File: //opt/alt/python37/lib/python3.7/site-packages/botocore/crt/__pycache__/auth.cpython-37.pyc
B
�P�e�b � @ s d dl Z d dlmZ d dlmZmZmZmZmZm Z d dl
m Z m Z m
Z
mZmZ d dlmZ d dlmZ G dd� de�ZG d d
� d
e�ZG d d � d e�ZG d
d� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�Zeeeeeeed�Z dS )� N)�BytesIO)�SIGNED_HEADERS_BLACKLIST�"STREAMING_UNSIGNED_PAYLOAD_TRAILER�UNSIGNED_PAYLOAD�
BaseSigner�_get_body_as_dict�_host_from_url)� HTTPHeaders�awscrt�parse_qs�urlsplit�
urlunsplit)�NoCredentialsError)�percent_encode_sequencec @ s~ e Zd ZdZddddgZejjjZ dZ
dZ dd� Z dd � Z
d
d � Zd d
� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� ZdS )� CrtSigV4AuthT�
Authorizationz
X-Amz-DatezX-Amz-Content-SHA256zX-Amz-Security-Tokenc C s || _ || _|| _d | _d S )N)� credentials�
_service_name� _region_name�_expiration_in_seconds)�selfr � service_name� region_name� r �B/opt/alt/python37/lib/python3.7/site-packages/botocore/crt/auth.py�__init__* s zCrtSigV4Auth.__init__c C s0 |j �di �}|�d�}t|t�o.|�d�dkS )N�checksum�request_algorithm�in�trailer)�context�get�
isinstance�dict)r �request�checksum_context� algorithmr r r � _is_streaming_checksum_payload0 s
z+CrtSigV4Auth._is_streaming_checksum_payloadc
C s | j d krt� �tj�� jtjjd�}| �|�}| �|� t j
j j | j j
| j j| j jd�}| �|�rjt}n | �|�r�|r~|}q�d }nt}| �|�r�t j
jj}n
t j
jj}t j
jt j
jj| j|| j | j || j | j | j ||| j!d� }| �"|�}t j
�#||�} | �$� | �%||� d S )N)�tzinfo)�
access_key_id�secret_access_key�
session_token) r& �signature_type�credentials_provider�region�service�date�should_sign_header�use_double_uri_encode�should_normalize_uri_path�signed_body_value�signed_body_header_type�expiration_in_seconds)&r r �datetime�utcnow�replace�timezone�utc�_get_existing_sha256� _modify_request_before_signingr
�auth�AwsCredentialsProvider�
new_static�
access_key�
secret_key�tokenr' r �_should_sha256_sign_payloadr �!_should_add_content_sha256_header�AwsSignedBodyHeaderType�X_AMZ_CONTENT_SHA_256�NONE�AwsSigningConfig�AwsSigningAlgorithmZV4�_SIGNATURE_TYPEr r �_should_sign_header�_USE_DOUBLE_URI_ENCODE�_SHOULD_NORMALIZE_URI_PATHr � _crt_request_from_aws_request�aws_sign_request�result�_apply_signing_changes)
r r$ � datetime_now�existing_sha256r- �explicit_payload� body_header�signing_config� crt_request�futurer r r �add_auth5 sJ
zCrtSigV4Auth.add_authc
C s� t |j�}|jr|jnd}|jrlg }x2|j�� D ]$\}}t|�}|�|� d|� �� q0W |d d�|� }n|jr�|� d|j� �}t j
� |j �� �}d }|j
r�t|j
d�r�|j
}n
t|j
�}t j
j|j|||d�} | S )N�/�=�?�&�seek)�method�path�headers� body_stream)r �urlra �params�items�str�append�join�queryr
�http� HttpHeadersrb �body�hasattrr � HttpRequestr` )
r � aws_request� url_parts�crt_path�array�param�value� crt_headers�crt_body_streamrX r r r rO n s,
z*CrtSigV4Auth._crt_request_from_aws_requestc C s t �t|j��|_d S )N)r �
from_pairs�listrb )r rp �signed_crt_requestr r r rR � s z#CrtSigV4Auth._apply_signing_changesc K s |� � tkS )N)�lowerr )r �name�kwargsr r r rL � s z CrtSigV4Auth._should_sign_headerc C s@ x | j D ]}||jkr|j|= qW d|jkr<t|j�|jd< d S )N�host)� _PRESIGNED_HEADERS_BLOCKLISTrb r rd )r r$ �hr r r r= � s
z+CrtSigV4Auth._modify_request_before_signingc C s |j �d�S )NzX-Amz-Content-SHA256)rb r! )r r$ r r r r< � s z!CrtSigV4Auth._get_existing_sha256c C s |j �d�sdS |j�dd�S )N�httpsT�payload_signing_enabled)rd �
startswithr r! )r r$ r r r rD � s z(CrtSigV4Auth._should_sha256_sign_payloadc C s |d k S )Nr )r rU r r r rE � s z.CrtSigV4Auth._should_add_content_sha256_headerN)�__name__�
__module__� __qualname__�REQUIRES_REGIONr r
r> �AwsSignatureType�HTTP_REQUEST_HEADERSrK rM rN r r' rZ rO rR rL r= r< rD rE r r r r r s$
9
r c s4 e Zd ZdZdZdd� Z� fdd�Zdd� Z� ZS )�CrtS3SigV4AuthFc C s d S )Nr )r r$ r r r r< � s z#CrtS3SigV4Auth._get_existing_sha256c s� |j �d�}t|dd �}|d kr$i }|�dd �}|d k r<|S d}|j �di �}|�d�}t|t�rx|�d�dkrx|d }|j�d
�r�||jkr�d S |j �d d
�r�d
S t� � |�S )N�
client_config�s3r� z Content-MD5r r r �headerr| r� T�has_streaming_inputF)
r r! �getattrr" r# rd r� rb �superrD )r r$ r� � s3_config� sign_payloadZchecksum_headerr% r& )� __class__r r rD � s$
z*CrtS3SigV4Auth._should_sha256_sign_payloadc C s dS )NTr )r rU r r r rE � s z0CrtS3SigV4Auth._should_add_content_sha256_header) r� r� r� rM rN r< rD rE �
__classcell__r r )r� r r� � s
)r� c @ s~ e Zd ZdZddddgZejjjZ dZ
dZ dd� Z dd � Z
d
d � Zd d
� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� ZdS )�CrtSigV4AsymAuthTr z
X-Amz-DatezX-Amz-Content-SHA256zX-Amz-Security-Tokenc C s || _ || _|| _d | _d S )N)r r r r )r r r r r r r r � s zCrtSigV4AsymAuth.__init__c
C s | j d krt� �tj�� jtjjd�}| �|�}| �|� t j
j j | j j
| j j| j jd�}| �|�rjt}n | �|�r�|r~|}q�d }nt}| �|�r�t j
jj}n
t j
jj}t j
jt j
jj| j|| j | j || j | j | j ||| j!d� }| �"|�}t j
�#||�} | �$� | �%||� d S )N)r( )r) r* r+ ) r& r, r- r. r/ r0 r1 r2 r3 r4 r5 r6 )&r r r7 r8 r9 r: r; r< r= r
r> r? r@ rA rB rC r' r rD r rE rF rG rH rI rJ Z
V4_ASYMMETRICrK r r rL rM rN r rO rP rQ rR )
r r$ rS rT r- rU rV rW rX rY r r r rZ � sJ
zCrtSigV4AsymAuth.add_authc
C s� t |j�}|jr|jnd}|jrlg }x2|j�� D ]$\}}t|�}|�|� d|� �� q0W |d d�|� }n|jr�|� d|j� �}t j
� |j �� �}d }|j
r�t|j
d�r�|j
}n
t|j
�}t j
j|j|||d�} | S )Nr[ r\ r] r^ r_ )r` ra rb rc )r rd ra re rf rg rh ri rj r
rk rl rb rm rn r ro r` )
r rp rq rr rs rt ru rv rw rX r r r rO 3 s,
z.CrtSigV4AsymAuth._crt_request_from_aws_requestc C s t �t|j��|_d S )N)r rx ry rb )r rp rz r r r rR Q s z'CrtSigV4AsymAuth._apply_signing_changesc K s |� � tkS )N)r{ r )r r| r} r r r rL W s z$CrtSigV4AsymAuth._should_sign_headerc C s@ x | j D ]}||jkr|j|= qW d|jkr<t|j�|jd< d S )Nr~ )r rb r rd )r r$ r� r r r r= Z s
z/CrtSigV4AsymAuth._modify_request_before_signingc C s |j �d�S )NzX-Amz-Content-SHA256)rb r! )r r$ r r r r< d s z%CrtSigV4AsymAuth._get_existing_sha256c C s0 |j �di �}|�d�}t|t�o.|�d�dkS )Nr r r r )r r! r" r# )r r$ r% r& r r r r' g s
z/CrtSigV4AsymAuth._is_streaming_checksum_payloadc C s |j �d�sdS |j�dd�S )Nr� Tr� )rd r� r r! )r r$ r r r rD l s z,CrtSigV4AsymAuth._should_sha256_sign_payloadc C s |d k S )Nr )r rU r r r rE v s z2CrtSigV4AsymAuth._should_add_content_sha256_headerN)r� r� r� r� r r
r> r� r� rK rM rN r rZ rO rR rL r= r< r' rD rE r r r r r� � s$
9
r� c s4 e Zd ZdZdZdd� Z� fdd�Zdd� Z� ZS )�CrtS3SigV4AsymAuthFc C s d S )Nr )r r$ r r r r< � s z'CrtS3SigV4AsymAuth._get_existing_sha256c st |j �d�}t|dd �}|d kr$i }|�dd �}|d k r<|S |j�d�rRd|jkrVdS |j �dd�rhdS t� �|�S ) Nr� r� r� r� z Content-MD5Tr� F)r r! r� rd r� rb r� rD )r r$ r� r� r� )r� r r rD � s
z.CrtS3SigV4AsymAuth._should_sha256_sign_payloadc C s dS )NTr )r rU r r r rE � s z4CrtS3SigV4AsymAuth._should_add_content_sha256_header) r� r� r� rM rN r< rD rE r� r r )r� r r� { s
$r� c sF e Zd ZdZejjjZef� fdd� Z � fdd�Z
� fdd�Z � Z S )�CrtSigV4AsymQueryAuthi c s t � �|||� || _d S )N)r� r r )r r r r �expires)r� r r r � s z CrtSigV4AsymQueryAuth.__init__c s� t � �|� |j�d�}|dkr(|jd= t|j�}t|jdd�}dd� |�� D �}|j rl|�
t |�� d|_ t |�}|}|d |d |d
||d f}t
|�|_d S ) Nz content-typez0application/x-www-form-urlencoded; charset=utf-8T)�keep_blank_valuesc S s i | ]\}}|d |�qS )r r )�.0�k�vr r r �
<dictcomp>� s zHCrtSigV4AsymQueryAuth._modify_request_before_signing.<locals>.<dictcomp>� r � � � )r� r= rb r! r rd r rj rf �data�updater r r
) r r$ � content_typerq Zquery_string_parts�
query_dict�new_query_string�p�
new_url_parts)r� r r r= � s
z4CrtSigV4AsymQueryAuth._modify_request_before_signingc sL t � �||� t|j�j}t|j�}t|d |d |d ||d f�|_d S )Nr r� r� r� )r� rR r ra rj rd r
)r rp rz � signed_queryr� )r� r r rR � s
z,CrtSigV4AsymQueryAuth._apply_signing_changes)
r� r� r� �DEFAULT_EXPIRESr
r> r� �HTTP_REQUEST_QUERY_PARAMSrK r r= rR r� r r )r� r r� � s
*r� c @ s( e Zd ZdZdZdZdd� Zdd� ZdS )�CrtS3SigV4AsymQueryAuthz�S3 SigV4A auth using query parameters.
This signer will sign a request using query parameters and signature
version 4A, i.e a "presigned url" signer.
Fc C s dS )NFr )r r$ r r r rD � s z3CrtS3SigV4AsymQueryAuth._should_sha256_sign_payloadc C s dS )NFr )r rU r r r rE s z9CrtS3SigV4AsymQueryAuth._should_add_content_sha256_headerN)r� r� r� �__doc__rM rN rD rE r r r r r� � s
r� c sF e Zd ZdZejjjZef� fdd� Z � fdd�Z
� fdd�Z � Z S )�CrtSigV4QueryAuthi c s t � �|||� || _d S )N)r� r r )r r r r r� )r� r r r s zCrtSigV4QueryAuth.__init__c s� t � �|� |j�d�}|dkr(|jd= t|j�}dd� t|jdd��� D �}|j rf|�
|j � i |_ |j r�|�
t |�� d|_ t
|�}|}|d |d |d
||d f}t|�|_d S ) Nz content-typez0application/x-www-form-urlencoded; charset=utf-8c S s i | ]\}}|d |�qS )r r )r� r� r� r r r r� ! s zDCrtSigV4QueryAuth._modify_request_before_signing.<locals>.<dictcomp>T)r� r� r r� r� r� )r� r= rb r! r rd r rj rf re r� r� r r r
)r r$ r� rq r� r� r� r� )r� r r r= s$
z0CrtSigV4QueryAuth._modify_request_before_signingc sL t � �||� t|j�j}t|j�}t|d |d |d ||d f�|_d S )Nr r� r� r� )r� rR r ra rj rd r
)r rp rz r� r� )r� r r rR B s
z(CrtSigV4QueryAuth._apply_signing_changes)
r� r� r� r� r
r> r� r� rK r r= rR r� r r )r� r r� s
0r� c @ s( e Zd ZdZdZdZdd� Zdd� ZdS )�CrtS3SigV4QueryAutha S3 SigV4 auth using query parameters.
This signer will sign a request using query parameters and signature
version 4, i.e a "presigned url" signer.
Based off of:
http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html
Fc C s dS )NFr )r r$ r r r rD _ s z/CrtS3SigV4QueryAuth._should_sha256_sign_payloadc C s dS )NFr )r rU r r r rE f s z5CrtS3SigV4QueryAuth._should_add_content_sha256_headerN)r� r� r� r� rM rN rD rE r r r r r� S s
r� )Zv4zv4-queryZv4aZs3v4z
s3v4-queryZs3v4az s3v4a-query) r7 �ior Z
botocore.authr r r r r r Zbotocore.compatr r
r r r
Zbotocore.exceptionsr Zbotocore.utilsr r r� r� r� r� r� r� r� ZCRT_AUTH_TYPE_MAPSr r r r �<module> s, 7 2EK