Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/botocore/__pycache__/signers.cpython-39.pyc
Ðазад
a p�hJn � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZmZ d dl m Z m Z d dl m Z d dl mZ d dl mZ d dlmZmZ G dd � d e�ZG d d � d e�Zd d � Zd dd�ZG dd� de�Zdd� Zd dd�Zdd� Zd dd�Z dd � Z dS ) � N)�six� OrderedDict)�create_request_object�prepare_request_dict)� UnknownSignatureVersionError)�UnknownClientMethodError)� UnsupportedSignatureVersionError)� fix_s3_host�datetime2timestampc @ sp e Zd ZdZdd� Zedd� �Zedd� �Zedd � �Zdd d �Z ddd�Z dd� Z ddd�Z e Z ddd�Zd S )� RequestSignera0 An object to sign requests before they go out over the wire using one of the authentication mechanisms defined in ``auth.py``. This class fires two events scoped to a service and operation name: * choose-signer: Allows overriding the auth signer name. * before-sign: Allows mutating the request before signing. Together these events allow for customization of the request signing pipeline, including overrides, request path manipulation, and disabling signing per operation. :type service_id: botocore.model.ServiceId :param service_id: The service id for the service, e.g. ``S3`` :type region_name: string :param region_name: Name of the service region, e.g. ``us-east-1`` :type signing_name: string :param signing_name: Service signing name. This is usually the same as the service name, but can differ. E.g. ``emr`` vs. ``elasticmapreduce``. :type signature_version: string :param signature_version: Signature name like ``v4``. :type credentials: :py:class:`~botocore.credentials.Credentials` :param credentials: User credentials with which to sign requests. :type event_emitter: :py:class:`~botocore.hooks.BaseEventHooks` :param event_emitter: Extension mechanism to fire events. c C s. || _ || _|| _|| _|| _t�|�| _d S �N)� _region_name� _signing_name�_signature_version� _credentials� _service_id�weakref�proxy�_event_emitter)�selfZ service_id� region_name� signing_name�signature_version� credentialsZ event_emitter� r ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/botocore/signers.py�__init__> s zRequestSigner.__init__c C s | j S r )r �r r r r r I s zRequestSigner.region_namec C s | j S r )r r r r r r M s z RequestSigner.signature_versionc C s | j S r )r r r r r r Q s zRequestSigner.signing_nameNc K s | � ||�S r )�sign)r �operation_name�request�kwargsr r r �handlerU s zRequestSigner.handler�standardc C s" |}|du r| j }|du r | j}| �|||j�}| jjd�| j�� |�||| j || |d� |t j k�r |||d�} |dur�|| d< |j� di �} |s�| � d�r�| d | d< | � d �r�| d | d < z| j f i | ��} W n> t �y } z$|d kr�t|d ��n| �W Y d} ~ n d} ~ 0 0 | �|� dS ) a< Sign a request before it goes out over the wire. :type operation_name: string :param operation_name: The name of the current operation, e.g. ``ListBuckets``. :type request: AWSRequest :param request: The request object to be sent over the wire. :type region_name: str :param region_name: The region to sign the request for. :type signing_type: str :param signing_type: The type of signing to perform. This can be one of three possible values: * 'standard' - This should be used for most requests. * 'presign-url' - This should be used when pre-signing a request. * 'presign-post' - This should be used when pre-signing an S3 post. :type expires_in: int :param expires_in: The number of seconds the presigned url is valid for. This parameter is only valid for signing type 'presign-url'. :type signing_name: str :param signing_name: The name to use for the service when signing. Nzbefore-sign.{0}.{1})r r r r �request_signerr )r r r �expiresZsigning�regionr r r# �r )r r �_choose_signer�contextr �emit�formatr � hyphenize�botocore�UNSIGNED�get�get_auth_instancer r Zadd_auth) r r r r � signing_type� expires_inr Zexplicit_region_namer r! Zsigning_context�auth�er r r r \ sL � �� � �zRequestSigner.signc C s� ddd�}|� |d�}| j}|tjur8|�|�s8||7 }| jjd�| j� � |�| j | j ||d�\}}|dur�|}|tjur�|�|�s�||7 }|S )ai Allow setting the signature version via the choose-signer event. A value of `botocore.UNSIGNED` means no signing will be performed. :param operation_name: The operation to sign. :param signing_type: The type of signing that the signer is to be used for. :return: The signature version to sign with. z -presign-postz-query)� presign-post� presign-url� zchoose-signer.{0}.{1})r r r r) N) r/ r r- r. �endswithr Zemit_until_responser+ r r, r r ) r r r1 r) Zsigning_type_suffix_map�suffixr r" �responser r r r( � s. � � �� �z RequestSigner._choose_signerc K s� |du r| j }tjj�|�}|du r.t|d��d}| jdurF| j�� }||d< |jrx| j du rhtj � � �||d< ||d< |f i |��}|S )a� Get an auth instance which can be used to sign a request using the given signature version. :type signing_name: string :param signing_name: Service signing name. This is usually the same as the service name, but can differ. E.g. ``emr`` vs. ``elasticmapreduce``. :type region_name: string :param region_name: Name of the service region, e.g. ``us-east-1`` :type signature_version: string :param signature_version: Signature name like ``v4``. :rtype: :py:class:`~botocore.auth.BaseSigner` :return: Auth instance to sign a request. Nr' r r � service_name) r r- r3 ZAUTH_TYPE_MAPSr/ r r Zget_frozen_credentialsZREQUIRES_REGIONr � exceptionsZ NoRegionError)r r r r r! �clsZfrozen_credentialsr3 r r r r0 � s$ � z RequestSigner.get_auth_instance� c C s* t |�}| �|||d||� |�� |jS )a� Generates a presigned url :type request_dict: dict :param request_dict: The prepared request dictionary returned by ``botocore.awsrequest.prepare_request_dict()`` :type operation_name: str :param operation_name: The operation being signed. :type expires_in: int :param expires_in: The number of seconds the presigned url is valid for. By default it expires in an hour (3600 seconds) :type region_name: string :param region_name: The region name to sign the presigned url. :type signing_name: str :param signing_name: The name to use for the service when signing. :returns: The presigned url r6 )r r �prepare�url)r � request_dictr r2 r r r r r r �generate_presigned_url� s �z$RequestSigner.generate_presigned_url)NN)Nr# NN)N)r> NN)�__name__� __module__� __qualname__�__doc__r �propertyr r r r" r r( r0 Zget_authrB r r r r r s& ! � H& � , �r c @ s< e Zd ZdZdd� Zd dd�Zdd� Zdd d �Zd d � ZdS )�CloudFrontSignera� A signer to create a signed CloudFront URL. First you create a cloudfront signer based on a normalized RSA signer:: import rsa def rsa_signer(message): private_key = open('private_key.pem', 'r').read() return rsa.sign( message, rsa.PrivateKey.load_pkcs1(private_key.encode('utf8')), 'SHA-1') # CloudFront requires SHA-1 hash cf_signer = CloudFrontSigner(key_id, rsa_signer) To sign with a canned policy:: signed_url = cf_signer.generate_signed_url( url, date_less_than=datetime(2015, 12, 1)) To sign with a custom policy:: signed_url = cf_signer.generate_signed_url(url, policy=my_policy) c C s || _ || _dS )a� Create a CloudFrontSigner. :type key_id: str :param key_id: The CloudFront Key Pair ID :type rsa_signer: callable :param rsa_signer: An RSA signer. Its only input parameter will be the message to be signed, and its output will be the signed content as a binary string. The hash algorithm needed by CloudFront is SHA-1. N)�key_id� rsa_signer)r rI rJ r r r r / s zCloudFrontSigner.__init__Nc C s� |dur|dus |du r,|du r,d}t |��|dur@| �||�}t|tj�rV|�d�}|durrdtt|�� g}nd| �|�� d� g}| � |�}|� d| �|�� d� d| j g� | � ||�S )a� Creates a signed CloudFront URL based on given parameters. :type url: str :param url: The URL of the protected object :type date_less_than: datetime :param date_less_than: The URL will expire after that date and time :type policy: str :param policy: The custom policy, possibly built by self.build_policy() :rtype: str :return: The signed URL. Nz=Need to provide either date_less_than or policy, but not both�utf8z Expires=%sz Policy=%sz Signature=%szKey-Pair-Id=%s)� ValueError� build_policy� isinstancer � text_type�encode�intr �_url_b64encode�decoderJ �extendrI � _build_url)r r@ �date_less_than�policyr4 �params� signaturer r r rB > s( �� �z'CloudFrontSigner.generate_presigned_urlc C s" d|v r dnd}|| d� |� S )N�?�&)�join)r �base_urlZ extra_params� separatorr r r rU a s zCloudFrontSigner._build_urlc C s� t t|��}tdd|ii�}|r<d|vr0|d7 }d|i|d< |rXt t|��}d|i|d< d|fd |fg}d t|�gi}tj|d d �S ) a0 A helper to build policy. :type resource: str :param resource: The URL or the stream filename of the protected object :type date_less_than: datetime :param date_less_than: The URL will expire after the time has passed :type date_greater_than: datetime :param date_greater_than: The URL will not be valid until this time :type ip_address: str :param ip_address: Use 'x.x.x.x' for an IP, or 'x.x.x.x/x' for a subnet :rtype: str :return: The policy in a compact string. Z DateLessThanz AWS:EpochTime�/z/32z AWS:SourceIpZ IpAddressZDateGreaterThan�Resource� ConditionZ Statement)�,�:)� separators)rQ r r �json�dumps) r �resourcerV Zdate_greater_than� ip_addressZmoment� conditionZordered_payloadZ custom_policyr r r rM e s z CloudFrontSigner.build_policyc C s" t �|��dd��dd��dd�S )N� +� -� =� _� /� ~)�base64� b64encode�replace)r �datar r r rR � s ����z CloudFrontSigner._url_b64encode)NN)NN) rC rD rE rF r rB rU rM rR r r r r rH s # � )rH c K s t | d< d S )N�generate_db_auth_token)rt �Zclass_attributesr! r r r �add_generate_db_auth_token� s rv c C sp |}|du r| j j}d|d�}ddi |dd�}d}d |||f } t|| � | jjd||d d d �} | t|�d� S ) a Generates an auth token used to connect to a db with IAM credentials. :type DBHostname: str :param DBHostname: The hostname of the database to connect to. :type Port: int :param Port: The port number the database is listening on. :type DBUsername: str :param DBUsername: The username to log in as. :type Region: str :param Region: The region the database is in. If None, the client region will be used. :return: A presigned url which can be used as an auth token. N�connect)�ActionZDBUserr_ r7 �GET)Zurl_pathZ query_string�headers�body�methodzhttps://z%s%s:%si� zrds-db)r rA r r2 r )�metar r �_request_signerrB �len) r Z DBHostnameZPortZ DBUsername�Regionr& rX rA �scheme� endpoint_urlZ presigned_urlr r r rt � s( �� �rt c @ s e Zd Zdd� Zddd�ZdS )�S3PostPresignerc C s || _ d S r )r~ )r r$ r r r r � s zS3PostPresigner.__init__Nr> c C s� |du r i }|du rg }i }t j �� }|t j|d� }|�tjj�|d< g |d< |D ]} |d �| � qTt|�} || j d< || j d< | j � d| |d� | j |d �S ) a� Generates the url and the form fields used for a presigned s3 post :type request_dict: dict :param request_dict: The prepared request dictionary returned by ``botocore.awsrequest.prepare_request_dict()`` :type fields: dict :param fields: A dictionary of prefilled form fields to build on top of. :type conditions: list :param conditions: A list of conditions to include in the policy. Each element can be either a list or a structure. For example: [ {"acl": "public-read"}, {"bucket": "mybucket"}, ["starts-with", "$key", "mykey"] ] :type expires_in: int :param expires_in: The number of seconds the presigned post is valid for. :type region_name: string :param region_name: The region name to sign the presigned post to. :rtype: dict :returns: A dictionary with two elements: ``url`` and ``fields``. Url is the url to post to. Fields is a dictionary filled with the form fields and respective values to use when submitting the post. For example: {'url': 'https://mybucket.s3.amazonaws.com 'fields': {'acl': 'public-read', 'key': 'mykey', 'signature': 'mysignature', 'policy': 'mybase64 encoded policy'} } N)�secondsZ expiration� conditionszs3-presign-post-fieldszs3-presign-post-policyZ PutObjectr5 )r@ �fields) �datetime�utcnow� timedelta�strftimer- r3 ZISO8601�appendr r) r~ r r@ ) r rA r� r� r2 r rW Z datetime_nowZ expire_dateri r r r r �generate_presigned_post� s$ * �z'S3PostPresigner.generate_presigned_post)NNr> N)rC rD rE r r� r r r r r� � s �r� c K s t | d< d S )NrB )rB ru r r r �add_generate_presigned_url s r� r> c C s� |}|}|du ri }|}|}dt | �d�} | j} | j} z| j| } W n ty` t|d��Y n0 | jj�| �} | � || | �}| � || �}|dur�||d< t || jj | d� | j ||| d�S )ax Generate a presigned url given a client, its method, and arguments :type ClientMethod: string :param ClientMethod: The client method to presign for :type Params: dict :param Params: The parameters normally passed to ``ClientMethod``. :type ExpiresIn: int :param ExpiresIn: The number of seconds the presigned url is valid for. By default it expires in an hour (3600 seconds) :type HttpMethod: string :param HttpMethod: The http method to use on the generated url. By default, the http method is whatever is used in the method's model. :returns: The presigned url NT�Zis_presign_requestZuse_global_endpoint)� method_namer| �r� r) )rA r2 r )�_should_use_global_endpointr~ � _serializerZ_PY_TO_OP_NAME�KeyErrorr r} � service_model�operation_modelZ_emit_api_params�serialize_to_requestr r� rB )r Z ClientMethodZParams� ExpiresInZ HttpMethodZ client_methodrX r2 Z http_methodr) r$ � serializerr r� rA r r r rB s> � �� ��rB c K s t | d< d S )Nr� )r� ru r r r �add_generate_presigned_post[ s r� c C s� |}|}|}|} |} |du r"i }n|� � }| du r6g } t| j�} | j} | jj�d�} | �d|i| �}t|| jj dt | �d�d� | � d|i� |� d�r�| � d d |dt d� � g� n| � d |i� ||d < | j||| | d �S ) a� Builds the url and the form fields used for a presigned s3 post :type Bucket: string :param Bucket: The name of the bucket to presign the post to. Note that bucket related conditions should not be included in the ``conditions`` parameter. :type Key: string :param Key: Key name, optionally add ${filename} to the end to attach the submitted filename. Note that key related conditions and fields are filled out for you and should not be included in the ``Fields`` or ``Conditions`` parameter. :type Fields: dict :param Fields: A dictionary of prefilled form fields to build on top of. Elements that may be included are acl, Cache-Control, Content-Type, Content-Disposition, Content-Encoding, Expires, success_action_redirect, redirect, success_action_status, and x-amz-meta-. Note that if a particular element is included in the fields dictionary it will not be automatically added to the conditions list. You must specify a condition for the element as well. :type Conditions: list :param Conditions: A list of conditions to include in the policy. Each element can be either a list or a structure. For example: [ {"acl": "public-read"}, ["content-length-range", 2, 5], ["starts-with", "$success_action_redirect", ""] ] Conditions that are included may pertain to acl, content-length-range, Cache-Control, Content-Type, Content-Disposition, Content-Encoding, Expires, success_action_redirect, redirect, success_action_status, and/or x-amz-meta-. Note that if you include a condition, you must specify the a valid value in the fields dictionary as well. A value will not be added automatically to the fields dictionary based on the conditions. :type ExpiresIn: int :param ExpiresIn: The number of seconds the presigned post is valid for. :rtype: dict :returns: A dictionary with two elements: ``url`` and ``fields``. Url is the url to post to. Fields is a dictionary filled with the form fields and respective values to use when submitting the post. For example: {'url': 'https://mybucket.s3.amazonaws.com 'fields': {'acl': 'public-read', 'key': 'mykey', 'signature': 'mysignature', 'policy': 'mybase64 encoded policy'} } NZ CreateBucket�BucketTr� r� �bucketz ${filename}z starts-withz$key�key)rA r� r� r2 )�copyr� r~ r� r} r� r� r� r r� r� r� r8 r r� )r r� �KeyZFieldsZ Conditionsr� r� r� r� r� r2 Zpost_presignerr� r� rA r r r r� _ sB @ ���� �r� c C sR | j jdkrdS | j jj}|rN|�dd�r.dS |�d�dkrN| j jjdkrNdS dS )NZawsFZuse_dualstack_endpointZus_east_1_regional_endpointZregionalz us-east-1T)r} � partition�configZs3r/ r )�clientZ s3_configr r r r� � s �r� )N)Nr> N)NNr> ) r� r re rp r- Z botocore.authZbotocore.compatr r Zbotocore.awsrequestr r Zbotocore.exceptionsr r r Zbotocore.utilsr r �objectr rH rv rt r� r� rB r� r� r� r r r r �<module> s4 |~ 3L � ? � u
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка