o 2gF@sUddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddlmZddlmZddlmZddlmZddlmZdd lmZdd lmZd d lmZd d lmZd dlmZd dlm Z d dlm!Z!e j"rddl#m$Z$ddl#m%Z%ddl#m&Z&dZ'de(de(fddZ)da*e j+e j,e(e-fe.d<de j+e j,e(e-ffddZ/GdddZ0ddde j,e j1e(e(fe j1d ffd!d"Z2Gd#d$d$Z3dS)%N)chain)basename)join)_log) parse_cookie)gen_salt)Request)Response)Console)Frame)get_current_traceback)render_console_html) Traceback) StartResponse)WSGIApplication)WSGIEnvironmenti: pinreturncCs$t|dddddS)Nz added saltutf-8replace )hashlibsha1encode hexdigest)rrf/var/www/mastermindingenieria.com/MONITOR/venv/lib/python3.10/site-packages/werkzeug/debug/__init__.pyhash_pin$s$r _machine_idcCs4tdurtSdtjtjttffdd}|atS)Nrc Ssd}dD]1}zt|d}|}Wdn1swYWn ty,Yqw|r5||7}nqz$tdd}||dd7}Wdn1sTwYWn tycYnw|rh|Sz&ddlm}m}|gd |d d}t d |}|dur| d WSWn tt fyYnwzddl }Wn t yYdSwz=||jd d|j|jB%} || d\} } | |jkr| dWdWS| WdWS1swYWdStyYdSw)N)z/etc/machine-idz/proc/sys/kernel/random/boot_idrbz/proc/self/cgroup/rr)PopenPIPE)ioregz-cIOPlatformExpertDevicez-d2)stdouts"serial-number" = <([^>]+)r zSOFTWARE\Microsoft\Cryptography MachineGuidr)openreadlinestripOSError rpartition subprocessr$r% communicateresearchgroup ImportErrorwinregOpenKeyHKEY_LOCAL_MACHINEKEY_READKEY_WOW64_64KEY QueryValueExREG_SZr) linuxfilenamefvaluer$r%dumpmatchr6rkguid guid_typerrr _generate1s~           $ z!get_machine_id.._generate)r tOptionalUnionstrbytes)rFrrrget_machine_id+s ErLc@s*eZdZdZdejeejffddZdS) _ConsoleFramez]Helper class so that we can reuse the frame console code for the standalone console. namespacecCst||_d|_dS)Nr)r consoleid)selfrNrrr__init__s  z_ConsoleFrame.__init__N) __name__ __module__ __qualname____doc__rGDictrJAnyrRrrrrrMzsrMapprNNc stjd}d}d|dkrdS|dur%|ddr%d|vr#|}n|t|dtt|j j }zt }Wn t tfyDd}Ynwtj|}||t|dt|jt|d dg}tttg}t}t||D]} | ssqnt| tr}| d } || qn|d d |dd } dur|dt|dddd|durdD]"tdkrd fddt!dtD}|| fSq}|| fS)aQGiven an application object this returns a semi-stable 9 digit pin code and a random key. The hope is that this is stable between restarts to not make debugging particularly frustrating. If the pin was forcefully disabled this returns `None`. Second item in the resulting tuple is the cookie name for remembering. WERKZEUG_DEBUG_PINNoffrZ-rTrS__file__rs cookiesalt__wzdspinsalt09d )rc3s(|]}||dVqdS)0N)rjust).0x group_sizenumrr s  z*get_pin_and_cookie_name..)"osenvirongetrisdigitgetattrrGcastobject __class__rTgetpassgetuserr5KeyErrorsysmodulestyperSrJuuidgetnoderLrrr isinstancerupdaterintlenrrange) rYrrvmodnameusernamemodprobably_public_bits private_bitshbit cookie_namerrlrget_pin_and_cookie_namesZ          rc@seZdZUdZeed<eed<       d5d d d ed ed edejej gej eej ffdedededdfddZ e dejefddZejdeddfddZe defddZdddddejefdd Zd!ed"ed#ejeefdefd$d%Zd!edefd&d'Zd!ed(edefd)d*Zdddejefd+d,Zd6d-d.Zd!edefd/d0Zdefd1d2Zdddddej efd3d4Z!dS)7DebuggedApplicationaEnables debugging support for a given application:: from werkzeug.debug import DebuggedApplication from myapp import app app = DebuggedApplication(app, evalex=True) The `evalex` keyword argument allows evaluating expressions in a traceback's frame context. :param app: the WSGI application to run debugged. :param evalex: enable exception evaluation feature (interactive debugging). This requires a non-forking server. :param request_key: The key that points to the request object in ths environment. This parameter is ignored in current versions. :param console_path: the URL for a general purpose console. :param console_init_func: the function that is executed before starting the general purpose console. The return value is used as initial namespace. :param show_hidden_frames: by default hidden traceback frames are skipped. You can show them by setting this parameter to `True`. :param pin_security: can be used to disable the pin based security system. :param pin_logging: enables the logging of the pin system. _pin _pin_cookieFwerkzeug.request/consoleNTrYrevalex request_key console_pathconsole_init_funcshow_hidden_frames pin_security pin_loggingrc Cs|sd}||_||_i|_i|_||_||_||_||_td|_ d|_ ||_ |rQt j ddkrM|rOtdd|jdurDtdddStdd |jdSdSdSd|_dS) NrarWERKZEUG_RUN_MAINtruewarningz * Debugger is active!z- * Debugger PIN disabled. DEBUGGER UNSECURED!infoz * Debugger PIN: %s)rYrframes tracebacksrrrrrsecret_failed_pin_authrrprqrrrr) rQrYrrrrrrrrrrrRs*     zDebuggedApplication.__init__cCs&t|dst|j}|\|_|_|jS)NrhasattrrrYrrrQ pin_cookierrrrs   zDebuggedApplication.pinr@cCs ||_dS)N)r)rQr@rrrr#s cCs&t|dst|j}|\|_|_|jS)zThe name of the pin cookie.rrrrrrpin_cookie_name's   z#DebuggedApplication.pin_cookie_namerqrstart_responserc csd}z|||}|EdHt|dr|WdSWdStyt|dr-|td|jdd}|jD]}||j|j<q8||j|j<z |dddgWnty`|d  d Ynwt | |}|j |j ||jd d d V||d YdSw)z6Run the application and conserve the traceback frames.Ncloser T)skiprignore_system_exceptionsz500 INTERNAL SERVER ERROR)z Content-Typeztext/html; charset=utf-8)zX-XSS-Protectionrhz wsgi.errorszpDebugging middleware caught exception in streamed response at a point where response headers were already sent. )revalex_trustedrrr)rYrr ExceptionrrrrPrwriteboolcheck_pin_trust render_fullrrrlog)rQrqrapp_iter tracebackframe is_trustedrrrdebug_application/sN          z%DebuggedApplication.debug_applicationrequestcommandrcCst|j|ddS)zExecute a command in a console. text/htmlmimetype)r rOeval)rQrrrrrrexecute_commandasz#DebuggedApplication.execute_commandcCshd|jvr!|jdur i}nt|}|d|jt||jd<t||j}t t |j |dddS)zDisplay a standalone shell.rNrY)rrrr) rrdict setdefaultrYrMrrrqr rr)rQrnsrrrrdisplay_consolegs    z#DebuggedApplication.display_consoler>cCshtdt|}ztt|}Wn tyd}Ynw|dur.t|dp'd}t||dStdddS) z0Return a static resource from the shared folder.sharedNrzapplication/octet-streamrz Not Foundi)status) rrpkgutilget_data __package__r. mimetypes guess_typer )rQrr>datarrrr get_resourcevs   z DebuggedApplication.get_resourcecCsp|jdurdSt||j}|rd|vrdS|dd\}}|s%dS|t|jkr.dSttt |kS)a!Checks if the request passed the pin test. This returns `True` if the request is trusted on a pin/cookie basis and returns `False` if not. Additionally if the cookie's stored pin hash is wrong it will return `None` so that appropriate action can be taken. NT|Fr ) rrrrrsplitrsrtimePIN_TIMEr)rQrqvaltspin_hashrrrrs  z#DebuggedApplication.check_pin_trustcCs*t|jdkr dnd|jd7_dS)Nreg@g?r )rsleeprrQrrr_fail_pin_authsz"DebuggedApplication._fail_pin_authc Csd}d}||j}tt|j}d}|dur|d}n*|r#d}n%|jdkr+d}n|jd}| dd| ddkrDd|_d}n|t t ||d d d }|rm|j|jttd t|dd d|S|ru||j|S)zAuthenticates with the pin.FNT rr]r^r)auth exhaustedzapplication/jsonrrNone)httponlysamesite)rrqrGrurJrrrargsr-rr jsondumps set_cookierrrr delete_cookie) rQrrrtrustr bad_cookie entered_pinrrrrpin_auths@    zDebuggedApplication.pin_authcCs0|jr|jdurtddtdd|jtdS)zLog the pin if needed.Nrz= * To enable the debugger you need to enter the security pin:z * Debugger pin code: %sr^)rrrr rrrrlog_pin_requests z#DebuggedApplication.log_pin_requestc Cst|}|j}|jddkrt|jd}|jd}|jd}|j|jjdtd}|dkr:|r:|||}nM|d krI||jkrI||}n>|d krW||jkrW| }n0|j rs|d urs|d urs|j|krs| |rs| |||}n|j r|j d ur|j|j kr||}|||S) zDispatch the requests. __debugger__yescmdr?sfrm)r}resourcepinauthprintpinN)r rrrrrrrrrrrrrrpathr) rQrqrrresponserargrrrrr__call__s8           zDebuggedApplication.__call__)FrrNFTT)rN)"rSrTrUrVrJ__annotations__rrGrHCallablerWrXrRpropertyrsetterrIteratorrKrr rIr rMr rrrrrrrIterablerrrrrrs   $ 2   2 r)4rxrrrrprr2r{rtypingrGr~ itertoolsros.pathrr _internalrhttprsecurityrwrappers.requestr wrappers.responser rOr tbtoolsr rrr TYPE_CHECKING_typeshed.wsgirrrrrJrr rHrIrKrrLrMTuplerrrrrrsN                 O  V