a 2sd@sddlZddlZddlZddlZddlmZddlmZddlmZdZ d e Z dZ e eZd d Zd d Zd dZddZddZGdddeZd$ddZddZddZddZd%ddZd&d d!Zd"d#ZdS)'N) credentials)errors)configz docker.iozhttps://index.{0}/v1/zcCsXd|vrtd|t|\}}|ddks<|ddkrLtd|t||fS)Nz://z-Repository name cannot contain a scheme ({0})r-zs     r cCst|tst|}||SN) isinstance AuthConfigget_credential_store) authconfigrr r rr%Hs r%c@seZdZdddZedddZedddZed d Zed d Z ed dZ eddZ d ddZ ddZ ddZddZddZddZdS)!r$NcCs*d|vri|d<||||_i|_dSNauths)update_credstore_env_stores)selfZdctrr r r__init__Os  zAuthConfig.__init__FcCsi}t|D]\}}t|tsLtd||rDtd|iSd|vrvtd|d|di||<qd|vrtd|i||<qt |d\}}tdt |t |||| d |d ||<q|S) a  Parses authentication entries Args: entries: Dict of authentication entries. raise_on_error: If set to true, an invalid format will raise InvalidConfigFile Returns: Authentication registry. z+Config entry for key {0} is not auth configz&Invalid configuration for registry {0}Z identitytokenz-Found an IdentityToken entry for registry {0} IdentityTokenauthzOAuth data for {0} is absent. Client might be using a credentials store instead.z(Found entry (registry={0}, username={1})emailusernamepasswordr0Z serveraddress) six iteritemsr#dictrrrrInvalidConfigFile decode_authreprget)clsentriesraise_on_errorconfrentryr2r3r r r parse_authVsX    zAuthConfig.parse_authc CsN|st|}|s|i|Sz6t|}t|}Wdn1sF0YWnBtttfy}z$t ||t ||WYd}~Sd}~00i}| drt d| d|j |dddi| drt d| d|di| dr t d | d|di|r0|||St d |d| |i|S) a8 Loads authentication data from a Docker configuration file in the given root directory or if config_path is passed use given path. Lookup priority: explicit config_path parameter > DOCKER_CONFIG environment variable > ~/.docker/config.json > ~/.dockercfg Nr(zFound 'auths' sectionT)r= credsStorezFound 'credsStore' section credHelperszFound 'credHelpers' sectionzNCouldn't find auth-related section ; attempting to interpret as auth-only file)rZfind_config_fileopenjsonloadIOErrorKeyError ValueErrorrr_load_legacy_configr:r)r@pop)r; config_path config_dictr config_fileferesr r rrs<    , $        zAuthConfig.load_configcCs |diSr'r:r,r r rr(szAuthConfig.authscCs |ddS)NrArQrRr r r creds_storeszAuthConfig.creds_storecCs |diS)NrBrQrRr r r cred_helpersszAuthConfig.cred_helperscCs|j o|j o|j Sr")r(rSrTrRr r rrszAuthConfig.is_emptycCs|js |jrP||}|durPtd||||}|durF|Std|r\t|nt}tdt |||j vrtdt ||j |St |j D]0\}}t||krtdt ||SqtddS)a+ Returns the authentication data from the given auth configuration for a specific registry. As with the Docker client, legacy entries in the config with full URLs are stripped down to hostnames before checking for a match. Returns None if no match was found. NzUsing credentials store "{0}"z/No entry in credstore - fetching from auth dictLooking for auth entry for {0}z Found {0}No entry found) rSrTr%rrr_resolve_authconfig_credstorer rr9r(r4r5)r,r store_nameZcfgkeyr>r r rrs*         zAuthConfig.resolve_authconfigc Cs|r |tkrt}tdt|||}zJ||}d|i}|dtkr\|d|d<n| |d|dd|WSt j ytdYdSt j y}z t dt|WYd}~n d}~00dS) NrUZ ServerAddressUsernameZSecretr.)rZZPasswordrVzCredentials store error: {0})r INDEX_URLrrrr9_get_store_instancer:TOKEN_USERNAMEr)rZCredentialsNotFoundZ StoreErrorrZDockerException)r,rZcredstore_namestoredatarPrOr r rrWs,      z(AuthConfig._resolve_authconfig_credstorecCs*||jvr tj||jd|j|<|j|S)N)Z environment)r+rZStorer*)r,namer r rr\s   zAuthConfig._get_store_instancecCs"|r |tkrt}|j|p |jSr")rr[rTr:rS)r,rr r rr%#s zAuthConfig.get_credential_storecCs|j}|jrP||j}|D]&}|||j||<|||t|<q(|j D](\}}|||||<|||t|<qZ|Sr") r(copyrSr\listkeysrWrrTitems)r,Z auth_datar^kregrXr r rget_all_credentials)s  zAuthConfig.get_all_credentialscCs||d|<dSr'r )r,rfr_r r radd_auth=szAuthConfig.add_auth)N)F)N)N)__name__ __module__ __qualname__r- classmethodr@rpropertyr(rSrTrrrWr\r%rgrhr r r rr$Ns&  D /     #r$cCst|tst||}||Sr")r#r$r)r&rrr r rrAs  rcCs |dddddddS)Nzhttp://zhttps://rrr)replacer)urlr r rrGsrcCsDt|tjr|d}t|}|dd\}}|d|dfS)Nascii:rutf8)r#r4Z string_typesencodebase64Z b64decoderdecode)r/sZloginpwdr r rr8Ks    r8cCst|d}t|S)Nrq)rDdumpsrtruZurlsafe_b64encode)r/Z auth_jsonr r rrSsrFcCs t||S)a Parses authentication entries Args: entries: Dict of authentication entries. raise_on_error: If set to true, an invalid format will raise InvalidConfigFile Returns: Authentication registry. )r$r@)r<r=r r rr@Xs r@cCst|||Sr")r$r)rKrLrr r rrhsrc Cstdzg}t|L}|D]}||ddq"t|dkrVt dWdn1sj0Yt |d\}}dt |||dt diiWSt y}zt|WYd}~n d}~00td iS) Nz+Attempting to parse legacy auth file formatz = rz$Invalid or empty configuration file!rr(r1z4All parsing attempts failed - returning empty config)rrrC readlinesappendstriprrrr7r8rr[ Exception)rMr_rNliner2r3rOr r rrIls0    "  rI)NN)F)NNN)rurDZloggingr4rnrrZutilsrrrr[r]Z getLoggerrirrr rr r%r6r$rrr8rr@rrIr r r rs0      t