| Server IP : 162.144.4.212 / Your IP : 216.73.216.108 Web Server : Apache System : Linux gator2125.hostgator.com 5.14.0-162.23.1.9991722448259.nf.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 31 18:11:45 UTC 2024 x86_64 User : cozeellc ( 2980) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /usr/libexec/oracle-cloud-agent/plugins/osms/oci/ |
Upload File : |
a
M��f�- � @ s d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dl m
Z
d dl m Z m
Z
mZmZ ddlmZmZ ddlmZmZ d dlmZ d d lmZ d d
lmZ d dl Z e � e �Z d Z dd d
�Z!dd� Z"dd� Z#G dd� dej$j%�Z&G dd� dej'j(�Z)G dd� de)�Z*dS )� )�absolute_importN)�six)� record_body_position_for_rewind� rewind_body�,back_up_body_calculate_stream_content_length�read_stream_for_signing� )� httpsig_cffi�requests)�InvalidPrivateKey�MissingPrivateKeyPassphrase)�UnsupportedAlgorithm)�default_backend)�
serialization�1c C sP t j�| �} tj| dd�� }|�� �� }W d � n1 s<0 Y t||�S )N�rb)�mode)�os�path�
expanduser�io�open�read�strip�load_private_key)�filename� pass_phrase�f�private_key_data� r �n/sparta/input/_build_configuration/image_build+validate/lib/bmcenv/lib64/python3.9/site-packages/oci/signer.py�load_private_key_from_file s *r! c
C s� t | tj�r| �d�} t |tj�r,|�d�}t� }ztj| ||d�W S ty| |du rdtd��ntj| d|d� Y S Y n` t y� tj
tj tj fD ]4}z|| |d� W n t t
fy� Y q�0 td��q�td��Y n0 dS )z�Loads a private key that may use a pass_phrase.
Tries to correct or diagnose common errors:
- provided pass_phrase but didn't need one
- provided a public key
�ascii)�backendNz'The provided key requires a passphrase.zEAuthentication requires a private key, but a public key was provided.zOThe provided key is not a private key, or the provided passphrase is incorrect.)�
isinstancer � text_type�encoder r �load_pem_private_key� TypeErrorr �
ValueError�load_der_public_key�load_pem_public_key�load_ssh_public_keyr
r )�secretr r# �loaderr r r r $ s,
�
r c C s� | j �dtjjdd�� | j �dtjjj� | j
�j � t | j
d�sNt | j
d�r\| j �dd� | j �dd � |�r�d
| j v�r�|�r�| j
p�d }t�� }t|tj�r�|�d �}| j �d
tt|��� |�|� n�t|ttf�r�|�|� n�t |d�s�t |d��r�t|�\}}|�rVt||�}|dk�r*td��| j �d
t|�� t||�}|�s�td��nFt � d� t |�} | � d�| _
|�| � d�� | j �d
t| � d��� |�r�t �!|�"� �}
|
�#d �} | | j d
< d S )N�dateT)�usegmt�host�bufferr � content-typezapplication/octet-streamzapplication/json�x-content-sha256� zutf-8�content-length���znUnable to read stream for signing! Please sign the stream yourself by using the custom header x-content-sha256z,Unable to rewind request body while signing!z=Stream cannot be rewound, trying to backup and sign the body!� byte_content�content_length)$�headers�
setdefault�email�utils�
formatdater �moves�urllib�parse�urlparse�url�netloc�hasattr�body�hashlib�sha256r$ � string_typesr& �str�len�update�bytes� bytearrayr r �IOErrorr �logger�warningr �get�base64� b64encode�digest�decode) �request� sign_body�enforce_content_headersrF �m�is_body_rewindable�original_positionr9 �is_rewind_success�stream� base64digest� base64stringr r r �inject_missing_headersY sL ��
ra c @ s e Zd ZdZdd� Zdd� ZdS )�_PatchedHeaderSignerzTSignature algorithm="rsa-sha256",headers="{}",keyId="{}",signature="%s",version="{}"c C sV d| _ d| _d | _tjj| j | _|| _| j�� | _ || _
| j � d�
|�|t�| _d S )N�rsarH � )�sign_algorithm�hash_algorithm�_hashr r= �HASHES�_rsahash� _rsa_private�
public_key� _rsa_publicr: �HEADER_SIGNER_TEMPLATE�format�join�SIGNATURE_VERSION�signature_template)�self�key_id� private_keyr: r r r �__init__� s z _PatchedHeaderSigner.__init__c C s6 d | _ || _| j�� | _| j�d�| j�|t�| _ d S )Nrd )
rg rj rk rl rm rn ro r: rp rq )rr rs rt r r r � reset_signer� s z!_PatchedHeaderSigner.reset_signerN)�__name__�
__module__� __qualname__rm ru rv r r r r rb � s rb c @ s< e Zd Zdd� Zdd� Zd
dd�Zddd �Zed
d � �Zd S )�AbstractBaseSignerc C s( t |||d�| _t |||| d�| _d S )N)rs rt r: )rb �
_basic_signer� _body_signer)rr �api_keyrt �generic_headers� body_headersr r r �create_signers� s ��z!AbstractBaseSigner.create_signersc C s$ |j �� }|dvr td�|���d S )N)rR �head�delete�put�post�patchz&Don't know how to sign request verb {})�method�lowerr) rn )rr rW �verbr r r �validate_request� s
z#AbstractBaseSigner.validate_requestTc C sz |j �� }|dv }|r"|r"| j}n| j}|j�dd � t|||� |j|jtj j
j � |j
�j|j |jd�}|j�|� |S )N)r� r� r� zTransfer-Encoding)r1 r� r )r� r� r| r{ r: �popra �signr r? r@ rA rB rC rD �path_urlrL )rr rW rY r� rX �signer�signed_headersr r r �do_request_sign� s
� z"AbstractBaseSigner.do_request_signc C s | � |� | �||�S )N)r� r� )rr rW rY r r r �__call__� s
zAbstractBaseSigner.__call__c C s t j| dd�S )NF)rY )� functools�partial)rr r r r �without_content_headers� s z*AbstractBaseSigner.without_content_headersN)T)T) rw rx ry r� r� r� r� �propertyr� r r r r rz � s
rz c @ s& e Zd ZdZddd�Zedd� �ZdS )�Signera�
A requests auth instance that can be reused across requests. This signer is intended to be used
when signing requests for a given user and it requires that user's ID, their private key
and cerificate fingerprint.
The private key can be sourced from a file (private_key_file_location) or the PEM string can be
provided directly (private_key_content).
The headers to be signed by this signer are not customizable.
You can manually sign calls by creating an instance of the signer, and
providing it as the ``auth`` argument to Requests functions:
.. code-block:: python
import requests
from oci import Signer
auth = Signer(...)
resp = requests.get("https://...", auth=auth)
Nc C s\ |d | d | | _ |r(t||�| _n t||�| _g d�}g d�}| �| j | j||� d S )N�/)r/ z(request-target)r1 )r6 r3 r4 )r} r rt r! r� ) rr �tenancy�user� fingerprint�private_key_file_locationr �private_key_contentr~ r r r r ru � s zSigner.__init__c C sD ddl m} || � t| d | d | d | d | �d�| �d�d �S )
Nr )�validate_configr� r� r� �key_filer � key_content)r� r r� )�configr� r� rR )r� r� r r r � from_config s �zSigner.from_config)NN)rw rx ry �__doc__ru � staticmethodr� r r r r r� � s
r� )N)+�
__future__r rS � email.utilsr< rG r r� r � oci._vendorr �oci.utilr r r r �_vendorr r
�
exceptionsr r �cryptography.exceptionsr
� cryptography.hazmat.backendsr � cryptography.hazmat.primitivesr �logging� getLoggerrw rP rp r! r ra r� � HeaderSignerrb �auth�AuthBaserz r� r r r r �<module> s,
55!1