|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/boto/__pycache__/ |
Upload File : |
o
ckF[V� � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl m
Z
ddl Z ddl Z ddl
Z
ddlmZmZmZmZ ddlmZ ddlmZ zddlmZ ddlmZ W n eyi ddlZdZY nw g d �Zg d
�ZG d d � d e �Z G d
d� dee �Z G dd� dee �Z G dd� dee �Z G dd� dee �Z!G dd� dee �Z"G dd� dee �Z#G dd� de#e�Z$G dd � d e�Z%G d d � d e �Z&G d d � d e&e�Z'G d!d"� d"e&e�Z(G d#d$� d$e&e�Z)G d%d&� d&e)e�Z*d-d'd(�Z+d)d*� Z,d+d,� Z-dS ).z/
Handles authentication required to AWS and GS
� N)�
formatdate)�urllib� encodebytes�
parse_qs_safe�urlparse)� AuthHandler)�BotoClientError)�sha1)�sha256)z-ap-northeast-1z.ap-northeast-1z-ap-southeast-1z.ap-southeast-1z-ap-southeast-2z.ap-southeast-2z
-eu-west-1z
.eu-west-1z -external-1z .external-1z
-sa-east-1z
.sa-east-1z
-us-east-1z
.us-east-1z-us-gov-west-1z.us-gov-west-1z
-us-west-1z
.us-west-1z
-us-west-2z
.us-west-2)
z.cn-z .eu-centralz -eu-centralz.ap-northeast-2z-ap-northeast-2z .ap-south-1z -ap-south-1z
.us-east-2z
-us-east-2z -ca-centralz .ca-centralz
.eu-west-2z
-eu-west-2c @ sH e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dS )�HmacKeysz Key based Auth handler helper.c C s2 |j d u s
|jd u rtj�� �|| _| �|� d S �N)�
access_key�
secret_key�boto� auth_handler�NotReadyToAuthenticate�host�update_provider��selfr �config�provider� r �+/usr/lib/python3/dist-packages/boto/auth.py�__init__e s
zHmacKeys.__init__c C sL || _ tj| j j�d�td�| _tr!tj| j j�d�td�| _d S d | _d S �N�utf-8)� digestmod) � _provider�hmac�newr �encode�sha�_hmacr
� _hmac_256�r r r r r r k s � �
zHmacKeys.update_providerc C s | j rdS dS )N�
HmacSHA256�HmacSHA1)r$ �r r r r � algorithmu s zHmacKeys.algorithmc C s( | j rt}nt}tj| jj�d�|d�S r )r$ r
r" r r r r r! )r r r r r � _get_hmac{ s �zHmacKeys._get_hmacc C s. | � � }|�|�d�� t|�� ��d��� S �Nr )r* �updater! r �digest�decode�strip)r �string_to_sign�new_hmacr r r � sign_string� s zHmacKeys.sign_stringc C s t � | j�}|d= |d= |S )Nr# r$ )�copy�__dict__)r � pickled_dictr r r � __getstate__� s zHmacKeys.__getstate__c C s || _ | �| j� d S r )r4 r r )r �dctr r r � __setstate__� s zHmacKeys.__setstate__N) �__name__�
__module__� __qualname__�__doc__r r r) r* r2 r6 r8 r r r r r b s
r c s. e Zd ZdZdgZ� fdd�Zdd� Z� ZS )�AnonAuthHandlerz(
Implements Anonymous requests.
�anonc s t t| ��|||� d S r )�superr= r r �� __class__r r r � s zAnonAuthHandler.__init__c K s d S r r )r � http_request�kwargsr r r �add_auth� s zAnonAuthHandler.add_auth)r9 r: r; r< �
capabilityr rD �
__classcell__r r r@ r r= � s
r= c �8 e Zd ZdZddgZdd� Z� fdd�Zdd � Z� ZS )
�HmacAuthV1Handlerz: Implements the HMAC request signing used by S3 and GS.zhmac-v1�s3c C �* t �| |||� t�| |||� d | _d S r �r r r r$ r r r r r � �
zHmacAuthV1Handler.__init__c � t t| ��|� d | _d S r )r? rH r r$ r% r@ r r r � �
z!HmacAuthV1Handler.update_providerc K s� |j }|j}|j}d|vrtdd�|d< | jjr"| jj}| jj||< tj� |||d | j�}tj
� d| � | � |�}| jj
} d| | jj|f }
tj
� d|
� |
|d< d S )N�DateT��usegmt�StringToSign:
%s�%s %s:%s�
Signature:
%s�
Authorization)�headers�method� auth_pathr r �security_token�security_token_headerr �utils�canonical_string�log�debugr2 � auth_headerr
) r rB rC rV rW rX �keyr0 �b64_hmac�auth_hdr�authr r r rD � s$
�
zHmacAuthV1Handler.add_auth� r9 r: r; r< rE r r rD rF r r r@ r rH � s rH c rG )
�HmacAuthV2HandlerzJ
Implements the simplified HMAC authorization used by CloudFront.
zhmac-v2�
cloudfrontc C rJ r rK r r r r r � rL zHmacAuthV2Handler.__init__c rM r )r? re r r$ r% r@ r r r � rN z!HmacAuthV2Handler.update_providerc K sh |j }d|vrtdd�|d< | jjr | jj}| jj||< | �|d �}| jj}d|| jj|f |d< d S )NrO TrP rS rU )rV r r rY rZ r2 r_ r
)r rB rC rV r` ra rb r r r rD � s � �zHmacAuthV2Handler.add_authrd r r r@ r re � s re c @ s( e Zd ZdZg d�Zdd� Zdd� ZdS )�HmacAuthV3Handlerz@Implements the new Version 3 HMAC authorization used by Route53.)zhmac-v3�route53�sesc C �$ t �| |||� t�| |||� d S r �r r r r r r r r � � zHmacAuthV3Handler.__init__c K sr |j }d|vrtdd�|d< | jjr | jj}| jj||< | �|d �}d| jj }|d| �� |f 7 }||d< d S )NrO TrP z AWS3-HTTPS AWSAccessKeyId=%s,zAlgorithm=%s,Signature=%s�X-Amzn-Authorization)rV r r rY rZ r2 r
r) )r rB rC rV r` ra �sr r r rD � s zHmacAuthV3Handler.add_authN)r9 r: r; r< rE r rD r r r r rg � s
rg c @ s> e Zd ZdZdgZdd� Zdd� Zdd� Zd d
� Zd d � Z d
S )�HmacAuthV3HTTPHandlerzK
Implements the new Version 3 HMAC authorization used by DynamoDB.
z hmac-v3-httpc C rj r rk r r r r r rl z HmacAuthV3HTTPHandler.__init__c C s< d| j i}|j�� D ]\}}|�� }|�d�r|||< q
|S )�k
Select the headers from the request that need to be included
in the StringToSign.
�Host�x-amz)r rV �items�lower�
startswith)r rB �headers_to_sign�name�value�lnamer r r rv s
�z%HmacAuthV3HTTPHandler.headers_to_signc s t � fdd�� D ��}d�|�S )�
Return the headers that need to be included in the StringToSign
in their canonical form by converting all header keys to lower
case, sorting them in alphabetical order and then joining
them into a string, separated by newlines.
c s( g | ]}d |� � �� � | �� f �qS )�%s:%s�rt r/ ��.0�n�rv r r �
<listcomp> s
�
�z;HmacAuthV3HTTPHandler.canonical_headers.<locals>.<listcomp>�
��sorted�join�r rv �lr r� r �canonical_headers s �
z'HmacAuthV3HTTPHandler.canonical_headersc C s8 | � |�}| �|�}d�|j|jd|d|jg�}||fS )��
Return the canonical StringToSign as well as a dict
containing the original version of all headers that
were included in the StringToSign.
r� � )rv r� r� rW rX �body)r rB rv r� r0 r r r r0 s
�z$HmacAuthV3HTTPHandler.string_to_signc K s� d|j v r |j d= tdd�|j d< | jjr | jj|j d< | �|�\}}tj�d| � t|� d���
� }| � |�}d| jj }|d | �
� 7 }|d
d �|� 7 }|d | 7 }||j d< d
S )z�
Add AWS3 authentication to a request.
:type req: :class`boto.connection.HTTPRequest`
:param req: The HTTPRequest object.
rm TrP �
X-Amz-Date�X-Amz-Security-TokenrR r zAWS3 AWSAccessKeyId=%s,z
Algorithm=%s,zSignedHeaders=%s,�;� Signature=%sN)rV r r rY r0 r r] r^ r
r! r- r2 r
r) r� )r �reqrC r0 rv �
hash_valuera rn r r r rD , s
z HmacAuthV3HTTPHandler.add_authN)
r9 r: r; r< rE r rv r� r0 rD r r r r ro � s ro c @ s� e Zd ZdZdgZ d+dd�Zd,dd�Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� ZdS )-�HmacAuthV4Handlerz:
Implements the new Version 4 HMAC authorization.
�hmac-v4Nc C s0 t �| |||� t�| |||� || _|| _d S r )r r r � service_name� region_name)r r r r r� r� r r r r L s
zHmacAuthV4Handler.__init__Fc C sP t |t�s
|�d�}|rt�||�d�t��� }|S t�||�d�t��� }|S r+ )�
isinstance�bytesr! r r r
� hexdigestr- )r r` �msg�hex�sigr r r �_signV s
�zHmacAuthV4Handler._signc C sr | � | j|�}|j�d�r|jd }d|i}|j�� D ]\}}|�� }|�d�r6t|t�r2|� d�}|||< q|S )rp rq rr r )
� host_headerr rV �getrs rt ru r� r� r. �r rB �host_header_valuerv rw rx ry r r r rv ` s
�z!HmacAuthV4Handler.headers_to_signc C s8 |j }|jdk}|dkr|r|dkr|r|S d||f S �N�https�P i� r{ )�port�protocol�r r rB r� �securer r r r� q s
z HmacAuthV4Handler.host_headerc C sb t |j�� �}g }|D ] }tj�|j| �}|�tjj |dd�d tjj |dd� � q d�
|�S )Nr� ��safe�=�-_~�&) r� �params�keysr r[ �get_utf8_value�appendr �parse�quoter� )r rB �parameter_names�pairs�pname�pvalr r r � query_stringx s �
z HmacAuthV4Handler.query_stringc C sh |j dkrdS g }t|j�D ] }tj�|j| �}|�dtjj |dd�tjj |dd�f � qd�
|�S )N�POSTr� �%s=%s�-_.~r� r� ) rW r� r� r r[ r� r� r r� r� r� �r rB r� �paramrx r r r �canonical_query_string� s
�
z(HmacAuthV4Handler.canonical_query_stringc C sj g }|D ])}|� � �� }t|| �}d|v r|�� }n d�|�� �� �}|�d||f � qd�t|��S )rz �"� r{ r� )rt r/ �strr� �splitr� r� )r rv � canonical�header�c_name� raw_value�c_valuer r r r� � s
z#HmacAuthV4Handler.canonical_headersc C s dd� |D �}t |�}d�|�S )Nc S � g | ]
}d |� � �� �qS �z%sr| r} r r r r� � � z4HmacAuthV4Handler.signed_headers.<locals>.<listcomp>r� r� r� r r r �signed_headers� s
z HmacAuthV4Handler.signed_headersc C sF |j }t�|��dd�}tj�|�}t|�dkr!|�d�r!|d7 }|S )N�\�/� ) rX � posixpath�normpath�replacer r� r� �len�endswith)r rB �path�
normalized�encodedr r r �
canonical_uri� s z HmacAuthV4Handler.canonical_uric C sN |j }t|d�rt|d�rtjj|td�d S t|t�s!|�d�}t|�� � S )N�seek�read)�hash_algorithmr r )
r� �hasattrr r[ � compute_hashr
r� r� r! r� )r rB r� r r r �payload� s
zHmacAuthV4Handler.payloadc C st |j �� g}|�| �|�� |�| �|�� | �|�}|�| �|�d � |�| �|�� |�| �|�� d� |�S )Nr� )
rW �upperr� r� r� rv r� r� r� r� )r rB �crrv r r r �canonical_request� s
z#HmacAuthV4Handler.canonical_requestc C sB | j jg}|�|j� |�|j� |�|j� |�d� d�|�S )N� aws4_requestr� )r r
r� � timestampr� r� r� )r rB �scoper r r r� � s
zHmacAuthV4Handler.scopec C s
|� d�S )N�.)r� �r r r r r �split_host_parts� s
z"HmacAuthV4Handler.split_host_partsc C sj | � |�}| jd ur| j}|S t|�dkr/|d dkr d}|S t|�dkr)d}|S |d }|S |d }|S )Nr� zus-govz
us-gov-west-1� � us-east-1r )r� r� r� )r r �partsr� r r r �determine_region_name� s
� ���z'HmacAuthV4Handler.determine_region_namec C s* | � |�}| jd ur| j}|S |d }|S )Nr )r� r� )r r r� r� r r r �determine_service_name� s
�z(HmacAuthV4Handler.determine_service_namec C st g }|j d dd� |_|�|j� | �|j�}| �|j�}||_||_|�|j� |�|j� |�d� d�|�S )Nr� r � r� r� ) rV r� r� r� r r� r� r� r� )r rB r� r� r� r r r �credential_scope� s
z"HmacAuthV4Handler.credential_scopec C sH dg}|� |jd � |� | �|�� |� t|�d���� � d�|�S )r� �AWS4-HMAC-SHA256r� r r� )r� rV r� r
r! r� r� )r rB r� �stsr r r r0 � s
z HmacAuthV4Handler.string_to_signc C sX | j j}| �d| �d�|j�}| �||j�}| �||j�}| �|d�}| j||dd�S )N�AWS4r r� T)r� )r r r� r! r� r� r� )r rB r0 r` �k_date�k_region� k_service� k_signingr r r � signature s � zHmacAuthV4Handler.signaturec K sb d|j v r |j d= tj�� }|�d�|j d< | jjr!| jj|j d< | �|�}|}d|v r3| �|d �}|rM|jdkrM||_d|j d< t t
|j��|j d < n|j � d
�d |_ |r`|j d
| |_ | �
|�}tj�d | � | �||�}tj�d
| � | �||�}tj�d| � | �|�} d| �|� g}
|
�d| �| � � |
�d| � d�|
�|j d< dS )z�
Add AWS4 authentication to a request.
:type req: :class`boto.connection.HTTPRequest`
:param req: The HTTPRequest object.
rm �%Y%m%dT%H%M%SZr� r� �
unmangled_reqr� �0application/x-www-form-urlencoded; charset=UTF-8� Content-Type�Content-Length�?r zCanonicalRequest:
%srR rT z AWS4-HMAC-SHA256 Credential=%szSignedHeaders=%sr� �,rU N)rV �datetime�utcnow�strftimer rY r� rW r� r� r� r� r� r� r r] r^ r0 r� rv r� r� r� r� ) r r� rC �now�qs�
qs_to_postr� r0 r� rv r� r r r rD s8
zHmacAuthV4Handler.add_auth)NN)F)r9 r: r; r< rE r r� rv r� r� r� r� r� r� r� r� r� r� r� r� r� r0 r� rD r r r r r� E s.
�
r� c s� e Zd ZdZdgZ� fdd�Zdd� Zdd� Zd d
� Zd d � Z d
d� Z
dd� Z dd� Z dd� Z
� fdd�Z� fdd�Zd dd�Z� ZS ) �S3HmacAuthV4HandlerzN
Implements a variant of Version 4 HMAC authorization specific to S3.
�
hmac-v4-s3c s2 t t| �j|i |�� | jr| �| j�| _d S d S r )r? r r r� �clean_region_name)r �argsrC r@ r r r O s �z S3HmacAuthV4Handler.__init__c C s |� d�r |dd � S |S )N�s3-r� )ru )r r� r r r r U s
z%S3HmacAuthV4Handler.clean_region_namec C s0 t j�|j�}t j�|j�}t jj|dd�}|S )Nz/~r� )r r� r r� �unquoter� )r rB r� �unquotedr� r r r r� [ s z!S3HmacAuthV4Handler.canonical_uric C sZ g }t |j�D ] }tj�|j| �}|�dtjj|dd�tjj|dd�f � qd� |�S )Nr� r� r� r� )
r� r� r r[ r� r� r r� r� r� r� r r r r� e s
�
z*S3HmacAuthV4Handler.canonical_query_stringc C s< |j }|jdk}|dkr|r|dkr|r|jS d|j|f S r� )r� r� r r� r r r r� p s
z S3HmacAuthV4Handler.host_headerc C sF | � | j|�}d|i}|j�� D ]\}}|�� }|dvr |||< q|S )rp rq )�
authorization)r� r rV rs rt r� r r r rv w s �z#S3HmacAuthV4Handler.headers_to_signc C s� | � |�}| jd ur| j}|S t|�dkr$| �|d �}|dkr"d}|S tt|��D ]'\}}|�� }|dkrD|| }|dkrAd} |S |�d�rQ| �|�} |S q*|S )Nr� r rI r� � amazonawsr )r� r� r� r � enumerate�reversedrt ru )r r r� r� �offset�partr r r r� � s.
��
�
�z)S3HmacAuthV4Handler.determine_region_namec C s dS )NrI r r� r r r r� � s z*S3HmacAuthV4Handler.determine_service_namec C s� t � |�}tj�|j�}|j|_|jdu ri |_n|j� � }||_|j}t|dd�}|� � D ]\}}t
|t t f�rEt
|�dkrE|d ||< q.|j�|� |S )z|
Returns a copy of the request object with fixed ``auth_path/params``
attributes from the original.
NT)�keep_blank_valuesr� r )r3 r r� r rX r� r� �queryr rs r� �list�tupler� r, ) r r� � modified_req� parsed_path� copy_params�raw_qs� existing_qsr` rx r r r �mangle_path_and_params� s&
� � z*S3HmacAuthV4Handler.mangle_path_and_paramsc s& |j �d�r |j d S tt| ��|�S )N�x-amz-content-sha256)rV r� r? r r� )r rB r@ r r r� � s
zS3HmacAuthV4Handler.payloadc s^ d|j vr d|j v r|j �d�|j d< n| �|�|j d< | �|�}tt| �j|fd|i|��S )Nr �_sha256r� )rV �popr� r r? r rD )r r� rC � updated_reqr@ r r rD � s
��z S3HmacAuthV4Handler.add_authNc C s |du r t j �� �d�}| �|j�}| �|j�}dd| jj|dd� ||f ||dd�}| jjr6| jj|d< | � |�}t
d d
� |D ��}d � |�|d < |j �
|� | �|�} d
� | �d
�dd� �d } ||jd< | �|| �}
| �||
�} | |j d< d|j|j|jtj�|j �f S )z�
Presign a request using SigV4 query params. Takes in an HTTP request
and an expiration time in seconds and returns a URL.
http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html
Nr� r� z%s/%s/%s/%s/aws4_requestr� r )zX-Amz-AlgorithmzX-Amz-Credentialr� z
X-Amz-Expires�X-Amz-SignedHeadersr� c S r� r� r| r} r r r r� r� z/S3HmacAuthV4Handler.presign.<locals>.<listcomp>r� r r� ���z
UNSIGNED-PAYLOADr� zX-Amz-Signaturez %s://%s%s?%s)r� r� r� r� r r� r r
rY rv r� r� r� r, r� r� rV r0 r� r� r� r r� � urlencode) r r� �expires�iso_date�region�servicer� rv r� r� r� r� r r r �presign� s<
��
�zS3HmacAuthV4Handler.presignr )r9 r: r; r< rE r r r� r� r� rv r� r� r r� rD r$ rF r r r@ r r I s
- * r c @ s. e Zd ZdZdgZdd� Zdd� Zdd� Zd S )
�STSAnonHandlerz�
Provides pure query construction (no actual signing).
Used for making anonymous STS request for operations like
``assume_role_with_web_identity``.
zsts-anonc C s t j�|�S r )r r� r� )r rx r r r �
_escape_value4 s z STSAnonHandler._escape_valuec C sb t |�� �}|jdd� d� g }|D ]}tj�|| �}|�|d | �|�d�� � qd� |�S )Nc S � | � � S r �rt ��xr r r �<lambda>= � z4STSAnonHandler._build_query_string.<locals>.<lambda>�r` r� r r� )
r r� �sortr r[ r� r� r& r. r� )r r� r� r� r` �valr r r �_build_query_string; s
z"STSAnonHandler._build_query_stringc K s4 |j }| �|j�}tj�d| � d|d< ||_d S )Nzquery_string in body: %sz!application/x-www-form-urlencodedr� )rV r0 r� r r] r^ r� )r rB rC rV r r r r rD D s �
zSTSAnonHandler.add_authN)r9 r: r; r< rE r& r0 rD r r r r r% * s r% c @ s e Zd ZdZdd� ZdS )�QuerySignatureHelperzy
Helper for Query signature based Auth handler.
Concrete sub class need to implement _calc_sigature method.
c K s� |j }|j}| jj|d< | j|d< tj�� |d< | �|j|j |j
|j �\}}tj �
d||f � |j dkrPd|d< |d tj�|� |_tt|j��|j d < d S d
|_|j�d �d |_|jd | d tj�|� |_d S )
N�AWSAccessKeyId�SignatureVersion� Timestamp� query_string: %s Signature: %sr� r� r� � &Signature=r� r� r� r )rV r� r r
r3 r r[ �get_ts�_calc_signaturerW rX r r] r^ r r� �
quote_plusr� r� r� r� r� )r rB rC rV r� r r� r r r rD W s*
�
�
�z QuerySignatureHelper.add_authN)r9 r: r; r< rD r r r r r1 P s r1 c @ s" e Zd ZdZdZdgZdd� ZdS )�QuerySignatureV0AuthHandlerz Provides Signature V0 Signingr zsign-v0c
G s� t j�d� | �� }|d |d }|�|�d�� |�� }|jdd� d� g }|D ]}t j� || �}|�
|d t j �
|� � q*d �|�} | t�|�� �fS )
Nzusing _calc_signature_0�Actionr4 r c S s t | �� |�� �S r )�cmprt )r* �yr r r r+ z � z=QuerySignatureV0AuthHandler._calc_signature.<locals>.<lambda>)r< r� r� )r r] r^ r* r, r! r� r. r[ r� r� r r� r� r� �base64� b64encoder- )
r r� r r rn r� r� r` r/ r r r r r8 t s
z+QuerySignatureV0AuthHandler._calc_signatureN�r9 r: r; r< r3 rE r8 r r r r r: n s
r: c @ s, e Zd ZdZdZddgZdd� Zdd� Zd S )
�QuerySignatureV1AuthHandlerz5
Provides Query Signature V1 Authentication.
r� zsign-v1�mturkc O s: t j| g|�R i |�� tj| g|�R i |�� d | _d S r )r1 r r r$ )r r �kwr r r r � s
z$QuerySignatureV1AuthHandler.__init__c G s� t j�d� | �� }t|�� �}|jdd� d� g }|D ]$}|�|�d�� t j �
|| �}|�|� |� |d t j
�|� � q d�|�}|t�|�� �fS )Nzusing _calc_signature_1c S r' r r( r) r r r r+ � r, z=QuerySignatureV1AuthHandler._calc_signature.<locals>.<lambda>r- r r� r� )r r] r^ r* r r� r. r, r! r[ r� r� r r� r� r� r? r@ r- ) r r� r r r� r� r` r/ r r r r r8 � s
z+QuerySignatureV1AuthHandler._calc_signatureN)r9 r: r; r< r3 rE r r8 r r r r rB � s rB c @ s$ e Zd ZdZdZg d�Zdd� ZdS )�QuerySignatureV2AuthHandlerz+Provides Query Signature V2 Authentication.� ) zsign-v2�ec2rG �emr�fps�ecs�sdb�iam�rds�sns�sqs�cloudformationc
C s t j�d� d||�� |f }| �� }| �� |d< | jjr#| jj|d< t|� � �}g }|D ] } t j
� || �}
|� t
jj| dd�d t
jj|
dd� � q-d �|�} t j�d
| � || 7 }t j�d | � |�|�d �� t�|�� �} t j�d
t| � � t j�d| � | | fS )Nzusing _calc_signature_2z %s
%s
%s
�SignatureMethod�
SecurityTokenr� r� r� r� r� zquery string: %szstring_to_sign: %sr z len(b64)=%dzbase64 encoded digest: %s)r r] r^ rt r* r) r rY r� r� r[ r� r� r r� r� r� r, r! r? r@ r- r� )
r r� �verbr� � server_namer0 r r� r� r` r/ r �b64r r r r8 � s, �
z+QuerySignatureV2AuthHandler._calc_signatureNrA r r r r rE � s
rE c @ s e Zd ZdZdgZdd� ZdS )�POSTPathQSV2AuthHandlerz�
Query Signature V2 Authentication relocating signed query
into the path and allowing POST requests with Content-Types.
�mwsc K s� | j j|jd< | j|jd< tj�� |jd< | �|j|j|j |j
�\}}tj � d||f � |jdkrGt
t|j��|jd< |j�dd�|jd< nd |_|j�d
�d |_|jd
| d tj�|� |_d S )
Nr2 r3 r4 r5 r� r� r� z
text/plainr� r� r r6 )r r
r� r3 r r[ r7 r8 rW rX r r] r^ r� r� r� rV r� r� r� r r� r9 )r r� rC r r� r r r rD � s& �
� �
�z POSTPathQSV2AuthHandler.add_authN)r9 r: r; r< rE rD r r r r rV � s rV c C s� g }t j�t|�}|D ]}z |�|| ||�� W q t jjy# Y q w |s=|}dd� |D �}t j�dt |�t
|�f ��|d S )a� Finds an AuthHandler that is ready to authenticate.
Lists through all the registered AuthHandlers to find one that is willing
to handle for the requested capabilities, config and provider.
:type host: string
:param host: The name of the host
:type config:
:param config:
:type provider:
:param provider:
Returns:
An implementation of AuthHandler.
Raises:
boto.exception.NoAuthHandlerFound
c S s g | ]}|j �qS r )r9 )r~ �handlerr r r r� � r> z$get_auth_handler.<locals>.<listcomp>zYNo handler was ready to authenticate. %d handlers were checked. %s Check your credentialsr ) r �plugin�
get_pluginr r� r r � exception�NoAuthHandlerFoundr� r� ) r r r �requested_capability�ready_handlers�
auth_handlersrX �checked_handlers�namesr r r �get_auth_handler� s" ���rb c � � fdd�}|S )Nc sj t j�dd�r
dgS tj�ddd�rdgS t| d�r1t| jdd�r1tD ]
}|| jj v r0dg S q#� | �S ) N�
EC2_USE_SIGV4Fr� rG � use-sigv4r" �endpointr� )
�os�environr� r r r� �getattrr" � SIGV4_DETECTrf )r �test��funcr r �_wrapper
s
�z(detect_potential_sigv4.<locals>._wrapperr �rm rn r rl r �detect_potential_sigv4 s rp c rc )Nc s� t j�dd�r
dgS tj�ddd�rdgS t� d�s �� �S tD ] }|� jv r,dg S q � j}� j�d�r<� j�d�r@d| }t |�j
}|� d �sS|� d
�sS�� �S |� d �r\�� �S t � fd d
�t
D ��rk�� �S t� d�rw� jrw�� �S dgS )N� S3_USE_SIGV4Fr rI re r zhttp://zhttps://z
amazonaws.comzamazonaws.com.cnzs3.amazonaws.comc 3 s � | ]}|� j v V qd S r )r )r~ rk r( r r � <genexpr>A s � z=detect_potential_s3sigv4.<locals>._wrapper.<locals>.<genexpr>r> )rg rh r� r r r� rj r ru r �netlocr� �any�S3_AUTH_DETECTr> )r rk r rs rl r( r rn " s6
�
�
�
z*detect_potential_s3sigv4.<locals>._wrapperr ro r rl r �detect_potential_s3sigv4! s )rv r ).r< r? r �boto.auth_handler�boto.exception� boto.plugin�
boto.utilsr3 r� � email.utilsr r rg r� � boto.compatr r r r r r �hashlibr r" r
� ImportErrorru rj �objectr r= rH re rg ro r� r r% r1 r: rB rE rV rb rp rv r r r r �<module> sZ �1# K b&
2