Mh"9dZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddlmZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlmZddl m!Z!m"Z"ddlm#Z#ddlm$Z$dd l%m&Z&dd lm'Z'dd lm(Z(dd lm)Z)dd l*m+Z+m,Z,m-Z-ddlm.Z.ddl/m0Z0m1Z1ddl2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:ddl;mZ>e9Z?ddl@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZImJZJmKZKmLZLmMZMmNZNddlmOZOddl@Z@e@jPrddl@mQZQeCeRe=eSejTejfZUeCeVeReAeSeVfeAeSeRffZWdZX dZY dZZ dZ[ GddZ\e\Z]GddZ^eLde^Z_deKe_deKe_fdZ`deKe^deafd Zbd!eHd"eDeEdfdeHd"eDeEdffd#Zcd!eHd"eDeEdfdeHd"eDeEdffd$ZdGd%d&e8ZeGd'd(e6ZfGd)d*e'jgZhGd+d,eiZjGd-d.eiZkGd/d0ejZlGd1d2e^ZmGd3d4e^ZnGd5d6e^ZoGd7d8e^ZpGd9d:ZqGd;dd?ZtGd@dAetZuGdBdCetZvGdDdEetZwGdFdGZx d_dHeWdIeVdJeCeVeRfdKeDeSdLeDeHgeyfdMeDeSdeRfdNZzej{dOZ|dJeRdeSfdPZ} d`dHeWdIeVdJeCdeVeRfdReydLeDeHgeyfdSeDeSdeDeRfdTZ~dHeCeVeRfdIeVdJeRdReydLeHgeyfdeDeRf dUZdJeRdeFeSeReReReRffdVZdHeWdIeVdJeRdReydLeHgeyfdeDeRf dWZdJeCeVeRfdeDeSfdXZdHeCeVeRfdYeCeVeRfdeRfdZZdHeCeVeRfd[eRdeRfd\Zd]eVdeafd^ZdS)aa4``tornado.web`` provides a simple web framework with asynchronous features that allow it to scale to large numbers of open connections, making it ideal for `long polling `_. Here is a simple "Hello, world" example app: .. testcode:: import asyncio import tornado class MainHandler(tornado.web.RequestHandler): def get(self): self.write("Hello, world") async def main(): application = tornado.web.Application([ (r"/", MainHandler), ]) application.listen(8888) await asyncio.Event().wait() if __name__ == "__main__": asyncio.run(main()) See the :doc:`guide` for additional information. Thread-safety notes ------------------- In general, methods on `RequestHandler` and elsewhere in Tornado are not thread-safe. In particular, methods such as `~RequestHandler.write()`, `~RequestHandler.finish()`, and `~RequestHandler.flush()` must only be called from the main thread. If you use multiple threads it is important to use `.IOLoop.add_callback` to transfer control back to the main thread before finishing the request, or to limit your use of other threads to `.IOLoop.run_in_executor` and ensure that your callbacks running in the executor do not refer to Tornado objects. N)isclass)BytesIO) urlencode)Future"future_set_result_unless_cancelled)escape)gen) HTTPServer)httputil)iostream)locale) access_logapp_loggen_log)template)utf8_unicode) AnyMatchesDefaultHostMatches HostMatchesReversibleRouterRuleReversibleRuleRouterURLSpec _RuleList) ObjectDict unicode_type_websocket_mask)DictAnyUnionOptional AwaitableTupleListCallableIterable GeneratorTypeTypeVarcastoverload) TracebackType)SetceZdZdS)_ArgDefaultMarkerN)__name__ __module__ __qualname__K/var/www/html/test/jupyter/venv/lib/python3.11/site-packages/tornado/web.pyr2r2sDr7r2c$ eZdZUdZdZeedfed<iZe j Z e j dZdZdZdZdZdd d ejd ed dffd ZddZeZ ed eeeffdZded ed dfdZeZeZeZeZ eZ!eZ"eZ#d e$e%dfdZ&ddZ'ddZ(ddZ)ddZ*dde+de$ed dfdZ,d e+fdZ-dede.d dfdZ/dede.d dfdZ0ded dfdZ1e j d Z2de.d efd!Z3e4dded#ed$e5d efd%Z6e4e7d"fded#e8d$e5d efd&Z6e4 dded#dd$e5d e$efd'Z6e7d"fded#e9dee8fd$e5d e$efd(Z6dded$e5d e:efd)Z;e4dded#ed$e5d efd*Ze4e7d"fded#e8d$e5d efd0Z>e4 dded#dd$e5d e$efd1Z>e7d"fded#e9dee8fd$e5d e$efd2Z>dded$e5d e:efd3Z? dded#e9dee8fd4eee:e@fd$e5d e$ef d5ZA dded4eee:e@fd$e5d e:efd6ZBdde@de$ed efd7ZCed eeeDjEjFffd8ZEe4ded#ed efd9ZGe4dded#dd e$efd:ZGdded#e$ed e$efd;ZG dddddd=dede9ee@fd>e$ed?e$e9eHeeIjIfd@edAe$eHdBe$e+dCe5dDe5dEe$ed ed dfdFZJded ed dfdGZKd ed dfdHZL ddede9ee@fdAe$eHdJe$e+d ed df dKZMeMZN ddede9ee@fdJe$e+d e@fdLZO ddede$edNeHdOe$e+d e$e@f dPZPePZQ ddede$ed e$e+fdQZReRZS ddRedSe5dTe$e+d dfdUZTdVe9ee@eUfd dfdWZVdXed ed dYfdZZWd[eXed efd\ZYd]eXe@d e@fd^ZZd_eXed efd`Z[daeXe@d e@fdbZ\dXed ed e@fdcZ]d eeeffddZ^deed e_j`fdfZaddge5d dYfdhZbddVe$e9ee@eUfd dYfdiZcd edjefdjZfddkZgdde+d ed dfdmZhde+d ed dfdnZied ejjkjlfdoZkekjmdejjkjld dfdpZkd e$ejjkjlfdqZndd#ed ejjkjlfdsZoed efdtZpepjmded dfduZpd efdvZqd efdwZrd e$efdxZsed e@fdyZtd ee$e+e@eHffdzZud{ed ee$e+e$e@e$eHffd|Zvdd}Zwd efd~Zx dd@ede$e5d ed efdZyddeded dfdZzdeded efdZ{d e$efdZ|ddZ}d e5fdZ~de:dde@d e@d dfdZdVe@d e$e%dfdZddZd efdZded dfdZddde$ede$ed dfdZdededd edeffdZdedefd edeffdZddZxZS)RequestHandleraFBase class for HTTP request handlers. Subclasses must define at least one of the methods defined in the "Entry points" section below. Applications should not construct `RequestHandler` objects directly and subclasses should not override ``__init__`` (override `~RequestHandler.initialize` instead). )GETHEADPOSTDELETEPATCHPUTOPTIONS.SUPPORTED_METHODSz[\x00-\x08\x0e-\x1f]FN application Applicationrequestkwargsreturnc t|_|_d_d_d_d_tfd|j D_ t|j j d<j dj d<jjJjjjjdi|dS)NFTc3LK|]\}}||fVdSN) _ui_method).0nmselfs r8 z*RequestHandler.__init__..sI  (,1Q"" #      r7 _tt_modulesmodulesr6)super__init__rCrE_headers_written _finished _auto_finish_prepared_futurer ui_methodsitemsui_UIModuleNamespace ui_modulesclear connectionset_close_callbackon_connection_close initialize)rOrCrErF __class__s` r8rTzRequestHandler.__init__s & %  $    0;0F0L0L0N0N     "4D+:P!Q!Q !W]3  |&222 22  $    !!&!!!!!r7cdSrJr6rOs r8 _initializezRequestHandler._initialize r7c|jjS)z@An alias for `self.application.settings `.)rCsettingsres r8rizRequestHandler.settings s((r7argsc td)N) HTTPErrorrOrjrFs r8_unimplemented_methodz$RequestHandler._unimplemented_methodsnnr7cdS)aXCalled at the beginning of a request before `get`/`post`/etc. Override this method to perform common initialization regardless of the request method. There is no guarantee that ``prepare`` will be called if an error occurs that is handled by the framework. Asynchronous support: Use ``async def`` or decorate this method with `.gen.coroutine` to make it asynchronous. If this method returns an ``Awaitable`` execution will not proceed until the ``Awaitable`` is done. .. versionadded:: 3.1 Asynchronous support. Nr6res r8preparezRequestHandler.prepares  r7cdS)aICalled after the end of a request. Override this method to perform cleanup, logging, etc. This method is primarily intended as a counterpart to `prepare`. However, there are a few error cases where ``on_finish`` may be called when ``prepare`` has not. (These are considered bugs and may be fixed in the future, but for now you may need to check to see if the initialization work done in ``prepare`` has occurred) ``on_finish`` may not produce any output, as it is called after the response has been sent to the client. Nr6res r8 on_finishzRequestHandler.on_finish,s  r7ct|jrn|jjsR|jjt j|jjdSdSdS)aFCalled in async handlers if the client closed the connection. Override this to clean up resources associated with long-lived connections. Note that this method is called only if the connection was closed during asynchronous processing; if you need to do cleanup after every request override `on_finish` instead. Proxies may keep a connection open for a time (perhaps indefinitely) after the client has gone away, so this method may not be called promptly after the end user closes their connection. N) _has_stream_request_bodyrcrE _body_futuredone set_exceptionr StreamClosedError exceptionres r8raz"RequestHandler.on_connection_close:s $DN 3 3 6<,1133 6 )778R8T8TUUU )3355555 6 6 6 6r7ctjdtjzdtjt jd|_|g|_d|_ tj d|_ dS)z1Resets all headers and content for this response.zTornadoServer/%sztext/html; charset=UTF-8)Server Content-TypeDateN) r HTTPHeaderstornadoversionformat_timestamptime_headersset_default_headers _write_buffer _status_code responses_reasonres r8r^zRequestHandler.clearMsx ,,w> : 1$)++>>        """)#. r7cdS)aBOverride this to set HTTP headers at the beginning of the request. For example, this is the place to set a custom ``Server`` header. Note that setting such headers in the normal flow of request processing may not do what you want, since headers may be reset during error handling. Nr6res r8rz"RequestHandler.set_default_headers[s  r7 status_codereasonc||_|tj||_dStj|d|_dS)aSets the status code for our response. :arg int status_code: Response status code. :arg str reason: Human-readable reason phrase describing the status code. If ``None``, it will be filled in from `http.client.responses` or "Unknown". .. versionchanged:: 5.0 No longer validates that the response code is in `http.client.responses`. NUnknown)rr native_strrr rget)rOrrs r8 set_statuszRequestHandler.set_statusesF(  !,V44DLLL#-11+yIIDLLLr7c|jS)z)Returns the status code for our response.)rres r8 get_statuszRequestHandler.get_statusxs   r7namevaluec@|||j|<dS)zSets the given response header name and value. All header values are converted to strings (`datetime` objects are formatted according to the HTTP specification for the ``Date`` header). N)_convert_header_valuerrOrrs r8 set_headerzRequestHandler.set_header|s$#88?? dr7cb|j|||dS)zAdds the given response header and value. Unlike `set_header`, `add_header` may be called multiple times to return multiple values for the same header. N)raddrrs r8 add_headerzRequestHandler.add_headers0 $ : :5 A ABBBBBr7c,||jvr |j|=dSdS)zClears an outgoing header, undoing a previous `set_header` call. Note that this method does not apply to multi-valued headers set by `add_header`. N)r)rOrs r8 clear_headerzRequestHandler.clear_headers) 4=  d### ! r7z[\x09\x20-\x7e\x80-\xff]*ct|tr|}nt|tr|d}nit|tjrt|St|t jrtj|Std|ztj |td||S)Nlatin1zUnsupported header value %rzUnsafe header value %r) isinstancestrbytesdecodenumbersIntegraldatetimer r TypeErrorr:_VALID_HEADER_CHARS fullmatch ValueError)rOrretvals r8rz$RequestHandler._convert_header_values eS ! ! CFF u % % C\\(++FF w/ 0 0 Cu::  x0 1 1 C,U33 39EABB B  - 7 7 ? ? G5v>> > r7TdefaultstripcdSrJr6rOrrrs r8 get_argumentzRequestHandler.get_argument r7cdSrJr6rs r8rzRequestHandler.get_argument  r7cdSrJr6rs r8rzRequestHandler.get_argumentrr7cF||||jj|S)arReturns the value of the argument with the given name. If default is not provided, the argument is considered to be required, and we raise a `MissingArgumentError` if it is missing. If the argument appears in the request more than once, we return the last value. This method searches both the query and body arguments. ) _get_argumentrE argumentsrs r8rzRequestHandler.get_arguments# !!$1GOOOr7crt|tsJ|||jj|S)zReturns a list of the arguments with the given name. If the argument is not present, returns an empty list. This method searches both the query and body arguments. )rbool_get_argumentsrErrOrrs r8 get_argumentszRequestHandler.get_argumentss7%&&&&&""4)?GGGr7cdSrJr6rs r8get_body_argumentz RequestHandler.get_body_argumentrr7cdSrJr6rs r8rz RequestHandler.get_body_argumentrr7cdSrJr6rs r8rz RequestHandler.get_body_argumentrr7cF||||jj|S)ajReturns the value of the argument with the given name from the request body. If default is not provided, the argument is considered to be required, and we raise a `MissingArgumentError` if it is missing. If the argument appears in the url more than once, we return the last value. .. versionadded:: 3.2 )rrEbody_argumentsrs r8rz RequestHandler.get_body_arguments#"!!$1LeTTTr7cD|||jj|S)zReturns a list of the body arguments with the given name. If the argument is not present, returns an empty list. .. versionadded:: 3.2 )rrErrs r8get_body_argumentsz!RequestHandler.get_body_argumentss!""4)DeLLLr7cdSrJr6rs r8get_query_argumentz!RequestHandler.get_query_argumentrr7cdSrJr6rs r8rz!RequestHandler.get_query_argumentrr7cdSrJr6rs r8rz!RequestHandler.get_query_argumentrr7cF||||jj|S)arReturns the value of the argument with the given name from the request query string. If default is not provided, the argument is considered to be required, and we raise a `MissingArgumentError` if it is missing. If the argument appears in the url more than once, we return the last value. .. versionadded:: 3.2 )rrEquery_argumentsrs r8rz!RequestHandler.get_query_arguments#"!!$1MuUUUr7cD|||jj|S)zReturns a list of the query arguments with the given name. If the argument is not present, returns an empty list. .. versionadded:: 3.2 )rrErrs r8get_query_argumentsz"RequestHandler.get_query_arguments2s!""4)EuMMMr7sourcec||||}|s&t|trt||S|dS)N)r)rrr2MissingArgumentError)rOrrrrrjs r8rzRequestHandler._get_argument;sU""4u"== '#455 1*4000NBxr7c*g}||gD]y}|||}t|tr tjd|}|r|}||z|S)Nr ) rdecode_argumentrrr:_remove_control_chars_regexsubrappend)rOrrrvaluesvss r8rzRequestHandler._get_argumentsIsD"%%  A$$QT$22A!\** K#>BB3JJ GGII MM!     r7c  t|S#t$r/tdd|pd|ddwxYw)aDecodes an argument from the request. The argument has been percent-decoded and is now a byte string. By default, this method decodes the argument as utf-8 and returns a unicode string, but this may be overridden in subclasses. This method is used as a filter for both `get_argument()` and for values extracted from the url and passed to `get()`/`post()`/etc. The name of the argument is provided if known, but may be None (e.g. for unnamed groups in the url regex). zInvalid unicode in {}: {!r}urlN()rUnicodeDecodeErrorrmformat)rOrrs r8rzRequestHandler.decode_argumentXsc E?? "!   299$-%sPRsTT  s 9A c|jjS)zRAn alias for `self.request.cookies <.httputil.HTTPServerRequest.cookies>`.)rEcookiesres r8rzRequestHandler.cookiesls|##r7cdSrJr6rOrrs r8 get_cookiezRequestHandler.get_cookierrr7cdSrJr6rs r8rzRequestHandler.get_cookievrr7ch|jj%||jjvr|jj|jS|S)a-Returns the value of the request cookie with the given name. If the named cookie is not present, returns ``default``. This method only returns cookies that were present in the request. It does not see the outgoing cookies set by `set_cookie` in this handler. )rErrrs r8rzRequestHandler.get_cookiezs6 <  + 8L0L0L<'-3 3r7/)max_agehttponlysecuresamesitedomainexpirespath expires_daysrrrrc Vtj|}tj|}tjd||zrt d|d|t |ds#t j|_ ||j vr|j |=||j |<|j |} |r|| d<|F|sDtj tj j tj|z}|rtj|| d<|r|| d <|rt#|| d <|rd | d <| rd | d <| r| | d<| r^| D] \} }|| | < t'jdt+| dt.dSdS)a}Sets an outgoing cookie name/value with the given options. Newly-set cookies are not immediately visible via `get_cookie`; they are not present until the next request. Most arguments are passed directly to `http.cookies.Morsel` directly. See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie for more information. ``expires`` may be a numeric timestamp as returned by `time.time`, a time tuple as returned by `time.gmtime`, or a `datetime.datetime` object. ``expires_days`` is provided as a convenience to set an expiration time in days from today (if both are set, ``expires`` is used). .. deprecated:: 6.3 Keyword arguments are currently accepted case-insensitively. In Tornado 7.0 this will be changed to only accept lowercase arguments. z [\x00-\x20]zInvalid cookie z: _new_cookierNdaysrrzmax-ageTrrrz$Deprecated arguments to set_cookie: z (should be lowercase))rrresearchrhasattrhttpr SimpleCookierrnowtimezoneutc timedeltar rrrZwarningswarnsetkeysDeprecationWarning)rOrrrrrrrrrrrFmorselkrs r8 set_cookiezRequestHandler.set_cookiesJ &&!%(( 9^TE\ 2 2 DBtBBBBCC Ct]++  ))++   4# # # &!&!$'  &%F8   #G #'++H,=,ABBXEW!FFFG  C ( 9' B BF9   "!F6N  - #G F9   &"&F:   $#F8   *!)F:      1q M(s6;;==7I7I((("       r7c dD]}||vrtd|dtjtjjtjdz }|j|fd|d|dS) aDeletes the cookie with the given name. This method accepts the same arguments as `set_cookie`, except for ``expires`` and ``max_age``. Clearing a cookie requires the same ``domain`` and ``path`` arguments as when it was set. In some cases the ``samesite`` and ``secure`` arguments are also required to match. Other arguments are ignored. Similar to `set_cookie`, the effect of this method will not be seen until the following request. .. versionchanged:: 6.3 Now accepts all keyword arguments that ``set_cookie`` does. The ``samesite`` and ``secure`` flags have recently become required for clearing ``samesite="none"`` cookies. )rrz3clear_cookie() got an unexpected keyword argument ''imr)rrN)rrrrrrr)rOrrF excluded_argrs r8 clear_cookiezRequestHandler.clear_cookies$3  Lv%%Y,YYY&#''(9(=>>ASB B B   BBBB6BBBBBr7c @|jjD]}|j|fi|dS)acAttempt to delete all the cookies the user sent with this request. See `clear_cookie` for more information on keyword arguments. Due to limitations of the cookie protocol, it is impossible to determine on the server side which values are necessary for the ``domain``, ``path``, ``samesite``, or ``secure`` arguments, this method can only be successful if you consistently use the same values for these arguments when setting cookies. Similar to `set_cookie`, the effect of this method will not be seen until the following request. .. versionchanged:: 3.2 Added the ``path`` and ``domain`` parameters. .. versionchanged:: 6.3 Now accepts all keyword arguments that ``set_cookie`` does. .. deprecated:: 6.3 The increasingly complex rules governing cookies have made it impossible for a ``clear_all_cookies`` method to work reliably since all we know about cookies are their names. Applications should generally use ``clear_cookie`` one at a time instead. N)rErr )rOrFrs r8clear_all_cookiesz RequestHandler.clear_all_cookiess@8L( . .D D d - -f - - - - . .r7rc T|j|||||fd|i|dS)aSigns and timestamps a cookie so it cannot be forged. You must specify the ``cookie_secret`` setting in your Application to use this method. It should be a long, random sequence of bytes to be used as the HMAC secret for the signature. To read a cookie set with this method, use `get_signed_cookie()`. Note that the ``expires_days`` parameter sets the lifetime of the cookie in the browser, but is independent of the ``max_age_days`` parameter to `get_signed_cookie`. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) Similar to `set_cookie`, the effect of this method will not be seen until the following request. .. versionchanged:: 3.2.1 Added the ``version`` argument. Introduced cookie version 2 and made it the default. .. versionchanged:: 6.3 Renamed from ``set_secure_cookie`` to ``set_signed_cookie`` to avoid confusion with other uses of "secure" in cookie attributes and prefixes. The old name remains as an alias. )rrN)rcreate_signed_value)rOrrrrrFs r8set_signed_cookiez RequestHandler.set_signed_cookiesYL    $ $T5' $ B B  &       r7c(|dd|jjd}d}t|tr@|jjdt d|jjd}t|||||S)aSigns and timestamps a string so it cannot be forged. Normally used via set_signed_cookie, but provided as a separate method for non-cookie uses. To decode a value not stored as a cookie use the optional value argument to get_signed_cookie. .. versionchanged:: 3.2.1 Added the ``version`` argument. Introduced cookie version 2 and made it the default. cookie_secretsecure cookiesN key_versionz5key_version setting must be used for secret_key dicts)rr)require_settingrCrirdictr Exceptionr)rOrrrsecretrs r8rz"RequestHandler.create_signed_valueDs _.>???!*?; fd # # C(,,];;C WXXX*3MBK" D%k    r7 max_age_days min_versionc|dd|||}t|jjd||||S)aReturns the given signed cookie if it validates, or None. The decoded cookie value is returned as a byte string (unlike `get_cookie`). Similar to `get_cookie`, this method only returns cookies that were present in the request. It does not see outgoing cookies set by `set_signed_cookie` in this handler. .. versionchanged:: 3.2.1 Added the ``min_version`` argument. Introduced cookie version 2; both versions 1 and 2 are accepted by default. .. versionchanged:: 6.3 Renamed from ``get_secure_cookie`` to ``get_signed_cookie`` to avoid confusion with other uses of "secure" in cookie attributes and prefixes. The old name remains as an alias. rrN)rr)rrdecode_signed_valuerCri)rOrrrrs r8get_signed_cookiez RequestHandler.get_signed_cookie^sb8 _.>??? =OOD))E"   %o 6  %#     r7c|dd|||}|dSt|S)a~Returns the signing key version of the secure cookie. The version is returned as int. .. versionchanged:: 6.3 Renamed from ``get_secure_cookie_key_version`` to ``set_signed_cookie_key_version`` to avoid confusion with other uses of "secure" in cookie attributes and prefixes. The old name remains as an alias. rrN)rrget_signature_key_versionrs r8get_signed_cookie_key_versionz,RequestHandler.get_signed_cookie_key_versionsI _.>??? =OOD))E =4(///r7r permanentstatusc(|jrtd||rdnd}n&t|trd|cxkrdksnJ|||dt ||dS)a:Sends a redirect to the given (optionally relative) URL. If the ``status`` argument is specified, that value is used as the HTTP status code; otherwise either 301 (permanent) or 302 (temporary) is chosen based on the ``permanent`` argument. The default is 302 (temporary). z/Cannot redirect after headers have been writtenNi-i.i,iLocation)rUrrintrrrfinish)rOrr$r%s r8redirectzRequestHandler.redirects   OMNN N >%.SS3FFfc** Csf/C/C/C/C/C/C/C/C/C/C   DII... r7chunkc|jrtdt|ttt fs+d}t|t r|dz }t|t|t r*tj |}| ddt|}|j |dS)aWrites the given chunk to the output buffer. To write the output to the network, use the `flush()` method below. If the given chunk is a dictionary, we write it as JSON and set the Content-Type of the response to be ``application/json``. (if you want to send JSON as a different ``Content-Type``, call ``set_header`` *after* calling ``write()``). Note that lists are not converted to JSON because of a potential cross-site security vulnerability. All JSON output should be wrapped in a dictionary. More details at http://haacked.com/archive/2009/06/25/json-hijacking.aspx/ and https://github.com/facebook/tornado/issues/1009 zCannot write() after finish()z5write() only accepts bytes, unicode, and dict objectsz|. Lists not accepted for security reasons; see http://www.tornadoweb.org/en/stable/web.html#tornado.web.RequestHandler.writer}zapplication/json; charset=UTF-8N)rV RuntimeErrorrrrrlistrr json_encoderrrr)rOr+messages r8writezRequestHandler.writes > @>?? ?%%t!<== %MG%&& fG$$ $ eT " " O&u--E OON,M N N NU  !!%(((((r7 template_namez Future[None]c |jrtd|j|fi|}g}g}g}g}g}g} t|diD]} | } | r"|t| | } | rTt| ttfr#|t| n| | | } | r"|t| | } | rTt| ttfr#|t| n| | | } | r"|t| | }|r"| t||rR||}|d}|d|t|zdz||dz}|rE||}|d}|d||zdz||dz}|rR||}|d}|d|t|zdz||dz}|rE||}|d}|d||zdz||dz}|rC|d}|d|d|zdz||dz}| rC|d}|d|d| zdz||dz}||S)aRenders the template with the given arguments as the response. ``render()`` calls ``finish()``, so no other output methods can be called after it. Returns a `.Future` with the same semantics as the one returned by `finish`. Awaiting this `.Future` is optional. .. versionchanged:: 5.1 Now returns a `.Future` instead of ``None``. zCannot render() after finish()_active_modulessN sr7)rVr- render_stringgetattrrembedded_javascriptrrjavascript_filesrrrrextend embedded_css css_files html_head html_bodyrender_linked_jsrindexrender_embed_jsrender_linked_cssindexrender_embed_cssjoinr))rOr2rFhtmljs_embedjs_files css_embedr< html_heads html_bodiesmodule embed_part file_part head_part body_partjsslocjs_bytescsshloc css_bytess r8renderzRequestHandler.renders > A?@@ @!t!-::6::    d$5r::AACC 4 4F3355J 2Z 0 0111//11I /i,)>??/OOHY$7$78888OOI...,,..J 3  j!1!1222((**I 0i,)>??0$$Xi%8%89999$$Y///((**I 3!!$y//222((**I 4""4 ??333  @&&x00B;;z**D;b)E1DK?D  @++H55H;;z**D;)E1DK?D  A((33C::j))D;c*U2T$%%[@D  A--i88I::j))D;*U2T$%%[@D  L::j))D;*!5!55=TUU KD  M::j))D;+!6!66>deeLD{{4   r7rHcg}t}|D]T}t|s||}||vr*||||Udd|DS)zDefault method used to render the final js links for the rendered webpage. Override this method in a sub-classed controller to change the output. r c3JK|]}dtj|zdzVdS)z Nr xhtml_escaperLps r8rPz2RequestHandler.render_linked_js...sS   !!$$ %2 3      r7r is_absolute static_urlrrrE)rOrHpaths unique_pathsrs r8r?zRequestHandler.render_linked_jss uu  ' 'Dt$$ -t,,<'' T"""  &&&ww         r7rGc8dd|zdzS)zDefault method used to render the final embedded js for the rendered webpage. Override this method in a sub-classed controller to change the output. s,rE)rOrGs r8rAzRequestHandler.render_embed_js5s( >jj"" ## $ r7r<cg}t}|D]T}t|s||}||vr*||||Udd|DS)zDefault method used to render the final css links for the rendered webpage. Override this method in a sub-classed controller to change the output. r c3JK|]}dtj|zdzVdS)z NrZr\s r8rPz3RequestHandler.render_linked_css..QsR   V033 371 1      r7r^)rOr<rarbrs r8rBz RequestHandler.render_linked_cssAs uu  ' 'Dt$$ -t,,<'' T"""  &&&ww        r7rIc8dd|zdzS)zDefault method used to render the final embedded css for the rendered webpage. Override this method in a sub-classed controller to change the output. srd)rOrIs r8rDzRequestHandler.render_embed_cssWs ,ejj.C.CCmSSr7c |}|stjd}|jj}|jj|kr%|j|j}|jj|kr|j|jjJt j|jj}tj 5|tj vr%| |}|tj |<ntj |}dddn #1swxYwY| |}|}|||jdi|S)zGenerate the given template with the given arguments. We return the generated byte string (in utf8). To generate and write a template as a response, use render() above. rNr6)get_template_pathsys _getframef_code co_filenamef_backosrdirnamer:_template_loader_lock_template_loaderscreate_template_loaderloadget_template_namespaceupdategenerate) rOr2rF template_pathframeweb_fileloadert namespaces r8r6zRequestHandler.render_string_s..00  FM!$$E|/H,*h665<;S ,*h665<;S<+777GOOEL,DEEM  1 I IN$DDD44]CCBH0??'9-H  I I I I I I I I I I I I I I I KK & &//11    qz&&I&&&s/ADDDc t||j|j|j|jj|jj|j|j|j }| |j |S)aBReturns a dictionary to be used as the default template namespace. May be overridden by subclasses to add or modify values. The results of this method will be combined with additional defaults in the `tornado.template` module and keyword arguments to `render` or `render_string`. ) handlerrE current_userr _pgettextr`xsrf_form_html reverse_url) rrErr translaterr`rrrvr[)rOr}s r8ruz%RequestHandler.get_template_namespaceysjL*;k#[).(     !!!r7rxc|jj}d|vr|dSi}d|vr |d|d<d|vr |d|d<tj|fi|S)a]Returns a new template loader for the given path. May be overridden by subclasses. By default returns a directory-based loader on the given path, using the ``autoescape`` and ``template_whitespace`` application settings. If a ``template_loader`` application setting is supplied, uses that instead. template_loader autoescapetemplate_whitespace whitespace)rCrirLoader)rOrxrirFs r8rsz%RequestHandler.create_template_loadersz#,  ( (-. . 8 # #$,L#9F< H , ,#+,A#BF< }77777r7include_footersc:|jjJd|j}g|_|jsd|_|jD]6}|J||j|j||\|_|_}7|jj dkrd}t|drE|j D]+}| d|d,tjd|j|j}|jj||j|S|jD]}|||}|jj dkr|jj|St+}|d|S)zFlushes the current output buffer to the network. .. versionchanged:: 4.0 Now returns a `.Future` if no callback is given. .. versionchanged:: 6.0 The ``callback`` argument was removed. Nr7Tr<rz Set-Cookier )rEr_rErrU _transformstransform_first_chunkrrmethodrrrr OutputStringr ResponseStartLiner write_headerstransform_chunkr1r set_result)rOrr+ transformcookie start_linefutures r8flushzRequestHandler.flushs|&222+,,$# $(D !!-   ((( 33%t}e_ %ME |"f,, t]++ M".5577MMFOOL&2E2Ed2K2KLLLL!3B8I4<XXJ<*88DM5 "- J J !11%II|"f,,|.44U;;;!!$''' r7c|jrtd||||js|jdkr[|jjdvrMd|jvrD|| rg|_ | d|jdvsd|jcxkrdkr1nn.|j rJd |jz| n=d |jvr4td |j D}|d ||jjJ|jjd|d }|jj|d |_|||S)aDFinishes this response, ending the HTTP request. Passing a ``chunk`` to ``finish()`` is equivalent to passing that chunk to ``write()`` and then calling ``finish()`` with no arguments. Returns a `.Future` which may optionally be awaited to track the sending of the response to the client. This `.Future` resolves when all the response data has been sent, and raises an error if the connection is closed before all data can be sent. .. versionchanged:: 5.1 Now returns a `.Future` instead of ``None``. zfinish() called twiceNrr;r<Etag0)rdzCannot send body with %sContent-Lengthc34K|]}t|VdSrJ)len)rLparts r8rPz(RequestHandler.finish..s($N$N4SYY$N$N$N$N$N$Nr7T)r)rVr-r1rUrrErrset_etag_headercheck_etag_headerrr_clear_representation_headerssumrr_r`rr)_logrs _break_cycles)rOr+content_lengthrs r8r)zRequestHandler.finishs > 8677 7   JJu   $ B!S((L'?::$-//$$&&&))++))+D&OOC((( J..3$:K3Q3Q3Q3Qc3Q3Q3Q3Q3Q-.1BB224444!66!$$N$N4;M$N$N$N!N!N 0.AAA|&222 224888D11 &&(((    r7cLd|_|jjS)aNTake control of the underlying stream. Returns the underlying `.IOStream` object and stops all further HTTP processing. Intended for implementing protocols like websockets that tunnel over an HTTP handshake. This method is only supported when HTTP/1.1 is used. .. versionadded:: 5.1 T)rVrEr_detachres r8rzRequestHandler.detachs"|&--///r7cd|_dSrJ)r[res r8rzRequestHandler._break_cyclessr7c V|jrYtjd|js< |n&#t $rtjddYnwxYwdS||d}d|vr1|dd}t|tr|j r|j }| ||  |j |fi|n&#t $rtjd dYnwxYw|js|dSdS) aSends the given HTTP error code to the browser. If `flush()` has already been called, it is not possible to send an error, so this method will simply terminate the response. If output has been written but not yet flushed, it will be discarded and replaced with the error page. Override `write_error()` to customize the error page that is returned. Additional keyword arguments are passed through to `write_error`. z0Cannot send error response after headers writtenz Failed to flush partial responseTexc_infoNrrr/)rz!Uncaught exception in write_error)rUrerrorrVr)rr^rrrmrr write_errorr)rOrrFrrzs r8 send_errorzRequestHandler.send_error$sv   ML M M M> U UKKMMMM UUUM"DtTTTTTTU F H%%   z*1-I)Y// *I4D *")  F333 N D [ 3 3F 3 3 3 3 N N N M= M M M M M M N~  KKMMMMM  s!9 AAC&& D D c 2|jdr\d|vrX|ddtj|dD]}|||dS|d||jdzdS)aOverride to implement custom error pages. ``write_error`` may call `write`, `render`, `set_header`, etc to produce output as usual. If this error was caused by an uncaught exception (including HTTPError), an ``exc_info`` triple will be available as ``kwargs["exc_info"]``. Note that this exception may not be the "current" exception for purposes of methods like ``sys.exc_info()`` or ``traceback.format_exc``. serve_tracebackrr} text/plainzS%(code)d: %(message)s%(code)d: %(message)s)coder0N)rirr tracebackformat_exceptionr1r)r)rOrrFlines r8rzRequestHandler.write_errorJs =  . / / J&4H4H OONL 9 9 9!2F:4FG ! ! 4    KKMMMMM KK<&4<@@A     r7ct|ds@|}|||_n"||_|jsJ|jS)a^The locale for the current session. Determined by either `get_user_locale`, which you can override to set the locale based on, e.g., a user preference stored in a database, or `get_browser_locale`, which uses the ``Accept-Language`` header. .. versionchanged: 4.1 Added a property setter. _locale)rget_user_localerget_browser_locale)rOlocs r8r zRequestHandler.localecs^tY'' $&&((C" #6688 |###|r7c||_dSrJ)rrOrs r8r zRequestHandler.localexs  r7cdS)aOverride to determine the locale from the authenticated user. If None is returned, we fall back to `get_browser_locale()`. This method should return a `tornado.locale.Locale` object, most likely obtained via a call like ``tornado.locale.get("en")`` Nr6res r8rzRequestHandler.get_user_locale|s tr7en_UScd|jjvrJ|jjdd}g}|D]}|d}t |dkr|ddr^ t |ddd}|dkrtn#ttf$rd }YnwxYwd }|dkr| |d|f|r2| d d d|D}tj |Stj |S)zDetermines the user's locale from ``Accept-Language`` header. See http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.4 zAccept-Language,;r/zq=r0Nrgg?c|dS)Nr/r6)pairs r8z3RequestHandler.get_browser_locale..s d1gr7T)keyreversecg|] }|d S)rr6)rLrs r8 z5RequestHandler.get_browser_locale..s333CQ333r7) rEheaderssplitrr startswithfloatrrrsortr r)rOr languageslocaleslanguagepartsscorecodess r8rz!RequestHandler.get_browser_localesz  4 4 4 ,->?EEcJJIG% 6 6 ((..s33u::>>eAhnn&6&6&A&A$&G&G>$ %eAhnn&6&6qrr&: ; ; 199",,,.%& 2$$$ #$ E199NNE!He#4555 * !5!5t DDD337333z5))z'"""s#AC''C=<C=cbt|ds||_|jS)aThe authenticated user for this request. This is set in one of two ways: * A subclass may override `get_current_user()`, which will be called automatically the first time ``self.current_user`` is accessed. `get_current_user()` will only be called once per request, and is cached for future access:: def get_current_user(self): user_cookie = self.get_signed_cookie("user") if user_cookie: return json.loads(user_cookie) return None * It may be set as a normal variable, typically from an overridden `prepare()`:: @gen.coroutine def prepare(self): user_id_cookie = self.get_signed_cookie("user_id") if user_id_cookie: self.current_user = yield load_user(user_id_cookie) Note that `prepare()` may be a coroutine while `get_current_user()` may not, so the latter form is necessary if loading the user requires asynchronous operations. The user object may be any type of the application's choosing. _current_user)rget_current_userrres r8rzRequestHandler.current_users4@t_-- 9!%!6!6!8!8D !!r7c||_dSrJ)rrs r8rzRequestHandler.current_users"r7cdS)zrOverride to determine the current user from, e.g., a cookie. This method may not be a coroutine. Nr6res r8rzRequestHandler.get_current_users tr7cR|dd|jjdS)zOverride to customize the login URL based on the request. By default, we use the ``login_url`` application setting. login_urlz@tornado.web.authenticated)rrCrires r8 get_login_urlzRequestHandler.get_login_urls, [*FGGG(55r7c@|jjdS)zOverride to customize template path for each handler. By default, we use the ``template_path`` application setting. Return None to load templates relative to the calling file. rx)rCrirres r8riz RequestHandler.get_template_paths (,,_===r7c t|dsQ|\}}}|jdd}|jdi}|dkrt j||_n|dkrtjd}d dt j|t jt||ttt|g|_ntd ||?|jr d |vrd |d <|jd d}|j||jfi||jS)aThe XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an '_xsrf' cookie and include the same '_xsrf' value as an argument with all POST requests. If the two do not match, we reject the form submission as a potential forgery. See http://en.wikipedia.org/wiki/Cross-site_request_forgery This property is of type `bytes`, but it contains only ASCII characters. If a character string is required, there is no need to base64-encode it; just decode the byte string as UTF-8. .. versionchanged:: 3.2.2 The xsrf token will now be have a random mask applied in every request, which makes it safe to include the token in pages that are compressed. See http://breachattack.com for more information on the issue fixed by this change. Old (version 1) cookies will be converted to version 2 when this method is called unless the ``xsrf_cookie_version`` `Application` setting is set to 1. .. versionchanged:: 4.3 The ``xsrf_cookie_kwargs`` `Application` setting may be used to supply additional cookie options (which will be passed directly to `set_cookie`). For example, ``xsrf_cookie_kwargs=dict(httponly=True, secure=True)`` will set the ``secure`` and ``httponly`` flags on the ``_xsrf`` cookie. _xsrf_tokenxsrf_cookie_versionr0xsrf_cookie_kwargsr/|2zunknown xsrf cookie version %dNrrxsrf_cookie_name_xsrf)r_get_raw_xsrf_tokenrirbinasciib2a_hexrrourandomrErrrr(rrr)rOrtoken timestampoutput_version cookie_kwargsmask cookie_names r8 xsrf_tokenzRequestHandler.xsrf_tokenspBt]++ P(,(@(@(B(B %GUI!]../DaHHN M--.BBGGM""#+#3E#:#:  1$$z!}}#'99 (.. (u)E)EFFSY0011 $$  !!A>RRR$7})L)L46M.1"m//0BGLL  T-=OOOOOr7cNt|ds|jdd}||}|r||\}}}nd\}}}|)d}t jd}tj}|J|J|||f|_|jS)aRead or generate the xsrf token in its raw form. The raw_xsrf_token is a tuple containing: * version: the version of the cookie from which this token was read, or None if we generated a new token in this request. * token: the raw token data; random (non-ascii) bytes. * timestamp: the time this token was generated (will not be accurate for version 1 cookies) _raw_xsrf_tokenrrNNNN) rrirr_decode_xsrf_tokenrorrr)rOrrrrrs r8rz"RequestHandler._get_raw_xsrf_tokenst.// ?-++,>HHK__[11F =,0,C,CF,K,K) ,<) } 2 IKK $$$((($+UI#>D ##r7rc tt|}|rt|d}|dkr~|d\}}}}t jt|}t|t jt|} t|} || | fStdd} t jt|} n+#t j tf$rt|} YnwxYwttj } || | fS#t$rtjddYdSwxYw) z_Convert a cookie string into a the tuple form returned by _get_raw_xsrf_token. r/r0|zUnknown xsrf cookie versionz(Uncaught exception in _decode_xsrf_tokenTrr)_signed_value_version_rematchrr(grouprra2b_hexrrErrorrrrdebug) rOrrNrrmask_str masked_token timestamp_strrrrs r8rz!RequestHandler._decode_xsrf_token5sr $(..tF||<1 HC!FGG G"4;;^0D0DEE MC!KLL L M Mr7c@dtj|jzdzS)aAn HTML ```` element to be included with all POST forms. It defines the ``_xsrf`` input value, which we check on all POST requests to prevent cross-site request forgery. If you have set the ``xsrf_cookies`` application setting, you must include this HTML within all of your HTML forms. In a template, this method should be called with ``{% module xsrf_form_html() %}`` See `check_xsrf_cookie()` above for more information. z))rr[rres r8rzRequestHandler.xsrf_form_htmls) 8!$/22 3  r7 include_hostc |dd|jdtj}|t |dd}|r|jjdz|jjz}nd}|||j|fi|zS) aReturns a static URL for the given relative static file path. This method requires you set the ``static_path`` setting in your application (which specifies the root directory of your static files). This method returns a versioned url (by default appending ``?v=``), which allows the static files to be cached indefinitely. This can be disabled by passing ``include_version=False`` (in the default implementation; other static file implementations are not required to support this, but they may support other options). By default this method returns URLs relative to the current host, but if ``include_host`` is true the URL returned will be absolute. If this handler has an ``include_host`` attribute, that value will be used as the default for all `static_url` calls that do not pass ``include_host`` as a keyword argument. static_pathr`static_handler_classNrFz://r ) rrirStaticFileHandlermake_static_urlr7rEprotocolhost)rOrrrFget_urlbases r8r`zRequestHandler.static_urls. ]L999-## "$5     "4??L  <(504<3DDDDDggdmT<.vals% ! U 3 3:quu:r7)rrrrfindallrErr)rO computed_etagetagsrr,r%s r8rz RequestHandler.check_etag_headers"T]..vr::;;  !4 (<(@(@RT(U(U#V#V   E 5 8t  EE ;u ; ; ; ; ;  3t99M 2 222 EE3 r7 transformsOutputTransformc.K|_ jjjvrt dt jsF jn+#tj $r}t dd|z|d}~wwxYwfd|D_ fd| D_ jjdvr3j jdr}||d{V}jt'jdjrdSt jr* jjd{Vn#t,j$rYdSwxYwt1jj}|j ij }||d{V}jrjsdSdSdS#t8$r} |n&#t8$rt=jd d YnwxYwd}n#d}wxYwj9j s&j!dYd}~dSYd}~dSYd}~dSd}~wwxYw) z7Executes this request with the given output transforms.rlrzInvalid body: %sNc:g|]}|Sr6r)rLargrOs r8rz+RequestHandler._execute..s'HHHCd22377HHHr7cFi|]\}}|||S)rr4)rLrrrOs r8 z+RequestHandler._execute..s?   7=14'''22   r7)r;r<rA xsrf_cookieszException in exception handlerTr)"rrErrBrmrurc _parse_bodyr HTTPInputError path_argsrZ path_kwargsrCrirrrqrXrrVrvr ryr7lowerrWr)r_handle_request_exceptionrrrwr)rOr0rjrFeresultrs` r8_executezRequestHandler._executess&> 7|"$*@@@nn$,DN;; HHL,,.....HHH#C);a)?@@aGHIHHH4HHHDN    AG   D  |"+"+//??  &&(((\\^^F!%$0343H$OOO~ '77  ,3333333331FFT4<#6#<#<#>#>??FVT^@t/?@@F!%         7 7 7 ..q1111 O O O >NNNNNN O $09N9S9S9U9U0%00666666666 100000000000 7s6G2AG2B,BBB=G2G2E,+G2,E?;G2>E??A-G22 J=HH< H63H<5H66H<9J<I=JJct)zImplement this method to handle streamed request data. Requires the `.stream_request_body` decorator. May be a coroutine for flow control. NotImplementedError)rOr+s r8 data_receivedzRequestHandler.data_receivedIs"###r7c:|j|dS)zLogs the current request. Sort of deprecated since this functionality was moved to the Application, but left in place for the benefit of existing apps that have overridden this method. N)rC log_requestres r8rzRequestHandler._logRs! $$T*****r7cld|jj|jj|jjS)Nz {} {} ({}))rrEruri remote_ipres r8_request_summaryzRequestHandler._request_summary[s2"" L  L  L "   r7r?ct|tr|js|j|jdS |jt jn&#t$rtj ddYnwxYw|jrdSt|tr/| |j t jdS| dt jdS)NzError in exception loggerTrr)rFinishrVr)rj log_exceptionrjrrrrrmrr)rOr?s r8r>z(RequestHandler._handle_request_exceptionbs a  > % QV$$ F F D   / / / F F F M5 E E E E E E F >  F a # # : OOAMCLNNO C C C C C OOC#,..O 9 9 9 9 9sA A.-A.typzOptional[Type[BaseException]]tbc(t|trJ|}|r2d}|j||g}t j|g|RdSdStjd||j |||fdS)aKOverride to customize logging of uncaught exceptions. By default logs instances of `HTTPError` as warnings without stack traces (on the ``tornado.general`` logger), and all other exceptions as errors with stack traces (on the ``tornado.application`` logger). .. versionadded:: 3.1 z %d %s: %szUncaught exception %s %rrN) rrm get_messagerrKrwarningrrrE)rOrOrrP log_messagerrjs r8rNzRequestHandler.log_exceptionxs eY ' ' ++--K /$)4+@+@+B+BKP....... / / M+%%'' ub)       r7rLUIModulec*dtffd }|S)NrGctdsi_jvrj<jj|i|}t|S)Nr4)rr4rWr)rjrFrenderedrLrrOs r8rWz)RequestHandler._ui_module..rendersn4!233 *')$4///-3VD\\$T*8t+D18$I&IIHH%% %r7)r)rOrrLrWs``` r8 _ui_modulezRequestHandler._ui_modules; &s & & & & & & & & r7rcfdS)Ncg|Ri|SrJr6)rjrFrrOs r8rz+RequestHandler._ui_method..s!vvd'DT'D'D'DV'D'Dr7r6)rOrs``r8rKzRequestHandler._ui_methodsDDDDDDr7cBgd}|D]}||dS)N)Content-EncodingzContent-Languager})r)rOrhs r8rz,RequestHandler._clear_representation_headerss@ KJJ ! !A   a  ! !r7rGNrJT)NNrN)rN)NrN)FN)F)r)r)r)r3r4r5__doc__rBr$r__annotations__rr threadingLockrqrcompiler_stream_request_bodyrr;r<r HTTPServerRequestr rTrfrbpropertyrriroheadrpostdeletepatchputoptionsr"r#rqrsrar^rr(rr _HeaderTypesrrrrrr,rr _ARG_DEFAULTr2r!r%rrrrrrrrrrrMorselrrrrr rrset_secure_cookierr get_secure_cookier#get_secure_cookie_key_versionr*rr1rWr'r?rArBrDr6rur BaseLoaderrsrr)r IOStreamrrrrrr Localesetterrrrrrrirrrrrr`rrr#rrrArErrK BaseExceptionr>r-rNr)r&rYrKr __classcell__rcs@r8r:r:s  *uS#X*IN,,","*-D"E"E KIK"""+" "  """"""@    J&)$sCx.)))X)3#$ !D C D "F !E C#G )D/2    "     6666& / / / /    JJcJ8C=JDJJJJ&!C!!!!@s@<@D@@@@CsC<CDCCCC$$$$$$%"*%ABB<C0   s 4 3   X 6BRV   "3 KO    X 6:   "& /3 #   X 8D PPPtS"334P P # PPPP$ H H# Hd Hd3i H H H H  c C  PS   X 6BRV   "3 KO    X 6:   "& /3 #   X 8D UUUtS"334U U # UUUU&MMsM4M49MMMM  s S  QT   X 6BRV   "3 KO    X 6:   "& /3 #   X 8D VVVtS"334V V # VVVV&NNNDNDINNNN   tS"334 S$u+%&    #    HL   !%c4;&6!7 @D  c    U(3-3($c4<#667$$$X$  s S S   X   s T Xc]   X   s Xc] hsm    "!%DH(,Q"&"&QQQQS%Z Q Q %uh.? ?@A Q  QuoQ#QQQ3-QQ QQQQfCCCCCCC8.#.$....F)+!% + + + S%Z + uo + # +  +  + + + + Z*MQ   %c5j 1 I!I!I!I!V # 3    .    E      8C= S    ,T(5/TeTTTT'3'#'%''''4S#X.8C8H8C=>>>>7 E7 7 7 X7 r$U8C=%+F%G$$$$6"$"$ x}huox> ?"$"$"$"$H$M$M$M$ML     (9=$=$=$='/~$=HK$= $=$=$=$=LC#499C9C9999 +hsm + + + + * * * *&4&&&&PC701C7:?C7KPC7 C7C7C7C7J$5$Xio-F$$$$++++ #    :=:T::::, , & ] #   : s D,< #s(AS    E#s(!3Ec8JEEEE!!!!!!!!r7r:_RequestHandlerType)boundclsrGc^t|tstd|d|_|S)aApply to `RequestHandler` subclasses to enable streaming body support. This decorator implies the following changes: * `.HTTPServerRequest.body` is undefined, and body arguments will not be included in `RequestHandler.get_argument`. * `RequestHandler.prepare` is called when the request headers have been read instead of after the entire body has been read. * The subclass must define a method ``data_received(self, data):``, which will be called zero or more times as data is available. Note that if the request has an empty body, ``data_received`` may not be called. * ``prepare`` and ``data_received`` may return Futures (such as via ``@gen.coroutine``, in which case the next method will not be called until those futures have completed. * The regular HTTP method (``post``, ``put``, etc) will be called after the entire body has been read. See the `file receiver demo `_ for example usage. +expected subclass of RequestHandler, got %rT issubclassr:rrfr~s r8stream_request_bodyrs5* c> * *LEsKKK#C Jr7cZt|tstd||jS)Nrrrs r8rurus/ c> * *LEsKKK  ##r7r.ctjdtdttdffd }|S)a#Use this decorator to remove trailing slashes from the request path. For example, a request to ``/foo/`` would redirect to ``/foo`` with this decorator. Your request handler mapping should use a regular expression like ``r'/foo/*'`` in conjunction with using the decorator. rOrGNcF|jjdrv|jjdvrY|jjd}|r7|jjr|d|jjzz }||ddSntd|g|Ri|SNrr?Tr$)rErendswithrrstripqueryr*rmrOrjrFrIrs r8wrapperzremoveslash..wrappers <  % %c * * %|"o55l'..s33 |)8sT\%777MM#M6664   nn$vd,T,,,V,,,r7 functoolswrapsr:r"r#rrs` r8 removeslashrsX_V - - )D/ " - - - - - - Nr7ctjdtdttdffd }|S)a&Use this decorator to add a missing trailing slash to the request path. For example, a request to ``/foo`` would redirect to ``/foo/`` with this decorator. Your request handler mapping should use a regular expression like ``r'/foo/?'`` in conjunction with using the decorator. rOrGNc |jjdsc|jjdvrF|jjdz}|jjr|d|jjzz }||ddSt d|g|Ri|Sr)rErrrrr*rmrs r8rzaddslash..wrappers| ))#.. !|"o55l'#-<%43!333C cT 222tC.. vd,T,,,V,,,r7rrs` r8addslashrsX_V - - )D/ " - - - - - - Nr7c eZdZdZ ddddeeddffd Zdedeffd Zd e d e j d e dee j ffd Z xZS)_ApplicationRouteraRouting implementation used internally by `Application`. Provides a binding between `Application` and `RequestHandler`. This implementation extends `~.routing.ReversibleRuleRouter` in a couple of ways: * it allows to use `RequestHandler` subclasses as `~.routing.Rule` target and * it allows to use a list/tuple of rules as `~.routing.Rule` target. ``process_rule`` implementation will substitute this list with an appropriate `_ApplicationRouter` instance. NrCrDrulesrGct|tsJ||_t|dSrJ)rrDrCrSrT)rOrCrrcs r8rTz_ApplicationRouter.__init__sA+{33333& r7rulect|}t|jtt frt |j|j|_|SrJ)rS process_rulertargetr.tuplerrC)rOrrcs r8rz_ApplicationRouter.process_rulesTww##D)) dkD%= 1 1 , $+DK r7rrE target_paramsc t|r)t|tr|jj||fi|St j||fi|SrJ)rrr:rCget_handler_delegaterSget_target_delegate)rOrrErrcs r8rz&_ApplicationRouter.get_target_delegate&ss 6?? z&.AA 84#8#0 +uww*67LLmLLLr7rJ)r3r4r5rar"rrTrrr r rgHTTPMessageDelegaterrzr{s@r8rr sHL  ( 19)1D       $MM$,$>MQTM (. /MMMMMMMMMMr7rc<eZdZdZ d+deedeedeeedde ddf d Z d,e j e jjdd d d ed eede jdedeedede defdZdededdfdZdedddfdZde ddfdZde ddfdZdejdeedfdZdejde ddfd Z d+dejd!eed"eeee fd#eee d$eeee fddf d%Z!d&ed'e defd(Z"d)eddfd*Z#dS)-rDa A collection of request handlers that make up a web application. Instances of this class are callable and can be passed directly to HTTPServer to serve the application:: application = web.Application([ (r"/", MainPageHandler), ]) http_server = httpserver.HTTPServer(application) http_server.listen(8080) The constructor for this class takes in a list of `~.routing.Rule` objects or tuples of values corresponding to the arguments of `~.routing.Rule` constructor: ``(matcher, target, [target_kwargs], [name])``, the values in square brackets being optional. The default matcher is `~.routing.PathMatches`, so ``(regexp, target)`` tuples can also be used instead of ``(PathMatches(regexp), target)``. A common routing target is a `RequestHandler` subclass, but you can also use lists of rules as a target, which create a nested routing configuration:: application = web.Application([ (HostMatches("example.com"), [ (r"/", MainPageHandler), (r"/feed", FeedHandler), ]), ]) In addition to this you can use nested `~.routing.Router` instances, `~.httputil.HTTPMessageDelegate` subclasses and callables as routing targets (see `~.routing` module docs for more information). When we receive requests, we iterate over the list in order and instantiate an instance of the first request class whose regexp matches the request path. The request class can be specified as either a class object or a (fully-qualified) name. A dictionary may be passed as the third element (``target_kwargs``) of the tuple, which will be used as keyword arguments to the handler's constructor and `~RequestHandler.initialize` method. This pattern is used for the `StaticFileHandler` in this example (note that a `StaticFileHandler` can be installed automatically with the static_path setting described below):: application = web.Application([ (r"/static/(.*)", web.StaticFileHandler, {"path": "/var/www"}), ]) We support virtual hosts with the `add_handlers` method, which takes in a host regular expression as the first argument:: application.add_handlers(r"www\.myhost\.com", [ (r"/article/([0-9]+)", ArticleHandler), ]) If there's no match for the current request's host, then ``default_host`` parameter value is matched against host regular expressions. .. warning:: Applications that do not use TLS may be vulnerable to :ref:`DNS rebinding ` attacks. This attack is especially relevant to applications that only listen on ``127.0.0.1`` or other private networks. Appropriate host patterns must be used (instead of the default of ``r'.*'``) to prevent this risk. The ``default_host`` argument must not be used in applications that may be vulnerable to DNS rebinding. You can serve static files by sending the ``static_path`` setting as a keyword argument. We will serve those files from the ``/static/`` URI (this is configurable with the ``static_url_prefix`` setting), and we will serve ``/favicon.ico`` and ``/robots.txt`` from the same directory. A custom subclass of `StaticFileHandler` can be specified with the ``static_handler_class`` setting. .. versionchanged:: 4.5 Integration with the new `tornado.routing` module. Nhandlers default_hostr0r1rirGc <|Qg|_|ds|dr|jtn||_||_||_t ttd|_ i|_ | |di| |di|jdr|jd}t|pg}|dd}|d t}|d i}||d <tj|d zd dfD]} |d| ||f|jdrl|jdd|jdd|jdd|jddt'|||_t'|t+t-|jg|_|jdrddlm} | dSdS)Ncompress_responsegzip)linkifyrTemplater]rYrstatic_url_prefix/static/rstatic_handler_argsrz(.*)z/(favicon\.ico)z/(robots\.txt)rr autoreloadTcompiled_template_cacheFstatic_hash_cacher)r)r0rrGZipContentEncodingrri_linkify_xsrf_form_htmlTemplateModuler]rY_load_ui_modules_load_ui_methodsr.rrrinsert setdefaultrwildcard_routerrrdefault_routerrrstart) rOrrr0rirrrrpatternrs r8rTzApplication.__init__s   DO||/00 M $ $\4 8 8 8 M $ $%> F F F M $ $%8% @ @ @ M $ $%6 = = =1$AA0 4 d&:;;<   =  \ * *  * * * * * *          r7F)familybacklogflags reuse_portportaddressrrrrrFc Vt|fi|}||||||||S)aStarts an HTTP server for this application on the given port. This is a convenience alias for creating an `.HTTPServer` object and calling its listen method. Keyword arguments not supported by `HTTPServer.listen <.TCPServer.listen>` are passed to the `.HTTPServer` constructor. For advanced uses (e.g. multi-process mode), do not use this method; create an `.HTTPServer` and call its `.TCPServer.bind`/`.TCPServer.start` methods directly. Note that after calling this method you still need to call ``IOLoop.current().start()`` (or run within ``asyncio.run``) to start the server. Returns the `.HTTPServer` object. .. versionchanged:: 4.3 Now returns the `.HTTPServer` object. .. versionchanged:: 6.2 Added support for new keyword arguments in `.TCPServer.listen`, including ``reuse_port``. )rrrrr)r listen) rOrrrrrrrFservers r8rzApplication.listensNBD++F++ !     r7 host_pattern host_handlersct|}t|t||}|jjd||j2|jt||j |fgdSdS)zAppends the given handlers to our handler list. Host patterns are processed sequentially in the order they were added. All matching patterns will be considered. rN) rrrrrrrr add_rulesrr)rOrr host_matcherrs r8 add_handlerszApplication.add_handlerss #<00 L"4T="I"IJJ !((T222   (  * *$T<+DEE}UV      ) (r7transform_classc:|j|dSrJ)r0r)rOrs r8 add_transformzApplication.add_transforms /////r7methodscttjr0|fdt DdStt rD]}||dSD]X\}}|ds>t|dr.|d |dkr ||j |<YdS)Nc2i|]}|t|Sr6r7)rLrMrs r8r7z0Application._load_ui_methods..%"P"P"Pa1ggq&9&9"P"P"Pr7r__call__r) rtypes ModuleTyperdirr.rZrrr=rY)rOrrNrfns ` r8rzApplication._load_ui_methodss gu/ 0 0 /  ! !"P"P"P"P3w<<"P"P"P Q Q Q Q Q  & & / ) )%%a(((( ) )$MMOO / /b,,/J///Q 4722,.DOD)  / /r7rRcttjr0|fdt DdStt rD]}||dStt sJD]5\}} t|tr ||j |<&#t$rY2wxYwdS)Nc2i|]}|t|Sr6r)rLrMrRs r8r7z0Application._load_ui_modules.. rr7) rrrrrr.rrZrrUr]r)rOrRrNrr~s ` r8rzApplication._load_ui_modules s gu/ 0 0   ! !"P"P"P"P3w<<"P"P"P Q Q Q Q Q  & &  ) )%%a(((( ) )gt,, , , ,$]]__   c!#x00403- D   s.C CCrEcT||}|SrJ) find_handlerexecute)rOrE dispatchers r8rzApplication.__call__ s)&&w// !!###r7_HandlerDelegatec @|j|}|td|S|jdr;|||jd|jdiS||t ddiS)Nrdefault_handler_classdefault_handler_argsrr)rrr+rirr ErrorHandler)rOrErFroutes r8rzApplication.find_handler s#0099  *E22 2 =  4 5 5 ,, 56 !!"8"==  ((,PS@TUUUr7 target_class target_kwargsr;r<c*t||||||S)aeReturns `~.httputil.HTTPMessageDelegate` that can serve a request for application and `RequestHandler` subclass. :arg httputil.HTTPServerRequest request: current HTTP request. :arg RequestHandler target_class: a `RequestHandler` class. :arg dict target_kwargs: keyword arguments for ``target_class`` constructor. :arg list path_args: positional arguments for ``target_class`` HTTP method that will be executed while handling a request (``get``, ``post`` or any other). :arg dict path_kwargs: keyword arguments for ``target_class`` HTTP method. )r)rOrErrr;r<s r8rz Application.get_handler_delegate0 s#$ '< ;   r7rrjcT|jj|g|R}||Std|z)a3Returns a URL path for handler named ``name`` The handler must be added to the application as a named `URLSpec`. Args will be substituted for capturing groups in the `URLSpec` regex. They will be converted to strings if necessary, encoded as utf8, and url-escaped. Nz%s not found in named urls)rrKeyError)rOrrj reversed_urls r8rzApplication.reverse_urlF sA7t*6tCdCCC  # 3d:;;;r7rcd|jvr|jd|dS|dkr tj}n1|dkr tj}n tj}d|jz}|d|||dS)a!Writes a completed HTTP request to the logs. By default writes to the python root logger. To change this behavior either subclass Application and override this method, or pass a function in the application settings dictionary as ``log_function``. log_functionNrrg@@z %d %s %.2fms) rirrinforSrrE request_timerK)rOr log_methodrs r8rGzApplication.log_requestU s T] * * )DM. )' 2 2 2 F     # % %#JJ    ! !C ' '#+JJ#)J < < > >>       $ $ & &       r7rrJ)$r3r4r5rar"rrr%r)r rTsocket AF_UNSPECrnetutil_DEFAULT_BACKLOGr( AddressFamilyrr rrrrrr rgr#rrr:rrrrrGr6r7r8rDrD1sPPh)-&*>B 669%6sm6T$'8"9:; 6  6  6666v"&* (.'77# ****#* $ *  *}*** ****XY4 0T2C-D00000 / / / / / /      $1$ )D/ "$$$$V1V=@V VVVV(37+/26   + >*  S#X/  DK(  d3:./       , <  d      r7rDcNeZdZdedejdeedee e e fdee e dee e e fddfd Zd eejejfd ejdeedfd Zd e deedfdZddZddZdeedfdZdS)rrCrE handler_classhandler_kwargsr;r<rGNc||_|j|_||_||_|pi|_|pg|_|pi|_g|_t|j|_ dSrJ) rCr_rErrr;r<chunksrur)rOrCrErrr;r<s r8rTz_HandlerDelegate.__init__p sj'!, *,2"b&," #;D> !tr7datac||jr|j|S|j|dSrJ)rrrErr)rOrs r8rEz_HandlerDelegate.data_received s>  # <--d33 3 K  t $ $ $4r7c|jrt|jjddSd|j|j_|dS)Nr7)rrrErvrErbodyrres r8r)z_HandlerDelegate.finish sS  #  .t|/H$ O O O O O!$ 5 5DL  LLNNNNNr7cX|jr|jdSd|_dSrJ)rrrarres r8raz$_HandlerDelegate.on_connection_close s2  #  L , , . . . . .DKKKr7cjjddsZtj5tjD]}| dddn #1swxYwYjjdds9jjdt}|j jj fij _ fdjj D}jrtj _t#jj j|gjRij}|dj jS)NrTrrc0g|]}|jSr6)rE)rLr|rOs r8rz,_HandlerDelegate.execute.. s#KKK!aa ooKKKr7c*|SrJ)r@)fs r8rz*_HandlerDelegate.execute.. s r7)rCrirr:rqrrrresetrrrErrr0rrrXr convert_yieldedrAr;r<add_done_callback)rOr{rr0futs` r8rz_HandlerDelegate.execute s(,,-FMM #5 # #,>EEGG##FLLNNNN# # # # # # # # # # # # # # # #(,,-@$GG )#'#3#<#@#@&(9$$  ! & & ( ( ()t)  dl  .2.A   LKKKt/?/JKKK  # 5,2HHDL )! !DL !* Rt~ R R RAQ R R   22333|,,s6A11A58A5r_)r3r4r5rDr rgr)r:r"rrr r%rrTr!RequestStartLinerrr#rrEr)rarr6r7r8rro sfP P+PN+ P !c3h0 P DK( Pd3:./P PPPP&(3X5OOP% )D/ " %HYt_,E #-)D/2#-#-#-#-#-#-r7rc eZdZdZ d dedeedededdf d Ze deefd Z deefd Z defd Z dS)rmaAn exception that will turn into an HTTP error response. Raising an `HTTPError` is a convenient alternative to calling `RequestHandler.send_error` since it automatically ends the current function. To customize the response sent with an `HTTPError`, override `RequestHandler.write_error`. :arg int status_code: HTTP status code. Must be listed in `httplib.responses ` unless the ``reason`` keyword argument is given. :arg str log_message: Message to be written to the log for this error (will not be shown to the user unless the `Application` is in debug mode). May contain ``%s``-style placeholders, which will be filled in with remaining positional parameters. :arg str reason: Keyword-only argument. The HTTP "reason" phrase to pass in the status line along with ``status_code``. Normally determined automatically from ``status_code``, but can be used to use a non-standard numeric code. rNrrTrjrFrGcf||_||_||_|dd|_dS)Nr)r _log_messagerjrr)rOrrTrjrFs r8rTzHTTPError.__init__ s4'' jj400 r7cb|jr"|js|jddS|jS)zF A backwards compatible way of accessing log_message. %z%%)rrjreplaceres r8rTzHTTPError.log_message s:   8TY 8$,,S$77 7  r7cJ|jr|jr|j|jzS|jSrJ)rrjres r8rRzHTTPError.get_message s/   1 1$ty0 0  r7cd|j|jp$tj|jdfz}|}|r |dz|zdzS|S)Nz HTTP %d: %srz ())rrr rrrR)rOr0rTs r8__str__zHTTPError.__str__ sk   K N8-11$2BINN#  &&((  T>K/#5 5Nr7)rN) r3r4r5rar(r"rr rTrhrTrRrr6r7r8rmrm s0%) 1 1 1c] 1 1  1  1 1 1 1!Xc]!!!X!!Xc]!!!!       r7rmceZdZdZdS)rMaAn exception that ends the request without producing an error response. When `Finish` is raised in a `RequestHandler`, the request will end (calling `RequestHandler.finish` if it hasn't already been called), but the error-handling methods (including `RequestHandler.write_error`) will not be called. If `Finish()` was created with no arguments, the pending response will be sent as-is. If `Finish()` was given an argument, that argument will be passed to `RequestHandler.finish()`. This can be a more convenient way to implement custom error pages than overriding ``write_error`` (especially in library code):: if self.current_user is None: self.set_status(401) self.set_header('WWW-Authenticate', 'Basic realm="something"') raise Finish() .. versionchanged:: 4.3 Arguments passed to ``Finish()`` will be passed on to `RequestHandler.finish`. N)r3r4r5rar6r7r8rMrM s0 Dr7rMc,eZdZdZdeddffd ZxZS)rzException raised by `RequestHandler.get_argument`. This is a subclass of `HTTPError`, so if it is uncaught a 400 response code will be used instead of 500 (and a stack trace will not be logged). .. versionadded:: 3.1 arg_namerGNc`tdd|z||_dS)NrzMissing argument %s)rSrTr)rOrrcs r8rTzMissingArgumentError.__init__+ s. 3h>???  r7)r3r4r5rarrTrzr{s@r8rr" sU!!!!!!!!!!!!r7rc2eZdZdZdeddfdZddZddZdS) rzBGenerates an error response with ``status_code`` for all requests.rrGNc0||dSrJ)r)rOrs r8rbzErrorHandler.initialize3 s  $$$$$r7c*t|jrJ)rmrres r8rqzErrorHandler.prepare6 s)***r7cdSrJr6res r8rzErrorHandler.check_xsrf_cookie9 rr7r_)r3r4r5rar(rbrqrr6r7r8rr0 sdLL%c%d%%%%++++      r7rc<eZdZdZd dededdfdZded eddfd ZdS) RedirectHandlera_Redirects the client to the given URL for all GET requests. You should provide the keyword argument ``url`` to the handler, e.g.:: application = web.Application([ (r"/oldpath", web.RedirectHandler, {"url": "/newpath"}), ]) `RedirectHandler` supports regular expression substitutions. E.g., to swap the first and second parts of a path while preserving the remainder:: application = web.Application([ (r"/(.*?)/(.*?)/(.*)", web.RedirectHandler, {"url": "/{1}/{0}/{2}"}), ]) The final URL is formatted with `str.format` and the substrings that match the capturing groups. In the above example, a request to "/a/b/c" would be formatted like:: str.format("/{1}/{0}/{2}", "a", "b", "c") # -> "/b/a/c" Use Python's :ref:`format string syntax ` to customize how values are substituted. .. versionchanged:: 4.5 Added support for substitutions into the destination URL. .. versionchanged:: 5.0 If any query arguments are present, they will be copied to the destination URL. Trr$rGNc"||_||_dSrJ)_url _permanent)rOrr$s r8rbzRedirectHandler.initializea s #r7rjrFc|jj|i|}|jjr>t j|t t j|jj}|||j dS)Nr) r#rrErr url_concatr. qs_to_qslr*r$)rOrjrFto_urls r8rzRedirectHandler.gete sx!!42622 < ' (X' (DEEFFF f 88888r7r`) r3r4r5rarrrbr rr6r7r8r!r!@ sv@$$c$d$d$$$$999999999r7r!c eZdZdZdZiZejZd)de de e ddfdZ e d*dZ de dedfd Zd+de d eddfd Zde e fd Zd*dZdefdZe de de de fdZde de de e fdZe d,de de ede edeeddffdZe de de fdZdejfdZdefdZde e j fdZ!de fdZ"de ddfdZ#de de e j de defd Z$e d+d!e%e e&fde d"ede fd#Z'd$e de fd%Z(e d!e%e e&fde de e fd&Z)e d'e de e fd(Z*dS)-raM A simple handler that can serve static content from a directory. A `StaticFileHandler` is configured automatically if you pass the ``static_path`` keyword argument to `Application`. This handler can be customized with the ``static_url_prefix``, ``static_handler_class``, and ``static_handler_args`` settings. To map an additional path to this handler for a static data directory you would add a line to your application like:: application = web.Application([ (r"/content/(.*)", web.StaticFileHandler, {"path": "/var/www"}), ]) The handler constructor requires a ``path`` argument, which specifies the local root directory of the content to be served. Note that a capture group in the regex is required to parse the value for the ``path`` argument to the get() method (different than the constructor argument above); see `URLSpec` for details. To serve a file like ``index.html`` automatically when a directory is requested, set ``static_handler_args=dict(default_filename="index.html")`` in your application settings, or add ``default_filename`` as an initializer argument for your ``StaticFileHandler``. To maximize the effectiveness of browser caching, this class supports versioned urls (by default using the argument ``?v=``). If a version is given, we instruct the browser to cache this file indefinitely. `make_static_url` (also available as `RequestHandler.static_url`) can be used to construct a versioned url. This handler is intended primarily for use in development and light-duty file serving; for heavy traffic it will be more efficient to use a dedicated static file server (such as nginx or Apache). We support the HTTP ``Accept-Ranges`` mechanism to return partial content (because some browsers require this functionality to be present to seek in HTML5 audio or video). **Subclassing notes** This class is designed to be extensible by subclassing, but because of the way static urls are generated with class methods rather than instance methods, the inheritance patterns are somewhat unusual. Be sure to use the ``@classmethod`` decorator when overriding a class method. Instance methods may use the attributes ``self.path`` ``self.absolute_path``, and ``self.modified``. Subclasses should only override methods discussed in this section; overriding other methods is error-prone. Overriding ``StaticFileHandler.get`` is particularly problematic due to the tight coupling with ``compute_etag`` and other methods. To change the way static urls are generated (e.g. to match the behavior of another server or CDN), override `make_static_url`, `parse_url_path`, `get_cache_time`, and/or `get_version`. To replace all interaction with the filesystem (e.g. to serve static content from a database), override `get_content`, `get_content_size`, `get_modified_time`, `get_absolute_path`, and `validate_absolute_path`. .. versionchanged:: 3.1 Many of the methods for subclasses were added in Tornado 3.1. iNrdefault_filenamerGc"||_||_dSrJ)rootr*)rOrr*s r8rbzStaticFileHandler.initialize s 0r7cT|j5i|_ddddS#1swxYwYdSrJ)_lock_static_hashesrs r8r zStaticFileHandler.reset sv Y $ $!#C  $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $s !!c0||dS)NF) include_body)rrOrs r8rizStaticFileHandler.head sxx5x111r7Tr1cHK|||_~||j|j}||j||_|jdS||_|| r| ddSd}|j j d}|rtj|}|}|r|\}}||dkr ||z }|dkrd}|||ks|||ks|dkrF| d|dd|dd|dS|||kr|}||p||pdz kr?| d |dtj|||ndx}}||||z } n||} n |||z } n|} |d | |r||j||} t)| t*r| g} | D]I} || |d{V3#t0j$rYdSwxYwdS|j jd ksJdS) NrRangerir}rz Content-Rangezbytes */rr<)parse_url_pathrget_absolute_pathr,validate_absolute_path absolute_pathget_modified_timemodified set_headersshould_return_304rrErrr _parse_request_rangeget_content_sizer_get_content_range get_contentrrr1rr ryr) rOrr1r9 request_range range_headersizerendrcontentr+s r8rzStaticFileHandler.get s2''-- ..ty$)DD !88MRR   % F..00    ! ! # #  OOC F |+//88  H%9,GGM$$&& " &JE3 UQYY 199E!d]]s5C<<$$$ ===1BD1B1BCCC3::  t 333$$$#X%@T%R%R EC   5[NN _ NN  !E\NN!N (.999  1&&t'95#FFG'5)) $")   JJu%%%**,,&&&&&&&&1FFF   <&&000000s/I77J  J c\|jJ||j}|sdSd|dS)aSets the ``Etag`` header based on static url version. This allows efficient ``If-None-Match`` checks against cached versions, and sends the correct ``Etag`` for a partial response (i.e. the same ``Etag`` as the full file). .. versionadded:: 3.1 N")r9_get_cached_version)rO version_hashs r8r#zStaticFileHandler.compute_etag sG!---//0BCC  4"<""""r7ct|dd||j|d|j|}|r|d|||j|j|}|dkr~|dt jt jj t j |z|d d t|z| |jdS) z]Sets the content and caching headers on the response. .. versionadded:: 3.1 z Accept-RangesrNz Last-Modifiedr}rExpires)secondsz Cache-Controlzmax-age=) rrr;get_content_typeget_cache_timerrrrrrrset_extra_headers)rO content_type cache_times r8r<zStaticFileHandler.set_headers& s 111  = $ OOOT] ; ; ;,,..  : OONL 9 9 9((DM<PP >> OO!%%h&7&;<<$Z8889    OOOZ#j//-I J J J ty)))))r7c|jjdr|S|jjd}|t tj|}n#t$rYdSwxYw|j%| tj j }|j J||j krdSdS)zgReturns True if the headers indicate that we should return 304. .. versionadded:: 3.1 r'zIf-Modified-SinceNF)tzinfoT)rErrremailutilsparsedate_to_datetimerrTrrrrr;)rO ims_valueif_sinces r8r=z#StaticFileHandler.should_return_304@ s <  # #O 4 4 ,))++ +L(,,-@AA    ;<'>x'H'HF8$$ ,,,M"A8LLL'+F8$$$,**X&&C                         ts1 B .B $AB AB  BBrJr_r`)NN)+r3r4r5rar}r/rcrdr.rr"rb classmethodr r#rirrr#r<r=r7r8r(r(rrArkrorrror?rr:rNrPrOrr rr6rrIr6r7r8rrp s@@D%MN IN  E11s1hsm1t1111$$$[$2242222Q1Q1cQ1Q1Q1Q1Q1Q1f #hsm # # # #****442S[ 939s9xPS}9999vMQ$$$"*3-$=Ec]$ 5$$ %$$$[$L"#"#"""[""!r~!!!! ## # # # #8H,=#>4.#....* c d     J J#+H,=#> JKN J  J J J JJN))CH~)-0)CG) )))[)> s s    14S>11#111[1  3 8C=   [   r7rcFeZdZdZdeejgdfddfdZddZdS)FallbackHandleraNA `RequestHandler` that wraps another HTTP server callback. The fallback is a callable object that accepts an `~.httputil.HTTPServerRequest`, such as an `Application` or `tornado.wsgi.WSGIContainer`. This is most useful to use both Tornado ``RequestHandlers`` and WSGI in the same server. Typical usage:: wsgi_app = tornado.wsgi.WSGIContainer( django.core.handlers.wsgi.WSGIHandler()) application = tornado.web.Application([ (r"/foo", FooHandler), (r".*", FallbackHandler, dict(fallback=wsgi_app)), ]) fallbackNrGc||_dSrJ)r)rOrs r8rbzFallbackHandler.initialize s! r7cp||jd|_|dS)NT)rrErVrsres r8rqzFallbackHandler.prepare s3 dl### r7r_) r3r4r5rar&r rgrbrqr6r7r8rr sf ! (" image/svg+xmlapplication/xmlapplication/jsonapplication/atom+xmlapplication/xhtml+xmlapplication/javascriptapplication/x-javascriptirErGNcJd|jddv|_dS)NrAccept-Encodingr )rr _gzippingrs r8rTzGZipContentEncoding.__init__ s%7?#6#67H"#M#MMr7ctypec>|dp||jvS)Nztext/)r CONTENT_TYPES)rOrs r8_compressible_typez&GZipContentEncoding._compressible_type s#((GET5G,GGr7rrr+rc@d|vr|dxxdz cc<nd|d<|jrut|dddd}||o| pt ||jkod|v|_|jr}d |d<t|_tj d |j|j |_ | ||}d |vr%|r tt ||d <n|d =|||fS) NVaryz, Accept-Encodingrr}r rrr]rw)modefileobj compresslevelr)rrrrrr MIN_LENGTHr _gzip_valuerGzipFile GZIP_LEVEL _gzip_filerr)rOrrr+rrs r8rz)GZipContentEncoding.transform_first_chunk sM W   FOOO2 2OOOO/GFO > W[[<<==CCCHHKE''..8"]Cc%jjDO&C8'w6 N > 2*0G& '&yyD "m$"2$/DO(( ::E7** 203CJJG,-- 01GU**r7cL|jr|j||r|jn|j|j}|jd|jd|S)Nr) rrr1closerrgetvaluetruncaterdrs r8rz#GZipContentEncoding.transform_chunk s > % O ! !% ( ( ( (%%''''%%'''$--//E   % %a ( ( (   ! !! $ $ $ r7)r3r4r5rarrrr rgrTrrrr(rrr$rrr6r7r8rr sMJ JN :NtNNNNHHHHHH#+#+%#+ #+  #+ sH(%/ 0 #+#+#+#+J U t       r7rctjdtdttdffd }|S)aDecorate methods with this to require that the user be logged in. If the user is not logged in, they will be redirected to the configured `login url `. If you configure a login url with a query parameter, Tornado will assume you know what you're doing and use it as-is. If not, it will add a `next` parameter so the login page knows where to send you once you're logged in. rOrGNc|js|jjdvr|}d|vr{tj|jr|j}n|jj J|jj }|dtt|zz }| |dStd|g|Ri|S)Nrr)nextr )rrErrurllibparseurlsplitschemefull_urlrIrrr*rm)rOrjrFrnext_urlrs r8rzauthenticated..wrapper s !|"o55((**c>>|,,S1184#'<#8#8#:#:#|/;;;#'<#334X+>+>+>!?!???C c"""tC.. vd,T,,,V,,,r7rrs` r8 authenticatedr sX_V-- )D/ "------& Nr7ceZdZdZdeddfdZedefdZdedede e e ffd Z de e fd Zde ee fd Zde e fd Zde ee fd Zde e fdZde e fdZde dede fdZdS)rUa2A re-usable, modular UI unit on a page. UI modules often execute additional queries, and they can include additional CSS and JavaScript that will be included in the output page, which is automatically inserted on page render. Subclasses of UIModule must override the `render` method. rrGNc\||_|j|_|j|_|j|_dSrJ)rrEr[r )rOrs r8rTzUIModule.__init__> s(  *n r7c|jjSrJ)rrres r8rzUIModule.current_userD s |((r7rjrFct)z6Override in subclasses to return this module's output.rCrns r8rWzUIModule.renderH s!###r7cdS)zJOverride to return a JavaScript string to be embedded in the page.Nr6res r8r8zUIModule.embedded_javascriptL tr7cdS)zOverride to return a list of JavaScript files needed by this module. If the return values are relative paths, they will be passed to `RequestHandler.static_url`; otherwise they will be used as-is. Nr6res r8r9zUIModule.javascript_filesQ tr7cdS)zJOverride to return a CSS string that will be embedded in the page.Nr6res r8r;zUIModule.embedded_cssY rr7cdS)zOverride to returns a list of CSS files required by this module. If the return values are relative paths, they will be passed to `RequestHandler.static_url`; otherwise they will be used as-is. Nr6res r8r<zUIModule.css_files^ rr7cdS)z[Override to return an HTML string that will be put in the element. Nr6res r8r=zUIModule.html_headf tr7cdS)zfOverride to return an HTML string that will be put at the end of the element. Nr6res r8r>zUIModule.html_bodyl rr7rc (|jj|fi|S)z.Renders a template and returns it as a string.)rr6)rOrrFs r8r6zUIModule.render_stringr s)t|)$99&999r7)r3r4r5rar:rTrhr rr!rrrWr"r8r'r9r;r<r=r>r6r6r7r8rUrU4 s%%4%%%% )c)))X)$C$3$5e3D$$$$Xc] (8C="9hsm 8HSM28C= 8C= :#::::::::r7rUc"eZdZdededefdZdS)rtextrFrGc &tj|fi|SrJ)rr)rOrrFs r8rWz_linkify.renderx s~d--f---r7N)r3r4r5rr rWr6r7r8rrw s=.3.#.#......r7rceZdZdefdZdS)rrGc4|jSrJ)rrres r8rWz_xsrf_form_html.render} s|**,,,r7N)r3r4r5rrWr6r7r8rr| s/-------r7rceZdZdZdeddffd ZdededefdZ d ede efd Z defd Z de efd Z defd Zde efdZdefdZdefdZxZS)raUIModule that simply renders the given template. {% module Template("foo.html") %} is similar to {% include "foo.html" %}, but the module version gets its own namespace (with kwargs passed to Template()) instead of inheriting the outer template's namespace. Templates rendered through this module also get access to UIModule's automatic JavaScript/CSS features. Simply call set_resources inside the template and give it keyword arguments corresponding to the methods on UIModule: {{ set_resources(js_files=static_url("my.js")) }} Note that these resources are output once per template file, not once per instantiation of the template, so they must not depend on any arguments to the template. rrGNcft|g|_i|_dSrJ)rSrT_resource_list_resource_dict)rOrrcs r8rTzTemplateModule.__init__ s1 !!!  r7rrFc Bdtffd }jfd|i|S)NrGcjvr%j||j<n j|krtddS)NzCset_resources called with different resources for the same templater )rrrr)rFrrOs r8 set_resourcesz,TemplateModule.render..set_resources si4...#**6222,2#D))&t,66$:2r7r)rr6)rOrrFrs`` r8rWzTemplateModule.render sP s       "t!$NNmNvNNNr7rc*fd|jDS)Nc30K|]}|v|VdSrJr6)rLrrs r8rPz0TemplateModule._get_resources.. s+@@1saxx#xxxx@@r7)rrOrs `r8_get_resourceszTemplateModule._get_resources s @@@@ 3@@@@r7cRd|dS)N r8rErres r8r8z"TemplateModule.embedded_javascript s#yy,,-BCCDDDr7cg}|dD]I}t|ttfr||4||J|S)Nr9rrrrrr:rOr@rs r8r9zTemplateModule.javascript_files sk$$%788 ! !A!lE233 ! a     a     r7cRd|dS)Nrr;rres r8r;zTemplateModule.embedded_css s"yy,,^<<===r7cg}|dD]I}t|ttfr||4||J|S)Nr<rrs r8r<zTemplateModule.css_files sj$$[11 ! !A!lE233 ! a     a     r7cRd|dS)Nr r=rres r8r=zTemplateModule.html_head "wwt**;77888r7cRd|dS)Nr r>rres r8r>zTemplateModule.html_body rr7)r3r4r5rar:rTrr rrWr'rr8r9r;r<r=r>rzr{s@r8rr s`  !!4!!!!!! O3 O# O% O O O OA#A(3-AAAAESEEEE(3->c>>>>8C=9399999399999999r7rceZdZdZdedeeeefddfdZ dede deffd Z dede deffd Z dS) r\zALazy namespace which creates UIModule proxies bound to a handler.rr]rGNc"||_||_dSrJ)rr])rOrr]s r8rTz_UIModuleNamespace.__init__ s $r7r.cN|j||j|SrJ)rrYr]rs r8 __getitem__z_UIModuleNamespace.__getitem__ s!|&&sDOC,@AAAr7cp ||S#t$r!}tt|d}~wwxYwrJ)rAttributeErrorr)rOrr?s r8 __getattr__z_UIModuleNamespace.__getattr__ sD )9  ) ) ) Q(( ( )s 505) r3r4r5rar:rrr)rUrTr&rrr6r7r8r\r\ sKK%%%37T(^8K3L% %%%% BsBxS'9BBBB)s)xS'9))))))r7r\rrrrclockrc |t}| tj}ttt |}t jt|}|dkrCt|trJt||||}d |||g}|S|dkrdtttfdtfd}d d|t|pd||||||d g} t|tr$| Jd |dks Jd ||}t|| }| |zStd |z) Nr/rr0rrGc`tdt|zt|zS)Nz%d:)rr)rs r8 format_fieldz)create_signed_value..format_field s%A''$q''1 1r7rrr7z2Key version must be set when sign key dict is usedz2Version must be at least 2 for key version supportzUnsupported version %d)DEFAULT_SIGNED_VALUE_VERSIONrrrr(base64 b64encoderr_create_signature_v1rEr!r_create_signature_v2r) rrrrrrr signaturerto_signs r8rr s. } SUUWW&&''I  T%[[ ) )E!||fd+++++(uiHH  5)Y788 A 2E#u*- 2% 2 2 2 2)) S!12233 Y'' T"" U##      fd # # )''C(''a<< t|d}|dkrd}n#t$rd}YnwxYw|S)Nr/i)rrr(rr)rrNrs r8 _get_versionrsw !&&u--Ay !''!**ooG}}   GGG  Ns*A AArrrcJ| tj}|t}|dkrtd|z|sdSt|}t |}||krdS|dkr*t |t rJt|||||S|dkrt|||||SdS)Nr0zUnsupported min_version %dr/) r DEFAULT_SIGNED_VALUE_MIN_VERSIONrrrrr_decode_signed_value_v1_decode_signed_value_v2)rrrrrrrs r8rr5s } 6 Q5 CDDD t KKE5!!Gt!||fd+++++&vtUL%PPP A&vtUL%PPPtr7ct|d}t|dkrdSt|||d|d}t j|d|st jd|dSt|d}|||dzz krt jd|dS||d zkrt jd |dS|d d rt jd |dS tj |dS#t$rYdSwxYw) Nrrr/r0zInvalid cookie signature %rQzExpired cookie %ri(z1Cookie timestamp in future; possible tampering %r0zTampered cookie %r) rrrrr r rrSr(rr b64decoder)rrrrrrrrs r8rrTs] KK  d # #E 5zzQt$VT58U1XFFI  uQx 3 35u===tE!H I5577\E1111+U333t5577Z''' KUSSSt Qx4  ,e444ta))) tts#D== E  E cdtdtttffd}|dd}||\}}||\}}||\}}||\}}t|||||fS)NrrGc|d\}}}t|}|d|}|||dzdkrtd||dzd}||fS)N:r/rzmalformed v2 signed value field) partitionr(r)rlengthrrestrM field_values r8_consume_fieldz)_decode_fields_v2.._consume_fieldxsu++d++4 KK2A2h  AE ?d " ">?? ?AEGG}D  r7r0)rr$r()rr r rr name_field value_field passed_sigs r8_decode_fields_v2rws !% !E%,$7 ! ! ! ! 9D&t,,K$nT**OIt%~d++J,nT22K {  Y K KKr7c t|\}}}}} n#t$rYdSwxYw|dt|  } t|tr ||}n#t $rYdSwxYwt || } tj| | sdS|t|krdSt|} | ||dzz krdS tj |S#t$rYdSwxYw)Nr)rrrrrrrr r rr(rrr) rrrrrrtimestamp_bytesr rr signed_string expected_sigrs r8rrsP  e $ $      J tt,S__,,-M&$ K(FF   44 ( >>L  z< 8 8tT$ZZtO$$I5577\E1111t ,,, tts0 &&A A.-A.C'' C54C5ct|}t|}|dkrdS t|\}}}}}n#t$rYdSwxYw|S)Nr0)rrrr)rrrrs r8r"r"sq KKE5!!G{{t"3E":": Q1aa tt s> A  A rctjt|tj}|D]$}|t|%t|SN) digestmod)r newrrr rvr!)rrhashrs r8rrs` 8DLLGL 9 9 9D   DJJ   ! !!r7rctjt|tj}|t|t|Sr)r rrrsha256rvr!)rrrs r8rrsN 8DLLGN ; ; ;DKKQ   ! !!r7rc:tfddDS)Nc3BK|]}|VdSrJr+)rLr)rs r8rPzis_absolute..s/DDatq!!DDDDDDr7)rzhttp:zhttps:)any)rs`r8r_r_s' DDDD+CDDD D DDr7r)rNN)rarrr email.utilsrUrrrr  http.cookiesrinspectriorrwros.pathrorrrjrcrrrrr urllib.parserrtornado.concurrentrrrr tornado.httpserverr r r r tornado.logrrrrtornado.escaperrtornado.routingrrrrrrrr tornado.utilrrrrtypingrr r!r"r#r$r%r&r'r(r)r*r+r,r- TYPE_CHECKINGr.rr(rror_CookieSecretTypes"MIN_SUPPORTED_SIGNED_VALUE_VERSION"MAX_SUPPORTED_SIGNED_VALUE_VERSIONrrr2rpr:r|rrrurrrrDrrrrmrMrrr!rrr1rrrUrrrr\rrrerrrrrrr"rrr_r6r7r8r1s  ))V      """"""IIIIIIII))))))4444444444))))))))                    CBBBBBBBBB      UL#w/?ARRS 3tCH~tCJ7GGH&'"&'" !$%         ! "" x!x!x!x!x!x!x!x!v7g3>JJJT"564@S;T6$$~"6$4$$$$  S(9T?33 4 c8IdO,,-: S(9T?33 4 c8IdO,,-6$M$M$M$M$M-$M$M$MN{ { { { { "{ { { | W-W-W-W-W-x3W-W-W-t::::: :::z     Y   8 ! ! ! ! !9 ! ! !      >    -9-9-9-9-9n-9-9-9`OOOOOOOOdn80VVVVV/VVVr" S(9T?33 4" c8IdO,,-""""J@:@:@:@:@:@:@:@:F.....x... -----h--- D9D9D9D9D9XD9D9D9N))))))))."+/!% ;=;= ;= ;= e ;=c] ;= HRY' ( ;= # ;= ;=;=;=;=@&2:&?@@#6+/!%    sE! "  HRY' (  # e_>  #u*        BI   e_    FLULuS%u-L'MLLLL(% % % % % BI  % e_ %%%%P U3:%6 8C=    "sEz!2"E#u*