Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/libcloud/common/__pycache__/google.cpython-39.pyc
Ðазад
a q�hox � @ sd d Z ddlmZ z ddlZW n ey6 ddlZY n0 ddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlmZ ddlmZmZmZmZmZ ddlmZmZmZ ddlmZ ddlm Z m Z z4dd l m Z dd l m!Z! dd l"m#Z# dd l$m%Z% W n e�y dZ#Y n0 d Z&e�'e(�Z)dd� Z*dd� Z+dd� Z,d9dd�Z-G dd� de �Z.G dd� de �Z/G dd � d e/�Z0G d d � d e/�Z1G d d � d e/�Z2G d!d"� d"e/�Z3G d#d$� d$e/�Z4G d%d&� d&e/�Z5G d'd(� d(e�Z6G d)d*� d*e�Z7G d+d,� d,e�Z8G d-d.� d.e8�Z9G d/d0� d0e8�Z:G d1d2� d2e8�Z;G d3d4� d4e<�Z=G d5d6� d6e<�Z>G d7d8� d8ee�Z?dS ):a� Module for Google Connection and Authentication classes. Information about setting up your Google OAUTH2 credentials: For libcloud, there are two basic methods for authenticating to Google using OAUTH2: Service Accounts and Client IDs for Installed Applications. Both are initially set up from the Cloud Console Console - https://cloud.google.com/console Setting up Service Account authentication (note that you need the cryptography package installed to use this): - Go to the Console - Go to your project and then to "APIs & auth" on the left - Click on "Credentials" - Click on "Create New Client ID..." - Select "Service account" and click on "Create Client ID" - Download the Private Key (should happen automatically). The key you download is in JSON format. - Move the .json file to a safe location. - Optionally, you may choose to Generate a PKCS12 key from the Console. It needs to be converted to the PEM format. Please note, the PKCS12 format is deprecated and may be removed in a future release. - Convert the key using OpenSSL (the default password is 'notasecret'). - Move the .pem file to a safe location. - To Authenticate, you will need to pass the Service Account's "Email address" in as the user_id and the path to the .pem file as the key. Setting up Installed Application authentication: - Go to the Console - Go to your project and then to "APIs & auth" on the left - Click on "Credentials" - Select "Installed application" and "Other" then click on "Create Client ID" - To Authenticate, pass in the "Client ID" as the user_id and the "Client secret" as the key - The first time that you do this, the libcloud will give you a URL to visit. Copy and paste the URL into a browser. - When you go to the URL it will ask you to log in (if you aren't already) and ask you if you want to allow the project access to your account. - Click on Accept and you will be given a code. - Paste that code at the prompt given to you by the Google libcloud connection. - At that point, a token & refresh token will be stored in your home directory and will be used for authentication. Please remember to secure your keys and access tokens. � )�with_statementN)�get_response_object)�b�httplib� urlencode�urlparse�PY3)�ConnectionUserAndKey� JsonResponse�PollingConnection)� BaseDriver)� ProviderError� LibcloudError)�default_backend)� serialization)�SHA256)�PKCS1v15z%Y-%m-%dT%H:%M:%SZc C s t j �� S )z? Mocked in libcloud.test.common.google.GoogleTestCase. )�datetime�utcnow� r r ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/libcloud/common/google.py�_utcnowj s r c C s | � t�S )zC Return string of datetime_obj in the UTC Timestamp Format )�strftime�UTC_TIMESTAMP_FORMAT)� datetime_objr r r �_utc_timestampq s r c C s t j �| t�S )zS Return datetime obj where date and time are pulled from timestamp string. )r �strptimer )� timestampr r r �_from_utc_timestampx s r � c C sj z2d| � d� }ddi}t||d�}|jd|jfW S tyd } zdt|�d fW Y d }~S d }~0 0 d S )Nz#http://metadata/computeMetadata/v1/�/zMetadata-FlavorZGoogle)�headersr ���)�lstripr �status�body� Exception�str)�path�urlr! �response�er r r �_get_gce_metadata s r, c @ s e Zd ZdZdd� Zdd� ZdS )�GoogleAuthErrorz6Generic Error class for various authentication errors.c C s || _ d S �N)�value)�selfr/ r r r �__init__� s zGoogleAuthError.__init__c C s t | j�S r. )�reprr/ �r0 r r r �__repr__� s zGoogleAuthError.__repr__N)�__name__� __module__� __qualname__�__doc__r1 r4 r r r r r- � s r- c s e Zd Zd� fdd� Z� ZS )�GoogleBaseErrorNc s || _ tt| ��|||� d S r. )�code�superr9 r1 �r0 r/ � http_coder: �driver�� __class__r r r1 � s zGoogleBaseError.__init__)N�r5 r6 r7 r1 � __classcell__r r r? r r9 � s r9 c @ s e Zd ZdS )�InvalidRequestErrorN�r5 r6 r7 r r r r rC � s rC c @ s e Zd ZdS )�JsonParseErrorNrD r r r r rE � s rE c s e Zd Zd� fdd� Z� ZS )�ResourceNotFoundErrorNc sd || _ t|t�rLd|v rL|d �d�dkrL|d �d�dkrL|d d |d< tt| ��|||� d S )N�messager � z projects/zs. A missing project error may be an authentication issue. Please ensure your auth credentials match your project. )r: � isinstance�dict�countr; rF r1 r< r? r r r1 � s ��z ResourceNotFoundError.__init__)NrA r r r? r rF � s rF c @ s e Zd ZdS )�QuotaExceededErrorNrD r r r r rL � s rL c @ s e Zd ZdS )�ResourceExistsErrorNrD r r r r rM � s rM c @ s e Zd ZdS )�ResourceInUseErrorNrD r r r r rN � s rN c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �GoogleResponsez% Google Base Response class. c C s dS )z� Determine if the request was successful. For the Google response class, tag all responses as successful and raise appropriate Exceptions from parse_body. :return: C{True} Tr r3 r r r �success� s zGoogleResponse.successc C sn d|d v r |d d d }n|d }d|v rD|� d�}|� d�}n"d}d|v rZ|� d�}|� d|�}||fS ) aU Get the error code and message from a JSON response. Return just the first error if there are multiple errors. :param body: The body of the JSON response dictionary :type body: ``dict`` :return: Tuple containing error code and message :rtype: ``tuple`` of ``str`` or ``int`` �errors�errorr r: rG N�reasonZerror_description)�get)r0 r% �errr: rG r r r � _get_error� s zGoogleResponse._get_errorc C s� t | j�dkr| js| jS d}zt�| j�}W n tyJ | j}d}Y n0 tjtjtj tj g}| j |v �r|r�t || j d��n�d|v �r | � |�\}}|dkr�t|| j |��nX|dkr�t|| j |��n@|dkr�t|| j |��n(|�d �r�t|| j |��nt|| j |��n|S n�| j tjk�rV|�s>d|v �r>| � |�\}}n|}d}t|| j |��n|| j tjk�r�|�s�d|v �r�| � |�\}}n|}d}t|| j |��n6|�s�d|v �r�| � |�\}}n|}d}t|| j |��dS ) z� Parse the JSON response body, or raise exceptions as appropriate. :return: JSON dictionary :rtype: ``dict`` r FTNrR ZQUOTA_EXCEEDEDZRESOURCE_ALREADY_EXISTSZ alreadyExistsZRESOURCE_IN_USE)�lenr% Zparse_zero_length_body�json�loadsr& r �OK�CREATED�ACCEPTED�CONFLICTr$ rE rV rL rM � startswithrN r9 � NOT_FOUNDrF � BAD_REQUESTrC )r0 Z json_errorr% Zvalid_http_codesr: rG r r r � parse_body� sZ � zGoogleResponse.parse_bodyN)r5 r6 r7 r8 rP rV ra r r r r rO � s rO c @ s e Zd ZdZdS )�GoogleBaseDriverz Google APIN)r5 r6 r7 �namer r r r rb ) s rb c sN e Zd ZdZeZeZdZdZ dZ d� fdd� Z d d � Z d d � Z d d� Z� ZS )�GoogleBaseAuthConnectionzo Base class for Google Authentication. Should be subclassed for specific types of authentication. z Google Authzaccounts.google.comz/o/oauth2/authN�urn:ietf:wg:oauth:2.0:oobc s> |pg }d� |�| _|| _|| _tt| �j||fi |�� dS )a� :param user_id: The email address (for service accounts) or Client ID (for installed apps) to be used for authentication. :type user_id: ``str`` :param key: The RSA Key (for service accounts) or file path containing key or Client Secret (for installed apps) to be used for authentication. :type key: ``str`` :param scopes: A list of urls defining the scope of authentication to grant. :type scopes: ``list`` :keyword redirect_uri: The Redirect URI for the authentication request. See Google OAUTH2 documentation for more info. :type redirect_uri: ``str`` :keyword login_hint: Login hint for authentication request. Useful for Installed Application authentication. :type login_hint: ``str`` � N)�join�scopes� redirect_uri� login_hintr; rd r1 )r0 �user_id�keyrh ri rj �kwargsr? r r r1 8 s z!GoogleBaseAuthConnection.__init__c C s d|d< | j |d< |S )zE Add defaults for 'Content-Type' and 'Host' headers. z!application/x-www-form-urlencoded� Content-Type�Host��host�r0 r! r r r �add_default_headersZ s z,GoogleBaseAuthConnection.add_default_headersc C sl t |�}z| jdd|d�}W n ty6 td��Y n0 |j}d|v rht� tj|d d� }t|�|d< |S )aC Return an updated token from a token request body. :param request_body: A dictionary of values to send in the body of the token request. :type request_body: ``dict`` :return: A dictionary with updated token information :rtype: ``dict`` z/o/oauth2/token�POST)�method�datazMInvalid authorization response, please check your credentials and time drift.� expires_in��seconds� expire_time) r �request�AttributeErrorr- �objectr r � timedeltar )r0 � request_bodyrv r* � token_inforz r r r �_token_requestb s � � z'GoogleBaseAuthConnection._token_requestc C s | � � S )a� Refresh the current token. Fetch an updated refresh token from internal metadata service. :param token_info: Dictionary containing token information. (Not used, but here for compatibility) :type token_info: ``dict`` :return: A dictionary containing updated token information. :rtype: ``dict`` )� get_new_token)r0 r� r r r � refresh_token{ s z&GoogleBaseAuthConnection.refresh_token)NNre N)r5 r6 r7 r8 rb r> rO � responseClsrc rq � auth_pathr1 rs r� r� rB r r r? r rd - s �"rd c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) � GoogleInstalledAppAuthConnectionzEAuthentication connection for "Installed Application" authentication.c C sj d| j | j| jdd�}| jr&| j|d< t|�}d| j| j|f }td� t|� tr^t d�}nt d�}|S )a? Give the user a URL that they can visit to authenticate and obtain a code. This method will ask for that code that the user can paste in. Mocked in libcloud.test.common.google.GoogleTestCase. :return: Code supplied by the user after authenticating :rtype: ``str`` r: zLibcloud Request)Z response_type� client_idri �scope�staterj zhttps://%s%s?%sz, Please Go to the following URL and sign in:z Enter Code: ) rk ri rh rj r rq r� �printr �input� raw_input)r0 Z auth_paramsrv r) r: r r r �get_code� s � z)GoogleInstalledAppAuthConnection.get_codec C s( | � � }|| j| j| jdd�}| �|�S )z� Get a new token. Generally used when no previous token exists or there is no refresh token :return: Dictionary containing token information :rtype: ``dict`` Zauthorization_code)r: r� � client_secretri � grant_type)r� rk rl ri r� )r0 r: Z token_requestr r r r� � s �z.GoogleInstalledAppAuthConnection.get_new_tokenc C sH d|vr| � � S |d | j| jdd�}| �|�}d|vrD|d |d< |S )a) Use the refresh token supplied in the token info to get a new token. :param token_info: Dictionary containing current token information :type token_info: ``dict`` :return: A dictionary containing updated token information. :rtype: ``dict`` r� )r� r� r� r� )r� rk rl r� )r0 r� Zrefresh_requestZ new_tokenr r r r� � s � z.GoogleInstalledAppAuthConnection.refresh_tokenN)r5 r6 r7 r8 r� r� r� r r r r r� � s r� c s( e Zd ZdZ� fdd�Zdd� Z� ZS )� GoogleServiceAcctAuthConnectionz:Authentication class for "Service Account" authentication.c s� t du rtd��|�d�dkr�tj�|�}tj�|�o@tj�|�}|sRtd| ��t |d��}|� � }W d � n1 sz0 Y zt � |�}|d }W n ty� |}Y n0 t t| �j||g|�R i |�� dS )at Check to see if cryptography is available, and convert key file path into a key string if the key is in a file. :param user_id: Email address to be used for Service Account authentication. :type user_id: ``str`` :param key: The RSA Key or path to file containing the key. :type key: ``str`` NzAcryptography library required for Service Account Authentication.zPRIVATE KEY---r" z(Missing (or not readable) key file: '%s'�rZ private_key)r r- �find�osr( � expanduser�exists�isfile� ValueError�open�readrX rY r; r� r1 ) r0 rk rl �argsrm ZkeypathZ is_file_path�f�contentsr? r r r1 � s. � & ���z(GoogleServiceAcctAuthConnection.__init__c C s� ddd�}t �tt�|���}| j| jdtt�� �d tt�� �d�}t �tt�|���}d� ||f�}t j t| j �dt � d �}|jt|�t� t� d �}t �|�}d� ||f�}d |d �} | �| �S ) z� Get a new token using the email address and RSA Key. :return: Dictionary containing token information :rtype: ``dict`` ZRS256ZJWT)�alg�typz*https://accounts.google.com/o/oauth2/tokeni )Zissr� Zaud�expZiat� .N)�password�backend)rv �padding� algorithmz+urn:ietf:params:oauth:grant-type:jwt-bearer)r� Z assertion)�base64�urlsafe_b64encoder rX �dumpsrk rh �int�timerg r Zload_pem_private_keyrl r �signr r r� ) r0 �header� header_encZ claim_setZ claim_set_encrG rl � signatureZjwtr{ r r r r� � s4 ��� �z-GoogleServiceAcctAuthConnection.get_new_token)r5 r6 r7 r8 r1 r� rB r r r? r r� � s "r� c @ s e Zd ZdZdd� ZdS )�"GoogleGCEServiceAcctAuthConnectionzrAuthentication class for self-authentication when used with a GCE instance that supports serviceAccounts. c C sv d}t |�\}}}|tjkr$td��|tjkr>tdt|� ��t�|�}d|v rrt� t j |d d� }t |�|d< |S )z� Get a new token from the internal metadata service. :return: Dictionary containing token information :rtype: ``dict`` z(/instance/service-accounts/default/tokenz7Service Accounts are not enabled for this GCE instance.z'Internal GCE Authorization failed: '%s'rw rx rz ) r, r r_ r� rZ r' rX rY r r r~ r )r0 r( r= � http_reasonr� rz r r r r� ' s � � z0GoogleGCEServiceAcctAuthConnection.get_new_tokenN)r5 r6 r7 r8 r� r r r r r� # s r� c @ sr e Zd ZdZdZdZdZdZeeeegZeeegZ e dd� �Z e dd � �Z e d d � �Ze d d � �Ze dd� �ZdS )�GoogleAuthTypez� SA (Service Account), IA (Installed Application), GCE (Auth from a GCE instance with service account enabled) GCS_S3 (Cloud Storage S3 interoperability authentication) �SA�IA�GCE�GCS_S3c C s8 | � |�r| jS | �|�r | jS | �� r.| jS | jS d S r. )�_is_sar� � _is_gcs_s3r� �_is_gcer� r� )�clsrk r r r � guess_typeM s zGoogleAuthType.guess_typec C s || j v S r. )� OAUTH2_TYPES)r� � auth_typer r r � is_oauth2X s zGoogleAuthType.is_oauth2c C s" t � \} }}| tjkr |r dS dS )z� Checks if we can access the GCE metadata server. Mocked in libcloud.test.common.google.GoogleTestCase. TF)r, r rZ )r= r� r% r r r r� \ s zGoogleAuthType._is_gcec C s | � d�S )zN Checks S3 key format: alphanumeric chars starting with GOOG. ZGOOG)r^ �rk r r r r� g s zGoogleAuthType._is_gcs_s3c C s | � d�S )Nz.gserviceaccount.com)�endswithr� r r r r� n s zGoogleAuthType._is_saN)r5 r6 r7 r8 r� r� r� r� � ALL_TYPESr� � classmethodr� r� � staticmethodr� r� r� r r r r r� > s" r� c @ sJ e Zd ZdZddd�Zedd� �Zedd� �Zd d � Zd d � Z d d� Z dS )�GoogleOAuth2Credentialz~/.google_libcloud_authNc K s2 |p t �|�| _| jt jvr*td| j ��t �| j�sDtd| j ��|| _|| _d�| j |g�}|pf|| _ |ptg d�| _ | � � | _ | jt jkr�t| j| j fi |��| _nf| jt jkr�t| j| j| j fi |��| _n<| jt jkr�t| j| j| j fi |��| _ntdt| j� ��| j d u �r.| j�� | _ | �� d S )NzInvalid auth type: %sz'Auth type %s cannot be used with OAuth2�.)z'https://www.googleapis.com/auth/computez7https://www.googleapis.com/auth/devstorage.full_controlz7https://www.googleapis.com/auth/ndev.clouddns.readwritezInvalid auth_type: %s)r� r� r� r� r- r� rk rl rg �default_credential_file�credential_filerh �_get_token_from_file�tokenr� r� � oauth2_connr� r� r� r� r' r� �_write_token_to_file)r0 rk rl r� r� rh rm r� r r r r1 v sN �� �� �� �� � z GoogleOAuth2Credential.__init__c C s | j t� k r| �� | jd S )N� access_token)�token_expire_utc_datetimer �_refresh_tokenr� r3 r r r r� � s z#GoogleOAuth2Credential.access_tokenc C s t | jd �S )Nrz )r r� r3 r r r r� � s z0GoogleOAuth2Credential.token_expire_utc_datetimec C s | j �| j�| _| �� d S r. )r� r� r� r� r3 r r r r� � s z%GoogleOAuth2Credential._refresh_tokenc C s� d}t j�t j�| j��}z@t|d��}|�� }W d � n1 sD0 Y t�|�}W n: t t fy� } z t � d|t |�� W Y d}~n d}~0 0 |S )z� Read credential file and return token information. Mocked in libcloud.test.common.google.GoogleTestCase. :return: Token information dictionary, or None :rtype: ``dict`` or ``None`` Nr� z3Failed to read cached auth token from file "%s": %s)r� r( �realpathr� r� r� r� rX rY �IOErrorr� �LOG�infor' )r0 r� �filenamer� rv r+ r r r r� � s &�z+GoogleOAuth2Credential._get_token_from_filec C s� t j�| j�}t j�|�}zht�| j�}t jt j B t j B }t � t � ||t dd��d��}|�|� W d � n1 sv0 Y W n6 ty� } z t�d|t|�� W Y d}~n d}~0 0 dS )zo Write token to credential file. Mocked in libcloud.test.common.google.GoogleTestCase. Z600� �wNz+Failed to write auth token to file "%s": %s)r� r( r� r� r� rX r� r� �O_CREAT�O_WRONLY�O_TRUNC�fdopenr� r� �writer& r� r� r' )r0 r� rv Z write_flagsr� r+ r r r r� � s ��,�z+GoogleOAuth2Credential._write_token_to_file)NNN) r5 r6 r7 r� r1 �propertyr� r� r� r� r� r r r r r� s s � ( r� c sr e Zd ZdZeZeZdZdZ dZ d� fdd� Z dd � Z d d � Z d d � Z� fdd�Zdd� Zdd� Zdd� Z� ZS )�GoogleBaseConnectionz7Base connection class for interacting with Google APIs.zwww.googleapis.comg @� Nc sp t t| �j||fi |�� t|||||fi |��| _dtjd tjd tjd f }d|tjf }| �|� dS )a Determine authentication type, set up appropriate authentication connection and get initial authentication information. :param user_id: The email address (for service accounts) or Client ID (for installed apps) to be used for authentication. :type user_id: ``str`` :param key: The RSA Key (for service accounts) or file path containing key or Client Secret (for installed apps) to be used for authentication. :type key: ``str`` :keyword auth_type: See GoogleAuthType class for list and description of accepted values. If not supplied, auth_type will be guessed based on value of user_id or if the code is running on a GCE instance. :type auth_type: ``str`` :keyword credential_file: Path to file for caching authentication information. :type credential_file: ``str`` :keyword scopes: List of OAuth2 scope URLs. The empty default sets read/write access to Compute, Storage, and DNS. :type scopes: ``list`` z%s.%s.%sr rH � z Python %s/%sN) r; r� r1 r� �oauth2_credential�sys� version_info�platformZuser_agent_append) r0 rk rl r� r� rh rm Z python_verZ ver_platformr? r r r1 � s ���z GoogleBaseConnection.__init__c C s d|d< | j |d< |S )zD @inherits: :class:`Connection.add_default_headers` zapplication/jsonrn ro rp rr r r r rs s z(GoogleBaseConnection.add_default_headersc C s d| j j |d< ||fS )z� Check to make sure that token hasn't expired. If it has, get an updated token. Also, add the token to the headers. @inherits: :class:`Connection.pre_connect_hook` zBearer � Authorization)r� r� )r0 �paramsr! r r r �pre_connect_hook s �z%GoogleBaseConnection.pre_connect_hookc C s t �|�S )zEncode data to JSON)rX r� )r0 rv r r r � encode_data s z GoogleBaseConnection.encode_datac s� d}d}||d k rpzt t| �j|i |��W S tjyl } z&|jtjkrT|d }n|�W Y d}~qd}~0 0 qt t| �j|i |��S )z8 @inherits: :class:`Connection.request` � r rH N)r; r� r{ �socketrR �errno� ECONNRESET)r0 r� rm �retries�triesr+ r? r r r{ ! s �� z GoogleBaseConnection.requestc C s |j d dkrdS dS dS )z� Determine if operation has completed based on response. :param response: JSON response :type response: I{responseCls} :return: True if complete, False otherwise :rtype: ``bool`` r$ ZDONETFN�r} )r0 r* r r r � has_completed5 s z"GoogleBaseConnection.has_completedc C s d|j d iS )zO @inherits: :class:`PollingConnection.get_poll_request_kwargs` �actionZselfLinkr� )r0 r* �contextZrequest_kwargsr r r �get_poll_request_kwargsD s z,GoogleBaseConnection.get_poll_request_kwargsc C sD |� d�r6t�|�}t�dd|d |d |d f�}n | j| }|S )a� Update action to correct request path. In many places, the Google API returns a full URL to a resource. This will strip the scheme and host off of the path and just return the request. Otherwise, it will prepend the base request_path to the action. :param action: The action to be called in the http request :type action: ``str`` :return: The modified request based on the action :rtype: ``str`` zhttps://r r� � r� )r^ r �urlsplit� urlunsplit� request_path)r0 r� �ur{ r r r �morph_action_hookJ s " z&GoogleBaseConnection.morph_action_hook)NNNN)r5 r6 r7 r8 rb r> rO r� rq � poll_interval�timeoutr1 rs r� r� r{ r� r� r� rB r r r? r r� � s �( r� )r )@r8 � __future__r Z simplejsonrX � ImportError�loggingr� r� r� r r� r� r� Zlibcloud.utils.connectionr Zlibcloud.utils.py3r r r r r Zlibcloud.common.baser r r r Zlibcloud.common.typesr r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z%cryptography.hazmat.primitives.hashesr Z1cryptography.hazmat.primitives.asymmetric.paddingr r � getLoggerr5 r� r r r r, r- r9 rC rE rF rL rM rN rO rb rd r� r� r� r} r� r� r� r r r r �<module> s` 4 p_IN5f
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0.05 |
proxy
|
phpinfo
|
ÐаÑтройка