`gj UdZddlmZddlZddlZddlmZmZddlm Z m Z eje Z ejZiZded<ddZdd Zdd Zdd Zdd Zdd Zy)a Module-level registry for DashboardAuthProvider instances. Plugins call ``register_provider`` via the plugin context hook at startup. The auth gate middleware iterates ``list_providers()`` and uses ``get_provider`` to dispatch on the session's ``provider`` field. ) annotationsN)ListOptional)DashboardAuthProviderassert_protocol_compliancez dict[str, DashboardAuthProvider] _providersc2tt|t5|jtvrt d|j|t|j<dddt jd|j|jy#1swY5xYw)zRegister a provider. Raises: TypeError: on protocol violation. ValueError: if a provider with the same name is already registered. z,dashboard-auth provider already registered: Nz+dashboard-auth: registered provider %r (%s)) rtype_locknamer ValueError_loginfo display_name)providers U/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/dashboard_auth/registry.pyregister_providerrstH~. - ==J &>x}}>OP %- 8==! -  II5 x,, --s >B  Bcdt5tj|cdddS#1swYyxYw)z@Return the registered provider for ``name``, or None if unknown.N)r rget)r s r get_providerr+s& $~~d#$$$s&/ctt5ttjcdddS#1swYyxYw)z0All registered providers, in registration order.N)r listrvaluesrlist_providersr1s+ )J%%'()))s.7c t5tjDcgc]}t|dds|c}cdddScc}w#1swYyxYw)uRegistered providers that support non-interactive token auth. The subset of ``list_providers()`` whose ``supports_token`` flag is True, in registration order. The ``token_auth`` middleware seam consults these (and only these) when a token-authable route is hit, so OAuth/password-only providers are never asked to ``verify_token``. Returns an empty list when no token provider is registered — a token-authable route then fails closed (401), never open. supports_tokenFNr rrgetattrps rlist_token_providersr#7sL W%,,.Va'!=Mu2UVWWVWW AAAAAAc t5tjDcgc]}t|dds|c}cdddScc}w#1swYyxYw)zRegistered providers with supports_session True (interactive cookie sessions). The login page, /auth/login, and the gate's verify/refresh loops consult only these. Mirror of list_token_providers. supports_sessionTNrr!s rlist_session_providersr'EsM X%,,.Wa'!=OQU2VWXXWXXr$cbt5tjdddy#1swYyxYw)z"Test-only: drop all registrations.N)r rclearrrrclear_providersr*Ns& s%.)rrreturnNone)r strr+zOptional[DashboardAuthProvider])r+zList[DashboardAuthProvider])r+r,)__doc__ __future__rlogging threadingtypingrrhermes_cli.dashboard_auth.baserr getLogger__name__rLockr r__annotations__rrrr#r'r*rrrr8sj #! w" /1 ,1($ ) WXr