⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.133
Server IP:
185.119.109.197
Server:
Linux managedhosting.chostar.me 5.15.0-160-generic #170-Ubuntu SMP Wed Oct 1 10:06:56 UTC 2025 x86_64
Server Software:
Apache
PHP Version:
8.1.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
botocore
/
__pycache__
/
View File Name :
auth.cpython-310.pyc
o ,&a @ s d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZ d dl Z d dl Z d dl m Z d dl Z d dlmZmZmZmZmZmZmZmZmZmZmZ d dlmZ d dl m Z m Z d dlm Z e e!Z"d Z#d Z$d Z%d Z&g d Z'dZ(dd Z)dd Z*G dd de+Z,G dd de,Z-G dd de,Z.G dd de,Z/G dd d e/Z0G d d d e/Z1G d d d e1Z2G d!d" d"e/Z3G d#d$ d$e,Z4G d%d& d&e4Z5G d'd( d(e4Z6e-e.e.e4e5e6e3d)Z7erd d*l8m9Z9 e7:e9 dS e7:e/e1e0e2d+ dS ), N formatdate)sha1sha256) itemgetter) encodebytesensure_unicode HTTPHeadersjsonparse_qsquotesixunquoteurlsplit urlunsplitHAS_CRT)NoCredentialsError)normalize_url_pathpercent_encode_sequence) MD5_AVAILABLE@e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855i z%Y-%m-%dT%H:%M:%SZz%Y%m%dT%H%M%SZ)expectz user-agentzx-amzn-trace-idzUNSIGNED-PAYLOADc C sF t | }|j}ddd}|jd ur!|j||jkr!d||jf }|S )NP i )httphttpsz%s:%d)r hostnameportgetscheme)url url_partshost default_ports r# //usr/lib/python3/dist-packages/botocore/auth.py_host_from_url7 s r% c C s@ | j }t|tjrt|d}|S t|tjr t|}|S Nutf-8)data isinstancer binary_typer loadsdecode string_types)requestr( r# r# r$ _get_body_as_dictH s r/ c @ e Zd ZdZdd ZdS ) BaseSignerFc C s t d)Nadd_auth)NotImplementedErrorselfr. r# r# r$ r2 X s zBaseSigner.add_authN)__name__ __module__ __qualname__REQUIRES_REGIONr2 r# r# r# r$ r1 U s r1 c @ s( e Zd ZdZdd Zdd Zdd ZdS ) SigV2Authz+ Sign a request with Signature V2. c C || _ d S N credentialsr5 r> r# r# r$ __init__a zSigV2Auth.__init__c C s t d t|j}|j}t|dkrd}d|j|j|f }tj | j j dt d}g }t|D ]*}|dkr7q0t|| } t| ddd } t| dd d } || d | q0d |} || 7 }t d | || d t| d} | | fS )Nz$Calculating signature using v2 auth.r /z %s %s %s r' digestmod Signature safez-_~=&zString to sign: %s)loggerdebugr r pathlenmethodnetlochmacnewr> secret_keyencoder sortedr text_typer appendjoinupdatebase64 b64encodedigeststripr, )r5 r. paramssplitrM string_to_signlhmacpairskeyvalue quoted_key quoted_valueqsb64r# r# r$ calc_signatured s4 zSigV2Auth.calc_signaturec C s | j d u rt |jr|j}n|j}| j j|d< d|d< d|d< ttt |d< | j j r4| j j |d< | ||\}}||d< |S ) NAWSAccessKeyId2SignatureVersion HmacSHA256SignatureMethod Timestamp SecurityTokenrE ) r> r r( r^ access_keytimestrftimeISO8601gmtimetokenri )r5 r. r^ rg signaturer# r# r$ r2 s zSigV2Auth.add_authN)r6 r7 r8 __doc__r@ ri r2 r# r# r# r$ r: \ s r: c @ s e Zd Zdd Zdd ZdS ) SigV3Authc C r; r< r= r? r# r# r$ r@ rA zSigV3Auth.__init__c C s | j d u rt d|jv r|jd= tdd|jd< | j jr-d|jv r&|jd= | j j|jd< tj| j jdt d}| |jd d t | }d| j jd|df }d |jv ra|jd = ||jd < d S ) NDateTusegmtX-Amz-Security-Tokenr' rC z6AWS3-HTTPS AWSAccessKeyId=%s,Algorithm=%s,Signature=%srm zX-Amzn-Authorization)r> r headersr rv rQ rR rS rT r rY r r\ r] rq r, )r5 r. new_hmacencoded_signaturerw r# r# r$ r2 s, zSigV3Auth.add_authN)r6 r7 r8 r@ r2 r# r# r# r$ ry s ry c @ s e Zd ZdZdZdd Zd/ddZdd Zd d Zd d Z dd Z dd Z dd Z dd Z dd Zdd Zdd Zd d Zd d Zd d! Zd"d# Zd$d% Zd&d' Zd(d) Zd*d+ Zd,d- Zd.S )0 SigV4Authz+ Sign a request with Signature V4. Tc C s || _ || _|| _d S r< )r> _region_name _service_namer5 r> service_name region_namer# r# r$ r@ s zSigV4Auth.__init__Fc C s< |rt ||dt }|S t ||dt }|S r& )rQ rR rT r hexdigestr\ )r5 rc msghexsigr# r# r$ _sign s zSigV4Auth._signc C sL t }|j D ]\}}| }|tvr|||< qd|vr$t|j|d< |S )zk Select the headers from the request that need to be included in the StringToSign. r! )r r~ itemslowerSIGNED_HEADERS_BLACKLISTr% r )r5 r. header_mapnamerd lnamer# r# r$ headers_to_sign s zSigV4Auth.headers_to_signc C s" |j r | |j S | t|jS r< )r^ _canonical_query_string_params_canonical_query_string_urlr r r4 r# r# r$ canonical_query_string s z SigV4Auth.canonical_query_stringc C sn g }|D ]}t || }|t|ddt|ddf qg }t|D ] \}}|d||f q"d|}|S )Nz-_.~rG %s=%srJ )strrW r rU rX )r5 r^ key_val_pairsrc rd sorted_key_valsr r# r# r$ r s z(SigV4Auth._canonical_query_string_paramsc C st d}|j r8g }|j dD ]}|d\}}}|||f q g }t|D ] \}}|d||f q%d|}|S )NrF rJ rI r )queryr_ partitionrW rU rX ) r5 partsr r pairrc _rd r r# r# r$ r s z%SigV4Auth._canonical_query_string_urlc sX g }t t|}|D ] }d fdd||D }|d|t|f q d|S )a Return the headers that need to be included in the StringToSign in their canonical form by converting all header keys to lower case, sorting them in alphabetical order and then joining them into a string, separated by newlines. ,c 3 s | ]} |V qd S r< ) _header_value.0vr5 r# r$ <genexpr> s z.SigV4Auth.canonical_headers.<locals>.<genexpr>%s:%s )rU setrX get_allrW r )r5 r r~ sorted_header_namesrc rd r# r r$ canonical_headers s zSigV4Auth.canonical_headersc C s d | S )N )rX r_ )r5 rd r# r# r$ r s zSigV4Auth._header_valuec C s t dd t|D }d|S )Nc S s g | ]}| qS r# )r r] )r nr# r# r$ <listcomp> z,SigV4Auth.signed_headers.<locals>.<listcomp>;)rU r rX )r5 r r~ r# r# r$ signed_headers s zSigV4Auth.signed_headersc C s | |stS |j}|r7t|dr7| }t|jt}t }t |dD ]}| | q$| }| | |S |r?t | S tS )Nseek )_should_sha256_sign_payloadUNSIGNED_PAYLOADbodyhasattrtell functoolspartialreadPAYLOAD_BUFFERr iterrY r r EMPTY_SHA256_HASH)r5 r. request_bodypositionread_chunksizechecksumchunk hex_checksumr# r# r$ payload s" zSigV4Auth.payloadc C s |j dsdS |jddS )Nr Tpayload_signing_enabled)r startswithcontextr r4 r# r# r$ r 6 s z%SigV4Auth._should_sha256_sign_payloadc C s |j g}| t|jj}|| || | | |}|| |d || | d|j v r>|j d }n| |}|| d |S )Nr X-Amz-Content-SHA256)rO upper_normalize_url_pathr r rM rW r r r r r~ r rX )r5 r. crrM r body_checksumr# r# r$ canonical_request@ s zSigV4Auth.canonical_requestc C s t t|dd}|S )Nz/~rG )r r )r5 rM normalized_pathr# r# r$ r O s z SigV4Auth._normalize_url_pathc C sN | j jg}||jd dd || j || j |d d|S N timestampr aws4_requestrB )r> rq rW r r r rX r5 r. scoper# r# r$ r S s zSigV4Auth.scopec C sH g }| |jd dd | | j | | j | d d|S r )rW r r r rX r r# r# r$ credential_scope[ s zSigV4Auth.credential_scopec C sH dg}| |jd | | | | t|d d|S )z Return the canonical StringToSign as well as a dict containing the original version of all headers that were included in the StringToSign. AWS4-HMAC-SHA256r r' r )rW r r r rT r rX )r5 r. r stsr# r# r$ r` c s zSigV4Auth.string_to_signc C sd | j j}| d| d|jd dd }| || j}| || j}| |d}| j||ddS ) NAWS4r' r r r r T)r )r> rS r rT r r r )r5 r` r. rc k_datek_region k_service k_signingr# r# r$ rw o s zSigV4Auth.signaturec C s | j d u rt tj }|t|jd< | | | |}t d t d| | ||}t d| | ||}t d| | || d S )Nr z$Calculating signature using v4 auth.zCanonicalRequest: %sStringToSign: %sz Signature: %s)r> r datetimeutcnowrs SIGV4_TIMESTAMPr _modify_request_before_signingr rK rL r` rw _inject_signature_to_request)r5 r. datetime_nowr r` rw r# r# r$ r2 x s zSigV4Auth.add_authc C sP d| | g}| |}|d| | |d| d||jd< |S )Nz AWS4-HMAC-SHA256 Credential=%szSignedHeaders=%sz Signature=%sz, Authorization)r r rW r rX r~ )r5 r. rw auth_strr r# r# r$ r s z&SigV4Auth._inject_signature_to_requestc C sv d|j v r |j d= | | | jjr"d|j v r|j d= | jj|j d< |jdds9d|j v r2|j d= t|j d< d S d S )Nr r} r Tr )r~ _set_necessary_date_headersr> rv r r r r4 r# r# r$ r s z(SigV4Auth._modify_request_before_signingc C s d|j v r.|j d= tj|jd t}ttt| |j d< d|j v r,|j d= d S d S d|j v r7|j d= |jd |j d< d S )Nrz r X-Amz-Date) r~ r strptimer r r intcalendartimegm timetuple)r5 r. datetime_timestampr# r# r$ r s z%SigV4Auth._set_necessary_date_headersN)F)r6 r7 r8 rx r9 r@ r r r r r r r r r r r r r r r` rw r2 r r r r# r# r# r$ r s0 r c s0 e Zd Z fddZ fddZdd Z ZS ) S3SigV4Authc s6 t t| | d|jv r|jd= | ||jd< d S )Nr )superr r r~ r r4 __class__r# r$ r s z*S3SigV4Auth._modify_request_before_signingc sx |j d}t|dd }|d u ri }|dd }|d ur |S |jdr)d|jvr+dS |j ddr4dS tt| |S ) N client_configs3r r z Content-MD5Thas_streaming_inputF) r r getattrr r r~ r r r )r5 r. r s3_config sign_payloadr r# r$ r s z'S3SigV4Auth._should_sha256_sign_payloadc C |S r< r# r5 rM r# r# r$ r z S3SigV4Auth._normalize_url_path)r6 r7 r8 r r r __classcell__r# r# r r$ r s "r c s4 e Zd ZdZef fdd Zdd Zdd Z ZS )SigV4QueryAuth c s t t| ||| || _d S r< )r r r@ _expires)r5 r> r r expiresr r# r$ r@ s zSigV4QueryAuth.__init__c C s |j d}d}||kr|j d= | | |}d| ||jd | j|d}| jjd ur3| jj|d< t |j }t dd t |j d d D }|jrT||j i |_d }|jrc|t| d |_|rkt|d }|t| } |} | d | d | d | | d f} t| |_ d S )N content-typez0application/x-www-form-urlencoded; charset=utf-8r r )zX-Amz-AlgorithmzX-Amz-Credentialr z X-Amz-ExpireszX-Amz-SignedHeadersr} c S s g | ] \}}||d fqS r r# )r kr r# r# r$ r s zASigV4QueryAuth._modify_request_before_signing.<locals>.<listcomp>T)keep_blank_valuesrF rJ r )r~ r r r r r r r> rv r r dictr r r r^ rY r( r/ r r ) r5 r. content_typeblacklisted_content_typer auth_paramsr query_dictoperation_paramsnew_query_stringp new_url_partsr# r# r$ r sF z-SigV4QueryAuth._modify_request_before_signingc C s | j d| 7 _ d S )Nz&X-Amz-Signature=%s)r r5 r. rw r# r# r$ r * s z+SigV4QueryAuth._inject_signature_to_request)r6 r7 r8 DEFAULT_EXPIRESr@ r r r r# r# r r$ r s @r c @ s e Zd ZdZdd Zdd ZdS )S3SigV4QueryAutha S3 SigV4 auth using query parameters. This signer will sign a request using query parameters and signature version 4, i.e a "presigned url" signer. Based off of: http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html c C r r< r# r r# r# r$ r < r z$S3SigV4QueryAuth._normalize_url_pathc C s t S r< )r r4 r# r# r$ r @ s zS3SigV4QueryAuth.payloadN)r6 r7 r8 rx r r r# r# r# r$ r 1 s r c @ r0 )S3SigV4PostAuthz Presigns a s3 post Implementation doc here: http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-UsingHTTPPOST.html c C sN t j }|t|jd< i }|jdd d ur |jd }i }g }|jdd d ur;|jd }|dd d ur;|d }||d< d|d< | ||d< |jd |d< |ddi |d| |i |d|jd i | jj d ur| jj |d < |d | jj i t t |d d |d < | |d ||d < ||jd< ||jd< d S ) Nr s3-presign-post-fieldss3-presign-post-policy conditionsr zx-amz-algorithmzx-amz-credentialz x-amz-datex-amz-security-tokenr' policyzx-amz-signature)r r rs r r r r rW r> rv rZ r[ r dumpsrT r, rw )r5 r. r fieldsr r r# r# r$ r2 O s: zS3SigV4PostAuth.add_authNr6 r7 r8 rx r2 r# r# r# r$ r H s r c @ s| e Zd Zg dZdddZdd Zdd Zd d Zd d Zdd dZ dddZ dddZ dd Z dd Z dd ZdS ) HmacV1Auth)$ accelerateaclcorsdefaultObjectAcllocationlogging partNumberr requestPaymenttorrent versioning versionIdversionswebsiteuploadsuploadIdzresponse-content-typezresponse-content-languagezresponse-expireszresponse-cache-controlz response-content-dispositionzresponse-content-encodingdelete lifecycletaggingrestore storageClass notification replicationr% analyticsmetrics inventoryselectz select-typez object-lockNc C r; r< r= r r# r# r$ r@ rA zHmacV1Auth.__init__c C s> t j| jjdtd}||d t| dS )Nr' rC ) rQ rR r> rS rT r rY r r\ r] r, )r5 r` r r# r# r$ sign_string s zHmacV1Auth.sign_stringc C s g d}g }d|v r |d= | |d< |D ])}d}|D ]}| }|| d ur6||kr6||| d}q|s>|d qd|S )N) content-md5r daterz FTrF r ) _get_dater rW r] rX )r5 r~ interesting_headershoiihfoundrc lkr# r# r$ canonical_standard_headers s" z%HmacV1Auth.canonical_standard_headersc C s g }i }|D ] }| }|| d ur&|dr&ddd ||D ||< qt| }|D ] }|d||| f q/d|S )Nx-amz-r c s s | ]}| V qd S r< )r] r r# r# r$ r s z6HmacV1Auth.canonical_custom_headers.<locals>.<genexpr>r r )r r rX r rU keysrW )r5 r~ r= custom_headersrc r@ sorted_header_keysr# r# r$ canonical_custom_headers s z#HmacV1Auth.canonical_custom_headersc C s$ t |dkr|S |d t|d fS )z( TODO: Do we need this? r r )rN r )r5 nvr# r# r$ unquote_v s zHmacV1Auth.unquote_vc s |d ur|}n|j }|jrC|jd}dd |D } fdd|D }t|dkrC|jtdd dd |D }|d7 }|d|7 }|S ) NrJ c S s g | ]}| d dqS )rI r )r_ r ar# r# r$ r r z1HmacV1Auth.canonical_resource.<locals>.<listcomp>c s$ g | ]}|d j v r |qS r ) QSAOfInterestrH rI r r# r$ r s r )rc c S s g | ]}d |qS )rI )rX rI r# r# r$ r s ?)rM r r_ rN sortr rX )r5 r_ auth_pathbufqsar# r r$ canonical_resource s z HmacV1Auth.canonical_resourcec C sN | d }|| |d 7 }| |}|r ||d 7 }|| j||d7 }|S )Nr rN )r rA rF rQ )r5 rO r_ r~ r rN csrD r# r# r$ canonical_string s zHmacV1Auth.canonical_stringc C sB | j jr |d= | j j|d< | j||||d}td| | |S )Nr rR r )r> rv rT rK rL r8 )r5 rO r_ r~ r rN r` r# r# r$ get_signature s zHmacV1Auth.get_signaturec C sX | j d u rttd t|j}td|j | j|j||j|j d}| || d S )Nz(Calculating signature using hmacv1 auth.zHTTP request method: %srR ) r> r rK rL r r rO rU r~ rN _inject_signature)r5 r. r_ rw r# r# r$ r2 s zHmacV1Auth.add_authc C s t ddS )NTr{ r r r# r# r$ r; rA zHmacV1Auth._get_datec C s, d|j v r |j d= d| jj|f |j d< d S )Nr z AWS %s:%s)r~ r> rq r r# r# r$ rV s z HmacV1Auth._inject_signature)NNr< )r6 r7 r8 rK r@ r8 rA rF rH rQ rT rU r2 r; rV r# r# r# r$ r v s" r c @ s0 e Zd ZdZdZefddZdd Zdd Zd S ) HmacV1QueryAuthz Generates a presigned request for s3. Spec from this document: http://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html #RESTAuthenticationQueryStringAuth r c C s || _ || _d S r< )r> r )r5 r> r r# r# r$ r@ s zHmacV1QueryAuth.__init__c C s t tt t| j S r< )r r rr r r r# r# r$ r; s zHmacV1QueryAuth._get_datec C s i }| j j|d< ||d< |jD ]"}| }|dkr!|jd |d< q|ds*|dv r1|j| ||< qt|}t|j}|d rGd|d |f }|d |d |d ||d f}t||_d S ) Nrj rE rz ExpiresrB )r9 r z%s&%sr r r r ) r> rq r~ r r r r r r ) r5 r. rw r header_keyr@ r r r r# r# r$ rV s z!HmacV1QueryAuth._inject_signatureN)r6 r7 r8 rx r r@ r; rV r# r# r# r$ rW s rW c @ r0 )HmacV1PostAuthz Generates a presigned post for s3. Spec from this document: http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingHTTPPOST.html c C s i }|j dd d ur|j d }i }g }|j dd d ur.|j d }|dd d ur.|d }||d< | jj|d< | jjd urM| jj|d< |d| jji tt | d d|d< | |d |d< ||j d< ||j d< d S ) Nr r r rj r r' r rw ) r r r> rq rv rW rZ r[ r r rT r, r8 )r5 r. r r r r# r# r$ r2 : s, zHmacV1PostAuth.add_authNr r# r# r# r$ r[ 2 s r[ )v2v3v3httpsr zs3-queryzs3-presign-postzs3v4-presign-post)CRT_AUTH_TYPE_MAPS)v4zv4-querys3v4z s3v4-query);rZ r r r email.utilsr hashlibr r rQ r# operatorr rr botocore.compatr r r r r r r r r r r botocore.exceptionsr botocore.utilsr r r getLoggerr6 rK r r rt r r r r% r/ objectr1 r: ry r r r r r r rW r[ AUTH_TYPE_MAPSbotocore.crt.authr_ rY r# r# r# r$ <module> sl 4 > /P. 2'