| Server IP : 172.67.201.108 / Your IP : 216.73.216.55 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.7 System : Linux ip-172-31-69-123.ec2.internal 6.1.177-224.371.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jul 27 20:28:29 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.24 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3.9/site-packages/cfnbootstrap/__pycache__/ |
Upload File : |
a
��Rj�5 � @ s d dl mZmZ d dlZd dlmZmZ d dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dl
mZmZmZmZmZmZ dZdZdZdZe �d �Zd
d � ZG d d
� d
e�Z G dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z!G dd� de�Z"G dd� de�Z#dS ) � )�
endpoint_tool�utilN)�AuthBase�
HTTPBasicAuth)�urlparse�urlsplit�urljoin�parse_qs�quote�unquotezx-amz-content-sha256z
x-amz-dateZ
Authorizationzx-amz-security-tokenzcfn.initc C sP t �d| �}|d u rd S |�| �}|sBt| �jdd � �d�d S |�d�S d S )N�AmazonS3� �/r �.)r �get_endpoint_for_url�get_subdomain_prefixr �path� partition�rstrip)� unparsed_url�endpoint�bucket� r �5/usr/lib/python3.9/site-packages/cfnbootstrap/auth.py�_extract_bucket_from_url# s
r c @ s> e Zd Zddd�Zdd� Zdd� Zdd � Zd
d � Zd d
� ZdS )�S3SignerNc C s || _ || _tjj| _d S �N)�_creds�_region�datetime�utcnow� _nowfunction)�self�creds�regionr r r �__init__6 s zS3Signer.__init__c K s� |j r�d|jv r�t|jd �d ur�t�d|jd � |j |j�� |j� � }|j�
t d� |j�
t d� |j�
t
d� |j�
td� |jd |_|jd |_| �|�}|jj|fi |��}|j�|� ||_|S t�d|jd � |S )NZLocationz$Handling redirect to S3 location: %s� z S3 redirected to non-S3 url: %s)Z is_redirect�headersr �log�warnZcontent�rawZ release_connZrequest�copy�pop�_SECURITY_TOKEN_HEADER�_AUTHORIZATION_HEADER�_AMZ_DATE_HEADER�_AMZ_CONTENT_SHA_HEADER�url�full_url�signZ
connection�send�history�append�error)r" �r�kwargsZprepZ_rr r r �handle_redirect< s. �
�zS3Signer.handle_redirectc C s< |� d| j� tt|d�r |jn|j�}| j}|sdt�d|�}|j r^t
� d� t | j
��|�S |j}t|�}| �� }|�d�}|�d�}|d | d } ||jt< | j
jr�| j
j|jt< |j|jd < t�|jd ur�|jnd
�d ��� � }
|
|jt < |j d } | | � |�d 7 } | | � t!|j"d
��d 7 } |j�#� } | �$| �\}
}| |
d | d 7 } | |
7 } d| d | d t�| �d ��� � }t%�&d| j
j' �d �|�d �tj��(� }t%�&||�d �tj��(� }t%�&|d�d �tj��(� }t%�&|d�d �tj��(� }t%�&||�d �tj�� � }| j
j)d | }d|||f |jt*< |S )NZresponser2 r zHFalling back to Signature Version 2 as no region was specified in S3 URLz%Y%m%dT%H%M%SZz%Y%m%dr z/s3/aws4_request�hostr& �utf-8�
TzAWS4-HMAC-SHA256
ZAWS4�s3Z aws4_requestz<AWS4-HMAC-SHA256 Credential=%s,SignedHeaders=%s,Signature=%s)+Z
register_hookr: r �hasattrr2 r1 r r r Z
is_defaultr( r) �
S3V2Signerr r3 r$ r r! �strftimer' r/ �security_tokenr- �netloc�hashlibZsha256�body�encodeZ hexdigestr0 �method�_canonicalize_uri�_canonicalize_queryr �queryr+ �_canonicalize_headers�hmac�new�
secret_key�digest�
access_keyr. )r" �reqr2 r$ r �parsedZ timestampZtimestamp_formattedZtimestamp_shortZscopeZhashed_payloadZcanonical_requestZheaders_to_signZcanonical_headersZsigned_headersZstring_to_signZ derived_keyZ signatureZ
credentialr r r r3 c s� � �
�
��
��� �
��
��
��
��� z
S3Signer.signc C s< t |�}|jsdS t td|j�d���j}|r8t|d�S dS )Nr zhttp://foo.comz/~)r r r �lstripr
)r" �uri�splitr r r r rH � s �zS3Signer._canonicalize_uric C sv |sdS g }|� � D ]8}|d D ]*}|�t|d d�|rBt|d�ndf� q qt|t�dd�d�}d�dd� |D ��S ) Nr& r
r �~��key�&c s s | ]}d � |�V qdS )�=N��join)�.0Zpairr r r � <genexpr>� � z/S3Signer._canonicalize_query.<locals>.<genexpr>)�itemsr6 r
�sorted�operator�
itemgetterr\ )r" �paramsZ
encoded_pairs�entry�valueZ sorted_pairsr r r rI � s ��z S3Signer._canonicalize_queryc C s� i }dd� |� � D �D ].\}}||v r<|| d | ||< q|||< qt|� � t�d�d�}d�dd� |D ��d d�d d� |D ��fS )
Nc s s, | ]$\}}|� � t�d d|��� fV qdS )z
(?su)[\s]+� N)�lower�re�sub�strip)r] rX rf r r r r^ � r_ z1S3Signer._canonicalize_headers.<locals>.<genexpr>�,r rW r= c s s | ]}d � |�V qdS )�:Nr[ �r] re r r r r^ � r_ �;c s s | ]}|d V qdS )r Nr rn r r r r^ � r_ )r` ra rb rc r\ )r" r' Z
canon_headersrX rf Zsorted_entriesr r r rK � s
�z S3Signer._canonicalize_headers)N) �__name__�
__module__� __qualname__r% r: r3 rH rI rK r r r r r 4 s
'F r c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
r@ c C s
|| _ d S r )r )r" r# r r r r% � s zS3V2Signer.__init__c C s� d|j vr(tj�� jdd��d�|j t< | jjr>| jj|j t< |j d }||j �
dd�d 7 }||j �
dd�d 7 }||j �
d d�d 7 }|| � |�7 }|| � |�7 }t
�t�| jj�d
�|�d
�tj��� ��� �d
�}d | jj|f |j t< |S ) NZDater )Z microsecondz%a, %d %b %Y %H:%M:%S GMTr= z content-md5r& z content-type�dater< z AWS %s:%s)r' r r �replacerA r/ r rB r- rG �getrK �_canonicalize_resource�base64Z encodebytesrL rM rN rF rD Zsha1rO rk �decoderP r. )r" rQ Z stringToSignZsignedr r r r3 � s*
��
"��zS3V2Signer.signc C s8 dd� |j �� D �}|r4d�dd� t|�D ��d S dS )Nc S s* g | ]"\}}|� � �d �r|� � |f�qS )zx-amz)rh �
startswith�r] Zhdr�valr r r �
<listcomp>� s �z4S3V2Signer._canonicalize_headers.<locals>.<listcomp>r= c S s g | ]\}}|d | �qS )rm r rz r r r r| � r_ r& )r' r` r\ ra )r" rQ r' r r r rK � s z S3V2Signer._canonicalize_headersc C sV t |d�r|jn|j}t�d|�}|�|�}t|�}|s>|jS d|�d� |j S d S )Nr2 r r r ) r? r2 r1 r r r r r r )r" rQ r r r r1 r r r rv � s
z!S3V2Signer._canonicalize_resourceN)rp rq rr r% r3 rK rv r r r r r@ � s r@ c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�
S3DefaultAuthc C s
i | _ d S r ��
_bucketToAuth�r" r r r r% s zS3DefaultAuth.__init__c C s || j |< d S r r~ )r" r � auth_implr r r �add_auth_for_bucket s z!S3DefaultAuth.add_auth_for_bucketc C s* | � |�}|r&|| jv r&| j| |�S |S r )�_extract_bucketr )r" rQ r r r r �__call__ s
zS3DefaultAuth.__call__c C s t t|d�r|jn|j�S �Nr2 )r r? r2 r1 �r" rQ r r r r� s z S3DefaultAuth._extract_bucketN)rp rq rr r% r� r� r� r r r r r} s r} c @ s e Zd Zdd� Zdd� ZdS )�
S3RoleAuthc C s
|| _ d S r )� _roleName)r" �roleNamer r r r% s zS3RoleAuth.__init__c C s t t�| j���|�S r )r r Zget_role_credsr� r3 r� r r r r� s zS3RoleAuth.__call__N�rp rq rr r% r� r r r r r� s r� c @ s e Zd Zdd� Zdd� ZdS )�S3Authc C s t t�||��| _d S r )r r Z Credentials�_signer)r" rP rN r r r r% s zS3Auth.__init__c C s | j �|�S r )r� r3 r� r r r r� s zS3Auth.__call__Nr� r r r r r� s r� c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�BasicDefaultAuthc C s
i | _ d S r )�_authsr� r r r r% & s zBasicDefaultAuth.__init__c C s8 t t|d�r|jn|j�j}|| jv r4| j| |�S |S r� )r r? r2 r1 rC r� )r" rQ Zbase_urir r r r� ) s �
zBasicDefaultAuth.__call__c C s t ||�| j|< d S r )r r� )r" rT �username�passwordr r r � add_password1 s z BasicDefaultAuth.add_passwordN)rp rq rr r% r� r� r r r r r� $ s r� c @ s e Zd Zdd� Zdd� ZdS )� DefaultAuthc C s || _ || _d S r �Z_s3Z_basic)r" r> �basicr r r r% 7 s zDefaultAuth.__init__c C s | � | �|��S r r� r� r r r r� ; s zDefaultAuth.__call__Nr� r r r r r� 5 s r� c @ s e Zd Zdd� Zdd� ZdS )�AuthenticationConfigc C s~ i | _ t� }t� }|�� D �]P\}}|�dd�}d|�� kr�d }d|v rdd|v rdt|d |d �}n"d|v rzt|d �}n t� d� q|| j |< d|v r�t
|d t �r�|d gn|d }|D ]} |� | |� q�qd |�� k�r`t
|�d
�|�d ��| j |< d |v �rlt
|d t ��r4|�|d |�d
�|�d �� n*|d D ] }
|�|
|�d
�|�d �� �q<qt� d
|� qt||�| _d S )N�typer& r> Z accessKeyIdZ secretKeyr� zCS3 auth requires either "accessKeyId" and "secretKey" or "roleName"�bucketsr� r� r� Zurisz$Unrecognized authentication type: %s)r� r} r� r` ru rh r� r� r( r) �
isinstance�strr� r r� r� � _defaultAuth) r" ZmodelZs3AuthZ basicAuthrX ZconfigZ
configTyper� r� r �ur r r r% A sZ ��
���
��
��
z AuthenticationConfig.__init__c C s |r|| j vr| jS | j | S r )r� r� )r" rX r r r �get_authn s z AuthenticationConfig.get_authN)rp rq rr r% r� r r r r r� ? s -r� )$Z cfnbootstrapr r rb Zcfnbootstrap.http.authr r rw r rD rL Zloggingri � urllib.parser r r r r
r r0 r/ r. r- Z getLoggerr( r �objectr r@ r} r� r� r� r� r� r r r r �<module> s0
/