File: //usr/lib/python3/dist-packages/S3/__pycache__/Crypto.cpython-310.pyc
o
�Qa, � @ sH d dl mZ d dlZd dlZzd dlmZ W n ey% d dlmZ Y nw ddlm Z d dl
m Z ddl m
Z
mZmZ dd lmZmZmZ dd
lmZ d dlZd d lmZmZ g Zd&d
d�Ze�d� dd� Z e�d� d'dd�Z e�d� dd� Z e�d� dd� Z dd� Z dd � Z! d(d d!�Z"e�d!� d)d"d#�Z#d)d$d%�Z$dS )*� )�absolute_importN)� encodebytes)� encodestring� )�Config)�debug)� encode_to_s3�decode_from_s3�s3_quote)�
time_to_epoch� deunicodise� check_bucket_name_dns_support)�
SortedDict)�sha1�sha256Fc C s� | sdS d}|r
dp d}t | �� �D ],}|r||vrq| | }|dv r0|dt|dd�|f 7 }q|d|t| | dd�f 7 }q|oHd|d d
� S ) a�
Format URL parameters from a params dict and returns
?parm1=val1&parm2=val2 or an empty string if there
are no parameters. Output of this function should
be appended directly to self.resource['uri']
- Set "always_have_equal" to always have the "=" char for a param even when
there is no value for it.
- Set "limited_keys" list to restrict the param string to keys that are
defined in it.
� �=)Nr z&%s%sT��unicode_outputz&%s=%s�?r N)�sorted�keysr
)�params�always_have_equal� limited_keys� param_str� equal_str�key�value� r �+/usr/lib/python3/dist-packages/S3/Crypto.py�format_param_str s r! c C s, t � � j}tt�t|�| t��� ��� }|S )a{ Sign a string with the secret key, returning base64 encoded results.
By default the configured secret key is used, but may be overridden as
an argument.
Useful for REST authentication. See http://s3.amazonaws.com/doc/s3-developer-guide/RESTAuthentication.html
string_to_sign should be utf-8 "bytes".
and returned signature will be utf-8 encoded "bytes".
) r �
secret_keyr �hmac�newr r �digest�strip)�string_to_signr" � signaturer r r �sign_string_v2< s
r) �GET�/c C s4 g d�}|du r
t dd�}t�� j}| d }||�dd�d 7 }||�dd�d 7 }||�d d�d 7 }t|�� �D ]$}|�d
�rM||d || d 7 }|�d �r^||d || d 7 }q:t|d
dd�}t||d�}||7 }||7 }t dt
|� � t t t
|���} t t|�� �dd�}
d| d | |
d< |
S )aA Sign a string with the secret key, returning base64 encoded results.
By default the configured secret key is used, but may be overridden as
an argument.
Useful for REST authentication. See http://s3.amazonaws.com/doc/s3-developer-guide/RESTAuthentication.html
string_to_sign should be utf-8 "bytes".
)�acl� lifecycle�location�logging� notification�
partNumber�policy�requestPayment�torrent�uploadId�uploads� versionId�
versioning�versions�website�delete�cors�restoreNT�� ignore_case�
z content-md5r z content-type�datezx-amz-�:zx-emc-F��quote_backslashesr )r z
SignHeaders: zAWS �
Authorization)r r �
access_key�getr r �
startswithr
r! r �reprr r) r �list�items) �method�
canonical_urir � cur_headers�SUBRESOURCES_TO_INCLUDErF r' �header�canonical_querystringr( � new_headersr r r �sign_request_v2J s.
� rS c C s t | �� | �� |d�S )aE Sign a URL in s3://bucket/object form with the given expiry
time. The object will be accessible via the signed URL until the
AWS key and secret are revoked or the expiry time is reached, even
if the object is otherwise private.
See: http://s3.amazonaws.com/doc/s3-developer-guide/RESTAuthentication.html
)�bucket�object�expiry)�sign_url_base_v2rT rU )� url_to_signrV r r r � sign_url_v2} s
�rY c K sL t � � j}t � � j}t| d �| d< t � � j| d< t � � j| d< t| d ddd�| d< d| d < t � � jr8d
| d < td | d � d | }d
}|rQ||d | 7 }d}|r]||d | 7 }d}td|� tt t
|��dd�| d< td| d � t t � � j | d �r�d}nd}|d7 }|| }|r�|dt|dd� 7 }|r�|dt|dd� 7 }|S )zcShared implementation of sign_url methods. Takes a hash of 'bucket', 'object' and 'expiry' as args.rV rF � host_baserU FTrC �http�proto�httpsz#Expiry interpreted as epoch time %sz'GET
%(expiry)d
/%(bucket)s/%(object)sr z response-content-disposition=�&zresponse-content-type=zSigning plaintext: %rr �sigzUrlencoded signature: %srT z/%(proto)s://%(bucket)s.%(host_base)s/%(object)sz/%(proto)s://%(host_base)s/%(bucket)s/%(object)szC?AWSAccessKeyId=%(access_key)s&Expires=%(expiry)d&Signature=%(sig)sz &response-content-disposition=z&response-content-type=)
r �content_disposition� content_typer rF rZ r
�signurl_use_httpsr r) r r
� host_bucket)�parmsr` ra �signtext�param_separator�urlr r r rW � s>
rW c C s t �| t|�t��� S �N)r# r$ r r r% )r �msgr r r �sign� s rj c C s4 t td| �|�}t ||�}t ||�}t |d�}|S )z1
Input: unicode params
Output: bytes
�AWS4� aws4_request)rj r )r � dateStamp�
regionName� serviceName�kDate�kRegion�kService�kSigningr r r �getSignatureKey� s
rt r � us-east-1� c C sT d}|d u r t dd�}t�� }|j} |j}
tj�� } | �d�} | �d�}
t|
|
||�}t|ddd�}t |dd��
d �}t |�t t d
��krLt
|�� �}n
t
t t|���� �}||| d �}d }|�� D ] }|d
kso||�d�v rpqb|| �� ||�� < |d|�� 7 }qbd}t|�� �D ]\}}||d | d 7 }q�|}td| � d�t|�d���}| d | d | d | d | d | }td| � d}|
d | d | d d }|d | d | d t
t t|���� � }t
t�|t|�t ��� �}|d d | d | d d | d d | } t |�� �} | �| | |d �� td | � | S ) N�s3Tr> z%Y%m%dT%H%M%SZz%Y%m%dFrC )r r rv )�host�x-amz-content-sha256�
x-amz-datez$host;x-amz-content-sha256;x-amz-daterE �;r rB r@ zcanonical_headers = %sz,Canonical Request:
%s
----------------------zAWS4-HMAC-SHA256r+ rl � z Credential=�,zSignedHeaders=z
Signature=)rz rE ry zsignature-v4 headers: %s)r r rF r" �datetime�utcnow�strftimert r
r! �lstrip�typer r � hexdigestr r �splitr& r rK r �joinr# r$ �update) rL rx rM r �regionrN �body�service�cfgrF r" �t�amzdate� datestamp� signing_keyrQ � payload_hash�canonical_headers�signed_headersrP �canonical_headers_str�k�v�canonical_request� algorithm�credential_scoper' r( �authorization_headerrR r r r �sign_request_v4� sZ
� , ,0 � r� c s zt � }W n
ty t �� }Y nw tt| �d��\� |d u r1t� fdd�d�D ]}|�|� q(n-� �|� |}|dkrf� �t d|��}|sGn'|t
|�8 }|�|� |dks<W d � |S W d � |S W d � |S W d � |S 1 syw Y |S )N�rbc s
� � d�S )N� )�readr ��fr r �<lambda> s
z&checksum_sha256_file.<locals>.<lambda>rv r r� ) r � Exceptionr$ �openr �iterr� �seekr� �min�len)�filename�offset�size�hash�chunk� size_leftr r� r �checksum_sha256_file� s@
� �
�
��
��
��
��r� c C sV zt � }W n
ty t �� }Y nw |d u r |�| � |S |�| ||| � � |S rh )r r� r$ r� )�bufferr� r� r� r r r �checksum_sha256_buffer s
�
�r� )FN)r* r+ NN)r* r r+ Nru Nrv )r N)%�
__future__r �sysr# �base64r r � ImportErrorr r r/ r � BaseUtilsr r r
�Utilsr r r
r r~ �hashlibr r �__all__r! �appendr) rS rY rW rj rt r� r� r� r r r r �<module> sB �
1
#
�
?