o h @s\dZddlmZmZmZddlmZmZdeeBeBdefddZ ded ede fd d Z d S) z7Utilities for OAuth 2.0 Resource Indicators (RFC 8707).)urlparseurlsplit urlunsplit)AnyUrlHttpUrlurlreturncCs4t|}t|}t|j|j|jdd}|S)aDConvert server URL to canonical resource URL per RFC 8707. RFC 8707 section 2 states that resource URIs "MUST NOT include a fragment component". Returns absolute URI with lowercase scheme/host for canonical form. Args: url: Server URL to convert Returns: Canonical resource URL string )schemenetlocfragment)strrr_replacer lowerr )rurl_strparsed canonicalrV/var/www/html/openai_agents/venv/lib/python3.10/site-packages/mcp/shared/auth_utils.pyresource_url_from_server_urls  rrequested_resourceconfigured_resourcecCst|}t|}|j|jks|j|jkrdS|j}|j}t|t|kr.dS|ds7|d7}|ds@|d7}||S)a$Check if a requested resource URL matches a configured resource URL. A requested resource matches if it has the same scheme, domain, port, and its path starts with the configured resource's path. This allows hierarchical matching where a token for a parent resource can be used for child resources. Args: requested_resource: The resource URL being requested configured_resource: The resource URL that has been configured Returns: True if the requested resource matches the configured resource F/)rr rr pathlenendswith startswith)rr requested configuredrequested_pathconfigured_pathrrrcheck_resource_alloweds(   r!N) __doc__ urllib.parserrrpydanticrrr rboolr!rrrrs