hdddlmZddlmZddlmZddlmZGddZdZ Gd d eZ y ) )urlparse)settings)is_same_domain)AsyncWebsocketConsumerc4eZdZdZdZdZdZdZdZdZ y) OriginValidatorze Validates that the incoming connection has an Origin header that is in an allowed list. c ||_||_yN) applicationallowed_origins)selfr r s W/var/www/Befach/backend/env/lib/python3.12/site-packages/channels/security/websocket.py__init__zOriginValidator.__init__s&.c`K|ddk7r tdd}|jdgD]&\}}|dk(s t|jd}(|j |r|j |||d{St}||||d{S#t$rY|wxYw7/7w)Ntype websocketzz2OriginValidator.validate_origin..Is2  sN Od77 wO O s#&)anyr r(s``rr'zOriginValidator.validate_origin8s%" //   rc|yt|j}|jy|js2td|zjxs|}t |j|S|j |}|j |}|j|jk(r&||k(r!t |j|jryy)a Returns ``True`` if the origin is either an exact match or a match to the wildcard pattern. Compares scheme, domain, port of origin and pattern. Any pattern can be begins with a scheme. After the scheme must be a domain, or just domain without scheme. Any domain beginning with a period corresponds to the domain and all its subdomains (for example, ``.example.com`` ``example.com`` and any subdomain). Also with scheme (for example, ``http://.example.com`` ``http://example.com``). After the domain there must be a port, but it can be omitted. Note. This function assumes that the given origin is either None, a schema-domain-port string, or just a domain string Fz//T)rlowerhostnameschemerget_origin_port)rr r-parsed_patternpattern_hostname origin_port pattern_ports rr+z$OriginValidator.match_allowed_originNs  "'--/2  ! ! )$$'w7@@KG !-"8"8:JK K**=9 ++N;   ! !]%9%9 9|+}55~7N7NOrc|j |jS|jdk(s|jdk(ry|jdk(s|jdk(ryy)zq Returns the origin.port or port for this schema by default. Otherwise, it returns None. NhttpwsPhttpswssi)portr3)rorigins rr4zOriginValidator.get_origin_portusO ;; ";;  ==F "fmmt&; ]]g %%)?rN) __name__ __module__ __qualname____doc__rr$rr'r+r4rrr r s& /60 3 ,%Nrr cftj}tjr|sgd}t||S)zi Factory function which returns an OriginValidator configured to use settings.ALLOWED_HOSTS. ) localhostz 127.0.0.1z[::1])r ALLOWED_HOSTSDEBUGr )r allowed_hostss rAllowedHostsOriginValidatorrKs* **M~~m; ; 66rceZdZdZdZy)rz= Simple application which denies all requests to it. c@K|jd{y7wr )close)rs rconnectzWebsocketDenier.connectsjjls N)rArBrCrDrOrErrrrs rrN) urllib.parser django.confrdjango.http.requestrgeneric.websocketrr rKrrErrrTs0! .6||~7,r