ijXUddlmZddlZddlZddlmZmZddlmZddl m Z ddl m Z m Z mZmZddlmZmZmZmZmZddlmZmZej2eZeed fZeed d d fZeed fZeed fZ eed fZ!eed dfZ"ee e#edfZ$edGddZ%Gdde dZ&Gdde&dZ'dZ(dZ)dZ*dZ+dZ,dZ-dZ.dZ/d Z0d!Z1gd"Z2gd#Z3d$Z4ejjZ6e7d%Z8e7e'jre7e'jtzZ;d&e2d&ddddddd'dddd( Zd>d+Z?d?d,Z@d@d-ZA dAd.ZBdBd/ZCdCd0ZDdDd1ZEdEdFd2ZFdEdGd3ZGdHd4ZHdId5ZIdJdKd6ZJdLd7ZKdMd8ZLdNd9ZMdOd:ZNdPd;ZOdQd<ZPy)R) annotationsN)IterableMapping) dataclass) timedelta)Any TypedDictUnioncast) BlueprintFlaskResponse current_apprequest)Headers MultiDictzre.Pattern[str]list[ResourcePattern]z%dict[ResourcePattern, dict[str, Any]]Iterable[ResourcePattern]z Iterable[str]T)frozenceZdZUdZded<ded<ded<ded<ded <d ed <ded <ded <ded<ded<ded<ded<ded<y)_ComputedCorsOptionsa The fully-resolved CORS options for a single route. Private internal representation, built only by :func:`serialize_options`. Configure CORS via :class:`~flask_cors.CORS` / :func:`cross_origin` keyword arguments, not by constructing this directly. rorigins allow_headersboolallow_all_origins str | Nonemethodsexpose_headerszstr | int | Nonemax_agesupports_credentials send_wildcardautomatic_options vary_headerintercept_exceptions always_sendallow_private_networkN__name__ __module__ __qualname____doc____annotations__d/var/www/html/emotional.easysim.app/public_html/venv/lib/python3.12/site-packages/flask_cors/core.pyrr&s[#"(( r.rceZdZUdZded<ded<ded<ded <d ed <d ed <d ed<d ed<d ed<d ed<d ed<y)CrossOriginOptionsInputaCThe keyword options accepted by :func:`cross_origin`. Every key is optional (``total=False``): only the options a caller actually passes are forwarded, so app-level ``CORS_*`` configuration and the defaults still apply to anything left out. Used with PEP 692 ``Unpack`` to type ``**kwargs`` precisely. OriginsInputr MethodsInputrExposeHeadersInputr HeadersInputrrr MaxAgeInputrr!r#r"r%r&Nr'r-r.r/r1r1GsK && r.r1F)totalc&eZdZUdZded<ded<y)CorsOptionsInputzThe keyword options accepted by :class:`CORS` / :meth:`CORS.init_app`. Extends :class:`CrossOriginOptionsInput` with the application-level options that only make sense for the extension. ResourceSpec resourcesrr$Nr'r-r.r/r9r9]s r.r9zAccess-Control-Allow-OriginzAccess-Control-Allow-MethodszAccess-Control-Allow-HeaderszAccess-Control-Expose-Headersz Access-Control-Allow-CredentialszAccess-Control-Max-Agez$Access-Control-Allow-Private-NetworkzAccess-Control-Request-MethodzAccess-Control-Request-Headersz&Access-Control-Request-Private-Network)GETHEADPOSTOPTIONSPUTPATCHDELETE) CORS_ORIGINS CORS_METHODSCORS_ALLOW_HEADERSCORS_EXPOSE_HEADERSCORS_SUPPORTS_CREDENTIALS CORS_MAX_AGECORS_SEND_WILDCARDCORS_AUTOMATIC_OPTIONSCORS_VARY_HEADERCORS_RESOURCESCORS_INTERCEPT_EXCEPTIONSCORS_ALWAYS_SENDCORS_ALLOW_PRIVATE_NETWORK_FLASK_CORS_EVALUATEDz *\]?$^[]()*z/*) rrrrr rr!r"r#r;r$r%r&DEFAULT_OPTIONSc t|trD|jDcgc]\}}t||f}}}dd}|j |n~t|t rt|ifg}n_t|t r|Dcgc]}t|if}}n4t|tjrt|ifg}n td|Dcgc]\}}t|d|fc}}Scc}}wcc}wcc}}w)Nc>|\}}t|tjr4dd|jj d t |j fSt |r dd|j d t | fSdd|j d t | fS)Nr/) isinstancerePatternpatterncountlenprobably_regex)pairrZ_s r/sort_keyz!parse_resources..sort_keysJGQ'2::.1w44S99C hsC5C;Dcdt|tjr |jSt |S)z Helper that returns regexp pattern from given value. :param regexp: regular expression to stringify :type regexp: re.Pattern or str :returns: string representation of given regexp pattern :rtype: str )rWrXrYrZri)regexps r/get_regexp_patternrts&&"**%~~ v;r.c|j}|j}|rxtjd||r$|jrtjddgSt ||drtjd|gStjdy|j r$|r|jrydgStd|DStjd y) Nz&CORS request received with 'Origin' %sz=Allowed origins are set to '*'. Sending wildcard CORS header.rQF caseSensitivez:The request's Origin header matches. Sending CORS headers.zBThe request's Origin header does not match any of allowed origins.c3BK|]}t|ts|ywN)rWri.0os r/ z#get_cors_origins..sC 1c0B!CszThe request did not contain an 'Origin' header. This means the browser or client did not request CORS, ensure the Origin Header is set.) rrLOGdebugr!try_match_any_patternr%r sorted)optionsrequest_originrwildcards r/get_cors_originsrsooG((H :NK -- IIU V5L#>7% P IIL  ## # IIZ [    ++u CWCC C  V r.c|ra|j|jdDcgc]}|j}}tfd|}dj t |Sycc}w)N,c t|dS)NFrv)r)hrs r/z#get_allow_headers..s+A}ERr., )rsplitstripfilterjoinr)racl_request_headersrrequest_headersmatching_headersrs @r/get_allow_headersrsh-- .A.G.G.LM1779MM" R   yy 0122 NsA&cxt||jd}t}|s|S|jt||j |t <|jr d|t<t|vr1|jtdk(r|jrdnd}||t<|dk(r|jtdj}|j}|rI|rG||vrCt||jt |t"<|j$|t&<||t(<nt*j-d|j.rZ|j0}|tdk(} | s@t3|dkDs t3|dkDst5d |Dr|j7d dtd |j9DS) NOrigintruefalser?ztThe request's Access-Control-Request-Method header does not match allowed methods. CORS headers will not be applied.rQrUc3PK|]}t|tj ywry)rWrXrYrzs r/r}z#get_cors_headers..^s>j]^z!RZZ?X>js$&Varyc30K|]\}}|s ||fywryr-)r{rlrms r/r}z#get_cors_headers..bs=11aV=s  )rgetrsetlist ACL_ORIGINrACL_EXPOSE_HEADERSr ACL_CREDENTIALS"ACL_REQUEST_HEADER_PRIVATE_NETWORKr&ACL_RESPONSE_PRIVATE_NETWORKACL_REQUEST_METHODupperrrACL_REQUEST_HEADERSACL_ALLOW_HEADERSr ACL_MAX_AGE ACL_METHODSr~infor#rr\anyaddrf) rrrequest_methodorigins_to_setheadersr&acl_request_methodrrreturns_wildcards r/get_cors_headersr(s&g/B/B8/LMN1: G  OOJ/")"8"8G ###)  +o=    B Cv M*1*G*GW0E,-",001CRHNNP// '.@G.K*;7ODWDWXkDl)mG% &#*??GK #*GK HHG  //":.#5 L1 N 3a 73>jbi>j;j KK ) = = ==r.ct|trtjd|St |j t s4t |j tst|j |_t|tj tj}tjdt||jD]!\}}|j j||#|S)z Performs the actual evaluation of Flask-CORS options and actually modifies the response object. This function is used both in the decorator and the after_request callback z*CORS have been already evaluated, skippingzSettings CORS headers: %s)hasattrFLASK_CORS_EVALUATEDr~rrWrrrrrmethodrirfr)resprheaders_to_setrlrms r/set_cors_headersrest)* >? dllG ,Z i5X!. %gwONII)3~+>?$$&1 A Kr.cdt|tjrytj | S)NT)rWrXrY_REGEX_HINT_CHARS isdisjoint) maybe_regexs r/r]r]s)+rzz*!++K8 88r.c|dk(rdS|S)z Replace the invalid regex r'*' with the valid, wildcard regex r'/.*' to enable the CORS app extension to have a more user friendly api. rQ.*r-)regs r/rgrgs 4K5(S(r.c0tfd|DS)Nc38K|]}t|ywry)try_match_pattern)r{rZrwinsts r/r}z(try_match_any_pattern..sW7 w >Ws)r)rpatternsrws` `r/rrs WhW WWr.c"t|tjrt|j |S t |}t |}|r||k(S|j|jk(S#t $rt||k(cYSwxYw)aO Match a value against a *resolved* pattern: a compiled ``re.Pattern`` (whose case-sensitivity is already baked in) or a literal string. Used to match request origins, headers, or paths; ``caseSensitive`` only affects the literal comparison (origins and headers are case insensitive, paths are case sensitive). )rWrXrYrmatchri Exceptioncasefold)valuerZrwrmps r/rrs'2::&GMM%())& J L#16D  (DD &EW$%%&sA44B Bctt}|jt||D]}|j||S)z Merge the DEFAULT_OPTIONS, the app's configuration-specified options and any dictionaries passed into a single raw options mapping. The last specified option wins. )rerRupdateget_app_kwarg_dict) appInstancedictsrds r/ merge_optionsrs@ #?3G NN%k23 q Nr.c,tt|g|S)zICompute the resolved CORS options for an application (see merge_options).)serialize_optionsr)rrs r/get_cors_optionsrs ];?? @@r.c|xst}t|di}tDcic]7}|j|x}|j j dd|9c}Scc}w)z;Returns the dictionary of CORS specific app configurations.configcors_r)rgetattrCONFIG_OPTIONSrlowerreplace)rapp app_configrlrs r/rrs_  $Ch+J;I vaWaWeWefgWhNheMuAGGI  gr *E 1 vv vs A#Ac|yt|ts1t|tr!djdt |DSt|S)z A more flexible str function which intelligently handles stringifying strings, lists and other iterables. The results are lexographically sorted to ensure generated responses are consistent when iterables such as Set are used. Nrc32K|]}t|ywry)ri)r{items r/r}zflexible_str..s;tT;s)rWrirrr)objs r/ flexible_strrsA { S !jh&?yy;vc{;;;3xr.c`t|tst|ts|gStd|S)zT Wraps scalars or string types as a list, or returns the iterable instance. Iterable[Any])rWrirr )rs r/ensure_iterablers+$JtX$>v OT**r.cPt|Dcgc] }t|c}Scc}wry)rrg)paramxs r/sanitize_regex_paramrs.u5 6!F1I 66 6s#ct|tr8t|r- tj||rtj SdS|S#tj $r}td||d}~wwxYw)aResolve a single raw pattern once, at configuration time. A regex-like string is compiled to a ``re.Pattern`` (with the correct case-sensitivity baked in); a literal string and an already-compiled pattern are returned unchanged. An invalid regular expression raises a ``ValueError`` so the misconfiguration fails fast at setup time rather than silently never matching. rz8Invalid regular expression in Flask-CORS configuration: N)rWrir]rXcompile IGNORECASEerrorrj)rZrcexcs r/rkrksq'3N7$; n::g r}}K KK K Nxx nWX_Wbcdjm m ns%A A A2A--A2cB|Dcgc]}t||c}Scc}w)zResolve a list of patterns (see :func:`_resolve_pattern`). After this, the request path can simply test ``isinstance(p, re.Pattern)`` instead of re-running the :func:`probably_regex` heuristic on every request. rb)rk)rrcrs r/_resolve_patternsrs" CK KQ QK 8 KK Ksc|D]!}|tvs tjd|#t|j d}d|v}t |j d}t |j d}|r|r |r t dt|d}tt|j d d}t|j d }||j}|j d } t| tr"tt| j} t||||t|j d | ||t |j d t |j dt |j dt |j dt |j d S)a7 Normalize a raw options mapping into a strongly-typed :class:`_ComputedCorsOptions`. This is the single boundary where loosely-typed user input (arbitrary keyword arguments, app config, resource dictionaries) is parsed into the concrete, per-field types the rest of the package relies on. z'Unknown option passed to Flask-CORS: %srrr r!z}Cannot use supports_credentials in conjunction withan origin string of '*'. See: http://www.w3.org/TR/cors/#resource-requestsTrbrrrrr"r#r$r%r&) rrrrrrr r!r"r#r$r%r&)_KNOWN_OPTIONSr~warningrrrrjrrrrWrriint total_secondsr) rprasanitized_originsrr r!rrrrs r/rrsH n $ KKA3 GH-TXXi-@A!22)? @A/23M1m ;   1tDG%&:488O;T&UcghM488I./G--/hhy!G'9%c'//123 #+#DHH-=$>?1#txx(;<=-01!$((+A"BC-01"488,C#DE r.)r;r:rdz,list[tuple[ResourcePattern, dict[str, Any]]])rsResourcePatternrdri)rrrrrdzlist[str] | None)rrrrrdr)rrrrrrirdz MultiDict[str, str | int | None])rrrrrdr)rrrdr)rrrdr)T)rrirrrwrrdr)rrrZrrwrrdr)rFlask | Blueprint | NonerMapping[str, Any]rddict[str, Any])rrrrrdrry)rrrdr)rrrdr)rrrdr)rrrdr)rZrrcrrdr)rrrcrrdr)rprrdr)Q __future__rloggingrXcollections.abcrr dataclassesrdatetimertypingrr r r flaskr r rrrwerkzeug.datastructuresrr getLoggerr(r~rirr:r2r5r3r4rr6rr1r9rrrrrrrrrr ALL_METHODSrrrY RegexObject frozensetr__required_keys____optional_keys__rrRr,rqrtrrrrr]rgrrrrrrrrrkrrr-r.r/r sF" -!..BB6g!../+- _&AAB _&AAB S/)* 356IsC-.  $   @ iu ,.e+ , 244& E56%M"J $/jj m, +==>K[KmKmAnn! "%!"%hP 2j  :> !:>4;:>MP:>%:>z@9)XE$ A w +7"L6r.