ڊjfdZddlZddlmZdZdZdZdZdZd Z d Z d Z d Z d Z dZddZdZdZy)a$Cleartext HTTP/2 (h2c) negotiation, shared by every worker. The I/O differs per worker: gthread and gevent read from a socket, the ASGI worker is handed bytes by asyncio. The decisions do not. Keeping the pure, I/O-free part here stops the blocking and push-based paths from drifting apart. N)_ip_in_allow_listsPRI * HTTP/2.0 SM g?matchpartialmismatchct|ttk\r!|jtrtStStj|rt StS)aCompare buffered bytes against the connection preface. Returns ``MATCH`` when the whole preface is present, ``PARTIAL`` when the bytes so far are a prefix of it and more could still arrive, and ``MISMATCH`` as soon as a byte diverges. Never blocks and never reads. )len H2C_PREFACE startswithMATCHMISMATCHPARTIAL)bufs _/var/www/io.vulcan-creative.com/venv/lib/python3.12/site-packages/gunicorn/http2/negotiation.py preface_matchrsC 3x3{##{3uAA!,,S17?x?ctt|tsyt|d|j|j S)a;Whether this peer may negotiate cleartext HTTP/2. Reuses the ``forwarded_allow_ips`` trust list: h2c is only ever expected from the TLS-terminating proxy in front of gunicorn, which is the same peer already trusted to set forwarded headers. Unix socket peers are trusted, matching that policy. Tr) isinstancetuplerforwarded_allow_ipsforwarded_allow_networkscfg peer_addrs rpeer_trusted_for_h2cr)s8 i ' ! c--s/K/K/M rc`d|jvxrt|dddk(xr |j S)z;Whether cleartext HTTP/2 could apply to this server at all.h2protocolhttp)http_protocolsgetattris_sslrs r_h2c_availabler#8s; """  CV , 6  NrcR|jdvryt|xr t||S)zWhether to sniff for the connection preface from this peer. Deliberately separate from :func:`upgrade_allowed`: enabling one mechanism must not quietly enable the other. )prior-knowledgebothFhttp2_cleartextr#rrs rprior_knowledge_allowedr)As.  "== #  G#7Y#GGrc |jdk(S)aaWhether a trusted peer failing to send the preface is a 400. Only when prior knowledge is the sole mechanism: such a peer is expected to speak HTTP/2 and a silent downgrade would hide a misconfiguration. When upgrade is also enabled, an HTTP/1 request is not a mistake, it is how an upgrade begins, so it has to be allowed through. r%)r(r"s rmismatch_is_errorr+Ls   "3 33rcR|jdvryt|xr t||S)z=Whether to honour an ``Upgrade: h2c`` request from this peer.)upgrader&Fr'rs rupgrade_allowedr.Ws, "55 #  G#7Y#GGrc|t}d}tj|z}|j} |tjz }|dkrd|f|j |S|j | |j t tt |z }|sd|f|j |S||z }t|}|turd|f|j |S|turd|f|j |S#ttf$rd|fcY|j |SwxYw#|j |wxYw)a/Read up to the length of the preface from a blocking socket. Returns ``(matched, consumed_bytes)``. The caller owns the consumed bytes and must hand them to whichever protocol wins, since they have already left the socket. The timeout is an absolute budget for the whole preface, checked before every read. ``socket.settimeout()`` alone would bound each call instead, which lets a client trickle one byte per interval and hold the connection (and, on gthread, a pool slot) for as many intervals as the preface has bytes. rTrF) H2C_PREFACE_TIMEOUTtime monotonic gettimeout settimeoutrecvrr TimeoutErrorOSErrorrr r )socktimeoutrdeadlineoriginal remainingchunkstates rread_preface_blockingr?^s>% C~~')H H" 4>>#33IA~cz ! OOI & " #k"2SX"=>cz ! 5LC!#&E~Sy ! cz !%!'* "cz! ! " !sG D-%D-7*D!D-8D-% D-D-D*D-)D**D--EsGHTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: h2c cXd}g}d}|jD]d\}}|dk(r|jj}*|dk(r |j|jO|dk(sU|j}f|dk7ryt |dk7ryd|vsd |vry|d j d S) aNReturn the HTTP2-Settings payload if this request asks for h2c. RFC 7540 section 3.2: the request must name ``h2c`` in Upgrade and carry exactly one HTTP2-Settings header, itself named in Connection. Returns None when the request is not a well-formed upgrade attempt, so the caller simply carries on with HTTP/1. NUPGRADEzHTTP2-SETTINGS CONNECTIONh2czhttp2-settingsr-rzlatin-1)headersstriplowerappendrencode)reqr-settings connectionnamevalues rupgrade_settingsrPsGHJ{{' e 9 kkm))+G % % OOEKKM * \ !J '% 8}z)Yj-H A;  i ((r)N)__doc__r1gunicorn.http.messagerr r0r r r rrr#r)r+r.r? UPGRADE_101rPrrrUsf  32    @ H4H&"V  )r