GjA SrSSKrSSKJrJrJr SSKJrJr S\ \-\-S\ 4Sjr S\ S \ S\ 4S jr S \ \ -S-S\S-4S jrg) zKUtilities for OAuth 2.0 Resource Indicators (RFC 8707) and PKCE (RFC 7636).N)urlparseurlsplit urlunsplit)AnyUrlHttpUrlurlreturnc[U5n[U5n[URURR 5UR R 5SS95nU$)a(Convert server URL to canonical resource URL per RFC 8707. RFC 8707 section 2 states that resource URIs "MUST NOT include a fragment component". Returns absolute URI with lowercase scheme/host for canonical form. Args: url: Server URL to convert Returns: Canonical resource URL string )schemenetlocfragment)strrr_replacer lowerr )rurl_strparsed canonicals W/Users/admin/workspace/tools/venv/lib/python3.13/site-packages/mcp/shared/auth_utils.pyresource_url_from_server_urlr sV#hGg F6??&--2E2E2GPVP]P]PcPcPepr?stI requested_resourceconfigured_resourcec[U5n[U5nURR5URR5:wd6URR5URR5:wagURnURnUR S5(dUS- nUR S5(dUS- nUR U5$)aCheck if a requested resource URL matches a configured resource URL. A requested resource matches if it has the same scheme, domain, port, and its path starts with the configured resource's path. This allows hierarchical matching where a token for a parent resource can be used for child resources. Args: requested_resource: The resource URL being requested configured_resource: The resource URL that has been configured Returns: True if the requested resource matches the configured resource F/)rr rr pathendswith startswith)rr requested configuredrequested_pathconfigured_paths rcheck_resource_allowedr#s +,I-.J:#4#4#:#:#<< @P@P@V@V@X\f\m\m\s\s\u@u^^N ooO  " "3 ' '#  # #C ( (3  $ $_ 55r expires_incLUcg[R"5[U5-$)zCalculate token expiry timestamp from expires_in seconds. Args: expires_in: Seconds until token expiration (may be string from some servers) Returns: Unix timestamp when token expires, or None if no expiry specified N)timeint)r$s rcalculate_token_expiryr(Ds" 99;Z ((r)__doc__r& urllib.parserrrpydanticrrrrboolr#r'floatr(rrr/slQ 77$cGmf&<,"6s"6"6QU"6J )sSy4'7 )EDL )r