/
lib
/
python3.9
/
site-packages
/
oci
/
__pycache__
/
Upload File
HOME
a ���f�- � @ s d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dl m Z d dl m Z m Z mZmZ ddlmZmZ ddlmZmZ d dlmZ d d lmZ d d lmZ d dl Z e � e �Z d Z dd d �Z!dd� Z"dd� Z#G dd� dej$j%�Z&G dd� dej'j(�Z)G dd� de)�Z*dS )� )�absolute_importN)�six)� record_body_position_for_rewind� rewind_body�,back_up_body_calculate_stream_content_length�read_stream_for_signing� )� httpsig_cffi�requests)�InvalidPrivateKey�MissingPrivateKeyPassphrase)�UnsupportedAlgorithm)�default_backend)� serialization�1c C sP t j�| �} tj| dd�� }|�� �� }W d � n1 s<0 Y t||�S )N�rb)�mode)�os�path� expanduser�io�open�read�strip�load_private_key)�filename� pass_phrase�fZprivate_key_data� r �./usr/lib/python3.9/site-packages/oci/signer.py�load_private_key_from_file s *r c C s� t | tj�r| �d�} t |tj�r,|�d�}t� }ztj| ||d�W S ty| |du rdtd��ntj| d|d� Y S Y n` t y� tj tj tj fD ]4}z|| |d� W n t t fy� Y q�0 td��q�td��Y n0 dS )z�Loads a private key that may use a pass_phrase. Tries to correct or diagnose common errors: - provided pass_phrase but didn't need one - provided a public key �ascii)�backendNz'The provided key requires a passphrase.zEAuthentication requires a private key, but a public key was provided.zOThe provided key is not a private key, or the provided passphrase is incorrect.)� isinstancer Z text_type�encoder r Zload_pem_private_key� TypeErrorr � ValueErrorZload_der_public_keyZload_pem_public_keyZload_ssh_public_keyr r )Zsecretr r" �loaderr r r r $ s, � r c C s� | j �dtjjdd�� | j �dtjjj� | j �j � t | j d�sNt | j d�r\| j �dd� | j �dd � |�r�d | j v�r�|�r�| j p�d }t�� }t|tj�r�|�d �}| j �d tt|��� |�|� n�t|ttf�r�|�|� n�t |d�s�t |d��r�t|�\}}|�rVt||�}|dk�r*td��| j �d t|�� t||�}|�s�td��nFt � d� t |�} | � d�| _ |�| � d�� | j �d t| � d��� |�r�t �!|�"� �} | �#d �} | | j d < d S )N�dateT)Zusegmt�host�bufferr � content-typezapplication/octet-streamzapplication/json�x-content-sha256� zutf-8�content-length���znUnable to read stream for signing! Please sign the stream yourself by using the custom header x-content-sha256z,Unable to rewind request body while signing!z=Stream cannot be rewound, trying to backup and sign the body!Z byte_content�content_length)$�headers� setdefault�email�utilsZ formatdater �moves�urllib�parse�urlparse�url�netloc�hasattr�body�hashlib�sha256r# Z string_typesr$ �str�len�update�bytes� bytearrayr r �IOErrorr �loggerZwarningr �get�base64Z b64encodeZdigest�decode) �request� sign_body�enforce_content_headersr< �mZis_body_rewindableZoriginal_positionr0 Zis_rewind_success�streamZ base64digestZ base64stringr r r �inject_missing_headersY sL �� rN c @ s e Zd ZdZdd� Zdd� ZdS )�_PatchedHeaderSignerzTSignature algorithm="rsa-sha256",headers="{}",keyId="{}",signature="%s",version="{}"c C sV d| _ d| _d | _tjj| j | _|| _| j�� | _ || _ | j � d� |�|t�| _d S )NZrsar> � )Zsign_algorithmZhash_algorithm�_hashr r4 ZHASHESZ_rsahash� _rsa_private� public_key� _rsa_publicr1 �HEADER_SIGNER_TEMPLATE�format�join�SIGNATURE_VERSION�signature_template)�self�key_id� private_keyr1 r r r �__init__� s z _PatchedHeaderSigner.__init__c C s6 d | _ || _| j�� | _| j�d�| j�|t�| _ d S )NrP ) rQ rR rS rT rU rV rW r1 rX rY )rZ r[ r\ r r r � reset_signer� s z!_PatchedHeaderSigner.reset_signerN)�__name__� __module__� __qualname__rU r] r^ r r r r rO � s rO c @ s< e Zd Zdd� Zdd� Zd dd�Zddd �Zed d � �Zd S )�AbstractBaseSignerc C s( t |||d�| _t |||| d�| _d S )N)r[ r\ r1 )rO � _basic_signer� _body_signer)rZ �api_keyr\ �generic_headers� body_headersr r r �create_signers� s ��z!AbstractBaseSigner.create_signersc C s$ |j �� }|dvr td�|���d S )N)rF �head�delete�put�post�patchz&Don't know how to sign request verb {})�method�lowerr& rV )rZ rI �verbr r r �validate_request� s z#AbstractBaseSigner.validate_requestTc C sz |j �� }|dv }|r"|r"| j}n| j}|j�dd � t|||� |j|jtj j j � |j �j|j |jd�}|j�|� |S )N)rk rl rm zTransfer-Encoding)r) rn r )rn ro rd rc r1 �poprN �signr r5 r6 r7 r8 r9 r: Zpath_urlrA )rZ rI rK rp rJ ZsignerZsigned_headersr r r �do_request_sign� s � z"AbstractBaseSigner.do_request_signc C s | � |� | �||�S )N)rq rt )rZ rI rK r r r �__call__� s zAbstractBaseSigner.__call__c C s t j| dd�S )NF)rK )� functools�partial)rZ r r r �without_content_headers� s z*AbstractBaseSigner.without_content_headersN)T)T) r_ r` ra rh rq rt ru �propertyrx r r r r rb � s rb c @ s& e Zd ZdZddd�Zedd� �ZdS )�Signera� A requests auth instance that can be reused across requests. This signer is intended to be used when signing requests for a given user and it requires that user's ID, their private key and cerificate fingerprint. The private key can be sourced from a file (private_key_file_location) or the PEM string can be provided directly (private_key_content). The headers to be signed by this signer are not customizable. You can manually sign calls by creating an instance of the signer, and providing it as the ``auth`` argument to Requests functions: .. code-block:: python import requests from oci import Signer auth = Signer(...) resp = requests.get("https://...", auth=auth) Nc C s\ |d | d | | _ |r(t||�| _n t||�| _g d�}g d�}| �| j | j||� d S )N�/)r( z(request-target)r) )r. r+ r, )re r r\ r rh ) rZ �tenancy�user� fingerprint�private_key_file_locationr �private_key_contentrf rg r r r r] � s zSigner.__init__c C sD ddl m} || � t| d | d | d | d | �d�| �d�d �S ) Nr )�validate_configr| r} r~ Zkey_filer Z key_content)r r r� )�configr� rz rF )r� r� r r r � from_config s �zSigner.from_config)NN)r_ r` ra �__doc__r] � staticmethodr� r r r r rz � s rz )N)+Z __future__r rG Z email.utilsr3 r= r rv r Z oci._vendorr Zoci.utilr r r r Z_vendorr r � exceptionsr r Zcryptography.exceptionsr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr ZloggingZ getLoggerr_ rE rX r r rN rs Z HeaderSignerrO ZauthZAuthBaserb rz r r r r �<module> s, 55!1