⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
botocore
/
__pycache__
/
View File Name :
auth.cpython-312.pyc
Pe d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlm Z d dl m Z d dl m Z mZ d dlmZ d dlmZmZmZmZmZmZmZmZmZ d dlm Z m Z d dl m Z m Z m!Z! d d lm"Z" ejF e$ Z%d Z&d Z'd Z(d Z)g dZ*dZ+dZ,d Z-d Z. G d d Z/ G d de/ Z0 G d de/ Z1 G d de/ Z2 G d d e/ Z3 G d d e3 Z4 G d d e4 Z5 G d! d"e5 Z6 G d# d$e5 Z7 G d% d&e3 Z8 G d' d(e8 Z9 G d) d*e3 Z: G d+ d,e/ Z; G d- d.e; Z< G d/ d0e; Z= G d1 d2e0 Z>e1e2e2e;e<e=e:e5e7e6e>d3 Z?erd d4l@mAZA e?j eA ye?j e3e8e4e9d5 y)6 N)Mapping formatdate)sha1sha256) itemgetter) HAS_CRT HTTPHeaders encodebytesensure_unicodeparse_qsquoteunquoteurlsplit urlunsplit)NoAuthTokenErrorNoCredentialsError)is_valid_ipv6_endpoint_urlnormalize_url_pathpercent_encode_sequence) MD5_AVAILABLE@e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855i z%Y-%m-%dT%H:%M:%SZz%Y%m%dT%H%M%SZ)expectz user-agentzx-amzn-trace-idzUNSIGNED-PAYLOADz"STREAMING-UNSIGNED-PAYLOAD-TRAILERc t | }|j }t | rd| d}ddd}|j 9|j |j |j k7 rd||j fz }|S )N[]P i )httphttpsz%s:%d)r hostnamer portgetscheme)url url_partshost default_portss //usr/lib/python3/dist-packages/botocore/auth.py_host_from_urlr) F s{ I D!#&4&{M ~~! >>] . .y/?/? @ @dINN 33D K c | j }t |t r&t j |j d }|S t |t rt j | }|S Nutf-8)data isinstancebytesjsonloadsdecodestr)requestr. s r( _get_body_as_dictr6 Y sT <<D$ zz$++g./ K D# zz$ Kr* c e Zd ZdZdZd Zy) BaseSignerFc t d )Nadd_auth)NotImplementedErrorselfr5 s r( r: zBaseSigner.add_authj s !*--r* N)__name__ __module__ __qualname__REQUIRES_REGIONREQUIRES_TOKENr: r* r( r8 r8 f s ON.r* r8 c e Zd ZdZ d Zy) TokenSignerTc || _ y N) auth_token)r= rH s r( __init__zTokenSigner.__init__t s $r* N)r> r? r@ rB rI rC r* r( rE rE n s N%r* rE c " e Zd ZdZd Zd Zd Zy) SigV2Authz+ Sign a request with Signature V2. c || _ y rG credentialsr= rN s r( rI zSigV2Auth.__init__} &r* c P t j d t |j }|j }t | dk( rd}|j d|j d| d}t j | j j j d t }g }t | D ]d }|dk( r t || } t! |j d d } t! | j d d } |j# | d | f d j% | } || z }t j d | |j' |j d t) j* |j- j/ j1 d } | | fS )Nz$Calculating signature using v2 auth.r / r- digestmod Signature safez-_~=&zString to sign: %s)loggerdebugr r$ pathlenmethodnetlochmacnewrN secret_keyencoder sortedr4 r appendjoinupdatebase64 b64encodedigeststripr3 )r= r5 paramssplitr^ string_to_signlhmacpairskeyvalue quoted_key quoted_valueqsb64s r( calc_signaturezSigV2Auth.calc_signature se ;<%zz t9>D #NN+2ell^2dV2F ' ' . .w 76 &>C k!s $E szz' 2<J g!6UCL LLJ<q 7 8 " XXe_" )>: ^**734 u||~.446==gFCyr* c | j t |j r |j }n |j }| j j |d< d|d< d|d< t j t t j |d< | j j r| j j |d< | j || \ }}||d< |S ) NAWSAccessKeyId2SignatureVersion HmacSHA256SignatureMethod Timestamp SecurityTokenrV ) rN r r. rn access_keytimestrftimeISO8601gmtimetokenry )r= r5 rn rw signatures r( r: zSigV2Auth.add_auth s #$& & << \\F ^^F#'#3#3#>#> %(!"$0 ! "mmGT[[] C{ ! !&*&6&6&<&<F? # ++GV< I '{r* N)r> r? r@ __doc__rI ry r: rC r* r( rK rK x s '8r* rK c e Zd Zd Zd Zy) SigV3Authc || _ y rG rM rO s r( rI zSigV3Auth.__init__ rP r* c | j t d|j v r |j d= t d |j d< | j j r>d|j v r |j d= | j j |j d< t j | j j j d t }|j |j d j d t |j j }d| j j d|j d }d |j v r |j d = ||j d < y ) NDateTusegmtX-Amz-Security-Tokenr- rT zAWS3-HTTPS AWSAccessKeyId=z ,Algorithm=HmacSHA256,Signature=zX-Amzn-Authorization)rN r headersr r rb rc rd re r ri r rl rm r r3 )r= r5 new_hmacencoded_signaturer s r( r: zSigV3Auth.add_auth sL #$& & W__ $'",D"9 ! !% 8OO$:;6:6F6F6L6LGOO 2 388 ' ' . .w 76 /66w?@ '(9 : @ @ B()9)9)D)D(E F..?.F.Fw.O-P R "W__ 4 672;./r* N)r> r? r@ rI r: rC r* r( r r s '<r* r c e Zd ZdZdZd ZddZd Zd Zd Z d Z d Z d Z d Z d Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zy) SigV4Authz+ Sign a request with Signature V4. Tc . || _ || _ || _ y rG )rN _region_name _service_namer= rN service_name region_names r( rI zSigV4Auth.__init__ s & ( )r* c |r:t j ||j d t j }|S t j ||j d t j }|S r, )rb rc re r hexdigestrl )r= rs msghexsigs r( _signzSigV4Auth._sign s[ ((3 7 3V<FFHC ((3 7 3V<CCEC r* c t }|j j D ]# \ }}|j }|t vs |||< % d|vrt |j |d< |S )zk Select the headers from the request that need to be included in the StringToSign. r& )r r itemslowerSIGNED_HEADERS_BLACKLISTr) r$ )r= r5 header_mapnamert lnames r( headers_to_signzSigV4Auth.headers_to_sign si !] "??002KD%JJLE 44$) 5! 3 # "0 !<Jv r* c |j r| j |j S | j t |j S rG )rn _canonical_query_string_params_canonical_query_string_urlr r$ r< s r( canonical_query_stringz SigV4Auth.canonical_query_string s: >>66w~~F F33HW[[4IJ Jr* c : g }t |t r|j }|D ]7 \ }}|j t |d t t | d f 9 g }t | D ] \ }}|j | d| dj | }|S )Nz-_.~rX rZ r[ )r/ r r rg r r4 rf rh )r= rn key_val_pairsrs rt sorted_key_valsr s r( r z(SigV4Auth._canonical_query_string_params s fg &\\^F JC s(%E *HI ! ! /JC " "cU!E7#3 4 0!$/!: %%r* c . d}|j rg }|j j d D ]* }|j d \ }}}|j ||f , g }t | D ] \ }}|j | d| dj | }|S )NrW r[ rZ )queryro partitionrg rf rh ) r= partsr r pairrs _rt r s r( r z%SigV4Auth._canonical_query_string_url s !# ;; M ))#. $s 3 Q $$c5\2 / !O %] 3 U &&#aw'78 4%(XXo%> "%%r* c g }t t | }|D ]J }dj fd|j | D }|j | dt | L dj | S )a Return the headers that need to be included in the StringToSign in their canonical form by converting all header keys to lower case, sorting them in alphabetical order and then joining them into a string, separated by newlines. ,c 3 @ K | ] }j | y wrG ) _header_value).0vr= s r( <genexpr>z.SigV4Auth.canonical_headers.<locals>.<genexpr>, s! /K!""1%/Ks :rS )rf setrh get_allrg r )r= r r sorted_header_namesrs rt s ` r( canonical_headerszSigV4Auth.canonical_headers" sz $S %9 :&CHH />/F/Fs/K E NNcU!N5$9#:; < ' yy!!r* c @ dj |j S )N )rh ro )r= rt s r( r zSigV4Auth._header_value2 s xx &&r* c Z t d t | D }dj | S )Nc 3 X K | ]" }|j j $ y wrG )r rm )r ns r( r z+SigV4Auth.signed_headers.<locals>.<genexpr>; s I4Hq *4Hs (*;)rf r rh )r= r r s r( signed_headerszSigV4Auth.signed_headers: s& IC4HIIxx r* c |j j di }|j d }t |t xr |j d dk( S )Nchecksumrequest_algorithmintrailer)contextr" r/ dict)r= r5 checksum_context algorithms r( _is_streaming_checksum_payloadz(SigV4Auth._is_streaming_checksum_payload> sJ "??..z2>$(()<= )T*Oy}}T/Bi/OOr* c | j | rt S | j | st S |j }|rt |d r|j }t j |j t }t }t |d D ] }|j | |j }|j | |S |rt | j S t S )Nseekr* )r "STREAMING_UNSIGNED_PAYLOAD_TRAILER_should_sha256_sign_payloadUNSIGNED_PAYLOADbodyhasattrtell functoolspartialreadPAYLOAD_BUFFERr iterri r r EMPTY_SHA256_HASH)r= r5 request_bodypositionread_chunksizer chunk hex_checksums r( payloadzSigV4Auth.payloadC s . .w 75 511': $ # || GL& 9#((*H & . . !!> N xH nc2& 3#--/L h ' ,'113 3$ $r* c r |j j d sy|j j dd S )Nr Tpayload_signing_enabled)r$ startswithr r" r< s r( r z%SigV4Auth._should_sha256_sign_payload] s1 {{%%g. ""#<dCCr* c @ |j j g}| j t |j j }|j | |j | j | | j | }|j | j | dz |j | j | d|j v r|j d }n| j | }|j | dj | S )NrS X-Amz-Content-SHA256)r` upper_normalize_url_pathr r$ r^ rg r r r r r r rh )r= r5 crr^ r body_checksums r( canonical_requestzSigV4Auth.canonical_requestg s nn""$ %''(=(B(BC $ $--g67 ..w7 $(( 9D@A $%%o67 !W__ 4 #OO,B CM LL 1M - yy} r* c 2 t t | d }|S )Nz/~rX )r r )r= r^ normalized_paths r( r z SigV4Auth._normalize_url_pathv s 24 8tD r* c " | j j g}|j |j d dd |j | j |j | j |j d dj | S N timestampr aws4_requestrR )rN r rg r r r rh r= r5 scopes r( r zSigV4Auth.scopez sp !!,,- W__[1!A67 T&&' T''( ^$xx r* c g }|j |j d dd |j | j |j | j |j d dj | S r )rg r r r rh r s r( credential_scopezSigV4Auth.credential_scope sa W__[1!A67 T&&' T''( ^$xx r* c dg}|j |j d |j | j | |j t |j d j dj | S )z Return the canonical StringToSign as well as a dict containing the original version of all headers that were included in the StringToSign. AWS4-HMAC-SHA256r r- rS )rg r r r re r rh )r= r5 r stss r( rp zSigV4Auth.string_to_sign sl "" 7??;/0 4((12 6+227;<FFHIyy~ r* c P | j j }| j d| j |j d dd }| j || j }| j || j }| j |d }| j ||d S )NAWS4r r r r T)r )rN rd r re r r r )r= rp r5 rs k_datek_region k_service k_signings r( r zSigV4Auth.signature s ))C5\ ! ! #W__[%A!A%F ::fd&7&78JJx););< JJy.9 zz)^z>>r* c | j t t j j }|j t |j d< | j | | j | }t j d t j d| | j || }t j d| | j || }t j d| | j || y )Nr z$Calculating signature using v4 auth.zCanonicalRequest: %sStringToSign: %sz Signature: %s)rN r datetimeutcnowr SIGV4_TIMESTAMPr _modify_request_before_signingr r\ r] rp r _inject_signature_to_request)r= r5 datetime_nowr rp r s r( r: zSigV4Auth.add_auth s #$& & ((//1 '3'<'<_'M $ ++G4 2 27 ; ;< ,.?@ ,,W6GH (.9NN>7; %y1 ))'9=r* c d| j | z g}| j | }|j d| j | |j d|z dj | |j d< |S )Nz AWS4-HMAC-SHA256 Credential=%szSignedHeaders=z Signature=%sz, Authorization)r r rg r rh r )r= r5 r auth_strr s r( r z&SigV4Auth._inject_signature_to_request sy 4tzz'7JJK ..w7 T 0 0 A B C 23+/99X+>(r* c d|j v r |j d= | j | | j j r>d|j v r |j d= | j j |j d< |j j dd s/d|j v r |j d= t |j d< y y )Nr r r Tr )r _set_necessary_date_headersrN r r r" r r< s r( r z(SigV4Auth._modify_request_before_signing s goo -0 ((1 ! !% 8OO$:;6:6F6F6L6LGOO 2 3""#<dC% 8OO$:;6FGOO 2 3 Dr* c d|j v r|j d= t j j |j d t }t t t j |j |j d< d|j v r|j d= y y d|j v r |j d= |j d |j d< y )Nr r X-Amz-Date) r r strptimer r r intcalendartimegm timetuple)r= r5 datetime_timestamps r( r z%SigV4Auth._set_necessary_date_headers s W__ $'!)!2!2!;!; ,o" '1HOO$6$@$@$BCD'GOOF # w.OOL1 / w.OOL1,3OOK,HGOOL )r* N)F)r> r? r@ r rA rI r r r r r r r r r r r r r r r rp r r: r r r rC r* r( r r s O* K&"& " '!P %4D ?>$ G Ir* r c . e Zd Z fdZ fdZd Z xZS ) S3SigV4Authc t | | d|j v r |j d= | j | |j d< y )Nr )superr r r r= r5 __class__s r( r z*S3SigV4Auth._modify_request_before_signing sA .w7 !W__ 4 6726,,w2G./r* c |j j d }t |dd }|i }|j dd }||S d}|j j di }|j d }t |t r|j d dk( r|d }|j j d r||j vry |j j d d ry t | % | S )N client_configs3r z Content-MD5r r r headerr r Thas_streaming_inputF) r r" getattrr/ r r$ r r r r ) r= r5 r# s3_config sign_payloadchecksum_headerr r r! s r( r z'S3SigV4Auth._should_sha256_sign_payload s ++O< M46 I !}}%>E # ("??..z2>$(()<= i &9==+>(+J ' /O &&w/ goo5 ?? 4e < w27;;r* c |S rG rC r= r^ s r( r z S3SigV4Auth._normalize_url_path r* )r> r? r@ r r r __classcell__r! s @r( r r s H'<Rr* r c 6 e Zd ZdZ fdZ fdZ fdZ xZS ) S3ExpressAuthTc 6 t | ||| || _ y rG )r rI _identity_cache)r= rN r r identity_cacher! s r( rI zS3ExpressAuth.__init__ s lK@ - r* c $ t | | y rG )r r: r s r( r: zS3ExpressAuth.add_auth s !r* c t | | d|j vr#| j j |j d< d|j v r|j d= y y )Nzx-amz-s3session-tokenr )r r r rN r r s r( r z,S3ExpressAuth._modify_request_before_signing sU .w7 "'// 97;7G7G7M7MGOO 3 4 !W__ 4 67 5r* )r> r? r@ REQUIRES_IDENTITY_CACHErI r: r r. r/ s @r( r1 r1 s ". "8 8r* r1 c e Zd ZdZd Zy)S3ExpressPostAuthTc t j j }|j t |j d< i }|j j dd |j d }i }g }|j j dd &|j d }|j dd |d }||d< d|d< | j | |d< |j d |d< |j ddi |j d| j | i |j d|j d i | j j @| j j |d < |j d | j j i t j t j | j d j d |d < | j! |d | |d < ||j d< ||j d< y ) Nr s3-presign-post-fieldss3-presign-post-policy conditionsr x-amz-algorithmx-amz-credential x-amz-dateX-Amz-S3session-Tokenr- policyx-amz-signaturer r r r r r" r rg rN r rj rk r1 dumpsre r3 r r= r5 r fieldsrB r= s r( r: zS3ExpressPostAuth.add_auth, s ((//1 '3'<'<_'M $ ?? 7 > J __%=>F ?? 7 > J __%=>Fzz,-9 #L 1 )| $6 !%)ZZ%8!" &{ ;| ,.@AB-tzz'/BCD< )EFG ! ! -.2.>.>.D.DF* + ($*:*:*@*@A "++ JJv % %g . &/ x %)NN6(3CW$M !4:014:01r* N)r> r? r@ r7 r: rC r* r( r9 r9 ) s "';r* r9 c D e Zd ZdZdZed fd Zd Zd Zd Zd Z xZ S ) S3ExpressQueryAuthi, T)expiresc : t | |||| || _ y )N)r4 r rI _expires)r= rN r r r4 rJ r! s r( rI zS3ExpressQueryAuth.__init__Z s, ) r* c N |j j d }d}||k( r |j d= | j | j | }d| j | |j d | j |d}| j j | j j |d< t |j }t |j d }|j D ci c] \ }} || d } }} |j r"| j |j i |_ d } |j r!| j t# | d |_ | rt% | d z } | t% | } |} | d | d | d | | d f}t' | |_ y c c} }w )N content-type0application/x-www-form-urlencoded; charset=utf-8r r zX-Amz-AlgorithmzX-Amz-Credentialr z X-Amz-ExpireszX-Amz-SignedHeadersrA Tkeep_blank_valuesr rW r[ r r" r r r r rM rN r r r$ r r r rn ri r. r6 r r )r= r5 content_typeblocklisted_content_typer auth_paramsr% query_string_partskr query_dictoperation_paramsnew_query_stringp new_url_partss r( r z1S3ExpressQueryAuth._modify_request_before_signingk s **>: > ! 3 3/ ,,T-A-A'-JK 2 $ 7 3!//+6 !]]#1 ! ! -373C3C3I3IK/ 0 W[[) &ioo N*<*B*B*DE*D$!Qa1g*D E >> gnn - GN << / 8 9 GL 6z BS H !8!E F G 1qtQqT+;QqTB / A F ,F!c 4 |xj d|z z c_ y Nz&X-Amz-Signature=%sr$ r= r5 r s r( r z/S3ExpressQueryAuth._inject_signature_to_request ,y88 r* c |S rG rC r, s r( r z&S3ExpressQueryAuth._normalize_url_path r- r* c t S rG r r< s r( r zS3ExpressQueryAuth.payload r* ) r> r? r@ DEFAULT_EXPIRESr7 rI r r r r r. r/ s @r( rI rI V s- O " "?0B9 r* rI c 2 e Zd ZdZef fd Zd Zd Z xZS )SigV4QueryAuth c 6 t | ||| || _ y rG rL )r= rN r r rJ r! s r( rI zSigV4QueryAuth.__init__ s lK@ r* c N |j j d }d}||k( r |j d= | j | j | }d| j | |j d | j |d}| j j | j j |d< t |j }t |j d }|j D ci c] \ }} || d } }} |j r"| j |j i |_ d } |j r!| j t# | d |_ | rt% | d z } | t% | } |} | d | d | d | | d f}t' | |_ y c c} }w )NrO rP r r rQ r TrR r rW r[ rT rU rV rW )r= r5 rX blacklisted_content_typer rZ r% r[ r\ r r] r^ r_ r` ra s r( r z-SigV4QueryAuth._modify_request_before_signing s **>: > ! 3 3/ ,,T-A-A'-JK 2 $ 7 3!//+6 !]]#1 ! ! -262B2B2H2HK. / W[[) &ioo N*<*B*B*DE*D$!Qa1g*D E >> gnn - GN << / 8 9 GL 6z BS H !8!E F G 1qtQqT+;QqTB / A Frb c 4 |xj d|z z c_ y rd re rf s r( r z+SigV4QueryAuth._inject_signature_to_request rg r* )r> r? r@ rl rI r r r. r/ s @r( rn rn s O ?N ?0B9r* rn c e Zd ZdZd Zd Zy)S3SigV4QueryAutha S3 SigV4 auth using query parameters. This signer will sign a request using query parameters and signature version 4, i.e a "presigned url" signer. Based off of: http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html c |S rG rC r, s r( r z$S3SigV4QueryAuth._normalize_url_path r- r* c t S rG rj r< s r( r zS3SigV4QueryAuth.payload rk r* N)r> r? r@ r r r rC r* r( ru ru s r* ru c e Zd ZdZd Zy)S3SigV4PostAuthz Presigns a s3 post Implementation doc here: http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-UsingHTTPPOST.html c t j j }|j t |j d< i }|j j dd |j d }i }g }|j j dd &|j d }|j dd |d }||d< d|d< | j | |d< |j d |d< |j ddi |j d| j | i |j d|j d i | j j @| j j |d < |j d | j j i t j t j | j d j d |d < | j! |d | |d < ||j d< ||j d< y ) Nr r; r< r= r r> r? r@ x-amz-security-tokenr- rB rC rD rF s r( r: zS3SigV4PostAuth.add_auth/ s ((//1 '3'<'<_'M $ ?? 7 > J __%=>F ?? 7 > J __%=>Fzz,-9 #L 1 )| $6 !%)ZZ%8!" &{ ;| ,.@AB-tzz'/BCD< )EFG ! ! --1-=-=-C-CF) * 5t7G7G7M7M N O "++ JJv % %g . &/ x %)NN6(3CW$M !4:014:01r* Nr> r? r@ r r: rC r* r( ry ry ' s %;r* ry c b e Zd Zg dZddZd Zd Zd Zd ZddZ dd Z dd Z d Z d Z d Zy) HmacV1Auth)$ accelerateaclcorsdefaultObjectAcllocationlogging partNumberrB requestPaymenttorrent versioning versionIdversionswebsiteuploadsuploadIdzresponse-content-typezresponse-content-languagezresponse-expireszresponse-cache-controlz response-content-dispositionzresponse-content-encodingdelete lifecycletaggingrestore storageClass notification replicationr analyticsmetrics inventoryselectz select-typez object-lockNc || _ y rG rM r s r( rI zHmacV1Auth.__init__ rP r* c * t j | j j j d t }|j |j d t |j j j d S )Nr- rT ) rb rc rN rd re r ri r rl rm r3 )r= rp r s r( sign_stringzHmacV1Auth.sign_string sk 88 ' ' . .w 74 --g678??,-335<<WEEr* c , g d}g }d|v r|d= | j |d< |D ]_ }d}|D ]B }|j }|| ||k( s |j || j d}D |rO|j d a dj | S )N) content-md5rO dater FTrW rS ) _get_dater rg rm rh )r= r interesting_headershoiihfoundrs lks r( canonical_standard_headersz%HmacV1Auth.canonical_standard_headers s E W ..*%BE YY[3<+bJJws| 1 1 34 E 2 & yy~ r* c P g }i }|D ]T }|j }|| |j d s+dj d |j | D ||< V t |j }|D ] }|j | d|| dj | S )Nx-amz-r c 3 < K | ] }|j y wrG )rm )r r s r( r z6HmacV1Auth.canonical_custom_headers.<locals>.<genexpr> s 2+?a +?s r rS )r r rh r rf keysrg )r= r r custom_headersrs r sorted_header_keyss r( canonical_custom_headersz#HmacV1Auth.canonical_custom_headers s CBs|'==*), 2+2??3+?2 *N2& $N$7$7$9 :%C JJ#as 3 45 6 &yy~ r* c H t | dk( r|S |d t |d fS )z( TODO: Do we need this? rT r )r_ r )r= nvs r( unquote_vzHmacV1Auth.unquote_v s+ r7a<IqE72a5>* *r* c ||}n |j }|j r|j j d }|D cg c] }|j dd }}|D cg c]% }|d | j v s| j | ' }}t | dkD rR|j t d |D cg c] }dj | }}|dz }|dj | z }|S c c}w c c}w c c}w )Nr[ rZ rT r )rs ?) r^ r ro QSAOfInterestr r_ sortr rh )r= ro auth_pathbufqsaas r( canonical_resourcez HmacV1Auth.canonical_resource s C**C ;;++##C(C,/0Cq1773?CC0+.+.a!A$$:L:L2Lq!3 3x!|Z]+,/0Cqsxx{C0s sxx}$ 1 1s C* C/3C/5C4c |j dz }|| j | dz z }| j | }|r||dz z }|| j || z }|S )NrS r )r r r r )r= r` ro r rJ r csr s r( canonical_stringzHmacV1Auth.canonical_string so \\^d " d--g6== 66w? .4' 'B d%%ey%AA r* c | j j r |d= | j j |d< | j |||| }t j d| | j | S )Nr{ r r )rN r r r\ r] r )r= r` ro r rJ r rp s r( get_signaturezHmacV1Auth.get_signature ss ! !./.2.>.>.D.DG* + .. E7i / (.9 //r* c F | j t t j d t |j }t j d|j | j |j ||j |j }| j || y )Nz(Calculating signature using hmacv1 auth.zHTTP request method: %sr ) rN r r\ r] r r$ r` r r r _inject_signature)r= r5 ro r s r( r: zHmacV1Auth.add_auth s #$ $ ?@% .?&& NNE7??g>O>O ' w 2r* c t d S )NTr r r= s r( r zHmacV1Auth._get_date s &&r* c d|j v r |j d= d| j j d| }||j d< y )Nr zAWS r )r rN r )r= r5 r auth_headers r( r z HmacV1Auth._inject_signature sI goo - 0 T - - 8 8 99+F +6(r* )NNrG )r> r? r@ r rI r r r r r r r r: r r rC r* r( r~ r~ W sN %MN'F " +6 ?C ?C 0 3' 7r* r~ c * e Zd ZdZdZefdZd Zd Zy)HmacV1QueryAuthz Generates a presigned request for s3. Spec from this document: http://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html #RESTAuthenticationQueryStringAuth ro c || _ || _ y rG )rN rM )r= rN rJ s r( rI zHmacV1QueryAuth.__init__ s & r* c z t t t j t | j z S rG )r4 r r rM r s r( r zHmacV1QueryAuth._get_date s& 3tyy{S %77899r* c i }| j j |d< ||d< |j D ]R }|j }|dk( r|j d |d< +|j d s|dv sA|j | ||< T t | }t |j }|d r |d d| }|d |d |d ||d f}t | |_ y ) Nr{ rV r Expiresr )r rO r[ r rT rU rV ) rN r r r r r r r$ r ) r= r5 r r] header_keyr r_ r` ra s r( r z!HmacV1QueryAuth._inject_signature s '+'7'7'B'B #$"+ ; !//J!!#B V#(/(? 9% x(B 3 - ") !4 2 * 3:> W[[ ! Q4 #$A$q)9(: ; 1qtQqT+;QqTB / r* N)r> r? r@ r rl rI r r rC r* r( r r s O,; : 0r* r c e Zd ZdZd Zy)HmacV1PostAuthz Generates a presigned post for s3. Spec from this document: http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingHTTPPOST.html c i }|j j dd |j d }i }g }|j j dd &|j d }|j dd |d }||d< | j j |d< | j j @| j j |d< |j d| j j i t j t j | j d j d |d< | j |d |d< ||j d< ||j d< y ) Nr; r< r= r{ r{ r- rB r ) r r" rN r r rg rj rk r1 rE re r3 r )r= r5 rG rB r= s r( r: zHmacV1PostAuth.add_auth> sX ?? 7 > J __%=>F ?? 7 > J __%=>Fzz,-9 #L 1 )| #'#3#3#>#> ! ! --1-=-=-C-CF) * 5t7G7G7M7M N O "++ JJv % %g . &/ x # . .vh/? @{4:014:01r* Nr| rC r* r( r r 5 s ;r* r c e Zd ZdZd Zy) BearerAuthz Performs bearer token authorization by placing the bearer token in the Authorization header as specified by Section 2.1 of RFC 6750. https://datatracker.ietf.org/doc/html/rfc6750#section-2.1 c | j t d| j j }d|j v r |j d= ||j d< y )NzBearer r )rH r r r )r= r5 r s r( r: zBearerAuth.add_authe sR ?? ""$ $ 5 5 67 goo -0+6(r* Nr| rC r* r( r r ] s 7r* r ) v2v3v3httpsr$ zs3-queryzs3-presign-postzs3v4-presign-postz v4-s3expresszv4-s3express-queryzv4-s3express-presign-postbearer)CRT_AUTH_TYPE_MAPS)v4zv4-querys3v4z s3v4-query)Crj r r r rb r1 r r collections.abcr email.utilsr hashlibr r operatorr botocore.compatr r r r r r r r r botocore.exceptionsr r botocore.utilsr r r r getLoggerr> r\ r r r r r r r r) r6 r8 rE rK r r r r1 r9 rI rn ru ry r~ r r r AUTH_TYPE_MAPSbotocore.crt.authr ri rC r* r( <module>r s # " E * 8 $ G " & %I "& . .%* %: :z< <8JI JIZ3) 3l8K 8**; *;Ze e PN9Y N9b ~ 0-;i -;`f7 f7R20j 20j%;Z %;P7 7& %(!,!2 4,-& * r*