6hM8tddlZddlZddlmZddlmZddlmZmZddl m Z m Z eje ZdZdZdZd Zd Zd Zd Zd ZdZdZgdZgdZdZeej:dZededdddddddddd Z dZ!dZ"dZ#dZ$dZ%dZ&dZ'd Z(d*d!Z)d*d"Z*d#Z+d+d$Z,d%Z-d,d&Z.d'Z/d(Z0d)Z1y)-N)Iterable) timedelta) current_apprequest)Headers MultiDictzAccess-Control-Allow-OriginzAccess-Control-Allow-MethodszAccess-Control-Allow-HeaderszAccess-Control-Expose-Headersz Access-Control-Allow-CredentialszAccess-Control-Max-Agez$Access-Control-Allow-Private-NetworkzAccess-Control-Request-MethodzAccess-Control-Request-Headersz&Access-Control-Request-Private-Network)GETHEADPOSTOPTIONSPUTPATCHDELETE) CORS_ORIGINS CORS_METHODSCORS_ALLOW_HEADERSCORS_EXPOSE_HEADERSCORS_SUPPORTS_CREDENTIALS CORS_MAX_AGECORS_SEND_WILDCARDCORS_AUTOMATIC_OPTIONSCORS_VARY_HEADERCORS_RESOURCESCORS_INTERCEPT_EXCEPTIONSCORS_ALWAYS_SENDCORS_ALLOW_PRIVATE_NETWORK_FLASK_CORS_EVALUATED*FTz/*) originsmethods allow_headersexpose_headerssupports_credentialsmax_age send_wildcardautomatic_options vary_header resourcesintercept_exceptions always_sendallow_private_networkct|tr=|jDcgc]\}}t||f}}}d}t ||St|t rt|ifgSt|t r|Dcgc]}t|ifc}St|trt|ifgStdcc}}wcc}w)Nc$|\}}t|tr3dd|jjdt |j fSt |rdd|jdt | fSdd|jdt | fS)Nr/) isinstance RegexObjectpatterncountlenprobably_regex)pairr3_s 8D:\EasyAligner\venv\Lib\site-packages\flask_cors/core.pysort_keyz!parse_resources..sort_keyIsJGQ';/1goo33C83w;O:OPP(1gmmC03w<-@@1gmmC03w<-@@)keyz(Unexpected value for resources argument.) r1dictitemsre_fixsortedstrrr2 ValueError)r)kvr:rs r9parse_resourcesrFBs)T"1:0AB0A1fQi^0A B AiX.. Is # "B'(( Ix ()23AB33 I{ + "B'((CDD5C$4s CCcP |jS#t$rt|cYSwxYw)z Helper that returns regexp pattern from given value. :param regexp: regular expression to stringify :type regexp: _sre.SRE_Pattern or str :returns: string representation of given regexp pattern :rtype: str )r3AttributeErrorrA)regexps r9get_regexp_patternrJcs*~~ 6{s %%c|jd}d|v}|r}tjd||r)|jdrtjddgSt||drtjd |gStjd y|jd r<|r|jd rydgSt |Dcgc]}t |r|c}Stjd ycc}w)Nr .*z&CORS request received with 'Origin' %sr&z=Allowed origins are set to '*'. Sending wildcard CORS header.rF caseSensitivez:The request's Origin header matches. Sending CORS headers.zBThe request's Origin header does not match any of allowed origins.r+r$zThe request did not contain an 'Origin' header. This means the browser or client did not request CORS, ensure the Origin Header is set.)getLOGdebugtry_match_any_patternr@r6)optionsrequest_originr wildcardos r9get_cors_originsrWrskk)$GH :NK  O4 IIU V5L#>7% P IIL  ## # IIZ [ ] # {{12u gGg^A5F1gGH H  V Hs C8C8c|rU|jdDcgc]}|j}}tfd|}djt |Sycc}w)N,c>t|jddS)Nr"FrM)rRrO)hrSs r9z#get_allow_headers..s,A!W[[Q`Eaqv,wr;, )splitstripfilterjoinr@)rSacl_request_headersr[request_headersmatching_headerss` r9get_allow_headersresc.A.G.G.LM.L1779.LM""wzIJyy 0122 NsAct||jd}t}|s|S|D]}|jt||jd|t <|jdr d|t <t|vr6|jtdk(r|jdrdnd}||t<|dk(r|jtdj}|rj||jd vrWt||jt|t<|jd |t<|jd |t<nt j#d |jd rr|td k(rnet%|jddkDs6t%|dkDs(t't)t*|jdr|jddtd|j-DS)NOriginr#r$truer,falser rr!r%ztThe request's Access-Control-Request-Method header does not match allowed methods. CORS headers will not be applied.r(rr r/Varyc30K|]\}}|s ||fywN).0rCrDs r9 z#get_cors_headers..s=11aVs  )rWrOradd ACL_ORIGINACL_EXPOSE_HEADERSACL_CREDENTIALS"ACL_REQUEST_HEADER_PRIVATE_NETWORKACL_RESPONSE_PRIVATE_NETWORKACL_REQUEST_METHODupperreACL_REQUEST_HEADERSACL_ALLOW_HEADERS ACL_MAX_AGE ACL_METHODSrPinfor5anymapr6r>)rSrcrequest_methodorigins_to_setheadersoriginr,acl_request_methods r9get_cors_headersrs%g/B/B8/LMNkG   J'!#*++.>"?G {{)*#)  +o=    B Cv M*1++6M*NT[0E,-",001CRHNNP "4 I8N"N*;7ODWDWXkDl)mG% &#*;;y#9GK #*;;y#9GK HHG  {{=! : # %   I& '! +>"Q&3~w{{9'=>? KK ) = = ==r;ct|trtjd|St |j t s4t |j tst|j |_t|tj tj}tjdt||jD]!\}}|j j||#|S)z Performs the actual evaluation of Flask-CORS options and actually modifies the response object. This function is used both in the decorator and the after_request callback z*CORS have been already evaluated, skippingzSettings CORS headers: %s)hasattrFLASK_CORS_EVALUATEDrPrQr1rrrrrmethodrAr>rp)resprSheaders_to_setrCrDs r9set_cors_headersrst)* >? dllG ,Z i5X . %gwONII)3~+>?$$&1 A' Kr;cVttrygd}tfd|DS)NT) r\]?$^[r()c3&K|]}|v ywrlrm)rnc maybe_regexs r9roz!probably_regex..s@-?1 #-?s)r1r2r})rcommon_regex_charss` r9r6r6 s*+{+P@-?@@@r;c|dk(rdS|S)z Replace the invalid regex r'*' with the valid, wildcard regex r'/.*' to enable the CORS app extension to have a more user friendly api. rrLrm)regs r9r?r?s 4K5(S(r;c0tfd|DS)Nc38K|]}t|ywrl)try_match_pattern)rnr3rNinsts r9roz(try_match_any_pattern..sWh7 w >hs)r})rpatternsrNs` `r9rRrRs WhW WWr;ct|trtj||St |r-|rdntj } tj|||S t|}t|}|r||k(S|j|jk(S#tj $rYywxYw#t$r||k(cYSwxYw)a: Safely attempts to match a pattern or string to a value. This function can be used to match request origins, headers, or paths. The value of caseSensitive should be set in accordance to the data being compared e.g. origins and headers are case insensitive whereas paths are case-sensitive r)flagsF) r1r2rematchr6 IGNORECASEerrorrAcasefold Exception)valuer3rNrrDps r9rrs';'xx''g"  88GU%8 8 J L&qAvHAJJLAJJL,HH xx     s*B B7= B7B43B47CCctj}|jt||r|D]}|j|t |S)z Compute CORS options for an application by combining the DEFAULT_OPTIONS, the app's configuration-specified options and any dictionaries passed. The last specified option wins. )DEFAULT_OPTIONScopyupdateget_app_kwarg_dictserialize_options) appInstancedictsrSds r9get_cors_optionsr6sJ ""$G NN%k23 A NN1  W %%r;c|xst}t|di}tDcic]D}|j||j j dd|j|Fc}Scc}w)z;Returns the dictionary of CORS specific app configurations.configcors_r)rgetattrCONFIG_OPTIONSrOlowerreplace)rapp app_configrCs r9rrEsg  $Ch+JGU w~!YcYgYghiYjYvAGGI  gr *JNN1,= =~ ww ws A,2A,c|yt|ts1t|tr!djdt |DSt|S)z A more flexible str function which intelligently handles stringifying strings, lists and other iterables. The results are lexographically sorted to ensure generated responses are consistent when iterables such as Set are used. Nr]c32K|]}t|ywrl)rA)rnitems r9rozflexible_str..Ys;{tT{s)r1rArrar@)objs r9 flexible_strrOsA { S !jh&?yy;vc{;;;3xr;cX||vr&t||}|r|jn|||<yyrl)rrw) options_dictr<rwrs r9serialize_optionr^s2 l\#./-2EKKM Sr;cLt|tst|ts|gS|S)zT Wraps scalars or string types as a list, or returns the iterable instance. )r1rAr)rs r9ensure_iterablerds#$JtX$>v  r;cPt|Dcgc] }t|c}Scc}wrl)rr?)paramxs r9sanitize_regex_paramrns%.u5 65!F1I5 66 6s#c|xsij}|jD]!}|tvs tj d|#t |j d|d<t |j d|d<d|dvr|dr|dr tdt|dt|d d t|j d tr(tt|d j|d <|S) zL A helper method to serialize and processes the options dictionary. z'Unknown option passed to Flask-CORS: %sr r"rLr$r&z}Cannot use supports_credentials in conjunction withan origin string of '*'. See: http://www.w3.org/TR/cors/#resource-requestsr#r!T)rwr%)rkeysrrPwarningrrOrBrr1rrAint total_seconds)optsrSr<s r9rrrszr!Gyy{ o % KKA3 G .gkk).DEGI3GKK4PQGO  ""w/E'F7SbKc ;  W./Wit4'++i()4 WY%7%E%E%G!HI  Nr;)Trl)F)2loggingrcollections.abcrdatetimerflaskrrwerkzeug.datastructuresrr getLogger__name__rPrqr{ryrrrsrzrurvrxrt ALL_METHODSrrtypecompiler2r=rrFrJrWrerrr6r?rRrrrrrrrrrmr;r9rs $&6g!+ , 244& E56%M"J $/:2::b>"    "EB 1h 7>t<A)X . &x > 7r;