Linux iad1-shared-b7-18 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64
Apache
: 67.205.6.31 | : 216.73.216.47
Cant Read [ /etc/named.conf ]
8.2.29
fernandoquevedo
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
README
+ Create Folder
+ Create File
/
usr /
lib /
python3 /
dist-packages /
boto /
__pycache__ /
[ HOME SHELL ]
Name
Size
Permission
Action
__init__.cpython-310.pyc
31.33
KB
-rw-r--r--
auth.cpython-310.pyc
28.84
KB
-rw-r--r--
auth_handler.cpython-310.pyc
1.5
KB
-rw-r--r--
compat.cpython-310.pyc
2.07
KB
-rw-r--r--
connection.cpython-310.pyc
32.05
KB
-rw-r--r--
endpoints.cpython-310.pyc
8.1
KB
-rw-r--r--
exception.cpython-310.pyc
17.35
KB
-rw-r--r--
handler.cpython-310.pyc
1.87
KB
-rw-r--r--
https_connection.cpython-310.p...
4.42
KB
-rw-r--r--
jsonresponse.cpython-310.pyc
4.27
KB
-rw-r--r--
plugin.cpython-310.pyc
1.81
KB
-rw-r--r--
provider.cpython-310.pyc
11.63
KB
-rw-r--r--
regioninfo.cpython-310.pyc
7.12
KB
-rw-r--r--
requestlog.cpython-310.pyc
1.74
KB
-rw-r--r--
resultset.cpython-310.pyc
4.61
KB
-rw-r--r--
storage_uri.cpython-310.pyc
30.2
KB
-rw-r--r--
utils.cpython-310.pyc
28.99
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : auth.cpython-310.pyc
o ckF[V� � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl m Z ddl Z ddl Z ddl Z ddlmZmZmZmZ ddlmZ ddlmZ zddlmZ ddlmZ W n eyi ddlZdZY nw g d �Zg d �ZG d d � d e �Z G d d� dee �Z G dd� dee �Z G dd� dee �Z G dd� dee �Z!G dd� dee �Z"G dd� dee �Z#G dd� de#e�Z$G dd � d e�Z%G d d � d e �Z&G d d � d e&e�Z'G d!d"� d"e&e�Z(G d#d$� d$e&e�Z)G d%d&� d&e)e�Z*d-d'd(�Z+d)d*� Z,d+d,� Z-dS ).z/ Handles authentication required to AWS and GS � N)� formatdate)�urllib� encodebytes� parse_qs_safe�urlparse)� AuthHandler)�BotoClientError)�sha1)�sha256)z-ap-northeast-1z.ap-northeast-1z-ap-southeast-1z.ap-southeast-1z-ap-southeast-2z.ap-southeast-2z -eu-west-1z .eu-west-1z -external-1z .external-1z -sa-east-1z .sa-east-1z -us-east-1z .us-east-1z-us-gov-west-1z.us-gov-west-1z -us-west-1z .us-west-1z -us-west-2z .us-west-2) z.cn-z .eu-centralz -eu-centralz.ap-northeast-2z-ap-northeast-2z .ap-south-1z -ap-south-1z .us-east-2z -us-east-2z -ca-centralz .ca-centralz .eu-west-2z -eu-west-2c @ sH e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dS )�HmacKeysz Key based Auth handler helper.c C s2 |j d u s |jd u rtj�� �|| _| �|� d S �N)� access_key� secret_key�boto� auth_handler�NotReadyToAuthenticate�host�update_provider��selfr �config�provider� r �+/usr/lib/python3/dist-packages/boto/auth.py�__init__e s zHmacKeys.__init__c C sL || _ tj| j j�d�td�| _tr!tj| j j�d�td�| _d S d | _d S �N�utf-8)� digestmod) � _provider�hmac�newr �encode�sha�_hmacr � _hmac_256�r r r r r r k s � � zHmacKeys.update_providerc C s | j rdS dS )N� HmacSHA256�HmacSHA1)r$ �r r r r � algorithmu s zHmacKeys.algorithmc C s( | j rt}nt}tj| jj�d�|d�S r )r$ r r" r r r r r! )r r r r r � _get_hmac{ s �zHmacKeys._get_hmacc C s. | � � }|�|�d�� t|�� ��d��� S �Nr )r* �updater! r �digest�decode�strip)r �string_to_sign�new_hmacr r r � sign_string� s zHmacKeys.sign_stringc C s t � | j�}|d= |d= |S )Nr# r$ )�copy�__dict__)r � pickled_dictr r r � __getstate__� s zHmacKeys.__getstate__c C s || _ | �| j� d S r )r4 r r )r �dctr r r � __setstate__� s zHmacKeys.__setstate__N) �__name__� __module__� __qualname__�__doc__r r r) r* r2 r6 r8 r r r r r b s r c s. e Zd ZdZdgZ� fdd�Zdd� Z� ZS )�AnonAuthHandlerz( Implements Anonymous requests. �anonc s t t| ��|||� d S r )�superr= r r �� __class__r r r � s zAnonAuthHandler.__init__c K s d S r r )r � http_request�kwargsr r r �add_auth� s zAnonAuthHandler.add_auth)r9 r: r; r< � capabilityr rD � __classcell__r r r@ r r= � s r= c �8 e Zd ZdZddgZdd� Z� fdd�Zdd � Z� ZS ) �HmacAuthV1Handlerz: Implements the HMAC request signing used by S3 and GS.zhmac-v1�s3c C �* t �| |||� t�| |||� d | _d S r �r r r r$ r r r r r � � zHmacAuthV1Handler.__init__c � t t| ��|� d | _d S r )r? rH r r$ r% r@ r r r � � z!HmacAuthV1Handler.update_providerc K s� |j }|j}|j}d|vrtdd�|d< | jjr"| jj}| jj||< tj� |||d | j�}tj � d| � | � |�}| jj } d| | jj|f } tj � d| � | |d< d S )N�DateT��usegmt�StringToSign: %s�%s %s:%s� Signature: %s� Authorization)�headers�method� auth_pathr r �security_token�security_token_headerr �utils�canonical_string�log�debugr2 � auth_headerr ) r rB rC rV rW rX �keyr0 �b64_hmac�auth_hdr�authr r r rD � s$ � zHmacAuthV1Handler.add_auth� r9 r: r; r< rE r r rD rF r r r@ r rH � s rH c rG ) �HmacAuthV2HandlerzJ Implements the simplified HMAC authorization used by CloudFront. zhmac-v2� cloudfrontc C rJ r rK r r r r r � rL zHmacAuthV2Handler.__init__c rM r )r? re r r$ r% r@ r r r � rN z!HmacAuthV2Handler.update_providerc K sh |j }d|vrtdd�|d< | jjr | jj}| jj||< | �|d �}| jj}d|| jj|f |d< d S )NrO TrP rS rU )rV r r rY rZ r2 r_ r )r rB rC rV r` ra rb r r r rD � s � �zHmacAuthV2Handler.add_authrd r r r@ r re � s re c @ s( e Zd ZdZg d�Zdd� Zdd� ZdS )�HmacAuthV3Handlerz@Implements the new Version 3 HMAC authorization used by Route53.)zhmac-v3�route53�sesc C �$ t �| |||� t�| |||� d S r �r r r r r r r r � � zHmacAuthV3Handler.__init__c K sr |j }d|vrtdd�|d< | jjr | jj}| jj||< | �|d �}d| jj }|d| �� |f 7 }||d< d S )NrO TrP z AWS3-HTTPS AWSAccessKeyId=%s,zAlgorithm=%s,Signature=%s�X-Amzn-Authorization)rV r r rY rZ r2 r r) )r rB rC rV r` ra �sr r r rD � s zHmacAuthV3Handler.add_authN)r9 r: r; r< rE r rD r r r r rg � s rg c @ s> e Zd ZdZdgZdd� Zdd� Zdd� Zd d � Zd d � Z d S )�HmacAuthV3HTTPHandlerzK Implements the new Version 3 HMAC authorization used by DynamoDB. z hmac-v3-httpc C rj r rk r r r r r rl z HmacAuthV3HTTPHandler.__init__c C s< d| j i}|j�� D ]\}}|�� }|�d�r|||< q |S )�k Select the headers from the request that need to be included in the StringToSign. �Host�x-amz)r rV �items�lower� startswith)r rB �headers_to_sign�name�value�lnamer r r rv s �z%HmacAuthV3HTTPHandler.headers_to_signc s t � fdd�� D ��}d�|�S )� Return the headers that need to be included in the StringToSign in their canonical form by converting all header keys to lower case, sorting them in alphabetical order and then joining them into a string, separated by newlines. c s( g | ]}d |� � �� � | �� f �qS )�%s:%s�rt r/ ��.0�n�rv r r � <listcomp> s � �z;HmacAuthV3HTTPHandler.canonical_headers.<locals>.<listcomp>� ��sorted�join�r rv �lr r� r �canonical_headers s � z'HmacAuthV3HTTPHandler.canonical_headersc C s8 | � |�}| �|�}d�|j|jd|d|jg�}||fS )�� Return the canonical StringToSign as well as a dict containing the original version of all headers that were included in the StringToSign. r� � )rv r� r� rW rX �body)r rB rv r� r0 r r r r0 s �z$HmacAuthV3HTTPHandler.string_to_signc K s� d|j v r |j d= tdd�|j d< | jjr | jj|j d< | �|�\}}tj�d| � t|� d��� � }| � |�}d| jj }|d | � � 7 }|d d �|� 7 }|d | 7 }||j d< d S )z� Add AWS3 authentication to a request. :type req: :class`boto.connection.HTTPRequest` :param req: The HTTPRequest object. rm TrP � X-Amz-Date�X-Amz-Security-TokenrR r zAWS3 AWSAccessKeyId=%s,z Algorithm=%s,zSignedHeaders=%s,�;� Signature=%sN)rV r r rY r0 r r] r^ r r! r- r2 r r) r� )r �reqrC r0 rv � hash_valuera rn r r r rD , s z HmacAuthV3HTTPHandler.add_authN) r9 r: r; r< rE r rv r� r0 rD r r r r ro � s ro c @ s� e Zd ZdZdgZ d+dd�Zd,dd�Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� ZdS )-�HmacAuthV4Handlerz: Implements the new Version 4 HMAC authorization. �hmac-v4Nc C s0 t �| |||� t�| |||� || _|| _d S r )r r r � service_name� region_name)r r r r r� r� r r r r L s zHmacAuthV4Handler.__init__Fc C sP t |t�s |�d�}|rt�||�d�t��� }|S t�||�d�t��� }|S r+ )� isinstance�bytesr! r r r � hexdigestr- )r r` �msg�hex�sigr r r �_signV s �zHmacAuthV4Handler._signc C sr | � | j|�}|j�d�r|jd }d|i}|j�� D ]\}}|�� }|�d�r6t|t�r2|� d�}|||< q|S )rp rq rr r ) � host_headerr rV �getrs rt ru r� r� r. �r rB �host_header_valuerv rw rx ry r r r rv ` s �z!HmacAuthV4Handler.headers_to_signc C s8 |j }|jdk}|dkr|r|dkr|r|S d||f S �N�https�P i� r{ )�port�protocol�r r rB r� �securer r r r� q s z HmacAuthV4Handler.host_headerc C sb t |j�� �}g }|D ] }tj�|j| �}|�tjj |dd�d tjj |dd� � q d� |�S )Nr� ��safe�=�-_~�&) r� �params�keysr r[ �get_utf8_value�appendr �parse�quoter� )r rB �parameter_names�pairs�pname�pvalr r r � query_stringx s � z HmacAuthV4Handler.query_stringc C sh |j dkrdS g }t|j�D ] }tj�|j| �}|�dtjj |dd�tjj |dd�f � qd� |�S )N�POSTr� �%s=%s�-_.~r� r� ) rW r� r� r r[ r� r� r r� r� r� �r rB r� �paramrx r r r �canonical_query_string� s � z(HmacAuthV4Handler.canonical_query_stringc C sj g }|D ])}|� � �� }t|| �}d|v r|�� }n d�|�� �� �}|�d||f � qd�t|��S )rz �"� r{ r� )rt r/ �strr� �splitr� r� )r rv � canonical�header�c_name� raw_value�c_valuer r r r� � s z#HmacAuthV4Handler.canonical_headersc C s dd� |D �}t |�}d�|�S )Nc S � g | ] }d |� � �� �qS �z%sr| r} r r r r� � � z4HmacAuthV4Handler.signed_headers.<locals>.<listcomp>r� r� r� r r r �signed_headers� s z HmacAuthV4Handler.signed_headersc C sF |j }t�|��dd�}tj�|�}t|�dkr!|�d�r!|d7 }|S )N�\�/� ) rX � posixpath�normpath�replacer r� r� �len�endswith)r rB �path� normalized�encodedr r r � canonical_uri� s z HmacAuthV4Handler.canonical_uric C sN |j }t|d�rt|d�rtjj|td�d S t|t�s!|�d�}t|�� � S )N�seek�read)�hash_algorithmr r ) r� �hasattrr r[ � compute_hashr r� r� r! r� )r rB r� r r r �payload� s zHmacAuthV4Handler.payloadc C st |j �� g}|�| �|�� |�| �|�� | �|�}|�| �|�d � |�| �|�� |�| �|�� d� |�S )Nr� ) rW �upperr� r� r� rv r� r� r� r� )r rB �crrv r r r �canonical_request� s z#HmacAuthV4Handler.canonical_requestc C sB | j jg}|�|j� |�|j� |�|j� |�d� d�|�S )N� aws4_requestr� )r r r� � timestampr� r� r� )r rB �scoper r r r� � s zHmacAuthV4Handler.scopec C s |� d�S )N�.)r� �r r r r r �split_host_parts� s z"HmacAuthV4Handler.split_host_partsc C sj | � |�}| jd ur| j}|S t|�dkr/|d dkr d}|S t|�dkr)d}|S |d }|S |d }|S )Nr� zus-govz us-gov-west-1� � us-east-1r )r� r� r� )r r �partsr� r r r �determine_region_name� s � ���z'HmacAuthV4Handler.determine_region_namec C s* | � |�}| jd ur| j}|S |d }|S )Nr )r� r� )r r r� r� r r r �determine_service_name� s �z(HmacAuthV4Handler.determine_service_namec C st g }|j d dd� |_|�|j� | �|j�}| �|j�}||_||_|�|j� |�|j� |�d� d�|�S )Nr� r � r� r� ) rV r� r� r� r r� r� r� r� )r rB r� r� r� r r r �credential_scope� s z"HmacAuthV4Handler.credential_scopec C sH dg}|� |jd � |� | �|�� |� t|�d���� � d�|�S )r� �AWS4-HMAC-SHA256r� r r� )r� rV r� r r! r� r� )r rB r� �stsr r r r0 � s z HmacAuthV4Handler.string_to_signc C sX | j j}| �d| �d�|j�}| �||j�}| �||j�}| �|d�}| j||dd�S )N�AWS4r r� T)r� )r r r� r! r� r� r� )r rB r0 r` �k_date�k_region� k_service� k_signingr r r � signature s � zHmacAuthV4Handler.signaturec K sb d|j v r |j d= tj�� }|�d�|j d< | jjr!| jj|j d< | �|�}|}d|v r3| �|d �}|rM|jdkrM||_d|j d< t t |j��|j d < n|j � d �d |_ |r`|j d | |_ | � |�}tj�d | � | �||�}tj�d | � | �||�}tj�d| � | �|�} d| �|� g} | �d| �| � � | �d| � d�| �|j d< dS )z� Add AWS4 authentication to a request. :type req: :class`boto.connection.HTTPRequest` :param req: The HTTPRequest object. rm �%Y%m%dT%H%M%SZr� r� � unmangled_reqr� �0application/x-www-form-urlencoded; charset=UTF-8� Content-Type�Content-Length�?r zCanonicalRequest: %srR rT z AWS4-HMAC-SHA256 Credential=%szSignedHeaders=%sr� �,rU N)rV �datetime�utcnow�strftimer rY r� rW r� r� r� r� r� r� r r] r^ r0 r� rv r� r� r� r� ) r r� rC �now�qs� qs_to_postr� r0 r� rv r� r r r rD s8 zHmacAuthV4Handler.add_auth)NN)F)r9 r: r; r< rE r r� rv r� r� r� r� r� r� r� r� r� r� r� r� r� r0 r� rD r r r r r� E s. � r� c s� e Zd ZdZdgZ� fdd�Zdd� Zdd� Zd d � Zd d � Z d d� Z dd� Z dd� Z dd� Z � fdd�Z� fdd�Zd dd�Z� ZS ) �S3HmacAuthV4HandlerzN Implements a variant of Version 4 HMAC authorization specific to S3. � hmac-v4-s3c s2 t t| �j|i |�� | jr| �| j�| _d S d S r )r? r r r� �clean_region_name)r �argsrC r@ r r r O s �z S3HmacAuthV4Handler.__init__c C s |� d�r |dd � S |S )N�s3-r� )ru )r r� r r r r U s z%S3HmacAuthV4Handler.clean_region_namec C s0 t j�|j�}t j�|j�}t jj|dd�}|S )Nz/~r� )r r� r r� �unquoter� )r rB r� �unquotedr� r r r r� [ s z!S3HmacAuthV4Handler.canonical_uric C sZ g }t |j�D ] }tj�|j| �}|�dtjj|dd�tjj|dd�f � qd� |�S )Nr� r� r� r� ) r� r� r r[ r� r� r r� r� r� r� r r r r� e s � z*S3HmacAuthV4Handler.canonical_query_stringc C s< |j }|jdk}|dkr|r|dkr|r|jS d|j|f S r� )r� r� r r� r r r r� p s z S3HmacAuthV4Handler.host_headerc C sF | � | j|�}d|i}|j�� D ]\}}|�� }|dvr |||< q|S )rp rq )� authorization)r� r rV rs rt r� r r r rv w s �z#S3HmacAuthV4Handler.headers_to_signc C s� | � |�}| jd ur| j}|S t|�dkr$| �|d �}|dkr"d}|S tt|��D ]'\}}|�� }|dkrD|| }|dkrAd} |S |�d�rQ| �|�} |S q*|S )Nr� r rI r� � amazonawsr )r� r� r� r � enumerate�reversedrt ru )r r r� r� �offset�partr r r r� � s. �� � �z)S3HmacAuthV4Handler.determine_region_namec C s dS )NrI r r� r r r r� � s z*S3HmacAuthV4Handler.determine_service_namec C s� t � |�}tj�|j�}|j|_|jdu ri |_n|j� � }||_|j}t|dd�}|� � D ]\}}t |t t f�rEt |�dkrE|d ||< q.|j�|� |S )z| Returns a copy of the request object with fixed ``auth_path/params`` attributes from the original. NT)�keep_blank_valuesr� r )r3 r r� r rX r� r� �queryr rs r� �list�tupler� r, ) r r� � modified_req� parsed_path� copy_params�raw_qs� existing_qsr` rx r r r �mangle_path_and_params� s& � � z*S3HmacAuthV4Handler.mangle_path_and_paramsc s& |j �d�r |j d S tt| ��|�S )N�x-amz-content-sha256)rV r� r? r r� )r rB r@ r r r� � s zS3HmacAuthV4Handler.payloadc s^ d|j vr d|j v r|j �d�|j d< n| �|�|j d< | �|�}tt| �j|fd|i|��S )Nr �_sha256r� )rV �popr� r r? r rD )r r� rC � updated_reqr@ r r rD � s ��z S3HmacAuthV4Handler.add_authNc C s |du r t j �� �d�}| �|j�}| �|j�}dd| jj|dd� ||f ||dd�}| jjr6| jj|d< | � |�}t d d � |D ��}d � |�|d < |j � |� | �|�} d � | �d �dd� �d } ||jd< | �|| �} | �|| �} | |j d< d|j|j|jtj�|j �f S )z� Presign a request using SigV4 query params. Takes in an HTTP request and an expiration time in seconds and returns a URL. http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html Nr� r� z%s/%s/%s/%s/aws4_requestr� r )zX-Amz-AlgorithmzX-Amz-Credentialr� z X-Amz-Expires�X-Amz-SignedHeadersr� c S r� r� r| r} r r r r� r� z/S3HmacAuthV4Handler.presign.<locals>.<listcomp>r� r r� ���z UNSIGNED-PAYLOADr� zX-Amz-Signaturez %s://%s%s?%s)r� r� r� r� r r� r r rY rv r� r� r� r, r� r� rV r0 r� r� r� r r� � urlencode) r r� �expires�iso_date�region�servicer� rv r� r� r� r� r r r �presign� s< �� �zS3HmacAuthV4Handler.presignr )r9 r: r; r< rE r r r� r� r� rv r� r� r r� rD r$ rF r r r@ r r I s - * r c @ s. e Zd ZdZdgZdd� Zdd� Zdd� Zd S ) �STSAnonHandlerz� Provides pure query construction (no actual signing). Used for making anonymous STS request for operations like ``assume_role_with_web_identity``. zsts-anonc C s t j�|�S r )r r� r� )r rx r r r � _escape_value4 s z STSAnonHandler._escape_valuec C sb t |�� �}|jdd� d� g }|D ]}tj�|| �}|�|d | �|�d�� � qd� |�S )Nc S � | � � S r �rt ��xr r r �<lambda>= � z4STSAnonHandler._build_query_string.<locals>.<lambda>�r` r� r r� ) r r� �sortr r[ r� r� r& r. r� )r r� r� r� r` �valr r r �_build_query_string; s z"STSAnonHandler._build_query_stringc K s4 |j }| �|j�}tj�d| � d|d< ||_d S )Nzquery_string in body: %sz!application/x-www-form-urlencodedr� )rV r0 r� r r] r^ r� )r rB rC rV r r r r rD D s � zSTSAnonHandler.add_authN)r9 r: r; r< rE r& r0 rD r r r r r% * s r% c @ s e Zd ZdZdd� ZdS )�QuerySignatureHelperzy Helper for Query signature based Auth handler. Concrete sub class need to implement _calc_sigature method. c K s� |j }|j}| jj|d< | j|d< tj�� |d< | �|j|j |j |j �\}}tj � d||f � |j dkrPd|d< |d tj�|� |_tt|j��|j d < d S d |_|j�d �d |_|jd | d tj�|� |_d S ) N�AWSAccessKeyId�SignatureVersion� Timestamp� query_string: %s Signature: %sr� r� r� � &Signature=r� r� r� r )rV r� r r r3 r r[ �get_ts�_calc_signaturerW rX r r] r^ r r� � quote_plusr� r� r� r� r� )r rB rC rV r� r r� r r r rD W s* � � �z QuerySignatureHelper.add_authN)r9 r: r; r< rD r r r r r1 P s r1 c @ s" e Zd ZdZdZdgZdd� ZdS )�QuerySignatureV0AuthHandlerz Provides Signature V0 Signingr zsign-v0c G s� t j�d� | �� }|d |d }|�|�d�� |�� }|jdd� d� g }|D ]}t j� || �}|� |d t j � |� � q*d �|�} | t�|�� �fS ) Nzusing _calc_signature_0�Actionr4 r c S s t | �� |�� �S r )�cmprt )r* �yr r r r+ z � z=QuerySignatureV0AuthHandler._calc_signature.<locals>.<lambda>)r< r� r� )r r] r^ r* r, r! r� r. r[ r� r� r r� r� r� �base64� b64encoder- ) r r� r r rn r� r� r` r/ r r r r r8 t s z+QuerySignatureV0AuthHandler._calc_signatureN�r9 r: r; r< r3 rE r8 r r r r r: n s r: c @ s, e Zd ZdZdZddgZdd� Zdd� Zd S ) �QuerySignatureV1AuthHandlerz5 Provides Query Signature V1 Authentication. r� zsign-v1�mturkc O s: t j| g|�R i |�� tj| g|�R i |�� d | _d S r )r1 r r r$ )r r �kwr r r r � s z$QuerySignatureV1AuthHandler.__init__c G s� t j�d� | �� }t|�� �}|jdd� d� g }|D ]$}|�|�d�� t j � || �}|�|� |� |d t j �|� � q d�|�}|t�|�� �fS )Nzusing _calc_signature_1c S r' r r( r) r r r r+ � r, z=QuerySignatureV1AuthHandler._calc_signature.<locals>.<lambda>r- r r� r� )r r] r^ r* r r� r. r, r! r[ r� r� r r� r� r� r? r@ r- ) r r� r r r� r� r` r/ r r r r r8 � s z+QuerySignatureV1AuthHandler._calc_signatureN)r9 r: r; r< r3 rE r r8 r r r r rB � s rB c @ s$ e Zd ZdZdZg d�Zdd� ZdS )�QuerySignatureV2AuthHandlerz+Provides Query Signature V2 Authentication.� ) zsign-v2�ec2rG �emr�fps�ecs�sdb�iam�rds�sns�sqs�cloudformationc C s t j�d� d||�� |f }| �� }| �� |d< | jjr#| jj|d< t|� � �}g }|D ] } t j � || �} |� t jj| dd�d t jj| dd� � q-d �|�} t j�d | � || 7 }t j�d | � |�|�d �� t�|�� �} t j�d t| � � t j�d| � | | fS )Nzusing _calc_signature_2z %s %s %s �SignatureMethod� SecurityTokenr� r� r� r� r� zquery string: %szstring_to_sign: %sr z len(b64)=%dzbase64 encoded digest: %s)r r] r^ rt r* r) r rY r� r� r[ r� r� r r� r� r� r, r! r? r@ r- r� ) r r� �verbr� � server_namer0 r r� r� r` r/ r �b64r r r r8 � s, � z+QuerySignatureV2AuthHandler._calc_signatureNrA r r r r rE � s rE c @ s e Zd ZdZdgZdd� ZdS )�POSTPathQSV2AuthHandlerz� Query Signature V2 Authentication relocating signed query into the path and allowing POST requests with Content-Types. �mwsc K s� | j j|jd< | j|jd< tj�� |jd< | �|j|j|j |j �\}}tj � d||f � |jdkrGt t|j��|jd< |j�dd�|jd< nd |_|j�d �d |_|jd | d tj�|� |_d S ) Nr2 r3 r4 r5 r� r� r� z text/plainr� r� r r6 )r r r� r3 r r[ r7 r8 rW rX r r] r^ r� r� r� rV r� r� r� r r� r9 )r r� rC r r� r r r rD � s& � � � �z POSTPathQSV2AuthHandler.add_authN)r9 r: r; r< rE rD r r r r rV � s rV c C s� g }t j�t|�}|D ]}z |�|| ||�� W q t jjy# Y q w |s=|}dd� |D �}t j�dt |�t |�f ��|d S )a� Finds an AuthHandler that is ready to authenticate. Lists through all the registered AuthHandlers to find one that is willing to handle for the requested capabilities, config and provider. :type host: string :param host: The name of the host :type config: :param config: :type provider: :param provider: Returns: An implementation of AuthHandler. Raises: boto.exception.NoAuthHandlerFound c S s g | ]}|j �qS r )r9 )r~ �handlerr r r r� � r> z$get_auth_handler.<locals>.<listcomp>zYNo handler was ready to authenticate. %d handlers were checked. %s Check your credentialsr ) r �plugin� get_pluginr r� r r � exception�NoAuthHandlerFoundr� r� ) r r r �requested_capability�ready_handlers� auth_handlersrX �checked_handlers�namesr r r �get_auth_handler� s" ���rb c � � fdd�}|S )Nc sj t j�dd�r dgS tj�ddd�rdgS t| d�r1t| jdd�r1tD ] }|| jj v r0dg S q#� | �S ) N� EC2_USE_SIGV4Fr� rG � use-sigv4r" �endpointr� ) �os�environr� r r r� �getattrr" � SIGV4_DETECTrf )r �test��funcr r �_wrapper s �z(detect_potential_sigv4.<locals>._wrapperr �rm rn r rl r �detect_potential_sigv4 s rp c rc )Nc s� t j�dd�r dgS tj�ddd�rdgS t� d�s �� �S tD ] }|� jv r,dg S q � j}� j�d�r<� j�d�r@d| }t |�j }|� d �sS|� d �sS�� �S |� d �r\�� �S t � fd d �t D ��rk�� �S t� d�rw� jrw�� �S dgS )N� S3_USE_SIGV4Fr rI re r zhttp://zhttps://z amazonaws.comzamazonaws.com.cnzs3.amazonaws.comc 3 s � | ]}|� j v V qd S r )r )r~ rk r( r r � <genexpr>A s � z=detect_potential_s3sigv4.<locals>._wrapper.<locals>.<genexpr>r> )rg rh r� r r r� rj r ru r �netlocr� �any�S3_AUTH_DETECTr> )r rk r rs rl r( r rn " s6 � � � z*detect_potential_s3sigv4.<locals>._wrapperr ro r rl r �detect_potential_s3sigv4! s )rv r ).r< r? r �boto.auth_handler�boto.exception� boto.plugin� boto.utilsr3 r� � email.utilsr r rg r� � boto.compatr r r r r r �hashlibr r" r � ImportErrorru rj �objectr r= rH re rg ro r� r r% r1 r: rB rE rV rb rp rv r r r r �<module> sZ �1# K b& 2
Close
