kKj0UdZddlmZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddl Z ddlmZeeZej$dd fej$d d ffZd ed <dZej$dZdZd&dZGddeZGddeZ d'dZd(dZd)d*dZe GddZe GddZ d+d,dZ!ddd d!d" d-d#Z"ddd d!ddd$ d.d%Z#y)/zSSRF-safe HTTP utilities for FastMCP. This module provides SSRF-protected HTTP fetching with: - DNS resolution and IP validation before requests - DNS pinning to prevent rebinding TOCTOU attacks - Support for both CIMD and JWKS fetches ) annotationsN)Mapping) dataclass)urlparse) get_loggerz 64:ff9b::/96) z64:ff9b:1::/48)) )rrr )rrrr rzOtuple[tuple[ipaddress.IPv6Network, tuple[tuple[int, int, int, int], ...]], ...]NAT64_PREFIXESrz0:0:0:0:ffff:0:0:0/96)s^s^c tj|}t|tjrd|dS|S#t$r|cYSwxYw)aNFormat IP address for use in URL (bracket IPv6 addresses). IPv6 addresses must be bracketed in URLs to distinguish the address from the port separator. For example: https://[2001:db8::1]:443/path Args: ip_str: IP address string Returns: IP string suitable for URL (IPv6 addresses are bracketed) []) ipaddress ip_address isinstance IPv6Address ValueErrorip_strips i/Users/ahmed/devFolder/Ultron/claude-voice/.venv/lib/python3.12/site-packages/fastmcp/server/auth/ssrf.pyformat_ip_for_urlr,sN  ! !& ) b)// 0vha=   s499 AAceZdZdZy) SSRFErrorz+Raised when an SSRF protection check fails.N__name__ __module__ __qualname____doc__rr!r!As5r(r!ceZdZdZy)SSRFFetchErrorz"Raised when SSRF-safe fetch fails.Nr"r'r(rr*r*Es,r(r*ct}|jdfd |jr|j|j|jr|j|j|j r"|j \}}|j ||f|tvr|jttD]$\}}||vs |j fd|D&t|dz dk(r3|js'|js|jtddtvr|jt|S)z>Return IPv4 addresses embedded in known IPv6 transition forms.cRtjtfd|DS)Nc3(K|] }| ywNr').0ipackeds r zA_embedded_ipv4_addresses..from_offsets..Qs*Fg6!9gs)r IPv4Addressbytes)offsetsr1s r from_offsetsz._embedded_ipv4_addresses..from_offsetsPs$$U*Fg*F%FGGr(c3.K|] }|ywr.r')r/r5r6s rr2z+_embedded_ipv4_addresses.._sR>l73>s rr )r5ztuple[int, int, int, int]returnzipaddress.IPv4Address)setr1 ipv4_mappedadd sixtofourteredoupdateIPV4_TRANSLATED_PREFIX LOW32_OFFSETSrint is_loopbackis_unspecifiedISATAP_INTERFACE_IDS)r candidatesserverclientprefixoffset_optionsr6r1s @@r_embedded_ipv4_addressesrLIs .1UJ YYFH ~~r~~& ||r||$ yy66*+ ##|M23"0 <   R>R R#1 2w"}"..9J9J|M23 a|++|M23 r(c tj|}t|tjrt dt |Dry|jsy|j S#t$rYywxYw)a{Check if an IP address is allowed (must be globally routable unicast). Uses ip.is_global which catches: - Private (10.x, 172.16-31.x, 192.168.x) - Loopback (127.x, ::1) - Link-local (169.254.x, fe80::) - includes AWS metadata! - Reserved, unspecified - RFC6598 Carrier-Grade NAT (100.64.0.0/10) - can point to internal networks - IPv6 transition forms that embed blocked IPv4 targets Additionally blocks multicast addresses (not caught by is_global). Args: ip_str: IP address string to check Returns: True if the IP is allowed (public unicast internet), False if blocked Fc3FK|]}tt| ywr.) is_ip_allowedstr)r/ embedded_ips rr2z is_ip_allowed..s% ; c+./ /;s!) rrrrranyrL is_global is_multicastrs rrOrOjsu&  ! !& )"i++,  7;   <<  sA'' A32A3c>Ktj} |jdfdd{}t|Dchc] }|dd c}}|st d|S75cc}w#t j $r}t dd||d}~wwxYww)zResolve hostname to IP addresses using DNS. Args: hostname: Hostname to resolve port: Port number (used for getaddrinfo) Returns: List of resolved IP addresses Raises: SSRFError: If resolution fails NcltjtjtjSr.)socket getaddrinfo AF_UNSPEC SOCK_STREAM)hostnameportsrz"resolve_hostname..s%F&&$ 0 0&2D2Dr(rz)DNS resolution returned no addresses for zDNS resolution failed for : )asyncioget_running_looprun_in_executorlistr!rWgaierror)r[r\loopinfosinfoipses`` rresolve_hostnamerjs  # # %D M**     5154DGAJ512GzRS S  2 ??M4XJbDE1LMsJBA0A) A0A+A0(B)A0+A00BBBBcDeZdZUdZded<ded<ded<ded<ded <y ) ValidatedURLz9A URL that has been validated for SSRF with resolved IPs.rP original_urlr[rCr\path list[str] resolved_ipsNr#r$r%r&__annotations__r'r(rrlrls CM I Ir(rlc0eZdZUdZded<ded<ded<y) SSRFFetchResponsez)Response payload from an SSRF-safe fetch.r4contentrC status_codezdict[str, str]headersNrqr'r(rrtrts3 N r(rtFcrK t|}|jdk7rtd|j|j s td|r|j dvr td|jxs |j }|jxsd}t||d{}|Dcgc]}t|r|}}|rtd |d t||||j |jrd |jznd z| S#ttf$r}td||d}~wwxYw7cc}ww)aValidate URL for SSRF and resolve to IPs. Args: url: URL to validate require_path: If True, require non-root path (for CIMD) Returns: ValidatedURL with resolved IPs Raises: SSRFError: If URL is invalid or resolves to blocked IPs z Invalid URL: NhttpszURL must use HTTPS, got: zURL must have a host)/zURL must have a non-root pathz(URL resolves to blocked IP address(es): zB. Private, loopback, link-local, and reserved IPs are not allowed.?rz)rmr[r\rnrp) rrAttributeErrorr!schemenetlocrnr[r\rjrOrlquery) url require_pathparsedrir[r\rprblockeds r validate_urlrsA4#}}3FMM?CDD ==.// y0788/&--H ;; #D*(D99L(BLb b0ArLGB6wi@O P    [[&,,C&,,.B G!  3  '4-s+,!34 :BsMD7 D BD7!D0"D7*D2;D2?A D7 D-D((D--D72D7ig$@g>@)rmax_sizetimeoutoverall_timeoutcZKt|||||dhd{}|jS7w)aFetch URL with comprehensive SSRF protection and DNS pinning. Security measures: 1. HTTPS only 2. DNS resolution with IP validation 3. Connects to validated IP directly (DNS pinning prevents rebinding) 4. Response size limit 5. Redirects disabled 6. Overall timeout Args: url: URL to fetch require_path: If True, require non-root path max_size: Maximum response size in bytes (default 5KB) timeout: Per-operation timeout in seconds overall_timeout: Overall timeout for entire operation Returns: Response body as bytes Raises: SSRFError: If SSRF validation fails SSRFFetchError: If fetch fails )rrrrallowed_status_codesN)ssrf_safe_fetch_responseru)rrrrrresponses rssrf_safe_fetchrs?@. !'!U H   s +)+)rrrrrequest_headersrc Ktj}t||d{}d} |xsdh} |jD]P} tj|z } | |kDrt d|t d|| z } dt | d|j|j}tjd||| d |ji}|r1|jD]\}}|jd k(r|||<  tjtj t#|| t#|| t#|| t#||  d d 4d{}|j%d||d|ji4d{}tj|z |kDrt d||j&| vrt d|j&d||j(j+d}|r$ t-|}||kDrt d|d|d g}d}|j123d{}tj|z |kDrt d||t3|z }||kDrt d|d|j5|e| ;tA| tj<rt d|| t d|d| | t d|d 777c#t.$rYwxYw76t7dj9||j&t;|j(cdddd{7cdddd{7cS#1d{7swYnxYwdddd{7n#1d{7swYnxYwY#tj<$r }|} Yd}~td}~wtj>$r }|} Yd}~d}~wwxYww)!zFetch URL with SSRF protection and return response metadata. This is equivalent to :func:`ssrf_safe_fetch` but returns response headers and status code, and supports conditional request headers. )rNrzOverall timeout exceeded: g?zhttps://:z(SSRF-safe fetch: %s -> %s (pinned to %s)Hosthost)connectreadwritepoolFT)rfollow_redirectsverifyGET sni_hostname)rw extensionszHTTP z fetching zcontent-lengthzResponse too large: z bytes (max )rzResponse too large: exceeded z bytesr()rurvrwzTimeout fetching zError fetching r_z: no resolved IPs succeeded)!time monotonicrrpr*maxrr\rnloggerdebugr[itemslowerhttpx AsyncClientTimeoutminstreamrvrwgetrCr aiter_byteslenappendrtjoindictTimeoutException RequestErrorr)rrrrrrr start_time validated last_errorexpected_statuses pinned_ipelapsed remaining pinned_urlrwkeyvaluerIrcontent_lengthsizechunkstotalchunkris rrrs !J#3\BBI#'J,5++ .."Z/ _ $ #=cU!CD D_w67 (34Ainn5EinnEU V   6     9--. -335 U99;&($ 6 > !!!MM #GY 7 )4!'95 )4  &+   # . 0B0BC  >>#j0?B(+EcU)KLL''/@@(51E1E0FjQTPU)VWW"*!1!1!5!56F!G!">2(?"0"6tfL RS T#+#+#7#7#9)%~~'*4F,/I#-OPPSZ'Ex',;H:VLMM%(U,r j%"8"8 9 #4SE!:; Kse2j\BCS ?3%/JK LLGCB ,& )#9)HHV, ( 4 4 !1!12M        l%% J !! J  s:%OK!CO?ANK$N&NK' NA/M8"K*M/K;3K9 4K;7AMAO$N'N* K6 3M5K6 6M9K;;:M5 NM N NMNOM. "M%#M. *N1 N<M?=NN N  N NOO-N5/O5O O OOO)rrPr:rP)rzipaddress.IPv6Addressr:zset[ipaddress.IPv4Address])rrPr:bool)r|)r[rPr\rCr:ro)F)rrPrrr:rl) rrPrrrrCrfloatrrr:r4)rrPrrrrCrrrrrzMapping[str, str] | Nonerzset[int] | Noner:rt)$r& __future__rr`rrWrcollections.abcr dataclassesr urllib.parserrfastmcp.utilities.loggingrr#r IPv6NetworkrrrrBrArFr Exceptionr!r*rLrOrjrlrtrrrr'r(rrs# #!! 0 H  Y>*,?@ ./   ! .../FGA*6 6-Y-B#LM:    .h! ( (( (  (  ( (\!04,0uM uMuM uM  uM  uM.uM*uMuMr(