mxi6RUddlmZddlZddlZddlmZmZmZddlm Z ddl Z ddl m Z ddl mZddlmZddlmZmZdd lmZdd lmZdd lmZmZmZdd lmZdd lmZddl m!Z!m"Z"m#Z#m$Z$erddl%m&Z&m'Z'm(Z(ddl)m*Z*ddl+m,Z,ee-Z.de/d<GddeZ0GddeeZ1y)) annotationsN) TYPE_CHECKINGAnyFinal)urlparse)utf8)WebSocketHandler)config)get_cookie_with_chunksget_expose_tokens_config) get_logger)BackMsg)Runtime SessionClientSessionClientDisconnectedError)serialize_forward_msg) ClientContext)AUTH_COOKIE_NAMETOKENS_COOKIE_NAMEis_url_from_allowed_originsis_xsrf_enabled) AwaitableIterableMapping)HTTPServerRequest) ForwardMsgr_LOGGERcNeZdZdZddZeddZed dZed dZy) TornadoClientContexta"Tornado-specific implementation of ClientContext. Captures headers, cookies, and client info from the initial WebSocket handshake. Values are cached at construction time since they represent the initial request context and should not change during the connection lifetime. ct|jj|_|jj Dcic]\}}||j c}}|_|j|_ ycc}}wN) listheadersget_all_headerscookiesitemsvalue_cookies remote_ip _remote_ip)selftornado_requestkms e/home/htdocs/ttos/venv/lib/python3.12/site-packages/streamlit/web/server/browser_websocket_handler.py__init__zTornadoClientContext.__init__:sc/3O4K4K4S4S4U/V #2#:#:#@#@#B) 1aAqwwJ)  '6&?&?) sA8c|jS)z$All headers as (name, value) tuples.)r%r,s r0r#zTornadoClientContext.headersA}}c|jS)z#Cookies as a name-to-value mapping.)r)r3s r0r&zTornadoClientContext.cookiesFr4r5c|jS)zThe client's remote IP address.)r+r3s r0r*zTornadoClientContext.remote_ipKsr5N)r-rreturnNone)r8zIterable[tuple[str, str]])r8zMapping[str, str])r8 str | None) __name__ __module__ __qualname____doc__r1propertyr#r&r*r5r0rr2sI@r5rceZdZdZddZ d dfd Zdfd ZddZddZddZ e ddZ dd Z dd Z dd Zdd Zdd ZxZS)BrowserWebSocketHandlerz0Handles a WebSocket connection from the browser.cj||_d|_tr |j}t |_yr!)_runtime _session_idr xsrf_tokenr expose_tokens)r,runtime_s r0 initializez"BrowserWebSocketHandler.initializeTs/ '+  A67r5c8dfd }t||S)a)Get a signed cookie from the request, reconstructing from chunks if needed. Added for compatibility with Tornado < 6.3.0. Also handles chunked cookies automatically. See release notes: https://www.tornadoweb.org/en/stable/releases/v6.3.0.html#deprecation-notices c| tt |S#t$rtt|cYSwxYwr!)superrBget_signed_cookieAttributeErrorget_secure_cookie) cookie_name __class__ max_age_days min_versionr,r(s r0get_single_cookiezDBrowserWebSocketHandler.get_signed_cookie..get_single_cookieqsU 4dM k" 4dM k s ;;)rQstrr8 bytes | None)r )r,namer(rSrTrUrRs` ``` r0rNz)BrowserWebSocketHandler.get_signed_cookiebs  &&7>>r5c<t||xs t|S)z Set up CORS.)rM check_originr)r,originrRs r0rZz$BrowserWebSocketHandler.check_origin}sw#F+R/J6/RRr5c|j|\}}}|j\}}}t|}t|}|r|sytj||S)zInspired by tornado.web.RequestHandler.check_xsrf_cookie method, to check the XSRF token passed in Websocket connection header. F)_decode_xsrf_token_get_raw_xsrf_tokenrhmaccompare_digest)r,supplied_tokenrItokenexpected_token decoded_tokendecoded_expected_tokens r0_validate_xsrf_tokenz,BrowserWebSocketHandler._validate_xsrf_tokens`--n= 5!#779>1U !%n!5$:""=2HIIr5cdtj|}i}|jdd}t|jj d}|j dz|jz}||k(r.|jdd|d<|d=|d=|j||Stjd|S)zProcess the user cookie and extract the user info after validating the origin. Origin is validated for security reasons. r[NOriginz:// is_logged_inFzgOrigin mismatch, the origin of websocket request is not the same origin of redirect_uri in secrets.toml) jsonloadsgetrrequestr#schemenetlocupdatererror)r,raw_cookie_value cookie_value user_infocookie_value_originparsed_origin_from_headerexpected_origin_values r0_parse_user_cookiez*BrowserWebSocketHandler._parse_user_cookieszz"23  *..x>$,T\\-A-A(-K$L! % , ,u 47P7W7W W  "7 7(4(8(8(OIn %X&^,   \ * MM>  r5c |jt|dy#tjj$r }t |d}~wwxYw)z!Send a ForwardMsg to the browser.T)binaryN) write_messagertornado websocketWebSocketClosedErrorr)r,msges r0write_forward_msgz)BrowserWebSocketHandler.write_forward_msgsD 8   4S9$  G  55 80a 7 8sAAAc\t|dd}|t|j}||_|S)zReturn the client's connection context. The context is cached on first access to avoid repeatedly constructing a new TornadoClientContext instance. _client_contextN)getattrrrmr)r,contexts r0client_contextz&BrowserWebSocketHandler.client_contexts3$ 148 ?*4<<8G#*D r5c|r|dSy)aReturn the first subprotocol in the given list. This method is used by Tornado to select a protocol when the Sec-WebSocket-Protocol header is set in an HTTP Upgrade request. NOTE: We repurpose the Sec-WebSocket-Protocol header here in a slightly unfortunate (but necessary) way. The browser WebSocket API doesn't allow us to set arbitrary HTTP headers, and this header is the only one where we have the ability to set it to arbitrary values, so we use it to pass tokens (in this case, the previous session ID to allow us to reconnect to it) from client to server as the *third* value in the list. The reason why the auth token is set as the third value is that: - when Sec-WebSocket-Protocol is set, many clients expect the server to respond with a selected subprotocol to use. We don't want that reply to be the session token, so we by convention have the client always set the first protocol to "streamlit" and select that. - the second protocol in the list is reserved in some deployment environments for an auth token that we currently don't use rNr@)r, subprotocolss r0select_subprotocolz*BrowserWebSocketHandler.select_subprotocols* ? "r5cfi}d} |jjdjdDcgc]}|j}}|j t }t r|r|d}|j|rv|j|j||j t} | r?tj| } i} |jD]} | d} | | vs | | | | <| |d<t|dk\r|d}t#j$d}|j'D]:\}}|jjj)|}|r |d ||<6d||<<|j*j-||| |_ycc}w#ttj f$rYwxYw) NzSec-Websocket-Protocol,_tokentokenszserver.trustedUserHeadersr)clientrtexisting_session_id)rmr#splitstriprNrrrfrprxrrjrkrGlenKeyErrorJSONDecodeErrorr get_optionr'get_listrDconnect_sessionrE)r,argskwargsrtrp ws_protocolsrrcsrf_protocol_valueraw_token_cookie_value all_tokensfiltered_tokens token_type token_keymapping_config header_name user_info_key header_valuess r0openzBrowserWebSocketHandler.opensCE "" --.FGMMcR L $556FG  %5&21o#,,-@A$$T%<%<=M%NO.2-C-CDV-W*-%)ZZ0F%G ;=*.*<*<TJ+5,f(=I(J6>H>S ;T /> (+< A%'31o# **+FG*8*>*>*@ 0 &K LL0099+FM ,9+; -(,0 -( 0 ==88 39  o<$../   s)*FFBF'"FFF0/F0cv|jsy|jj|jd|_yr!)rErDdisconnect_sessionr3s r0on_closez BrowserWebSocketHandler.on_closes.  (()9)9:r5c2tjdriSy)zEnable WebSocket compression. Returning an empty dict enables websocket compression. Returning None disables it. (See the docstring in the parent class.) z!server.enableWebsocketCompressionN)r rr3s r0get_compression_optionsz/BrowserWebSocketHandler.get_compression_optionss   @ AIr5cN|jsy t|tr tdt }|j |t jd||jddk(rQtjdstjdr|jyt j!dy|jdd k(r[tjdstjdr|jj#yt j!d y|jj%|j|y#t$rE}t jd|jj|j|Yd}~yd}~wwxYw) NzIWebSocket received an unexpected `str` message. (We expect `bytes` only.)z'Received the following back message: %sz Error deserializing back messagetypedebug_disconnect_websocketzglobal.developmentModezglobal.e2eTestzQClient tried to disconnect websocket when not in development mode or e2e testing.debug_shutdown_runtimezNClient tried to shut down runtime when not in development mode or e2e testing.)rE isinstancerV TypeErrorrParseFromStringrdebug Exception exceptionrD(handle_backmsg_deserialization_exception WhichOneofr rclosewarningstophandle_backmsg)r,messagerexs r0 on_messagez"BrowserWebSocketHandler.on_message'sn  '3' 0 )C    ( MMDc J >>& !%A A  !9:f>O>O ? " g ^^F #'? ?  !9:f>O>O ? ""$  d  MM ( ()9)93 ?;    @ A MM B B4CSCSUW X  sA E F$;FF$)rHrr8r9)NN) rXrVr(r:rSfloatrTz int | Noner8rW)r[rVr8bool)rarVr8r)rrbytesr8zdict[str, Any])rrr8r9)r8r)rz list[str]r8r:)rrrrr8zAwaitable[None] | None)r8r9)r8zdict[Any, Any] | None)rz str | bytesr8r9)r;r<r=r>rJrNrZrfrxrr?rrrrrr __classcell__)rRs@r0rBrBQs: 8"! "& ??? ?  ?  ?6S J48  4<| .r5rB)2 __future__rr_rjtypingrrr urllib.parsertornado.websocketr|tornado.escaperr streamlitr streamlit.auth_utilr r streamlit.loggerr streamlit.proto.BackMsg_pb2rstreamlit.runtimerrrstreamlit.runtime.runtime_utilr!streamlit.runtime.session_managerr streamlit.web.server.server_utilrrrrcollections.abcrrrtornado.httputilrstreamlit.proto.ForwardMsg_pb2rr;r__annotations__rrBr@r5r0rs# ,,!.P'/TT@;<<29H%%=>D. Dr5