EiUdZddlmZddlZddlmZmZmZddlm Z m Z m Z ddl m Z erddlmZdZd ed <d Zd ed <d Zd ed<dZd ed<dZd ed<ddZddZddZd dZd!dZddZd"dZd#dZd$dZd%dZy)&z!Server related utility functions.) annotationsN) TYPE_CHECKINGFinalcast)confignet_utilurl_util)secrets_singleton)Callablei rDEVELOPMENT_PORT VITE_PORTVITE_PORT_ENV_VARPORT PORT_ENV_VAR_streamlit_userAUTH_COOKIE_NAME_streamlit_user_tokensTOKENS_COOKIE_NAMEcntjdDchc]}|jc}Scc}w)Nzserver.corsAllowedOrigins)r get_optionstriporigins b/var/www/pod-logistic/pod-ai/venv/lib/python3.12/site-packages/streamlit/web/server/server_util.pyallowlisted_originsr%s()/):):;V)W XvFLLN XX Xs2c\tjd xstjdS)aTrue if cross-origin requests from any origin are allowed. We allow ALL cross-origin requests when CORS protection has been disabled with server.enableCORS=False or when in dev mode (where the Vite dev server and backend use different ports, counting as two origins). server.enableCORSglobal.developmentMode)rrrallow_all_cross_origin_requestsr!)s0  !45 5 9J9J :r c|tvS)z.Check if origin is in the allowlisted origins.)rrs ris_allowed_originr#5s (* **r cftjdsytj|}t Dcgc]}tj|}}dddt t jt jg|}|D](}t|ts||}n|}|"||k(s(yycc}w)aReturn True if URL is from allowed origins (for CORS purpose). Allowed origins: 1. localhost 2. The internal and external IP addresses of the machine where this function was called from. If `server.enableCORS` is False, this allows all origins. rT localhost0.0.0.0z 127.0.0.1F) rrr get_hostnamer#_get_server_address_if_manually_setrget_internal_ipget_external_ip isinstancestr)urlhostnamerallowlisted_domainsallowed_domainsallowed_domainallowed_domain_strs ris_url_from_allowed_originsr3:s   0 1$$S)H5H4I*0f%  ,     D  DO*  nc *n.D!/ !/!1   %  ) )  =sB.ctjd}tjr)tjd}|r|j d|}|S)zcGet the cookie secret. If the user has not set a cookie secret, we generate a random one. zserver.cookieSecretauth cookie_secret)rrr load_if_toml_existsget)r6 auth_sections rget_cookie_secretr:ksL  **+@AM,,.(,,V4 (,,_mLM r ctjd}|s2tjrtjdd}|xs|du}t d|S)Nzserver.enableXsrfProtectionr5bool)rrr r7r8r) csrf_enabledr9s ris_xsrf_enabledr>xsP$$%BCL -AAC(,,VT: #?|4'?  %%r c~tjdr(tjtjdSy)Nzbrowser.serverAddress)ris_manually_setr r'rrr rr(r(s1 56$$V%6%67N%OPP r c|dvry|S)aGet a display-friendly address for URLs shown to users. Wildcard addresses like "0.0.0.0" (all IPv4) or "::" (all interfaces) are not valid browser addresses on all platforms. This translates them to "localhost" for display purposes. Parameters ---------- address The server address (IP or hostname). Returns ------- str Address suitable for display. Wildcards become "localhost". >::r&r%r)addresss rget_display_addressrDs"## Nr ctjdrdnd}t}tjdjd}|rd|z}|jd}|d|d||S)zGet the URL for any app served at the given host_ip. Parameters ---------- host_ip : str The IP address of the machine that is running the Streamlit Server. Returns ------- str The URL. zserver.sslCertFilehttpshttpzserver.baseUrlPath/z://:)rr_get_browser_address_bar_portr)host_ipprotocolport base_paths rget_urlrOsr!++,@AwvH ( *D!!"67==cBI)O mmC GZs7)1TF9+ 66r c2tjdrVttfD]A}tj j |}|s% t|}d|cxkr dks=|cSCtSttjdS#t$rYswxYw)zGet the app URL that will be shown in the browser's address bar. That is, this is the port where static assets will be served from. In dev, this is different from the URL that will be used to connect to the server-browser websocket. rizbrowser.serverPort) rrrrosenvironr8int ValueErrorr )env_varport_strrMs rrJrJs12)<8 Gzz~~g.H 8}D!E! "   v  !56 77  s B  BB)returnzset[str])rXr<)rr,rXr<)r-r,rXr<)rXr,)rXz str | None)rCr,rXr,)rKr,rXr,)rXrT) __doc__ __future__rrRtypingrrr streamlitrrr streamlit.runtime.secretsr collections.abcr r __annotations__rrrrrr!r#r3r:r>r(rDrOrJrr rr`s(" --007(%&5& e+%+4E4Y + .b & ,728r