5pj/SrSSKrSSKJr SSKJrJr SSKrSSKJ r SSK J r J r SS K JrJr S rS r"S S \5r"SS\SS9rS\4SjrSS.S\S\/S4S-S\4SjjrS \S\4SjrS\R0S\4Sjrg)aADevice Code OAuth (RFC 8628) for browser-based login, plus access token refresh. The flow: the client requests a device code, displays a URL and a short user code, the user authorizes in a browser, and the client polls ``POST {ENDPOINT}/oauth/token`` until a token is issued. Access tokens may come with a refresh token, used to renew them transparently (see ``utils/_auth.py::get_token``). This module is self-contained protocol logic: no printing, no persistence. Interactive flows live in ``_login.py`` (human/library) and ``cli/auth.py`` (machine-readable event stream). N)Callable) TypedDictcast) constants)DeviceCodeErrorOAuthErrorCode) get_sessionhf_raise_for_statusz,urn:ietf:params:oauth:grant-type:device_code refresh_tokencR\rSrSr%\\S'\\S'\\S'\\S'\\S'\\S'Srg ) DeviceCodeInfo( device_code user_codeverification_uriverification_uri_completeinterval expires_inN__name__ __module__ __qualname____firstlineno__str__annotations__int__static_attributes__r_/var/www/html/pdf-tiff/venv/lib/python3.13/site-packages/huggingface_hub/utils/_oauth_device.pyrr(s#N""MOr!rc>\rSrSr%\\S'\\S'\\S'\\S'Srg)OAuthTokenResponse1 access_tokenr r token_typerNrrr!r"r$r$1sOOr!r$F)totalreturnc[5R[RS3S[R0[R S9n[ U5 UR5nURSS5 URS S 5 URS 5(dUS US '[[U5$![Ra%n[S[RSU35UeSnAff=f) aRequest a device code from the Hub's OAuth device authorization endpoint. The returned dict is normalized: `interval`, `expires_in` and `verification_uri_complete` are always set (server values, or sensible defaults). Raises: [`DeviceCodeError`]: If the request fails. z /oauth/device client_iddatatimeoutz#Failed to request device code from z/oauth/device: Nrrirr)r postrENDPOINTDEVICE_CODE_OAUTH_CLIENT_IDHF_HUB_DOWNLOAD_TIMEOUTr httpx HTTPErrorrjson setdefaultgetrr)responseeinfos r"request_device_coder<8ss=%%!!"- 0yDDE55&  H% ==?D OOJ"OOL#& 88/ 0 0,01C,D ()  %% ??s CIDVDVCWWfghfijkqrrssAB77C0 C++C0) on_pending device_infor=c USn[R"5US-n[R"5U:GaSn[5R[R S3[ US[RS.[RS9nURS:aUR5nUbS U;a[[U5$UR!S 5=c O=["R$:Xa UbU"5 O=["R&:Xa US - nO{=["R(:Xa [+S ["R(S 9e=["R,:Xa [+S["R,S 9en[+SUSUR!SS53US 9e[R."U5 [R"5U:aGM[+S["R(S 9e![R[4a GNKf=f)aGPoll the token endpoint until the user authorizes the device. Args: device_info (`DeviceCodeInfo`): The device authorization response from [`request_device_code`]. on_pending (`Callable`, *optional*): Called after each "authorization pending" response (e.g. to print a progress dot). Returns: `OAuthTokenResponse`: the full token response: `access_token`, and optionally `refresh_token` and `expires_in`. Raises: [`DeviceCodeError`]: If authorization is denied, the device code expires, or the server returns an unexpected OAuth error. rrN /oauth/tokenr) grant_typerr+r,r&errorr/z&Device code expired. Please try again. error_codez+Authorization was denied. Please try again.z OAuth error:  - error_descriptionz0Device code expired (timeout). Please try again.)time monotonicr r0rr1_DEVICE_CODE_GRANT_TYPEr2r3 status_coder6r4r5 ValueErrorrr$r8r AUTHORIZATION_PENDING SLOW_DOWN EXPIRED_TOKENr ACCESS_DENIEDsleep)r>r=rdeadliner-r9rCs r"poll_device_tokenrTTs&:&H~~+l";;H .. X % "}))%%&l3"9#.}#=!*!F!F "99*H##c)}}  %.55((7#9^99!-" -^--MH1^11)@^MiMi2^11)ER`RnRn)'wc$((;NPR2S1TUbg 8[ .. X %^ LYgYuYu vv=,   sA1GG;:G;c [5R[RS3[U[R S.[R S9n[U5nSU;a[[U5$URS5n[SU=(d URSURS S 53US 9e![Ran[SU35UeSnAff=f) axExchange a refresh token for a new access token. Returns: `OAuthTokenResponse`: the full token response: `access_token`, and optionally a rotated `refresh_token` and `expires_in`. Raises: [`DeviceCodeError`]: If the server rejects the refresh (`error_code="invalid_grant"` when the refresh token is expired or revoked) or returns an unexpected response. r@)rAr r+r,z Failed to refresh access token: Nr&rCrFrGrHrD)r r0rr1_REFRESH_TOKEN_GRANT_TYPEr2r3r4r5r_parse_token_responserr$r8rL)r r9r:r-rCs r"refresh_access_tokenrXs M=%%!!", /7!.&BB55&   ! *D&-- HHW E  *5+HH4H4H*ITXXVikmMnLop  ??M @DE1LMsAB55C CCr9c UR5$![a?n[S[RSUR SUR SS35UeSnAff=f)NzFailed to parse response from z/oauth/token (status z): rB)r6rMrrr1rLtext)r9r:s r"rWrWsm}} ,Y-?-?,@A++,C ds0C/D F  s A:AA)__doc__rIcollections.abcrtypingrrr4rHrerrorsrr _httpr r rKrVrr$r<rTrrXResponsedictrWrr!r"rbs  $" 43I+Y%&^&:MQDwDw08T0BT0IDwDwN  0B FENNtr!