain connections.
�N)�ClosedPoolError�ConnectTimeoutError�LocationValueError�
MaxRetryError�NewConnectionError�
ProtocolError�ReadTimeoutError�
ResponseError)
�	HTTPError)
�
InvalidHeader)
�
ProxyError)
�SSLError)�PoolManager�proxy_from_url)
�Timeout)
�	parse_url)
�Retry�
)
�_basic_auth_str)�
basestring�urlparse)
�extract_cookies_to_jar)
�ConnectionError�ConnectTimeoutr�InvalidProxyURL�
InvalidSchema�
InvalidURLr�ReadTimeout�
RetryErrorr
)
�Response)
�CaseInsensitiveDict)�DEFAULT_CA_BUNDLE_PATH�get_auth_from_url�get_encoding_from_headers�prepend_scheme_if_needed�select_proxy�
urldefragauth)
�SOCKSProxyManagercOstd
�
�
)Nz'Missing dependencies for SOCKS support.)
r)�args�kwargs�r*�E/opt/saltstack/salt/lib/python3.10/site-packages/requests/adapters.pyr'?s
r')
�PreparedRequestF�
�requestr,�verify�bool | str | None�client_cert�tuple[str, str] | str | None�poolmanagerr�return�.(dict[str, typing.Any], dict[str, typing.Any])c
Cs�i}i}t|j
�
}|j��}|j}d
}	|
durd}	nt|
t�r.tj�	|
�
s*|
|d<n|
|d<|	|d<|du
rRt|t
�rNt|�
dkrN|d|d	<|d
|d<n||d	<||j|d�}||fS)
N�
CERT_REQUIREDF�	CERT_NONE�ca_certs�ca_cert_dir�	cert_reqs�r
�	cert_filer�key_file)�scheme�host�port)
r�urlr>�lowerr@�
isinstance�str�os�path�isdir�tuple�len�hostname)
r.r/r1r3�host_params�pool_kwargsZparsed_request_urlr>r@r:r*r*r+�_urllib3_request_contextMs.



















�rMcs4eZ
dZd
Z�f
dd�Z	ddd�
Zd	d
�Z�ZS)�BaseAdapterzThe Base Transport Adapterc

st��
�
dS�
N)�super�__init__�
�self�
�	__class__r*r+rQus
zBaseAdapter.__init__FNTc
C�t�
)
aCSends PreparedRequest object. Returns Response object.

        :param request: The :class:`PreparedRequest <PreparedRequest>` being sent.
        :param stream: (optional) Whether to stream the request content.
        :param timeout: (optional) How long to wait for the server to send
            data before giving up, as a float, or a :ref:`(connect timeout,
            read timeout) <timeouts>` tuple.
        :type timeout: float or tuple
        :param verify: (optional) Either a boolean, in which case it controls whether we verify
            the server's TLS certificate, or a string, in which case it must be a path
            to a CA bundle to use
        :param cert: (optional) Any user-provided SSL certificate to be trusted.
        :param proxies: (optional) The proxies dictionary to apply to the request.
        �
�NotImplementedError)rSr.�stream�timeoutr/�cert�proxiesr*r*r+�sendxszBaseAdapter.sendc


CrV)
z!Cleans up adapter specific items.rWrRr*r*r+�close�szBaseAdapter.close�FNTNN)�__name__�
__module__�__qualname__�__doc__rQr]r^�
__classcell__r*r*rTr+rNrs

�rNcs�eZ
dZd
Zgd�
Zeeeef�f
dd�	Zdd�Z	dd�Z
ef
d	d
�
Zdd�Zd
d�Z
dd�Zd$dd�
Zd%dd�
Zd$dd�
Zdd�Zdd�Zdd�Zdd�Z	d&d"d#�
Z�ZS)'�HTTPAdaptera�The built-in HTTP Adapter for urllib3.

    Provides a general-case interface for Requests sessions to contact HTTP and
    HTTPS urls by implementing the Transport Adapter interface. This class will
    usually be created by the :class:`Session <Session>` class under the
    covers.

    :param pool_connections: The number of urllib3 connection pools to cache.
    :param pool_maxsize: The maximum number of connections to save in the pool.
    :param max_retries: The maximum number of retries each connection
        should attempt. Note, this applies only to failed DNS lookups, socket
        connections and connection timeouts, never to requests where data has
        made it to the server. By default, Requests does not retry failed
        connections. If you need granular control over the conditions under
        which we retry a request, import urllib3's ``Retry`` class and pass
        that instead.
    :param pool_block: Whether the connection pool should block for connections.

    Usage::

      >>> import requests
      >>> s = requests.Session()
      >>> a = requests.adapters.HTTPAdapter(max_retries=3)
      >>> s.mount('http://', a)
    )�max_retries�config�_pool_connections�
_pool_maxsize�_pool_blockcs`|tkrt
d
dd�|_nt
�|�
|_i|_i|_t���
|
|_||_	||_
|j|
||d�
dS)Nr
F)
�read�
�block)�DEFAULT_RETRIESrrfZfrom_intrg�
proxy_managerrPrQrhrirj�init_poolmanager)rSZpool_connectionsZpool_maxsizerfZ
pool_blockrTr*r+rQ�s





zHTTPAdapter.__init__c

s�f
d
d��jD�
S)Nc
si|]	}
|
t�|
d��qSrO)
�getattr)�.0�attrrRr*r+�
<dictcomp>�sz,HTTPAdapter.__getstate__.<locals>.<dictcomp>)
�	__attrs__rRr*rRr+�__getstate__�s
zHTTPAdapter.__getstate__cCsDi|_i|_
|
��D]
\}}t|||�
q
|j|j|j|jd
�
dS)Nrl)rorg�items�setattrrprhrirj)rS�staters�valuer*r*r+�__setstate__�s



�zHTTPAdapter.__setstate__cKs.|
|_||_
||_td|
||d
�|�
�
|_dS)aInitializes a urllib3 PoolManager.

        This method should not be called from user code, and is only
        exposed for use when subclassing the
        :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        :param connections: The number of urllib3 connection pools to cache.
        :param maxsize: The maximum number of connections to save in the pool.
        :param block: Block when no free connections are available.
        :param pool_kwargs: Extra keyword arguments used to initialize the Pool Manager.
        )�	num_pools�maxsizermNr*)rhrirjrr3)rSZconnectionsr}rmrLr*r*r+rp�s




��zHTTPAdapter.init_poolmanagercKs�|
|jvr|j|
}|S|
�
��d
�
r1t|
�
\}}t|
f
|||j|j|jd�|�
�
}|j|
<|S|�|
�
}t	|
f
||j|j|jd�|�
�
}|j|
<|S)a�
Return urllib3 ProxyManager for the given proxy.

        This method should not be called from user code, and is only
        exposed for use when subclassing the
        :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        :param proxy: The proxy to return a urllib3 ProxyManager for.
        :param proxy_kwargs: Extra keyword arguments used to configure the Proxy Manager.
        :returns: ProxyManager
        :rtype: urllib3.ProxyManager
        �socks)�username�passwordr|r}rm)�
proxy_headersr|r}rm)
rorB�
startswithr"r'rhrirjr�r)rS�proxyZproxy_kwargs�managerrr�r�r*r*r+�proxy_manager_for�s:


�


�



��
�

�


��	zHTTPAdapter.proxy_manager_forcCs
|���
d
�
r5|r5d}|du
r|}|st}|rtj�|�
s$td|���
�
d|
_tj�|�
s1||
_	n
||
_
n	d|
_d|
_	d|
_
|rzt|t�sP|d|
_
|d|
_n||
_
d|
_|
j
rhtj�|
j
�
shtd	|
j
���
�
|
jr|tj�|
j�
s~td
|
j���
�
dSdSdS)aAVerify a SSL certificate. This method should not be called from user
        code, and is only exposed for use when subclassing the
        :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        :param conn: The urllib3 connection object associated with the cert.
        :param url: The requested URL.
        :param verify: Either a boolean, in which case it controls whether we verify
            the server's TLS certificate, or a string, in which case it must be a path
            to a CA bundle to use
        :param cert: The SSL certificate to verify.
        �httpsNTzCCould not find a suitable TLS CA certificate bundle, invalid path: r6r7r
rz7Could not find the TLS certificate file, invalid path: z/Could not find the TLS key file, invalid path: )rBr�r!rErF�exists�OSErrorr:rGr8r9rCrr<r=)rS�connrAr/r[Zcert_locr*r*r+�cert_verify
sJ





��












��


��zHTTPAdapter.cert_verifycCs�t�}t
|d
d�|_tt
|di��
|_t|j�
|_||_|jj|_t	|
j
t�r/|
j
�d�
|_
n|
j
|_
t
|j|
|�
|
|_||_|S)a�
Builds a :class:`Response <requests.Response>` object from a urllib3
        response. This should not be called from user code, and is only exposed
        for use when subclassing the
        :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`

        :param req: The :class:`PreparedRequest <PreparedRequest>` used to generate the response.
        :param resp: The urllib3 response object.
        :rtype: requests.Response
        �statusN�headerszutf-8)rrqZstatus_coder r�r#�encoding�raw�reasonrCrA�bytes�decoder�cookiesr.�
connection)rS�req�resp�responser*r*r+�build_responseQ
s





zHTTPAdapter.build_responseNcCst|
|||j
�S)
a�	Build the PoolKey attributes used by urllib3 to return a connection.

        This looks at the PreparedRequest, the user-specified verify value,
        and the value of the cert parameter to determine what PoolKey values
        to use to select a connection from a given urllib3 Connection Pool.

        The SSL related pool key arguments are not consistently set. As of
        this writing, use the following to determine what keys may be in that
        dictionary:

        * If ``verify`` is ``True``, ``"ssl_context"`` will be set and will be the
          default Requests SSL Context
        * If ``verify`` is ``False``, ``"ssl_context"`` will not be set but
          ``"cert_reqs"`` will be set
        * If ``verify`` is a string, (i.e., it is a user-specified trust bundle)
          ``"ca_certs"`` will be set if the string is not a directory recognized
          by :py:func:`os.path.isdir`, otherwise ``"ca_cert_dir"`` will be
          set.
        * If ``"cert"`` is specified, ``"cert_file"`` will always be set. If
          ``"cert"`` is a tuple with a second item, ``"key_file"`` will also
          be present

        To override these settings, one may subclass this class, call this
        method and use the above logic to change parameters as desired. For
        example, if one wishes to use a custom :py:class:`ssl.SSLContext` one
        must both set ``"ssl_context"`` and based on what else they require,
        alter the other keys to ensure the desired behaviour.

        :param request:
            The PreparedReqest being sent over the connection.
        :type request:
            :class:`~requests.models.PreparedRequest`
        :param verify:
            Either a boolean, in which case it controls whether
            we verify the server's TLS certificate, or a string, in which case it
            must be a path to a CA bundle to use.
        :param cert:
            (optional) Any user-provided SSL certificate for client
            authentication (a.k.a., mTLS). This may be a string (i.e., just
            the path to a file which holds both certificate and key) or a
            tuple of length 2 with the certificate file path and key file
            path.
        :returns:
            A tuple of two dictionaries. The first is the "host parameters"
            portion of the Pool Key including scheme, hostname, and port. The
            second is a dictionary of SSLContext related parameters.
        )rMr3)rSr.r/r[r*r*r+�$build_connection_pool_key_attributesv
s0z0HTTPAdapter.build_connection_pool_key_attributesc
Cs�t|
j
|�}z|�|
||�\}}Wnty#
}
zt||
d
��
d}~w
w|rIt|d�}t|�
}	|	js6td�
�
|�	|�
}
|
j
di|�
d|i
�
�
}|S|jj
di|�
d|i
�
�
}|S)aqReturns a urllib3 connection for the given request and TLS settings.
        This should not be called from user code, and is only exposed for use
        when subclassing the :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        :param request:
            The :class:`PreparedRequest <PreparedRequest>` object to be sent
            over the connection.
        :param verify:
            Either a boolean, in which case it controls whether we verify the
            server's TLS certificate, or a string, in which case it must be a
            path to a CA bundle to use.
        :param proxies:
            (optional) The proxies dictionary to apply to the request.
        :param cert:
            (optional) Any user-provided SSL certificate to be used for client
            authentication (a.k.a., mTLS).
        :rtype:
            urllib3.ConnectionPool
        �
r.N�http�FPlease check proxy URL. It is malformed and could be missing the host.rLr*)r%rAr��
ValueErrorrr$rr?rr�Zconnection_from_hostr3)rSr.r/r\r[r�rKrL�
e�	proxy_urlror�r*r*r+�get_connection_with_tls_context�
s>




�
��





�


�
�	
�
�
�z+HTTPAdapter.get_connection_with_tls_contextcCsrt�
d
t�
t|
|�}|r)t|d�}t|�
}|jstd�
�
|�|�
}|�	|
�
}|St
|
�
}|��}
|j�	|
�
}|S)aDEPRECATED: Users should move to `get_connection_with_tls_context`
        for all subclasses of HTTPAdapter using Requests>=2.32.2.

        Returns a urllib3 connection for the given URL. This should not be
        called from user code, and is only exposed for use when subclassing the
        :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        :param url: The URL to connect to.
        :param proxies: (optional) A Requests-style dictionary of proxies used on this request.
        :rtype: urllib3.ConnectionPool
        z�`get_connection` has been deprecated in favor of `get_connection_with_tls_context`. Custom HTTPAdapter subclasses will need to migrate for Requests>=2.32.2. Please see https://github.com/psf/requests/pull/6710 for more details.r�r�)
�warnings�warn�DeprecationWarningr%r$rr?rr�Zconnection_from_urlr�geturlr3)rSrAr\r�r�ror��parsedr*r*r+�get_connection�
s&�
	





�


�

zHTTPAdapter.get_connectionc
Cs&|j�
�
|j��D]}
|
�
�
q
d
S)z�Disposes of any internal state.

        Currently, this closes the PoolManager and any active ProxyManager,
        which closes any pooled connections.
        N)r3�clearro�values)rSr�r*r*r+r^s



�zHTTPAdapter.closec	Cszt|
j
|�}t|
j
�
j}|o|d
k}d}|r"t|�
j��}|�d�
}|
j}|�d�
r2d|�d�
��}|r;|s;t|
j
�
}|S)a?Obtain the url to use when making the final request.

        If the message is being sent through a HTTP proxy, the full URL has to
        be used. Otherwise, we should only use the path portion of the URL.

        This should not be called from user code, and is only exposed for use
        when subclassing the
        :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        :param request: The :class:`PreparedRequest <PreparedRequest>` being sent.
        :param proxies: A dictionary of schemes or schemes and hosts to proxy URLs.
        :rtype: str
        r�Fr~z//�
/)	r%rArr>rBr�Zpath_url�lstripr&)	rSr.r\r�r>Zis_proxied_http_requestZusing_socks_proxyZproxy_schemerAr*r*r+�request_urls










zHTTPAdapter.request_urlc
Ksd
S)a"Add any headers needed by the connection. As of v2.0 this does
        nothing by default, but is left for overriding by users that subclass
        the :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        This should not be called from user code, and is only exposed for use
        when subclassing the
        :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        :param request: The :class:`PreparedRequest <PreparedRequest>` to add headers to.
        :param kwargs: The keyword arguments from the call to send().
        Nr*)rSr.r)r*r*r+�add_headers,szHTTPAdapter.add_headerscCs&i}t|
�
\}}|rt
||�|d
<|S)aReturns a dictionary of the headers to add to any request sent
        through a proxy. This works with urllib3 magic to ensure that they are
        correctly sent to the proxy, rather than in a tunnelled request if
        CONNECT is being used.

        This should not be called from user code, and is only exposed for use
        when subclassing the
        :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.

        :param proxy: The url of the proxy being used for this request.
        :rtype: dict
        zProxy-Authorization)r"r)rSr�r�rr�r*r*r+r�:s



zHTTPAdapter.proxy_headersFTc
Csxz|j|
|||d
�}Wnt
y
}
zt||
d��
d}~w
w|�||
j||�
|�|
|�}	|j|
|||||d�
|
jdupAd|
jv}
t	|t
�rdz|\}}t||d�}Wntyc


td|�d��
�
wt	|t�rjnt||d�}z|j
|
j|	|
j|
jd	d	d	d	|j||
d
�}
Wn�ttfy�
}
zt||
d��
d}~w
ty�
}
z<t	|jt�r�t	|jt�s�t||
d��
t	|jt�r�t||
d��
t	|jt�r�t||
d��
t	|jt�r�t||
d��
t||
d��
d}~w
ty�
}
zt||
d��
d}~w
t�
y
}
zt|�
�
d}~w
ttf�
y5
}
z%t	|t��
rt||
d��
t	|t ��
r$t!||
d��
t	|t"��
r0t#||
d��
�d}~w
w|�$|
|
�S)aSends PreparedRequest object. Returns Response object.

        :param request: The :class:`PreparedRequest <PreparedRequest>` being sent.
        :param stream: (optional) Whether to stream the request content.
        :param timeout: (optional) How long to wait for the server to send
            data before giving up, as a float, or a :ref:`(connect timeout,
            read timeout) <timeouts>` tuple.
        :type timeout: float or tuple or urllib3 Timeout object
        :param verify: (optional) Either a boolean, in which case it controls whether
            we verify the server's TLS certificate, or a string, in which case it
            must be a path to a CA bundle to use
        :param cert: (optional) Any user-provided SSL certificate to be trusted.
        :param proxies: (optional) The proxies dictionary to apply to the request.
        :rtype: requests.Response
        )r\r[r�N)rYrZr/r[r\zContent-Length)�connectrkzInvalid timeout za. Pass a (connect, read) timeout tuple, or a single float to set both timeouts to the same value.F)�methodrA�bodyr�ZredirectZassert_same_hostZpreload_contentZdecode_contentZretriesrZ�chunked)%r�rrr�rAr�r�r�r�rCrH�TimeoutSaucer��urlopenr�rfrr�rrr�rrrr	r�_ProxyErrorr�	_SSLErrorr
r�
_HTTPErrorrr�_InvalidHeaderrr�)rSr.rYrZr/r[r\r�r�rAr�r�rkr��errr*r*r+r]Os�


�
��







�	







��














�
�



�
�
�




��zHTTPAdapter.sendrO)NNr_)r`rarbrcru�DEFAULT_POOLSIZErn�DEFAULT_POOLBLOCKrQrvr{rpr�r�r�r�r�r�r^r�r�r�r]rdr*r*rTr+re�s0




�
�&8
%
2
1)
 �re)
r.r,r/r0r1r2r3rr4r5)FrcZos.pathrE�socket�typingr�Zurllib3.exceptionsrrrrrrrr	r
r�rr�rr�r
r�Zurllib3.poolmanagerrrZurllib3.utilrr�rZurllib3.util.retryrZauthr�compatrrr�r�
exceptionsrrrrrrrZmodelsrZ
structuresr �utilsr!r"r#r$r%r&Zurllib3.contrib.socksr'�ImportError�
TYPE_CHECKINGr,r�r�rnZDEFAULT_POOL_TIMEOUTrMrNrer*r*r*r+�<module>
sZ


(









0

 
	

�




����
�%