+ hj,Rt^RIHt^RIHt^RIHt^RIHt!RR4t !RR] 4t !R R ] 4t !R R ] 4t !R R] 4t !RR] 4t]!RRR.4t!RR]4t!RR]4t!RR4tR#)z Modern, adaptable authentication machinery. Replaces certain parts of `.SSHClient`. For a concrete implementation, see the ``OpenSSHAuthStrategy`` class in `Fabric `_. ) namedtuple)AgentKey) get_logger)AuthenticationExceptionc<a]tRt^toRtRtRtRtRtRt Vt R#) AuthSourcez Some SSH authentication source, such as a password, private key, or agent. See subclasses in this module for concrete implementations. All implementations must accept at least a ``username`` (``str``) kwarg. cWnR#Nusername)selfr s&&Q/var/www/html/bestweb/venv/lib/python3.14/site-packages/paramiko/auth_strategy.py__init__AuthSource.__init__s c VP4UUu.uF wr#V RV: 2NK pppRPV4pVPP RV R2#uuppi)=z, ())itemsjoin __class____name__)r kwargskvpairsjoineds&, r _reprAuthSource._reprs[+1,,.9.$!A3au.95!..))*!F8155:sAc"VP4#r )rr s&r __repr__AuthSource.__repr__"szz|rc \h)z Perform authentication. NotImplementedErrorr transports&&r authenticateAuthSource.authenticate%s "!rr N) r __module__ __qualname____firstlineno____doc__rrr"r)__static_attributes____classdictcell__ __classdict__s@r rrs#!6""rrc*a]tRt^,toRtRtRtVtR#)NoneAuthzK Auth type "none", ie https://www.rfc-editor.org/rfc/rfc4252#section-5.2 . c8VPVP4#r ) auth_noner r's&&r r)NoneAuth.authenticate1s""4==11rNrr+r,r-r.r)r/r0r1s@r r4r4,s22rr4cHaa]tRt^5toRtV3RltV3RltRtRtVt V;t #)Passworda Password authentication. :param callable password_getter: A lazy callable that should return a `str` password value at authentication time, such as a `functools.partial` wrapping `getpass.getpass`, an API call to a secrets store, or similar. If you already know the password at instantiation time, you should simply use something like ``lambda: "my literal"`` (for a literal, but also, shame on you!) or ``lambda: variable_name`` (for something stored in a variable). c4<\SV`VR7W nR#r N)superrpassword_getter)r r r?rs&&&r rPassword.__init__Ds (+.rc8<\SV`VPR7#))user)r>rr )r rs&r r"Password.__repr__Hsw}$--}00rcZVP4pVPVPV4#r )r? auth_passwordr )r r(passwords&& r r)Password.authenticateMs)'')&&t}}h??r)r?) rr+r,r-r.rr"r)r/r0 __classcell__rr2s@@r r;r;5s  /1 @@rr;c*a]tRt^XtoRtRtRtVtR#) PrivateKeyak Essentially a mixin for private keys. Knows how to auth, but leaves key material discovery/loading/decryption to subclasses. Subclasses **must** ensure that they've set ``self.pkey`` to a decrypted `.PKey` instance before calling ``super().authenticate``; typically either in their ``__init__``, or in an overridden ``authenticate`` prior to its `super` call. cNVPVPVP4#r )auth_publickeyr pkeyr's&&r r)PrivateKey.authenticatees'' tyyAArr8Nr9r1s@r rKrKXs BBrrKcBaa]tRt^itoRtV3RltV3RltRtVtV;t #)InMemoryPrivateKeyz) An in-memory, decrypted `.PKey` object. c4<\SV`VR7W nR#r=)r>rrN)r r rNrs&&&r rInMemoryPrivateKey.__init__ns (+ rc<\SV`VPR7p\VP\4'd VR, pV#)rNz [agent])r>rrN isinstancer)r reprs& r r"InMemoryPrivateKey.__repr__ss9gmm+ dii * * : C rrU rr+r,r-r.rr"r/r0rHrIs@@r rQrQis rrQc<aa]tRt^|toRtV3RltRtRtVtV;t #)OnDiskPrivateKeyau Some on-disk private key that needs opening and possibly decrypting. :param str source: String tracking where this key's path was specified; should be one of ``"ssh-config"``, ``"python-config"``, or ``"implicit-home"``. :param Path path: The filesystem path this key was loaded from. :param PKey pkey: The `PKey` object this auth source uses/represents. cz<\SV`VR7W nRpW%9d\RV: 24hW0nW@nR#)r z source argument must be one of: N)z ssh-configz python-configz implicit-home)r>rsource ValueErrorpathrN)r r r]r_rNallowedrs&&&&& r rOnDiskPrivateKey.__init__s@ (+ B  ?{KL L  rcxVPVPVP\VP4R7#))keyr]r_)rrNr]strr_r!s&r r"OnDiskPrivateKey.__repr__s/zz $++C N  r)r_rNr]rYrIs@@r r[r[|s   rr[ SourceResultr]resultc<aa]tRt^toRtV3RltRtRtVtV;t #) AuthResulta Represents a partial or complete SSH authentication attempt. This class conceptually extends `AuthStrategy` by pairing the former's authentication **sources** with the **results** of trying to authenticate with them. `AuthResult` is a (subclass of) `list` of `namedtuple`, which are of the form ``namedtuple('SourceResult', 'source', 'result')`` (where the ``source`` member is an `AuthSource` and the ``result`` member is either a return value from the relevant `.Transport` method, or an exception object). .. note:: Transport auth method results are always themselves a ``list`` of "next allowable authentication methods". In the simple case of "you just authenticated successfully", it's an empty list; if your auth was rejected but you're allowed to try again, it will be a list of string method names like ``pubkey`` or ``password``. The ``__str__`` of this class represents the empty-list scenario as the word ``success``, which should make reading the result of an authentication session more obvious to humans. Instances also have a `strategy` attribute referencing the `AuthStrategy` which was attempted. c4<Wn\SV`!V/VBR#r )strategyr>r)r rkargsrrs&&*,r rAuthResult.__init__s  $)&)rc2RPRV44#) c3j"TF)qP RVP;'gR 2xK+ R#5i)z -> successN)r]rg).0xs& r %AuthResult.__str__..s- >BxxjQXX223 4ds#3 3)rr!s&r __str__AuthResult.__str__s" yy >B   rrk) rr+r,r-r.rrvr/r0rHrIs@@r riris<*  rric0a]tRt^toRtRtRtRtVtR#) AuthFailurea Basic exception wrapping an `AuthResult` indicating overall auth failure. Note that `AuthFailure` descends from `AuthenticationException` but is generally "higher level"; the latter is now only raised by individual `AuthSource` attempts and should typically only be seen by users when encapsulated in this class. It subclasses `AuthenticationException` primarily for backwards compatibility reasons. cWnR#r rg)r rgs&&r rAuthFailure.__init__s rc:R\VP4,#)ro)rdrgr!s&r rvAuthFailure.__str__sc$++&&&rr|N) rr+r,r-r.rrvr/r0r1s@r rzrzs''rrzc6a]tRt^toRtRtRtRtRtVt R#) AuthStrategyz This class represents one or more attempts to auth with an SSH server. By default, subclasses must at least accept an ``ssh_config`` (`.SSHConfig`) keyword argument, but may opt to accept more as needed for their particular strategy. c:Wn\\4VnR#r ) ssh_configrrlog)r rs&&r rAuthStrategy.__init__s%h'rc \h)a+ Generator yielding `AuthSource` instances, in the order to try. This is the primary override point for subclasses: you figure out what sources you need, and ``yield`` them. Subclasses _of_ subclasses may find themselves wanting to do things like filtering or discarding around a call to `super`. r%r!s&r get_sourcesAuthStrategy.get_sourcess "!rc Rp\VR7pVP4FYpVPPRV 24VP V4pRpVP\WE44V'gKYM V'g \VR7hV# \ dDpTpTP PpTPPRT RT 24Rp?LRp?ii;i) z Handles attempting `AuthSource` instances yielded from `get_sources`. You *normally* won't need to override this, but it's an option for advanced users. FrxzTrying TzAuthentication via z failed with Nr|) rirrdebugr) Exceptionrrinfoappendrfrz)r r( succeededoverall_resultr]rge source_classs&& r r)AuthStrategy.authenticates #T2 &&(F HHNNWVH- . ,,Y7 "  ! !,v"> ?y/)4^4 4)  !{{33  )&|nM sB C 9CC )rrN) rr+r,r-r.rrr)r/r0r1s@r rrs( "++rrN)r. collectionsragentrutilr ssh_exceptionrrr4r;rKrQr[rflistrirzrr8rr rs#2"":2z2@z@FBB"& z B.8X*>? * * \')'$GGr