U Ø–]<4ã@sÚddlZddlZddlZddlZddlmZddlmZddlmZdZ d  e ¡Z dZ e  e¡Zd d „Zd d „Zd d„Zdd„Zdd„ZGdd„deƒZd$dd„Zdd„Zdd„Zdd„Zd%dd„Zd&d d!„Zd"d#„ZdS)'éNé)Ú credentials)Úerrors)Úconfigz docker.iozhttps://index.{0}/v1/zcCsXd|krt d |¡¡‚t|ƒ\}}|ddks<|ddkrLt d |¡¡‚t|ƒ|fS)Nz://z-Repository name cannot contain a scheme ({0})rú-éÿÿÿÿzs   ÿ ÿ ÿr cCst|tƒst|ƒ}| |¡S©N)Ú isinstanceÚ AuthConfigÚget_credential_store)Ú authconfigrr r rr%Hs r%c@s”eZdZddd„Zeddd„ƒZeddd„ƒZed d „ƒZed d „ƒZ ed d„ƒZ edd„ƒZ d dd„Z dd„Z dd„Zdd„Zdd„Zdd„ZdS)!r$NcCs*d|kri|d<| |¡||_i|_dS©NÚauths)ÚupdateÚ_credstore_envÚ_stores)ÚselfZdctrr r rÚ__init__Os  zAuthConfig.__init__FcCsài}t |¡D]Ì\}}t|tƒsLt d |¡¡|rDt d |¡¡‚iSd|krvt d |¡¡d|di||<qd|kr˜t d |¡¡i||<qt |dƒ\}}t d t |ƒt |ƒ¡¡|||  d ¡|d œ||<q|S) a  Parses authentication entries Args: entries: Dict of authentication entries. raise_on_error: If set to true, an invalid format will raise InvalidConfigFile Returns: Authentication registry. z+Config entry for key {0} is not auth configz&Invalid configuration for registry {0}Z identitytokenz-Found an IdentityToken entry for registry {0}Ú IdentityTokenÚauthzOAuth data for {0} is absent. Client might be using a credentials store instead.z(Found entry (registry={0}, username={1})Úemail©ÚusernameÚpasswordr0Z serveraddress) ÚsixÚ iteritemsr#ÚdictrrrrÚInvalidConfigFileÚ decode_authÚreprÚget)ÚclsÚentriesÚraise_on_errorÚconfrÚentryr2r3r r rÚ parse_authVs\ ÿÿ ÿÿÿÿÿÿÿÿÿü zAuthConfig.parse_authc Cs:|s„t |¡}|s|i|ƒSz"t|ƒ}t |¡}W5QRXWnDtttfk r‚}z t  |¡|t |ƒ|ƒWY¢Sd}~XYnXi}|  d¡rºt  d¡|  d|j | d¡ddi¡|  d¡rât  d¡|  d| d¡i¡|  d¡r t  d ¡|  d| d¡i¡|r|||ƒSt  d ¡|d|  |¡i|ƒS) a8 Loads authentication data from a Docker configuration file in the given root directory or if config_path is passed use given path. Lookup priority: explicit config_path parameter > DOCKER_CONFIG environment variable > ~/.docker/config.json > ~/.dockercfg Nr(zFound 'auths' sectionT)r=Ú credsStorezFound 'credsStore' sectionÚ credHelperszFound 'credHelpers' sectionzNCouldn't find auth-related section ; attempting to interpret as auth-only file)rZfind_config_fileÚopenÚjsonÚloadÚIOErrorÚKeyErrorÚ ValueErrorrrÚ_load_legacy_configr:r)r@Úpop)r;Ú config_pathÚ config_dictrÚ config_fileÚfÚeÚresr r rr›s@     $  ÿÿ     ÿzAuthConfig.load_configcCs | di¡Sr'©r:©r,r r rr(ËszAuthConfig.authscCs | dd¡S)NrArQrRr r rÚ creds_storeÏszAuthConfig.creds_storecCs | di¡S)NrBrQrRr r rÚ cred_helpersÓszAuthConfig.cred_helperscCs|j o|j o|j Sr")r(rSrTrRr r rr×sÿzAuthConfig.is_emptycCsè|js |jrP| |¡}|dk rPt d |¡¡| ||¡}|dk rF|St d¡|r\t|ƒnt}t d t |ƒ¡¡||j krœt d t |ƒ¡¡|j |St   |j ¡D]0\}}t|ƒ|kr¨t d t |ƒ¡¡|Sq¨t d¡dS)a+ Returns the authentication data from the given auth configuration for a specific registry. As with the Docker client, legacy entries in the config with full URLs are stripped down to hostnames before checking for a match. Returns None if no match was found. NzUsing credentials store "{0}"z/No entry in credstore - fetching from auth dictúLooking for auth entry for {0}z Found {0}úNo entry found) rSrTr%rrrÚ_resolve_authconfig_credstorer rr9r(r4r5)r,rÚ store_nameZcfgÚkeyr>r r rrÝs*  ÿ       zAuthConfig.resolve_authconfigc CsÖ|r |tkrt}t d t|ƒ¡¡| |¡}zJ| |¡}d|i}|dtkr\|d|d<n|  |d|ddœ¡|WSt j k ršt d¡YdSt j k rÐ}zt  d t|ƒ¡¡‚W5d}~XYnXdS) NrUZ ServerAddressÚUsernameZSecretr.)rZZPasswordrVzCredentials store error: {0})rÚ INDEX_URLrrrr9Ú_get_store_instancer:ÚTOKEN_USERNAMEr)rZCredentialsNotFoundZ StoreErrorrZDockerException)r,rZcredstore_nameÚstoreÚdatarPrOr r rrWs.   ÿ þ  ÿz(AuthConfig._resolve_authconfig_credstorecCs*||jkr tj||jd|j|<|j|S)N)Z environment)r+rZStorer*)r,Únamer r rr\s  ÿ zAuthConfig._get_store_instancecCs"|r |tkrt}|j |¡p |jSr")rr[rTr:rS)r,rr r rr%#s zAuthConfig.get_credential_storecCsˆ|j ¡}|jrP| |j¡}| ¡ ¡D]&}| ||j¡||<|||t|ƒ<q(|j  ¡D](\}}| ||¡||<|||t|ƒ<qZ|Sr") r(ÚcopyrSr\ÚlistÚkeysrWrrTÚitems)r,Z auth_datar^ÚkÚregrXr r rÚget_all_credentials)s   ÿÿzAuthConfig.get_all_credentialscCs||d|<dSr'r )r,rfr_r r rÚadd_auth=szAuthConfig.add_auth)N)F)N)N)Ú__name__Ú __module__Ú __qualname__r-Ú classmethodr@rÚpropertyr(rSrTrrrWr\r%rgrhr r r rr$Ns&  D /     #r$cCst|tƒst||ƒ}| |¡Sr")r#r$r)r&rrr r rrAs  rcCs | dd¡ dd¡ dd¡dS)Nzhttp://Úzhttps://rrr)Úreplacer)Zurlr r rrGsrcCsDt|tjƒr| d¡}t |¡}| dd¡\}}| d¡| d¡fS)NÚasciió:rÚutf8)r#r4Z string_typesÚencodeÚbase64Z b64decoderÚdecode)r/ÚsZloginÚpwdr r rr8Ks    r8cCst |¡ d¡}t |¡S)Nrp)rDÚdumpsrsrtZurlsafe_b64encode)r/Z auth_jsonr r rrSsrFcCs t ||¡S)a Parses authentication entries Args: entries: Dict of authentication entries. raise_on_error: If set to true, an invalid format will raise InvalidConfigFile Returns: Authentication registry. )r$r@)r<r=r r rr@Xs r@cCst |||¡Sr")r$r)rKrLrr r rrhsrc CsÆt d¡z€g}t|ƒB}| ¡D]}| | ¡ d¡d¡q"t|ƒdkrVt  d¡‚W5QRXt |dƒ\}}dt |||dt dœiiWSt k r¶}zt |¡W5d}~XYnXt d ¡iS) Nz+Attempting to parse legacy auth file formatz = réz$Invalid or empty configuration file!rr(r1z4All parsing attempts failed - returning empty config)rrrCÚ readlinesÚappendÚstriprrrr7r8rr[Ú Exception)rMr_rNÚliner2r3rOr r rrIls0    ÿüÿ  rI)NN)F)NNN)rtrDZloggingr4rnrrZutilsrrrr[r]Z getLoggerrirrr rr r%r6r$rrr8rr@rrIr r r rÚs0      t