kKjndZddlmZddlZddlZddlmZddlmZddl m Z e e Z dZ dZeGd d ZGd d Zy) aIn-memory cache for token verification results. Provides a generic TTL-based cache for ``AccessToken`` objects, designed to reduce repeated network calls during opaque-token verification. Only *successful* verifications should be cached; errors and failures must be retried on every request. Example: ```python from fastmcp.utilities.token_cache import TokenCache cache = TokenCache(ttl_seconds=300, max_size=10000) # On cache miss, call the upstream verifier and store the result. hit, token = cache.get(raw_token) if not hit: token = await _call_upstream(raw_token) if token is not None: cache.set(raw_token, token) ``` ) annotationsN) dataclass) AccessToken) get_loggeri'<c&eZdZUdZded<ded<y) _CacheEntryz=A cached token result with its absolute expiration timestamp.rresultfloat expires_atN)__name__ __module__ __qualname____doc____annotations__n/Users/ahmed/devFolder/Ultron/claude-voice/.venv/lib/python3.12/site-packages/fastmcp/utilities/token_cache.pyr r &sG rr cveZdZdZddd d dZed dZddZddZe ddZ dd Z dd Z dd Z y) TokenCacheaTTL-based in-memory cache for ``AccessToken`` objects. Features: - SHA-256 hashed cache keys (fixed size, regardless of token length). - Per-entry TTL that respects both the configured ``ttl_seconds`` and the token's own ``expires_at`` claim (whichever is sooner). - Bounded size with FIFO eviction when the cache is full. - Periodic cleanup of expired entries to prevent unbounded growth. - Defensive deep copies on both store and retrieve to prevent callers from mutating cached values. Caching is disabled when ``ttl_seconds`` is ``None`` or ``0``, or when ``max_size`` is ``0``. Negative values raise ``ValueError``. N) ttl_secondsmax_sizec||dkrtd|||dkrtd||xsd|_||nt|_i|_t j |_y)aInitialise the cache. Args: ttl_seconds: How long cached entries remain valid, in seconds. ``None`` or ``0`` disables caching entirely. max_size: Upper bound on the number of entries. When the limit is reached, expired entries are swept first; if still full the oldest entry is evicted. Defaults to 10 000. Nrz,cache_ttl_seconds must be non-negative, got z)max_cache_size must be non-negative, got ) ValueError_ttlDEFAULT_MAX_CACHE_SIZE _max_size_entriestime monotonic _last_cleanup)selfrrs r__init__zTokenCache.__init__>sy  "{Q>{mL   HqLH ST T$1 %-%9?U02 !^^-rcB|jdkDxr|jdkDS)z!Return whether caching is active.r)rr)r"s renabledzTokenCache.enabledXs yy1}3!!33rc|jsy|j|}|jj|}|y|jt j kr|j|=yd|j jdfS)a Look up a cached verification result. Returns: ``(True, AccessToken)`` on a cache hit, ``(False, None)`` on a miss or when caching is disabled. The returned ``AccessToken`` is a deep copy that is safe to mutate. )FNTdeep)r% _hash_tokenrgetr rr model_copy)r"token cache_keyentrys rr*zTokenCache.get_sz|| $$U+  !!), =   diik ) i( ell--4-899rc|jsy|j|}|j||jvr|j t j |j z}|jrt|t|j}t|jd||j|<y)aStore a *successful* verification result. Only successful verifications should be cached. Failures (inactive tokens, missing scopes, HTTP errors, timeouts) must **not** be cached so that transient problems do not produce sticky false negatives. NTr')r r ) r%r)_maybe_cleanupr_enforce_size_limitrrr minr r r+)r"r,r r-r s rsetzTokenCache.setvs|| $$U+   DMM )  $ $ &YY[499,   Zv/@/@)ABJ#.$$$$/!$  i rcftj|jdjS)z)Return the SHA-256 hex digest of *token*.zutf-8)hashlibsha256encode hexdigest)r,s rr)zTokenCache._hash_tokens%~~ell734>>@@rctj}|jjDcgc]\}}|j|ks|}}}|D]}|j|=|r tj dt |yycc}}w)z)Remove all entries whose TTL has elapsed.z#Cleaned up %d expired cache entriesN)rritemsr loggerdebuglen)r"nowkvexpiredkeys r_cleanup_expiredzTokenCache._cleanup_expiredsviik!%!4!4!6M!6A!,,:L1!6MC c"  LL>G M Ns B Bctj}||jz tkDr|j ||_yy)z;Run ``_cleanup_expired`` at most once per cleanup interval.N)rr r!_CLEANUP_INTERVALrC)r"r>s rr0zTokenCache._maybe_cleanups;nn ## #&7 7  ! ! #!$D  8rct|j|jkry|jt|j|jk\r,t t |j}|j|=yy)z0Ensure there is room for at least one new entry.N)r=rrrCnextiter)r" oldest_keys rr1zTokenCache._enforce_size_limits_ t}}  .   t}}  /d4==12J j) 0r)r int | NonerrJreturnNone)rKbool)r,strrKztuple[bool, AccessToken | None])r,rNr rrKrL)r,rNrKrN)rKrL)r rrrr#propertyr%r*r3 staticmethodr)rCr0r1rrrrr.sv $#'# . . .  .444 :. 6AAN%*rr)r __future__rr5r dataclassesrfastmcp.server.auth.authrfastmcp.utilities.loggingrr r;rrEr rrrrrUsY,# !00 H   **r