U ~fh^ @sdZddlmZddlZddlZddlZddlmZmZm Z m Z m Z m Z m Z mZddlmZddlmZddlmZmZmZmZmZddlmZmZdd lmZmZdd lm Z erdd l!m"Z"d Z#e$e#Z%d Z&e$e&Z'dZ(dddddZ)dddddZ*ddddddZ+e(fddddddZ,d d!d"hZ-dd#d$d%d&d'Z.d$d$d(d)d*Z/d$d$d(d+d,Z0d$d$d(d-d.Z1dWd0dd1d2d3d4Z2dXddddd1d6d7d8Z3e(fddd9d:d;d<Z4e5d=e6d>d?Z7e8d@dAdBdCdDdEgZ9dFd0dGdHdIdJZ:e(d5d/d5dddfddddddKd#ddLdM dNdOZ;dPdQdRdSdTZZ>ze>>e;ej?dVWn,ek rZ@z eAe@W5dZ@[@XYnXeBddS)YzTools to parse and validate a MongoDB URI. .. seealso:: This module is compatible with both the synchronous and asynchronous PyMongo APIs. ) annotationsN) TYPE_CHECKINGAnyMappingMutableMappingOptionalSizedUnioncast) unquote_plus)_parse_ssl_options)INTERNAL_URI_OPTION_NAME_MAPSRV_SERVICE_NAMEURI_OPTIONS_DEPRECATION_MAP_CaseInsensitiveDictionaryget_validated_options)ConfigurationError InvalidURI)_have_dnspython _SrvResolver)_Address) SSLContextz mongodb://zmongodb+srv://iistrbool)sreturncCsDtt|D]2}||dkr |||d}t||kr dSq dS)zCheck for unescaped percent signs. :param s: A string. `s` can have things like '%25', '%2525', and '%E2%85%A8' but cannot have unquoted percent like '%foo'. %TF)rangelenr )risubr"6/tmp/pip-unpacked-wheel-36gvocj8/pymongo/uri_parser.py_unquoted_percent;s   r$ztuple[str, str])userinforcCsRd|ks|ddkst|r&td|d\}}}|sBtdt|t|fS)aZValidates the format of user information in a MongoDB URI. Reserved characters that are gen-delimiters (":", "/", "?", "#", "[", "]", "@") as per RFC 3986 must be escaped. Returns a 2-tuple containing the unescaped username followed by the unescaped password. :param userinfo: A string of the form : @:zXUsername and password must be escaped according to RFC 3986, use urllib.parse.quote_plusz'The empty string is not valid username.)countr$r partitionr )r%user_passwdr"r"r#parse_userinfoKs r.z Optional[int]z%tuple[str, Optional[Union[str, int]]])entity default_portrcCsT|ddkrtd|d}|dkr8|dd|fS|d|||ddfS)aValidates an IPv6 literal host:port string. Returns a 2-tuple of IPv6 literal followed by port where port is default_port if it wasn't specified in entity. :param entity: A string that represents an IPv6 literal enclosed in braces (e.g. '[::1]' or '[::1]:27017'). :param default_port: The port number to use when one wasn't specified in entity. ]zNan IPv6 address literal must be enclosed in '[' and ']' according to RFC 2732.z]:r(N)find ValueError)r/r0r r"r"r#parse_ipv6_literal_hostcs  r6rcCs|}|}|ddkr$t||\}}nF|dr6||fS|ddkrj|ddkrZtd|dd\}}t|tr|st dd |Dr|D]}| rtd |qtd t |d kst |dkrtd t |}| |fS)aqValidates a host string Returns a 2-tuple of host followed by port where port is default_port if it wasn't specified in the string. :param entity: A host or host:port string where host could be a hostname or IP address. :param default_port: The port number to use when one wasn't specified in entity. r[.sockr'r2r(zReserved characters such as ':' must be escaped according RFC 2396. An IPv6 address literal must be enclosed in '[' and ']' according to RFC 2732.css|]}|p|VqdS)N)isspaceisdigit).0cr"r"r# szparse_host..z$Port contains whitespace character: zPort contains non-digit characters. Hint: username and password must be escaped according to RFC 3986, use urllib.parse.quote_plusiz+Port must be an integer between 0 and 65535) r6endswithr4r)r5split isinstancerr:allr9intlower)r/r0hostportr<r"r"r# parse_hostzs2    rFtlsallowinvalidcertificatesZtlsallowinvalidhostnamestlsdisableocspendpointcheckz Optional[str]r)optsdelimrcCst}||D]r}|d\}}|dkrB||g|q||kr`tjd|ddd|dkrr|}nt|}|||<q|S)zHelper method for split_options which creates the options dict. Also handles the creation of a list for the URI tag_sets/ readpreferencetags portion, and the use of a unicode options string. =ZreadpreferencetagszDuplicate URI option 'z'.r3 stacklevelZauthmechanismproperties)rr?rC setdefaultappendwarningswarnr )rIrJoptionsZurioptkeyvaluevalr"r"r#_parse_optionss   rV)rRrcCs*|d}|dk rDtD],}||krd}t||d||fq|d}|dk rd|krxd}t|d|df|dkrd|d<|d}|dk rdD]$}||dkrd }t||fqd |kr&d |kr&d d d dd}||d ||d kr&d}t||d |d f|S)zRaise appropriate errors when conflicting TLS options are present in the options dictionary. :param options: Instance of _CaseInsensitiveDictionary containing MongoDB URI options. tlsinsecureNz9URI options %s and %s cannot be specified simultaneously.rGrHT tlscrlfile)rWrGrHzDURI option %s=True cannot be specified when CRL checking is enabled.ssltlsr)rUrcSs"|dkr|dkSt|tr|S|S)N)truefalser[)r@r)rUr"r"r# truth_values  z-_handle_security_options..truth_valuez=Can not specify conflicting values for URI options %s and %s.)get_IMPLICIT_TLSINSECURE_OPTSr cased_key)rRrWopterr_msgZtlsallowinvalidcertsrXr]r"r"r#_handle_security_optionss>    rccCst|D]}|tkrt|\}}|dkr|}||krhd}tj|||||ftdd||qd}tj||||ftddq|dkrd}tj||||ftddq|S)a;Issue appropriate warnings when deprecated options are present in the options dictionary. Removes deprecated option key, value pairs if the options dictionary is found to also have the renamed option. :param options: Instance of _CaseInsensitiveDictionary containing MongoDB URI options. Zrenamedz0Deprecated option '%s' ignored in favor of '%s'.r3rLz,Option '%s' is deprecated, use '%s' instead.removedzOption '%s' is deprecated. %s.)listrrPrQr`DeprecationWarningpop)rRoptnamemodemessageZ newoptnameZwarn_msgr"r"r#_handle_option_deprecationss8   rkcCsX|d}|dk r$tD] }|||<qt|D]&}t|d}|dk r,||||<q,|S)zNormalizes option names in the options dictionary by converting them to their internally-used names. :param options: Instance of _CaseInsensitiveDictionary containing MongoDB URI options. rWN)r^r_rer rg)rRrWrarhZintnamer"r"r#_normalize_options's    rlFzMapping[str, Any]zMutableMapping[str, Any])rIrQrcCs t||S)aValidates and normalizes options passed in a MongoDB URI. Returns a new dictionary of validated and normalized options. If warn is False then errors will be thrown for invalid options, otherwise they will be ignored and a warning will be issued. :param opts: A dict of MongoDB URI options. :param warn: If ``True`` then warnings will be logged and invalid options will be ignored. Otherwise invalid options will cause errors. )r)rIrQr"r"r#validate_options=s rmT)rIvalidaterQ normalizercCs|d}|d}zd|dkr0|dkr0tdnF|dkrDt|d}n2|dkrXt|d}n|ddkrrt|d}ntWntk rtddYnXt|}t|}|rt|}|rttt ||}| d d krtd |S) aTakes the options portion of a MongoDB URI, validates each option and returns the options in a dictionary. :param opt: A string representing MongoDB URI options. :param validate: If ``True`` (the default), validate and normalize all options. :param warn: If ``False`` (the default), suppress all warnings raised during validation of options. :param normalize: If ``True`` (the default), renames all options to their internally-used names. &;rz.Can not mix '&' and ';' for option separators.rKr2Nz(MongoDB URI options are key=value pairs. authsourcez1the authSource database cannot be an empty string) r4rrVr5rcrkrlr rrmr^)rIrnrQroZand_idxZsemi_idxrRr"r"r# split_optionsLs.      rtzlist[_Address])hostsr0rcCsFg}|dD]2}|std|}|dr0d}|t||q|S)aTakes a string of the form host1[:port],host2[:port]... and splits it into (host, port) tuples. If [:port] isn't present the default_port is used. Returns a set of 2-tuples containing the host name (or IP) followed by port number. :param hosts: A string of the form host1[:port],host2[:port],... :param default_port: The port number to use when one wasn't specified for a host. ,z)Empty host (or extra comma in host list).r8N)r?rr>rOrF)rur0nodesr/rEr"r"r# split_hostsys  rxr7z/ "$r1rrZ authSource replicaset replicaSet loadbalanced loadBalancedrNone)rwrRrcCsdt|dkr|drtd|dr`t|dkr, 'username': or None, 'password': or None, 'database': or None, 'collection': or None, 'options': , 'fqdn': or None } If the URI scheme is "mongodb+srv://" DNS SRV and TXT lookups will be done to build nodelist and options. :param uri: The MongoDB URI to parse. :param default_port: The port number to use when one wasn't specified for a host in the URI. :param validate: If ``True`` (the default), validate and normalize all options. Default: ``True``. :param warn: When validating, if ``True`` then will warn the user then ignore any invalid options or values. If ``False``, validation will error when options are unsupported or values are invalid. Default: ``False``. :param normalize: If ``True``, convert names of URI options to their internally-used names. Default: ``True``. :param connect_timeout: The maximum time in milliseconds to wait for a response from the DNS server. :param srv_service_name: A custom SRV service name .. versionchanged:: 4.6 The delimiting slash (``/``) between hosts and connection options is now optional. For example, "mongodb://example.com?tls=true" is now a valid URI. .. versionchanged:: 4.0 To better follow RFC 3986, unquoted percent signs ("%") are no longer supported. .. versionchanged:: 3.9 Added the ``normalize`` parameter. .. versionchanged:: 3.6 Added support for mongodb+srv:// URIs. .. versionchanged:: 3.5 Return the original value of the ``readPreference`` MongoDB URI option instead of the validated read preference mode. .. versionchanged:: 3.1 ``warn`` added so invalid options can be ignored. FNpythonzThe "dnspython" module must be installed to use mongodb+srv:// URIs. To fix this error install pymongo again: %s -m pip install pymongo>=4.3Tz)Invalid URI scheme: URI must begin with 'z' or ''z)Must provide at least one hostname or IP.?/.r(zBad database name "%s"ZsrvServiceNamer&z;Any '/' in a unix domain socket must be percent-encoded: %sZ srvMaxHostsZdirectConnectionz*Cannot specify directConnection=true with z URIs)r0z. URIs must include one, and only one, hostnamerz$ URIs must not include a port numberZconnectTimeoutMSzDOnly authSource, replicaSet, and loadBalanced are supported from DNSr|z0You cannot specify loadBalanced with srvMaxHostsrzz.You cannot specify replicaSet with srvMaxHostsrZrYr[zDThe srvServiceName option is only allowed with 'mongodb+srv://' URIszAThe srvMaxHosts option is only allowed with 'mongodb+srv://' URIs)ZnodelistusernamepasswordZdatabase collectionrRfqdn) startswithSCHEME SCHEME_LEN SRV_SCHEMErsys executablerSRV_SCHEME_LENrrr*r r? _BAD_DB_CHARSsearchupdatertr^r rpartitionr.rxrrZ get_hostsZ get_optionsset_ALLOWED_TXT_OPTSitemsr~)rr0rnrQrorrrZis_srvZ scheme_freeZ python_pathr+r-ZdbaserrRZhost_plus_db_partr,rIZ host_partr%rurrwrEZ dns_resolverZ dns_optionsZparsed_dns_optionsrarUr"r"r# parse_uris?                  rzOptional[Mapping[str, Any]]zdict[str, SSLContext])kms_tls_optionsrcCs|siSt|tstdi}|D]\}}t|tsHtd|d|ddt|}t|}t|}ttt |}t |\}}|dkrt d|rt dd D]"}||krt d ||||<qq&|S) z!Parse KMS TLS connection options.zkms_tls_options must be a dictzkms_tls_options["z"] must be a dictrZTNz!TLS is required for KMS providerszInsecure TLS options prohibited)Z tlsInsecureZtlsAllowInvalidCertificatesZtlsAllowInvalidHostnamesZ$tlsDisableCertificateRevocationCheckz!Insecure TLS options prohibited: ) r@dict TypeErrorrrNrrcrlr rmr r)rZcontextsZproviderrRrI ssl_contextZallow_invalid_hostnamesnr"r"r#_parse_kms_tls_optionsWs.     r__main__r()F)TFT)C__doc__ __future__rrerrPtypingrrrrrrr r urllib.parser Zpymongo.client_optionsr Zpymongo.commonr rrrrZpymongo.errorsrrZpymongo.srv_resolverrrZpymongo.typingsrZpymongo.pyopenssl_contextrrrrrrZ DEFAULT_PORTr$r.r6rFr_rVrcrkrlrmrtrxcompileescaper frozensetrr~rr__name__pprintargvexcprintexitr"r"r"r#st (    55'- 0!