o d$@sddZddlZddlZddlZddlZddlZddlZddlZddl m Z ddl m Z ddl m Z ddl mZddl mZdd lmZdd lmZdd lmZdd lmZdd lmZddlmZzddlZWneyyGdddZeZYnwdZejdkrzedWn eydZYnweedZ e rej!Z!nGdddZ!zej"Z#Wn e$ydZ#YnwdZ%ej&ej'dej(e)ej&e)fdfZ*ej+rddl,Z-ddl.m/Z/ddl.m0Z0ddl1m2Z2ddl3m4Z4Gdd d ej5Z6Gd!d"d"eZ7d#e)d$e)d%e)fd&d'Z8 dad(ej&e)d%ej(d)fd*d+Z9 dbd,e)d-ej&e)d(ej&e)d%ej(e)e)ffd.d/Z:dcd0d1Z; dbd2e)d3ej&e)d4ej&e<d%dfd5d6Z=dad7ej&e>d%e?fd8d9Z@d-e)d:ed?ZCd=ejAd%e)fd@dAZDGdBdCdCeZEGdDdEdEejFeEZGGdFdGdGe!eEZH      ddd-e)d:err/z wsgi.version)rrzwsgi.url_schemez wsgi.inputz wsgi.errorszwsgi.multithreadzwsgi.multiprocessz wsgi.run_onceFzwerkzeug.socketSERVER_SOFTWAREREQUEST_METHOD SCRIPT_NAMErO PATH_INFO QUERY_STRING REQUEST_URIRAW_URI REMOTE_ADDR REMOTE_PORTr) SERVER_NAME SERVER_PORTSERVER_PROTOCOL-_z ) CONTENT_TYPECONTENT_LENGTHHTTP_,HTTP_TRANSFER_ENCODINGchunkedTzwsgi.input_terminated HTTP_HOST) binary_formSSL_CLIENT_CERTerrorz&Cannot fetch SSL peer certificate info)&r pathrM ssl_contextclient_address isinstancerschemenetlocrr)sysstderr multithread multiprocess connectionrPcommandr queryaddress_string port_integerserver_addressrequest_versionheadersitemsupperreplacegetr6lowerr( getpeercertsslDER_cert_to_PEM_certr7logAttributeError)r request_url url_scheme path_infoenvironkeyvalue peer_certrrr make_environs                   zWSGIRequestHandler.make_environNc sjdddkrjd_ddddddtddffdd dfd d dfdd }z |j j WdSt t j fyp}z |WYd}~dSd}~wty}zDj jr|durrd_zdurdd|tWn tyYnwddlm}||}j dd|WYd}~dSd}~ww)NExpectrOz 100-continuesHTTP/1.1 100 Continue FdatarcstdusJddusJddurz dd\}}Wnty0d}}Ynwt|}||t}D]\}}||||q@d|vsxddksxd|krfdksxn|d vsxjd krxd d d dd t |t sJd|rrj tt|ddj dj |rj dj dS)Nzwrite() before start_responserrOzcontent-lengthrVHEADd>0HTTP/1.1TzTransfer-Encodingrh Connectionclosezapplications must write bytesr>)splitr7r5 send_responseset send_headeraddrprotocol_version end_headersrprHwfilewritehexr@encodeflush)rcode_strmsgcode header_keysrr)chunk_responser headers_sent headers_setr status_sent status_setrrrsR            z*WSGIRequestHandler.run_wsgi..writecsB|rzr|d|dWd}n d}wrtd||S)NrrzHeaders already set)with_tracebackAssertionError)statusr~exc_info)rrrrrrstart_response1s z3WSGIRequestHandler.run_wsgi..start_responseappr$c sl|}z%|D]}|qsdrjdWt|dr)|dSdSt|dr5|ww)Ns0 r)rrhasattrr)rapplication_iterr)rrrrrrrrexecute?s      z,WSGIRequestHandler.run_wsgi..executeTr)DebugTracebackrlzError on request: N)rr$rN)r~rrr6rrrrrHrMrConnectionErrorsockettimeoutconnection_dropped Exceptionpassthrough_errorsclose_connectionr debug.tbtoolsrrender_traceback_textr)rrr:rrr) rrrrrrrrrrrun_wsgisD "9     "zWSGIRequestHandler.run_wsgic sztWdSttjfy#}z ||WYd}~dSd}~wtyG}z|jjdur;t |r;| d|nWYd}~dSd}~ww)z/Handles a request ignoring dropped connections.NzSSL error occurred: %s) superhandlerrrrrrMrn is_ssl_error log_error)rr: __class__rrrfszWSGIRequestHandler.handlerlrcCr.)z`Called if the connection was closed by the client. By default nothing happens. Nr)rrlrrrrrrsz%WSGIRequestHandler.connection_droppedrcs|dr|jStt|S)Ndo_) startswithrgetattrrrrrrrys  zWSGIRequestHandler.__getattr__cCs*t|ddr |jdS|jsdS|jdS)Nrr\rSr)rrror/rrrrzs   z!WSGIRequestHandler.address_stringcCs |jdS)Nr)ror/rrrr{s zWSGIRequestHandler.port_integerrarsizecCszt|j}|jd|d|j}Wn ty|j}Ynwt|}|ddkr0t|d}n8|dkr5n3|dkr?t|d}n)|ddkrKt|d }n|d krUt|d }n|dd krbt|dd }nt|dd}|dd|||dS)N r1bold200304cyan3green404yellow4redmagentainfoz "%s" %s %s) r rmrxr}r requestliner _ansi_styler)rrrrmrrrr log_requests*           zWSGIRequestHandler.log_requestformatargscG|jd|g|RdS)NrlrrrrrrrrzWSGIRequestHandler.log_errorcGr)Nrrrrrr log_messagerzWSGIRequestHandler.log_messagetypemessagecGs0t||d|d|dg|RdS)Nz - - [z]  )r rzlog_date_time_stringrrrrrrrrs  zWSGIRequestHandler.log)rr%rNr)rara)rrrrF__annotations__propertyrrPrrr BaseExceptionrOptionalrrrrzr5r{Unionrrrr __classcell__rrrrrKs<   Ny      $rKrstylesrcGsBts|Sddddddd}|D] }d||d |}q|d S) Nr !#$)rrrrrrz[mz)_log_add_style)rrcodesstylerrrrs  rcn)r'r&c Cs4z ddlm}ddlm}ddlm}ddlm}ddlm }Wn t y,t ddw|}|j dd |d }|dur>d }| ||jd ||j|g}|}|||||ttjttjtd dj||j gddj|!|"|gdd#||$|} | |fS)Nr)x509)NameOID)default_backend)hashes)rsazctxrrrgenerate_adhoc_ssl_context%s*      rKr=r>protocolcCs(|durtj}t|}||||S)aLoads SSL context from cert/private key files and optional protocol. Many parameters are directly taken from the API of :py:class:`ssl.SSLContext`. :param cert_file: Path of the certificate to use. :param pkey_file: Path of the private key to use. If not given, the key will be obtained from the certificate file. :param protocol: A ``PROTOCOL`` constant from the :mod:`ssl` module. Defaults to :data:`ssl.PROTOCOL_TLS_SERVER`. N)rPROTOCOL_TLS_SERVER SSLContextload_cert_chain)r=r>rLrJrrrrGCs    rGrlcCs(|durtttd}t|tjS)z?Checks if the given error (or the current one) is an SSL error.Nr)rcastrrsrrprSSLError)rlrrrrXs rportcCs.|drtjSd|vrttdrtjStjS)zUReturn ``AF_INET4``, ``AF_INET6``, or ``AF_UNIX`` depending on the host and port.zunix://:AF_INET6)rrAF_UNIXrrTAF_INET)r.rRrrrselect_address_family_s rWfamilycCs\|tkr |dddSz t|||tjtj}Wntjy'||fYSw|ddS)zVReturn a fully qualified socket address that can be passed to :func:`socket.bind`.://rr)af_unixrr getaddrinfo SOCK_STREAM IPPROTO_TCPgaierror)r.rRrXresrrr get_sockaddris  rac Cs|tjkrdnd}t|tj1}z ||dfWnty3|tjkr(dndYWdSw|dWdS1sDwYdS)zGet the IP address of an external interface. Used when binding to 0.0.0.0 or ::1 to show a more useful URL. :meta private: zfd31:f903:5ab5:1::1z10.253.155.219i2z::1 127.0.0.1Nr)rrT SOCK_DGRAMconnectr8 getsockname)rXr.srrrget_interface_ipys  $rgcseZdZdZdZdZeZdZ    dde de ddd e j e j ed ed e j ed e j e d dffdd Zde de de jd dfddZd ded dffdd Zde jde je je e fe fd dffdd Zd!ddZZS)"rLzuA WSGI server that that handles one request at a time. Use :func:`make_server` to create a server instance. FTNr.rRrr$handlerrrnfdrc s|durt}dt|vr|js|jrd|_||_||_||_||_t |||_ }t |t ||} |t krJ|durJtt| } tj| rJt| tj| |dd|durz ||Wnbty} z8|t| jtjd| jtj krtd|dtjdtj!dkr|d krtd tjdt"d WYd} ~ n#d} ~ wt#y|w|t$%||t$j&|_$|j$'|_(|t kr|j(d |_|durt)|t*rt+|}n|d krt,}|j-|j$d d|_$||_.dSd|_.dS)NrrF)bind_and_activate)filezPort zp is in use by another program. Either identify and stop that program, or start the server with a different port.darwinizZOn macOS, try disabling the 'AirPlay Receiver' service from System Preferences -> Sharing.radhocT) server_side)/rKvarsrurvrr.rRrrrWaddress_familyrar5r[rrPrrErmexistsunlinkrr- server_bindserver_activater8 server_closeprintstrerrorrsrterrno EADDRINUSEplatformexitrrfromfdr]rer|rptuplerGrK wrap_socketrn) rr.rRrrhrrnrirpr|r:rrrr-sv               zBaseWSGIServer.__init__rrrcGst||g|RdSrrrrrrrszBaseWSGIServer.log? poll_intervalcsNz!z tj|dWn tyYnwW|dSW|dS|w)N)r)r serve_foreverKeyboardInterruptru)rrrrrrs  zBaseWSGIServer.serve_foreverrequestrocs|jrt||Sr)rr handle_error)rrrorrrrszBaseWSGIServer.handle_errorcCsd}t|dd}|g}|jtkr|d|jnW|jdur!dnd}|j}|jdvrX|d |jd |jd krBd }ttj}nd }ttj }|d|d|d|j d|vrbd|d}|d|d|d|j t dd |dS)z::0.0.0.0z * Running on all addresses ()rrbz[::1]rYrS[]rr) rrpr[appendr.rnrgrrVrTrRr join)r dev_warningmessagesrqdisplay_hostname localhostrrr log_startup s(       zBaseWSGIServer.log_startup)NFNN)rr)rrrrFrurv LISTEN_QUEUErequest_queue_sizeallow_reuse_addressrr5rrTyperKrI_TSSLContextArgr-rrfloatrrTuplerrrrrrrrLsJ crLc@seZdZdZdZdZdS)ThreadedWSGIServerzA WSGI server that handles concurrent requests in separate threads. Use :func:`make_server` to create a server instance. TN)rrrrFrudaemon_threadsrrrrr/srcsneZdZdZdZ     ddededd d ed ejej e d e d eje dejeddffdd Z ZS)ForkingWSGIServerzA WSGI server that handles concurrent requests in separate forked processes. Use :func:`make_server` to create a server instance. T(NFr.rRrr$ processesrhrrnrirc s.tstdt|||||||||_dS)Nz'Your platform does not support forking.)can_forkr7rr- max_children) rr.rRrrrhrrnrirrrr-Cs  zForkingWSGIServer.__init__)rNFNN)rrrrFrvrr5rrrrKrIrr-rrrrrr:s6  rrr$threadedrrequest_handlerrrnric Csd|r |dkr td|rt|||||||dS|dkr't||||||||dSt|||||||dS)a6Create an appropriate WSGI server instance based on the value of ``threaded`` and ``processes``. This is called from :func:`run_simple`, but can be used separately to have access to the server object, such as to run it in a separate thread. See :func:`run_simple` for parameter docs. rz4Cannot have a multi-thread and multi-process server.ri)r7rrrL) r.rRrrrrrrnrirrr make_serverUs(  rcCstjddkS)zqCheck if the server is running as a subprocess within the Werkzeug reloader. .. versionadded:: 0.10 WERKZEUG_RUN_MAINtrue)rErrrrrris_running_from_reloadersrautohostname application use_reloader use_debugger use_evalex extra_filesexclude_patternsreloader_interval reloader_type static_filesc Cst|ts td| rddlm}||| }|r$ddlm}|||d}ts*d}nttj d}t |||| | | |||d }|j d t |tj d<ts\|td td d |r{dd lm}z||j|||| dW|dS|w|dS)aStart a development server for a WSGI application. Various optional features can be enabled. .. warning:: Do not use the development server when deploying to production. It is intended for use only during local development. It is not designed to be particularly efficient, stable, or secure. :param hostname: The host to bind to, for example ``'localhost'``. Can be a domain, IPv4 or IPv6 address, or file path starting with ``unix://`` for a Unix socket. :param port: The port to bind to, for example ``8080``. Using ``0`` tells the OS to pick a random free port. :param application: The WSGI application to run. :param use_reloader: Use a reloader process to restart the server process when files are changed. :param use_debugger: Use Werkzeug's debugger, which will show formatted tracebacks on unhandled exceptions. :param use_evalex: Make the debugger interactive. A Python terminal can be opened for any frame in the traceback. Some protection is provided by requiring a PIN, but this should never be enabled on a publicly visible server. :param extra_files: The reloader will watch these files for changes in addition to Python modules. For example, watch a configuration file. :param exclude_patterns: The reloader will ignore changes to any files matching these :mod:`fnmatch` patterns. For example, ignore cache files. :param reloader_interval: How often the reloader tries to check for changes. :param reloader_type: The reloader to use. The ``'stat'`` reloader is built in, but may require significant CPU to watch files. The ``'watchdog'`` reloader is much more efficient but requires installing the ``watchdog`` package first. :param threaded: Handle concurrent requests using threads. Cannot be used with ``processes``. :param processes: Handle concurrent requests using up to this number of processes. Cannot be used with ``threaded``. :param request_handler: Use a different :class:`~BaseHTTPServer.BaseHTTPRequestHandler` subclass to handle requests. :param static_files: A dict mapping URL prefixes to directories to serve static files from using :class:`~werkzeug.middleware.SharedDataMiddleware`. :param passthrough_errors: Don't catch unhandled exceptions at the server level, let the serve crash instead. If ``use_debugger`` is enabled, the debugger will still catch such errors. :param ssl_context: Configure TLS to serve over HTTPS. Can be an :class:`ssl.SSLContext` object, a ``(cert_file, key_file)`` tuple to create a typical context, or the string ``'adhoc'`` to generate a temporary self-signed certificate. .. versionchanged:: 2.1 Instructions are shown for dealing with an "address already in use" error. .. versionchanged:: 2.1 Running on ``0.0.0.0`` or ``::`` shows the loopback IP in addition to a real IP. .. versionchanged:: 2.1 The command-line interface was removed. .. versionchanged:: 2.0 Running on ``0.0.0.0`` or ``::`` shows a real IP address that was bound as well as a warning not to run the development server in production. .. versionchanged:: 2.0 The ``exclude_patterns`` parameter was added. .. versionchanged:: 0.15 Bind to a Unix socket by passing a ``hostname`` that starts with ``unix://``. .. versionchanged:: 0.10 Improved the reloader and added support for changing the backend through the ``reloader_type`` parameter. .. versionchanged:: 0.9 A command-line interface was added. .. versionchanged:: 0.8 ``ssl_context`` can be a tuple of paths to the certificate and private key files. .. versionchanged:: 0.6 The ``ssl_context`` parameter was added. .. versionchanged:: 0.5 The ``static_files`` and ``passthrough_errors`` parameters were added. zport must be an integerr)SharedDataMiddleware)DebuggedApplication)evalexNWERKZEUG_SERVER_FDrTrzPress CTRL+C to quitr)run_with_reloader)rrintervalr)rpr5rmiddleware.shared_datardebugrrrErrrset_inheritablerfilenorr r _reloaderrrru)rrRrrrrrrrrrrrrrrnrrrisrvrrrr run_simplesN p       rr)NN)rr#)FrNFNN) FFTNNrrFrNNFN)OrFrxiorEr socketserverrstypingrrrrr http.serverrr _internalr r exceptionsr urlsr r rrrrrr __import__rrr!rUr[rrrrrrr TYPE_CHECKINGtyping_extensionste_typeshed.wsgir$r%-cryptography.hazmat.primitives.asymmetric.rsar&cryptography.x509r' RawIOBaser(rKrr,r@rKr5rGrrIr AddressFamilyrWrargrLThreadingMixInrrrrrIterableDictrrrrrs^                         >& /  ,   %   -      &