File: //usr/local/CyberCP/lib64/python3.10/site-packages/botocore/crt/__pycache__/auth.cpython-310.pyc
o
�h�b � @ s d dl Z d dlmZ d dlmZmZmZmZmZm Z d dl
m Z m Z m
Z
mZmZ d dlmZ d dlmZ G dd� de�ZG d d
� d
e�ZG d d � d e�ZG d
d� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�Zeeeeeeed�Z dS )� N)�BytesIO)�SIGNED_HEADERS_BLACKLIST�"STREAMING_UNSIGNED_PAYLOAD_TRAILER�UNSIGNED_PAYLOAD�
BaseSigner�_get_body_as_dict�_host_from_url)� HTTPHeaders�awscrt�parse_qs�urlsplit�
urlunsplit)�NoCredentialsError)�percent_encode_sequencec @ �z e Zd ZdZg d�ZejjjZ dZ
dZ dd� Z dd� Z
dd� Zd d
� Zd d � Zd
d� Zdd� Zdd� Zdd� Zdd� ZdS )� CrtSigV4AuthT��
Authorizationz
X-Amz-Date�X-Amz-Content-SHA256zX-Amz-Security-Tokenc C � || _ || _|| _d | _d S �N�� credentials�
_service_name� _region_name�_expiration_in_seconds��selfr � service_name� region_name� r �D/usr/local/CyberCP/lib/python3.10/site-packages/botocore/crt/auth.py�__init__* �
zCrtSigV4Auth.__init__c C �0 |j �di �}|�d�}t|t�o|�d�dkS �N�checksum�request_algorithm�in�trailer��context�get�
isinstance�dict�r �request�checksum_context� algorithmr r r! � _is_streaming_checksum_payload0 �
z+CrtSigV4Auth._is_streaming_checksum_payloadc
C � | j d u rt� �tj�� jtjjd�}| �|�}| �|� t j
j j | j j
| j j| j jd�}| �|�r5t}n| �|�rB|r?|}nd }nt}| �|�rOt j
jj}nt j
jj}t j
jt j
jj| j|| j | j || j | j | j ||| j!d� }| �"|�}t j
�#||�} | �$� | �%||� d S �N)�tzinfo)�
access_key_id�secret_access_key�
session_token) r2 �signature_type�credentials_provider�region�service�date�should_sign_header�use_double_uri_encode�should_normalize_uri_path�signed_body_value�signed_body_header_type�expiration_in_seconds)&r r �datetime�utcnow�replace�timezone�utc�_get_existing_sha256� _modify_request_before_signingr
�auth�AwsCredentialsProvider�
new_static�
access_key�
secret_key�tokenr3 r �_should_sha256_sign_payloadr �!_should_add_content_sha256_header�AwsSignedBodyHeaderType�X_AMZ_CONTENT_SHA_256�NONE�AwsSigningConfig�AwsSigningAlgorithm�V4�_SIGNATURE_TYPEr r �_should_sign_header�_USE_DOUBLE_URI_ENCODE�_SHOULD_NORMALIZE_URI_PATHr � _crt_request_from_aws_request�aws_sign_request�result�_apply_signing_changes�
r r0 � datetime_now�existing_sha256r< �explicit_payload� body_header�signing_config� crt_request�futurer r r! �add_auth5 �R
�
�
�
�
zCrtSigV4Auth.add_authc
C �� t |j�}|jr |jnd}|jr4g }|j�� D ]\}}t|�}|�|� d|� �� q|d d�|� }n |jr?|� d|j� �}t j
� |j �� �}d }|j
r\t|j
d�rW|j
}nt|j
�}t j
j|j|||d�} | S �N�/�=�?�&�seek)�method�path�headers� body_stream�r �urlru �params�items�str�append�join�queryr
�http� HttpHeadersrv �body�hasattrr � HttpRequestrt �
r � aws_request� url_parts�crt_path�array�param�value� crt_headers�crt_body_streamri r r r! r_ n �.
�z*CrtSigV4Auth._crt_request_from_aws_requestc C � t �t|j��|_d S r �r �
from_pairs�listrv �r r� �signed_crt_requestr r r! rb � �
�z#CrtSigV4Auth._apply_signing_changesc K � |� � tvS r ��lowerr �r �name�kwargsr r r! r\ � � z CrtSigV4Auth._should_sign_headerc C �@ | j D ] }||jv r|j|= qd|jvr t|j�|jd< d S d S �N�host�� _PRESIGNED_HEADERS_BLOCKLISTrv r ry �r r0 �hr r r! rL � �
�
�z+CrtSigV4Auth._modify_request_before_signingc C � |j �d�S �Nr �rv r, �r r0 r r r! rK � r� z!CrtSigV4Auth._get_existing_sha256c C � |j �d�sdS |j�dd�S �N�httpsT�payload_signing_enabled�ry �
startswithr+ r, r� r r r! rS � � z(CrtSigV4Auth._should_sha256_sign_payloadc C � |d uS r r �r rf r r r! rT � � z.CrtSigV4Auth._should_add_content_sha256_headerN)�__name__�
__module__� __qualname__�REQUIRES_REGIONr� r
rM �AwsSignatureType�HTTP_REQUEST_HEADERSr[ r] r^ r" r3 rk r_ rb r\ rL rK rS rT r r r r! r s
9
r c �4 e Zd ZdZdZdd� Z� fdd�Zdd� Z� ZS )�CrtS3SigV4AuthFc C � d S r r r� r r r! rK � � z#CrtS3SigV4Auth._get_existing_sha256c s� |j �d�}t|dd �}|d u ri }|�dd �}|d ur |S d}|j �di �}|�d�}t|t�r<|�d�dkr<|d }|j�d
�rG||jvrId S |j �d d
�rRd
S t� � |�S )N�
client_config�s3r� � Content-MD5r& r' r( �headerr� r� T�has_streaming_inputF)
r+ r, �getattrr- r. ry r� rv �superrS )r r0 r� � s3_config� sign_payload�checksum_headerr1 r2 �� __class__r r! rS � s&
�
z*CrtS3SigV4Auth._should_sha256_sign_payloadc C � dS �NTr r� r r r! rT � r� z0CrtS3SigV4Auth._should_add_content_sha256_header� r� r� r� r] r^ rK rS rT �
__classcell__r r r� r! r� � s )r� c @ r )�CrtSigV4AsymAuthTr c C r r r r r r r! r" � r# zCrtSigV4AsymAuth.__init__c
C r5 r6 )&r r rF rG rH rI rJ rK rL r
rM rN rO rP rQ rR r3 r rS r rT rU rV rW rX rY �
V4_ASYMMETRICr[ r r r\ r] r^ r r_ r` ra rb rc r r r! rk � rl zCrtSigV4AsymAuth.add_authc
C rm rn rx r� r r r! r_ 3 r� z.CrtSigV4AsymAuth._crt_request_from_aws_requestc C r� r r� r� r r r! rb Q r� z'CrtSigV4AsymAuth._apply_signing_changesc K r� r r� r� r r r! r\ W r� z$CrtSigV4AsymAuth._should_sign_headerc C r� r� r� r� r r r! rL Z r� z/CrtSigV4AsymAuth._modify_request_before_signingc C r� r� r� r� r r r! rK d r� z%CrtSigV4AsymAuth._get_existing_sha256c C r$ r% r* r/ r r r! r3 g r4 z/CrtSigV4AsymAuth._is_streaming_checksum_payloadc C r� r� r� r� r r r! rS l r� z,CrtSigV4AsymAuth._should_sha256_sign_payloadc C r� r r r� r r r! rT v r� z2CrtSigV4AsymAuth._should_add_content_sha256_headerN)r� r� r� r� r� r
rM r� r� r[ r] r^ r" rk r_ rb r\ rL rK r3 rS rT r r r r! r� � s
9
r� c r� )�CrtS3SigV4AsymAuthFc C r� r r r� r r r! rK � r� z'CrtS3SigV4AsymAuth._get_existing_sha256c st |j �d�}t|dd �}|d u ri }|�dd �}|d ur |S |j�d�r)d|jvr+dS |j �dd�r4dS t� �|�S ) Nr� r� r� r� r� Tr� F)r+ r, r� ry r� rv r� rS )r r0 r� r� r� r� r r! rS � s
�
z.CrtS3SigV4AsymAuth._should_sha256_sign_payloadc C r� r� r r� r r r! rT � r� z4CrtS3SigV4AsymAuth._should_add_content_sha256_headerr� r r r� r! r� { s $r� c �F e Zd ZdZejjjZef� fdd� Z � fdd�Z
� fdd�Z � Z S )�CrtSigV4AsymQueryAuth� c � t � �|||� || _d S r �r� r" r �r r r r �expiresr� r r! r" � �
z CrtSigV4AsymQueryAuth.__init__c s� t � �|� |j�d�}|dkr|jd= t|j�}t|jdd�}dd� |�� D �}|j r6|�
t |�� d|_ t |�}|}|d |d |d
||d f}t
|�|_d S ) N� content-type�0application/x-www-form-urlencoded; charset=utf-8T��keep_blank_valuesc S � i | ] \}}||d �qS �r r ��.0�k�vr r r! �
<dictcomp>� s zHCrtSigV4AsymQueryAuth._modify_request_before_signing.<locals>.<dictcomp>� r � � � )r� rL rv r, r ry r r r{ �data�updater r r
) r r0 � content_typer� �query_string_parts�
query_dict�new_query_string�p�
new_url_partsr� r r! rL � s
z4CrtSigV4AsymQueryAuth._modify_request_before_signingc �L t � �||� t|j�j}t|j�}t|d |d |d ||d f�|_d S �Nr r� r� r� �r� rb r ru r ry r
�r r� r� � signed_queryr� r� r r! rb � �
( z,CrtSigV4AsymQueryAuth._apply_signing_changes�
r� r� r� �DEFAULT_EXPIRESr
rM r� �HTTP_REQUEST_QUERY_PARAMSr[ r" rL rb r� r r r� r! r� � s
� *r� c @ �( e Zd ZdZdZdZdd� Zdd� ZdS )�CrtS3SigV4AsymQueryAuthz�S3 SigV4A auth using query parameters.
This signer will sign a request using query parameters and signature
version 4A, i.e a "presigned url" signer.
Fc C r� �NFr r� r r r! rS � � z3CrtS3SigV4AsymQueryAuth._should_sha256_sign_payloadc C r� r� r r� r r r! rT r� z9CrtS3SigV4AsymQueryAuth._should_add_content_sha256_headerN�r� r� r� �__doc__r] r^ rS rT r r r r! r� � s r� c r� )�CrtSigV4QueryAuthr� c r� r r� r� r� r r! r" r� zCrtSigV4QueryAuth.__init__c s� t � �|� |j�d�}|dkr|jd= t|j�}dd� t|jdd��� D �}|j r3|�
|j � i |_ |j r@|�
t |�� d|_ t
|�}|}|d |d |d
||d f}t|�|_d S ) Nr� r� c S r� r� r r� r r r! r� ! s ��zDCrtSigV4QueryAuth._modify_request_before_signing.<locals>.<dictcomp>Tr� r� r r� r� r� )r� rL rv r, r ry r r r{ rz r� r� r r r
)r r0 r� r� r� r� r� r� r� r r! rL s*
�� z0CrtSigV4QueryAuth._modify_request_before_signingc r� r� r� r� r� r r! rb B r� z(CrtSigV4QueryAuth._apply_signing_changesr� r r r� r! r� s
� 0r� c @ r� )�CrtS3SigV4QueryAutha S3 SigV4 auth using query parameters.
This signer will sign a request using query parameters and signature
version 4, i.e a "presigned url" signer.
Based off of:
http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html
Fc C r� r� r r� r r r! rS _ r� z/CrtS3SigV4QueryAuth._should_sha256_sign_payloadc C r� r� r r� r r r! rT f r� z5CrtS3SigV4QueryAuth._should_add_content_sha256_headerNr� r r r r! r� S s r� )�v4zv4-query�v4a�s3v4z
s3v4-query�s3v4az s3v4a-query) rF �ior �
botocore.authr r r r r r �botocore.compatr r
r r r
�botocore.exceptionsr �botocore.utilsr r r� r� r� r� r� r� r� �CRT_AUTH_TYPE_MAPSr r r r! �<module> s0
7 2EK
�