Class SSOTokenFetcher

awscli/botocore/utils.py:3312–3537

Performs the device grant OAuth2.0 flow

class SSOTokenFetcher(BaseSSOTokenFetcher):
    """Performs the device grant OAuth2.0 flow"""

    # The device flow RFC defines the slow-down delay to be an additional
    # 5 seconds:
    # https://tools.ietf.org/html/draft-ietf-oauth-device-flow-15#section-3.5
    _SLOW_DOWN_DELAY = 5
    # The default interval of 5 is also defined in the RFC (see above link)
    _DEFAULT_INTERVAL = 5
    _EXPIRY_WINDOW = 15 * 60
    _GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:device_code'

    def __init__(
        self,
        sso_region,
        client_creator,
        parsed_globals,
        cache=None,
        on_pending_authorization=None,
        time_fetcher=None,
        sleep=None,
    ):
        super().__init__(
            sso_region,
            client_creator,
            parsed_globals,
            cache,
            on_pending_authorization,
            time_fetcher,
        )

        if sleep is None:
            sleep = time.sleep
        self._sleep = sleep

    def _register_client(self, session_name, scopes):
        register_kwargs = {
            'clientName': self._generate_client_name(session_name),
            'clientType': self._CLIENT_REGISTRATION_TYPE,
        }
        if scopes:
            register_kwargs['scopes'] = scopes
        response = self._client.register_client(**register_kwargs)
        expires_at = response['clientSecretExpiresAt']
        expires_at = datetime.datetime.fromtimestamp(expires_at, tzutc())
        registration = {
            'clientId': response['clientId'],
            'clientSecret': response['clientSecret'],
            'expiresAt': expires_at,
        }
        if scopes:
            registration['scopes'] = scopes
        return registration

    def _registration(
        self,
        start_url,
        session_name,