+ ûwÖiA ãóZ€Rt^RIt^RIHtHtHt^RIHtHtRRlt RRlt RR lt R#) zKUtilities for OAuth 2.0 Resource Indicators (RFC 8707) and PKCE (RFC 7636).N)ÚurlparseÚurlsplitÚ urlunsplit)ÚAnyUrlÚHttpUrlcó\€V^8„dQhR\\,\,R\/#)éÚurlÚreturn)Ústrrr)Úformats"ÚI/home/ubuntu/.local/lib/python3.14/site-packages/mcp/shared/auth_utils.pyÚ __annotate__r s#€÷ñ¤c¬G¥m´fÕ&<ðÄñócóÌ€\V4p\V4p\VPVPP 4VP P 4RR74pV#)a(Convert server URL to canonical resource URL per RFC 8707. RFC 8707 section 2 states that resource URIs "MUST NOT include a fragment component". Returns absolute URI with lowercase scheme/host for canonical form. Args: url: Server URL to convert Returns: Canonical resource URL string Ú)ÚschemeÚnetlocÚfragment)r rrÚ_replacerÚlowerr)r Úurl_strÚparsedÚ canonicals& r Úresource_url_from_server_urlr sV€ô#‹h€GôgÓ €Fܘ6Ÿ?™?°&·-±-×2EÑ2EÓ2GÐPV×P]ÑP]×PcÑPcÓPeÐpr˜?ÓsÓt€Ià Ðrcó<€V^8„dQhR\R\R\/#)rÚrequested_resourceÚconfigured_resourcer )r Úbool)r s"r rrs"€÷"6ñ"6¬sð"6Ìð"6ÔQUñ"6rcóà€\V4p\V4pVPP4VPP48wg8VPP4VPP48wdR#VPpVPpVP R4'g VR, pVP R4'g VR, pVP V4#)aüCheck if a requested resource URL matches a configured resource URL. A requested resource matches if it has the same scheme, domain, port, and its path starts with the configured resource's path. This allows hierarchical matching where a token for a parent resource can be used for child resources. Args: requested_resource: The resource URL being requested configured_resource: The resource URL that has been configured Returns: True if the requested resource matches the configured resource FÚ/)rrrrÚpathÚendswithÚ startswith)rrÚ requestedÚ configuredÚrequested_pathÚconfigured_paths&& r Úcheck_resource_allowedr(sÈ€ô Ð+Ó,€IÜÐ-Ó.€Jð×Ñ×ÑÓ :×#4Ñ#4×#:Ñ#:Ó#<Ô<À ×@PÑ@P×@VÑ@VÓ@XÐ\f×\mÑ\m×\sÑ\sÓ\uÔ@uÙð—^‘^€NØ —o‘o€OØ × "Ñ " 3× 'Ò 'ؘ#ÕˆØ × #Ñ # C× (Ò (ؘ3Õˆð × $Ñ $ _Ó 5Ð5rcób€V^8„dQhR\\,R,R\R,/#)rÚ expires_inNr )Úintr Úfloat)r s"r rrDs'€÷ )ñ )¤s¬S¥y°4Õ'7ð )¼EÀD½Lñ )rcóX€VfR#\P!4\V4,#)zâCalculate token expiry timestamp from expires_in seconds. Args: expires_in: Seconds until token expiration (may be string from some servers) Returns: Unix timestamp when token expires, or None if no expiry specified N)Útimer+)r*s&r Úcalculate_token_expiryr/Ds"€ðÒÙä 9Š9‹;œ˜Z›Õ (Ð(r) Ú__doc__r.Ú urllib.parserrrÚpydanticrrrr(r/©rr Úr4s$ðÙQã ß7Ñ7ç$õõ,"6÷J )r