]jglSSKJr SSKrSSKJrJrJrJr "SS5rS Sjr S Sjr "SS 5r g) ) annotationsN)ASGI3ApplicationASGIReceiveCallableASGISendCallableScopec0\rSrSrSrSSSjjrS SjrSrg) ProxyHeadersMiddlewareaMiddleware for handling known proxy headers This middleware can be used when a known proxy is fronting the application, and is trusted to be properly setting the `X-Forwarded-Proto` and `X-Forwarded-For` headers with the connecting client information. Modifies the `client` and `scheme` information so that they reference the connecting client, rather that the connecting proxy. References: - - c0Xl[U5UlgN)app _TrustedHosts trusted_hosts)selfr rs ]/home/mande/repo/quber/.venv/lib/python3.13/site-packages/uvicorn/middleware/proxy_headers.py__init__ProxyHeadersMiddleware.__init__s*=9c.# USS:XaURXU5IShvN $URS5nU(aUSOSnXPR;a[US5nSU;aKUSR S5R 5nUS;a#USS :XaUR S S 5US 'OXqS 'S U;a>US R S5nURRU5upU (aX4US'URXU5IShvN $NN7f)Ntypelifespanclientrheaderssx-forwarded-protolatin1>wswsshttphttps websocketrrschemesx-forwarded-for)r getrdictdecodestripreplaceget_trusted_client_address) rscopereceivesend client_addr client_hostrx_forwarded_protox_forwarded_forhostports r__call__ProxyHeadersMiddleware.__call__s =J &%$77 7ii) (3k!n ,, ,5+,G#w.$+,@$A$H$H$R$X$X$Z!$(FFV} 3*;*C*CFD*Qh*;h!W,")*<"="D"DX"N!//JJ?[ (,lE(OXXed3337864s"DDC*D D DD)r rN)z 127.0.0.1)r rrlist[str] | strreturnNone)r'rr(rr)rr3r4)__name__ __module__ __qualname____firstlineno____doc__rr0__static_attributes__rrr r s :4rr cjURS5Vs/sHoR5PM sn$s snf)N,)splitr$)valueitems r_parse_raw_hostsrA;s)%*[[%5 6%5TJJL%5 66 6s0cURS5(a]URS5nUS:XaUS4$USUnXS-SnU(dUS4$URS5(dUS4$U[USS54$UR S5S:Xa"UR SS5up$U[U54$US4$![a US4s$f=f![a US4s$f=f)aParse a forwarded host value into host and optional port. Accepts bare IPs, IPv4 `host:port`, and bracketed IPv6 `[host]:port`. Any unrecognized or malformed value is treated conservatively and returned without a port so trust checks do not silently normalize arbitrary input. []rN:) startswithfindint ValueErrorcountrsplit)r? bracket_endr. remainderr/s r_parse_host_portrP?s jjo " !8OQ{#/+, 7N##C((!8O Yqr]++ + {{31\\#q)  T? " !8O 7N  !8O s$$B/ C/C?CCCc6\rSrSrSrSSjrS SjrS SjrSrg) rbz(Container for trusted hosts and networkscnUSS/4;Ul[5Ul[5Ul[5UlUR(d[ U[ 5(a [U5nUHknSU;a2URR[R"U55 M;URR[R"U55 Mm gg![a URRU5 Mf=f![a URRU5 Mf=f)N*/) always_trustsettrusted_literalsrtrusted_networks isinstancestrrAadd ipaddress ip_networkrK ip_address)rrr.s rr_TrustedHosts.__init__es"/C#<"?*-%QTQVTWTY  --- 0 ? % $;8--11)2F2Ft2LM 8**..y/C/CD/IJ& !&8--11$78 &8--11$78s$8/C*/D %DD %D43D4c^UR(agU(dg[R"U5mTUR;ag[ U4SjUR 55$![ a XR;s$f=f)NTFc3.># UH nTU;v M g7fr r;).0netips r -_TrustedHosts.__contains__..sB,ASrSy,As)rVr]r_ranyrYrKrX)rr.res @r __contains___TrustedHosts.__contains__sp    1%%d+BT'''BD,A,ABB B 1000 0 1s&A#A##A>=A>c[U5nUR(a[US5$[U5Hn[U5upEX@;dMXE4s $ [US5$)zExtract the client address from x_forwarded_for header. In general this is the first "untrusted" host in the forwarded for list. r)rArVrPreversed)rr-x_forwarded_for_hosts host_portr.r/s rr&(_TrustedHosts.get_trusted_client_addresssh !1 A   #$9!$<= =""78I))4JDz!9 5a 899r)rVrrXrYN)rr2r3r4)r.z str | Noner3bool)r-r[r3tuple[str, int]) r5r6r7r8r9rrir&r:r;rrrrbs2%8N1 :rr)r?r[r3z list[str])r?r[r3rq) __future__rr]uvicorn._typesrrrrr rArPrr;rrrts3"YY0404f7 FL:L:r