/
opt
/
gsutil
/
gslib
/
utils
/
__pycache__
/
up file
home
a +(Wg\ � @ s� d Z ddlZddlmZ ddlmZ ddlZddlmZ ddlZddlm Z dZ dZ d Z d Z d Zd d � Zddd�Zdd� Zefdd�ZdS )z&Utility functions for signurl command.� N)�datetime)�timezone)�UTF8)�urllibzN{method} {resource} {query_string} {headers} {signed_headers} {hashed_payload}zGOOG4-RSA-SHA256zA{signing_algo} {request_time} {credential_scope} {hashed_request}z;https://{host}/{path}?x-goog-signature={sig}&{query_string}zUNSIGNED-PAYLOADc C s t jtjd�jd d�S )N)�tz)�tzinfo)r �nowr �utc�replace� r r �)/opt/gsutil/gslib/utils/signurl_helper.py�_NowUTC$ s r Fc sh t � } | �d�} | �d�} dj| |d�} t| d | | d�t� �� ��d|�� d��|d urf|�d < |d urv|�d < d �|�}d ��fdd�t��� �D ��}d�� fdd�t� �� �D ��d }d�t� �� ��}tj|||||t d�}t j r�|� t �}t�� }|�|� t�|�� ��� �t �}tjt| | |d�}| �r`|�r`|�d| � |�d| � ||fS )a Create a string that needs to be signed. Args: client_id: Client ID signing this URL. method: The HTTP method to be used with the signed URL. duration: timedelta for which the constructed signed URL should be valid. path: String path to the bucket of object for signing, in the form 'bucket' or 'bucket/object'. generation: If not None, specifies a version of an object for signing. logger: logging.Logger for warning and debug output. region: Geographic region in which the requested resource resides. signed_headers: Dict containing the header info like host content-type etc. billing_project: Specify a user project to be billed for the request. string_to_sign_debug: If true AND logger is enabled for debug level, print string to sign to debug. Used to differentiate user's signed URL from the probing permissions-check signed URL. Returns: A tuple where the 1st element is the string to sign. The second element is the query string. z%Y%m%dz%Y%m%dT%H%M%SZz%{date}/{region}/storage/goog4_request)�date�region�/�;z%d)zx-goog-algorithmzx-goog-credentialz x-goog-datezx-goog-signedheaderszx-goog-expiresN� userProject� generationz/{}�&c s$ g | ] }d � |tj�� | ���qS )z{}={})�formatr �parse� quote_plus)�.0�param)�signed_query_paramsr r � <listcomp>^ s �z!CreatePayload.<locals>.<listcomp>� c s g | ]}d � |�� � | ��qS )z{}:{})r �lower)r �header)�signed_headersr r r b s �)�method�resource� query_string�headersr Zhashed_payload)Z signing_algoZ request_time�credential_scopeZhashed_requestz=Canonical request (ignore opening/closing brackets): [[[%s]]]z:String to sign (ignore opening/closing brackets): [[[%s]]])r �strftimer � _SIGNING_ALGO�join�sorted�keys� total_seconds�_CANONICAL_REQUEST_FORMAT�_UNSIGNED_PAYLOAD�six�PY3�encoder �hashlib�sha256�update�base64� b16encode�digestr �decode�_STRING_TO_SIGN_FORMAT�debug)� client_idr �duration�pathr �loggerr r Zbilling_project�string_to_sign_debugZ signing_timeZ canonical_dayZcanonical_timeZcanonical_scopeZcanonical_resource�canonical_query_string�canonical_headersZcanonical_signed_headers�canonical_requestZcanonical_request_hasherZhashed_canonical_request�string_to_signr )r r r � CreatePayload( sv � � � ��� ��� ���rB c C s$ t �| ��� �� }tj||||d�S )zGet the final signed url.)�hostr; �sigr" )r3 r4 r r6 �_SIGNED_URL_FORMATr )� raw_signaturerC r; r> � signaturer r r � GetFinalUrl� s �rH c C s t | t�r| S | �|�S )N)� isinstance�bytesr/ )�value�encodingr r r �to_bytes� s rM )NF)�__doc__r3 r r r0 �gslib.utils.constantsr r- � six.movesr r+ r& r7 rE r, r rB rH rM r r r r �<module> s$ � `