o Zha$@sddlmZddlZddlmZmZmZmZddlZ ddl m Z m Z ddl mZmZmZer6ddlmZmZdd d Zdd dZGddde jjZGddde jjZGddde jjZGddde jjZGdddeZgdZGdddeZdS)) annotationsN) TYPE_CHECKINGAnyCallablecast)config file_util)allowlisted_origins emit_endpoint_deprecation_noticeis_xsrf_enabled) AwaitableSequencereturnboolcCstd p tdS)a0True if cross-origin requests from any origin are allowed. We only allow ALL cross-origin requests when CORS protection has been disabled with server.enableCORS=False or if using the Node server in dev mode. When in dev mode, we have a dev and prod port, which count as two origins. zserver.enableCORSglobal.developmentMode)r get_optionrr\/var/www/html/Persson_Maskin/env/lib/python3.10/site-packages/streamlit/web/server/routes.pyallow_all_cross_origin_requests!s roriginrcCst|tsdS|tvS)NF) isinstancestrr )rrrris_allowed_origin/s  rcsJeZdZ  ddfd d Zdd dZdfdd Zdfdd ZZS)StaticFileHandlerNrpathrdefault_filename str | Nonereserved_paths Sequence[str]rNonecs||_t||dSN)_reserved_pathssuper initialize)selfrrr __class__rrr#6szStaticFileHandler.initializecCs:t|dk}|s |dr|dddS|dddS)zDisable cache for HTML files. Other assets like JS and CSS are suffixed with their hash, so they can be cached indefinitely. rz.html Cache-Controlno-cachepublicN)lenendswith set_header)r$r is_index_urlrrrset_extra_headers@s z#StaticFileHandler.set_extra_headersroot absolute_pathc szt||WStjjyX}zB|jdkrS|jtjjdkr( tjjdt fdd|j Dr5| |j p;d|_||j|j}t||WYd}~Sd}~ww)N/c3s|]}|VqdSr )r+).0xurl_pathrr Xsz;StaticFileHandler.validate_absolute_path.. index.html)r"validate_absolute_pathtornadoweb HTTPError status_coderossepreplaceanyr!parse_url_pathrget_absolute_pathr/)r$r/r0er%r5rr9Ls  z(StaticFileHandler.validate_absolute_pathr=intkwargsrc s@|dkrtjtd}||dStj|fi|dS)Nr1r8)r>rjoinrget_static_dirrenderr" write_error)r$r=rF index_filer%rrrJaszStaticFileHandler.write_error)Nr)rrrrrrrr)rrrr)r/rr0rrr)r=rErFrrr)__name__ __module__ __qualname__r#r.r9rJ __classcell__rrr%rr5s  rc@eZdZejjdddZdS)AddSlashHandlerrrcCdSr rr$rrrgetjzAddSlashHandler.getNrr)rLrMrNr:r;addslashrTrrrrrQirQc@rP)RemoveSlashHandlerrrcCrRr rrSrrrrTprUzRemoveSlashHandler.getNrV)rLrMrNr:r; removeslashrTrrrrrYorXrYc@s$eZdZdZd ddZd ddZdS) _SpecialRequestHandlerz2Superclass for "special" endpoints, like /healthz.rrcCsR|ddtr|dddSt|jjd}r'|dtd|dSdS)Nr'r(zAccess-Control-Allow-Origin*Originr)r,rrrequestheadersrTr)r$rrrrset_default_headersxs z*_SpecialRequestHandler.set_default_headerscCs|d|dS)a/OPTIONS handler for preflight CORS checks. When a browser is making a CORS request, it may sometimes first send an OPTIONS request, to check whether the server understands the CORS protocol. This is optional, and doesn't happen for every request or in every browser. If an OPTIONS request does get sent, and is not then handled by the server, the browser will fail the underlying request. The proper way to handle this is to send a 204 response ("no content") with the CORS headers attached. (These headers are automatically added to every outgoing response, including OPTIONS responses, via set_default_headers().) See https://developer.mozilla.org/en-US/docs/Glossary/Preflight_request N) set_statusfinishrSrrroptionss  z_SpecialRequestHandler.optionsNrV)rLrMrN__doc__r`rdrrrrr[us r[c@s4eZdZdddZdddZdd d Zdd d Zd S) HealthHandlercallback)Callable[[], Awaitable[tuple[bool, str]]]rrcCs ||_dS)zInitialize the handler. Parameters ---------- callback : callable A function that returns True if the server is healthy N) _callback)r$rgrrrr#s zHealthHandler.initializec|IdHdSr handle_requestrSrrrrTzHealthHandler.getcrjr rkrSrrrheadrmzHealthHandler.headcs|jjrd|jjvrd|jjvrdnd}t||d|IdH\}}|rN|||dtrL|jdi}|j |jdd |j fi|dSdS|d ||dS) Nz_stcore/zscript-health-checkz/_stcore/script-health-checkz/_stcore/health)new_pathxsrf_cookie_kwargsxsrf_cookie_name_streamlit_xsrfi) r^urir riwriterbr settingsrT set_cookie xsrf_token)r$rookmsg cookie_kwargsrrrrls,       zHealthHandler.handle_requestN)rgrhrrrV)rLrMrNr#rTrnrlrrrrrfs   rf)zhttps://devel.streamlit.testzhttps://*.streamlit.apptestzhttps://*.streamlitapp.testzhttps://*.streamlitapp.comzhttps://share.streamlit.iozhttps://share-demo.streamlit.iozhttps://share-head.streamlit.ioz"https://share-staging.streamlit.iozhttps://*.demo.streamlit.runzhttps://*.head.streamlit.runzhttps://*.staging.streamlit.runzhttps://*.streamlit.runzhttps://*.demo.streamlit.appzhttps://*.head.streamlit.appzhttps://*.staging.streamlit.appzhttps://*.streamlit.appc@s eZdZdddZdddZdS) HostConfigHandlerrrcCs6t|_tdrd|jvr|jddSdSdS)Nrzhttp://localhost) _DEFAULT_ALLOWED_MESSAGE_ORIGINScopy_allowed_originsrrappendrSrrrr#s  zHostConfigHandler.initializec s,||jddddddd|ddS)NF)allowedOriginsuseExternalAuthTokenenableCustomParentMessagesenforceDownloadInNewTab metricsUrlblockErrorDialogsresourceCrossOriginModerp)rurrbrSrrrrTszHostConfigHandler.getNrV)rLrMrNr#rTrrrrr|s  r|)rr)rrrr) __future__rr>typingrrrr tornado.webr: streamlitrr streamlit.web.server.server_utilr r r collections.abcr r rrr;rRequestHandlerrQrYr[rfr}r|rrrrs"   45