o *i @sdZddlZddlmZmZmZddlmZmZde eBeBde fddZ d e d e de fd d Z d e e BdBdedBfddZdS)zKUtilities for OAuth 2.0 Resource Indicators (RFC 8707) and PKCE (RFC 7636).N)urlparseurlsplit urlunsplit)AnyUrlHttpUrlurlreturncCs4t|}t|}t|j|j|jdd}|S)aDConvert server URL to canonical resource URL per RFC 8707. RFC 8707 section 2 states that resource URIs "MUST NOT include a fragment component". Returns absolute URI with lowercase scheme/host for canonical form. Args: url: Server URL to convert Returns: Canonical resource URL string )schemenetlocfragment)strrr_replacer lowerr )rurl_strparsed canonicalrR/home/ubuntu/veenaModal/venv/lib/python3.10/site-packages/mcp/shared/auth_utils.pyresource_url_from_server_url s  rrequested_resourceconfigured_resourcecCst|}t|}|j|jks|j|jkrdS|j}|j}t|t|kr.dS|ds7|d7}|ds@|d7}||S)a$Check if a requested resource URL matches a configured resource URL. A requested resource matches if it has the same scheme, domain, port, and its path starts with the configured resource's path. This allows hierarchical matching where a token for a parent resource can be used for child resources. Args: requested_resource: The resource URL being requested configured_resource: The resource URL that has been configured Returns: True if the requested resource matches the configured resource F/)rr rr pathlenendswith startswith)rr requested configuredrequested_pathconfigured_pathrrrcheck_resource_alloweds(   r! expires_incCs|durdStt|S)zCalculate token expiry timestamp from expires_in seconds. Args: expires_in: Seconds until token expiration (may be string from some servers) Returns: Unix timestamp when token expires, or None if no expiry specified N)timeint)r"rrrcalculate_token_expiryIs r%)__doc__r# urllib.parserrrpydanticrrr rboolr!r$floatr%rrrrs"*