0j"dZddlZddlmZmZddlmZddlmZm Z m Z m Z m Z m Z mZmZmZddlmZddlmZmZmZdd lmZejeZGd d ZdS) z[ Copyright (c) Microsoft Corporation. All rights reserved. Licensed under the MIT License. N)OptionalUnion)HTTPStatusError) ExchangeUserTokenParamsGetUserTokenParamsInvokeResponseSignInFailureInvokeActivity!SignInTokenExchangeInvokeActivitySignInVerifyStateInvokeActivityTokenExchangeInvokeResponseTokenExchangeInvokeResponseTypeTokenExchangeRequest) EventEmitter) ErrorEvent EventType SignInEvent)ActivityContextceZdZdedeeddfdZdeede e e e ffdZ dee dee dfdZdeedee dfd ZdS) OauthHandlersdefault_connection_name event_emitterreturnNc"||_||_dS)N)rr)selfrrs f/home/rurouni/.hermes/hermes-agent/venv/lib/python3.11/site-packages/microsoft_teams/apps/app_oauth.py__init__zOauthHandlers.__init__s'>$*ctxc K|j}|j}|j} |jj|jkr0t d|jjd|jd |jj t|jj|j j |jt|jj d{V}|jdt%|| |d{VdS#t&$r}t)|t*r|jj}|d vrt d |j j d |jj d ||jd t5|d|it7|pdcYd}~|d{VSt d|j j d |jj d |nct d|j j d |jj d ||jd t5|d|it7dt;|jj |jjt=|pdcYd}~|d{VSd}~wwxYw#|d{VwxYw)[ Decorator to register a function that handles the sign-in token exchange. z5Sign-in token exchange invoked with connection name 'z#', but default connection name is 'z''. Token verification will likely fail.)token)connection_nameuser_id channel_idexchange_requestNsign_in activity_ctxtoken_responseiz Error exchanging token for user  in conversation : erroractivityr0contextstatusz"Unable to exchange token for user r-zunable to exchange token...)idr#failure_detail)r6body)r1apinextvaluer#rloggerwarningusersr"exchangerfrom_r7r%rremitr Exception isinstancerresponse status_coder0 conversationrrinfor strrrr1r: next_handlerr"er6s rsign_in_token_exchangez$OauthHandlers.sign_in_token_exchange"s <gx 2 !~-1MMM,(0(F'*1vv'N1N,.. ; :,.. sKAJ9BD J6BJ1'J6(J9=CJ1J6J91J66J99K c K|j}|j} |j}|jd|jjd|jjd|jd|j d |j dttd|jd|j d|i  |d {Vd S#|d {VwxYw) a Default handler for signin/failure invoke activities. Teams sends a signin/failure invoke when SSO token exchange fails (e.g., due to a misconfigured Entra app registration). This handler logs the failure details and emits an error event so developers are notified rather than having the failure silently swallowed. Known failure codes (sent by the Teams client): - ``installappfailed``: Failed to install the app in the user's personal scope (non-silent). - ``authrequestfailed``: The SSO auth request failed after app installation (non-silent). - ``installedappnotfound``: The bot app is not installed for the user or group chat. - ``invokeerror``: A generic error occurred during the SSO invoke flow. - ``resourcematchfailed``: The token exchange resource URI on the OAuthCard does not match the Application ID URI in the Entra app registration's "Expose an API" section. - ``oauthcardnotvalid``: The bot's OAuthCard could not be parsed. - ``tokenmissing``: AAD token acquisition failed. - ``userconsentrequired``: The user needs to consent (handled via OAuth card fallback, does not typically reach the bot). - ``interactionrequired``: User interaction is required (handled via OAuth card fallback, does not typically reach the bot). zSign-in failed for user r.r/u — z. If the code is 'resourcematchfailed', verify that your Entra app registration has 'Expose an API' configured with the correct Application ID URI matching your OAuth connection's Token Exchange URL.r0zSign-in failure: r1r2N)r1r;r<r=r>rAr7rGcodemessagerrBrrC)rrr1rKfailures rsign_in_failurezOauthHandlers.sign_in_failure_s98<x  !nG J  [8>+<[[ ( 5 8[[<[[&-o[[[      # ##$\ $\$\7?$\$\]]'2   ,.. ,,.. s BB::C c K|j}|j}|j} |jjsUt d|jjd|j jdtd|d{VSt d|j jd|jjd |jj |j j t|j|j j|j|jj d{V}|jd t)|| t d |j jd|jj |d{VdS#t*$r}t d|j jd|jjd|t/|t0rc|jj}|dvrS|jdt7|d|it|pdcYd}~|d{VStdcYd}~|d{VSd}~wwxYw#|d{VwxYw)r!z,Auth state not present for conversation id 'z' and user id 'z'. r,r5Nz!Verifying sign-in state for user z in conversationz with state )r#r$r%rOr'r(z Sign-in state verified for user r.z'Error verifying sign-in state for user r/r+r0r1r2r4r-)r1r:r;r<stater=r>rGr7rArdebugr?r"getrrr%rrBrrCr0rDrrErFrrJs rsign_in_verify_statez"OauthHandlers.sign_in_verify_statesw <gx ) !>' 2;8CXC[;;$,N$5;;;&S111F,.. C LLPHN4EPP(+PP9A9MPP     !io11&(,(D ( 1#+#6%^1 "'' ;C`e3f3f3fggg ux~7Huu[c[p[suu,..     7hn>O77,/773477a11DZ3F_44*//!V`bjUk9l9l9lmmm-V]sCCCCCCCC ,.. &,..  ,.. sQAI':AI'?1! .& '1!1!1!1!f2!"#BC2! .& '2!2!2!2!2!2!rr)__doc__loggingtypingrrhttpxrmicrosoft_teams.apirrrr r r r r rmicrosoft_teams.commonreventsrrrroutingr getLoggerrXr=rr[rrresD """"""""!!!!!!                      0/////6666666666$$$$$$  8 $ $g!g!g!g!g!g!g!g!g!g!r