tjddlmZddlmZddlmZddlmZmZm Z m Z m Z m Z ddl mZddlmZddlmZmZe dZe d ZGd d eZe eefZGd d eZeGddZGddeZGddeeZeGddZGddeZdS)) annotations)abstractmethod)Enum)AnyListOptionalDictTupleTypeVar) dataclass) SecretStr) ComponentSystemTSceZdZdS) AuthErrorN)__name__ __module__ __qualname__T/var/www/html/CA-Chatbot/venv/lib/python3.11/site-packages/chromadb/auth/__init__.pyrrsDrrc<eZdZdZd fd Zed dZxZS) ClientAuthProviderz ClientAuthProvider is responsible for providing authentication headers for client requests. Client implementations (in our case, just the FastAPI client) must inject these headers into their requests. systemrreturnNonecJt|dSNsuper__init__selfr __class__s rr#zClientAuthProvider.__init__(!      rClientAuthHeaderscdSr r)r%s r authenticatezClientAuthProvider.authenticate+ rrrrr)rr()rrr__doc__r#rr* __classcell__r&s@rrr!sg !!!!!!   ^     rrcHeZdZUdZded<dZded<dZded<dZd ed <dS) UserIdentitya UserIdentity represents the identity of a user. In general, not all fields will be populated, and the fields that are populated will depend on the authentication provider. The idea is that the AuthenticationProvider is responsible for populating _all_ information known about the user, and the AuthorizationProvider is responsible for making decisions based on that information. struser_idN Optional[str]tenantzOptional[List[str]] databaseszOptional[Dict[str, Any]] attributes)rrrr-__annotations__r5r6r7rrrr1r10s\LLL F    %)I)))),0J//////rr1cTeZdZdZdfd Zedd ZddZddZddZ xZ S)ServerAuthenticationProvidera ServerAuthenticationProvider is responsible for authenticating requests. If a ServerAuthenticationProvider is configured, it will be called by the server to authenticate requests. If no ServerAuthenticationProvider is configured, all requests will be authenticated. The ServerAuthenticationProvider should return a UserIdentity object if the request is authenticated for use by the ServerAuthorizationProvider. rrrrct||jj|_|jj|_dSr )r"r#settingschroma_server_auth_ignore_paths_ignore_auth_paths;chroma_overwrite_singleton_tenant_database_access_from_auth4overwrite_singleton_tenant_database_access_from_authr$s rr#z%ServerAuthenticationProvider.__init__PsE     O ;  O W AAArheadersDict[str, str]r1cdSr r)r%rAs rauthenticate_or_raisez2ServerAuthenticationProvider.authenticate_or_raiseYr+rverbr2pathboolc||jvr#||j|vrdSdS)NTF)r>keysupper)r%rErFs rignore_operationz-ServerAuthenticationProvider.ignore_operation]sA D+0022 2 2  7 ===4ur List[str]cd}d}|jjjrt|jjd}|jjjrt|jjd}|s|st d|r|rt d|rd|dDS|rzIServerAuthenticationProvider.read_creds_or_creds_file..zs777!Q7A777r rShould never happen) _systemr<rNr2rO ValueErrorsplitopen readlines)r% _creds_file_credsfs rread_creds_or_creds_filez5ServerAuthenticationProvider.read_creds_or_creds_fileese  < E  %&LMK < @ S./PQRRF 6 5   6 +   %77v||D11777 7  %k3'' %1{{}} % % % % % % % % % % % % % % % %.///s>CC#&C#userOptional[UserIdentity]#Tuple[Optional[str], Optional[str]]c|jr|sdSd}d}|jr|jdkr|j}|jr6t|jdkr|jddkr |jd}||fS)aR If settings.chroma_overwrite_singleton_tenant_database_access_from_auth is False, this function always returns (None, None). If settings.chroma_overwrite_singleton_tenant_database_access_from_auth is True, follows the following logic: - If the user only has access to a single tenant, this function will return that tenant as its first return value. - If the user only has access to a single database, this function will return that database as its second return value. If the user has access to multiple tenants and/or databases, including "*", this function will return None for the corresponding value(s). - If the user has access to multiple tenants and/or databases this function will return None for the corresponding value(s). )NNN*r)r@r5r6len)r%rar5databases r'singleton_tenant_database_if_applicablezDServerAuthenticationProvider.singleton_tenant_database_if_applicables$H PT : ; !4;#--[F > )c$.11Q664>!;LPS;S;S~a(Hxrr,)rArBrr1)rEr2rFr2rrGrrL)rarbrrc) rrrr-r#rrDrKr`rir.r/s@rr:r:Es         ^ 00006        rr:cfeZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZdZdS) AuthzActionzR The set of actions that can be authorized by the authorization provider. z system:resetztenant:create_tenantztenant:get_tenantzdb:create_databasezdb:get_databasezdb:delete_databasezdb:list_databaseszdb:list_collectionszdb:count_collectionszdb:create_collectionzdb:get_or_create_collectionzcollection:get_collectionzcollection:delete_collectionzcollection:update_collectionzcollection:addzcollection:deletezcollection:getzcollection:queryzcollection:countzcollection:updatezcollection:upsertN)rrrr-RESET CREATE_TENANT GET_TENANTCREATE_DATABASE GET_DATABASEDELETE_DATABASELIST_DATABASESLIST_COLLECTIONSCOUNT_COLLECTIONSCREATE_COLLECTIONGET_OR_CREATE_COLLECTIONGET_COLLECTIONDELETE_COLLECTIONUPDATE_COLLECTIONADDDELETEGETQUERYCOUNTUPDATEUPSERTrrrrlrls E*M$J*O$L*O(N,..<0N66 C F C E E F FFFrrlc2eZdZUdZded<ded<ded<dS) AuthzResourcezB The resource being accessed in an authorization request. r4r5rh collectionN)rrrr-r8rrrrrsBrrcDeZdZdZdfd Zedd ZddZxZS)ServerAuthorizationProviderat ServerAuthorizationProvider is responsible for authorizing requests. If a ServerAuthorizationProvider is configured, it will be called by the server to authorize requests. If no ServerAuthorizationProvider is configured, all requests will be authorized. ServerAuthorizationProvider should raise an exception if the request is not authorized. rrrrcJt|dSr r!r$s rr#z$ServerAuthorizationProvider.__init__r'rrar1actionrlresourcercdSr r)r%rarrs rauthorize_or_raisez.ServerAuthorizationProvider.authorize_or_raises  rrLcd}d}|jjjr|jjd}|jjjrt |jjd}|s|st d|r|rt d|rd|dDS|r.s888!a8A888rrUrVrW) rXr<rrr2rYrZr[r\)r% _config_file_configr_s rread_config_or_config_filez6ServerAuthorizationProvider.read_config_or_config_filesU  < @ T<01RSL < ; O$,/0LMNNG G K   G +   %88w}}T22888 8  %lC(( %A{{}} % % % % % % % % % % % % % % % %.///s1CCCr,)rar1rrlrrrrrj) rrrr-r#rrrr.r/s@rrrs{!!!!!!   ^ 00000000rrN) __future__rabcrenumrtypingrrrr r r dataclassesr pydanticr chromadb.configrrrr Exceptionrr2r(rr1r:rlrrrrrrsU"""""""!!!!!  GCLL GCLL        i(           0000000 0(U U U U U 9U U U p!!!!!#t!!!8  )0)0)0)0)0))0)0)0)0)0r