o
    i                     @   s  d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlm	Z	 d dl
mZ d dlmZmZ d dlmZ d dlmZmZmZmZmZmZmZmZmZmZmZ d dlmZmZm Z m!Z! d dl"m#Z#m$Z$m%Z% e&e'Z(d	Z)d
Z*dZ+dZ,g dZ-dZ.dZ/dd Z0dd Z1G dd dZ2G dd de2Z3G dd de2Z4G dd de2Z5G dd de2Z6G dd de6Z7G d d! d!e7Z8G d"d# d#e8Z9G d$d% d%e8Z:G d&d' d'e6Z;G d(d) d)e;Z<G d*d+ d+e6Z=G d,d- d-e2Z>G d.d/ d/e>Z?G d0d1 d1e>Z@G d2d3 d3e3ZAd4d5 ZBd6d7 ZCe4e5e5e>e?e@e=e8e:e9eAd8ZDer+d d9lEmFZF eDGeF n
eDGe6e;e7e<d: d;d<d=d>d?ZHd@dA eHI D ZJdS )B    N)Mapping
formatdate)sha1sha256)
itemgetter)HAS_CRTMD5_AVAILABLEHTTPHeadersencodebytesensure_unicodeget_current_datetimeparse_qsquoteunquoteurlsplit
urlunsplit)NoAuthTokenErrorNoCredentialsErrorUnknownSignatureVersionError UnsupportedSignatureVersionError)is_valid_ipv6_endpoint_urlnormalize_url_pathpercent_encode_sequence@e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855i   z%Y-%m-%dT%H:%M:%SZz%Y%m%dT%H%M%SZ)expectztransfer-encodingz
user-agentzx-amzn-trace-idzUNSIGNED-PAYLOADz"STREAMING-UNSIGNED-PAYLOAD-TRAILERc                 C   s\   t | }|j}t| rd| d}ddd}|jd ur,|j||jkr,| d|j }|S )N[]P   i  )httphttps:)r   hostnamer   portgetscheme)url	url_partshostdefault_ports r*   S/var/www/html/karishye-ai-python/venv/lib/python3.10/site-packages/botocore/auth.py_host_from_urlJ   s   
r,   c                 C   s<   | j }t|trt|d}|S t|trt|}|S Nutf-8)data
isinstancebytesjsonloadsdecodestr)requestr/   r*   r*   r+   _get_body_as_dict]   s   


r7   c                   @   s   e Zd ZdZdZdd ZdS )
BaseSignerFc                 C   s   t d)Nadd_auth)NotImplementedErrorselfr6   r*   r*   r+   r9   n   s   zBaseSigner.add_authN)__name__
__module____qualname__REQUIRES_REGIONREQUIRES_TOKENr9   r*   r*   r*   r+   r8   j   s    r8   c                   @   s   e Zd ZdZ	 dd ZdS )TokenSignerTc                 C   
   || _ d S N)
auth_token)r<   rE   r*   r*   r+   __init__x      
zTokenSigner.__init__N)r=   r>   r?   rA   rF   r*   r*   r*   r+   rB   r   s    rB   c                   @   s(   e Zd ZdZdd Zdd Zdd ZdS )		SigV2Authz+
    Sign a request with Signature V2.
    c                 C   rC   rD   credentialsr<   rJ   r*   r*   r+   rF      rG   zSigV2Auth.__init__c                 C   s
  t d t|j}|j}t|dkrd}|j d|j d| d}tj	| j
jdtd}g }t|D ])}|dkr;q4t|| }	t|ddd	}
t|	dd
d	}||
 d|  q4d|}||7 }t d| ||d t|  d}||fS )Nz$Calculating signature using v2 auth.r   /
r.   	digestmod	Signature safez-_~=&zString to sign: %s)loggerdebugr   r&   pathlenmethodnetlochmacnewrJ   
secret_keyencoder   sortedr5   r   appendjoinupdatebase64	b64encodedigeststripr4   )r<   r6   paramssplitrX   string_to_signlhmacpairskeyvalue
quoted_keyquoted_valueqsb64r*   r*   r+   calc_signature   s.   


zSigV2Auth.calc_signaturec                 C   s   | j d u rt |jr|j}n|j}| j j|d< d|d< d|d< ttt |d< | j j	r4| j j	|d< | 
||\}}||d< |S )	NAWSAccessKeyId2SignatureVersion
HmacSHA256SignatureMethod	TimestampSecurityTokenrP   )rJ   r   r/   rh   
access_keytimestrftimeISO8601gmtimetokenrs   )r<   r6   rh   rq   	signaturer*   r*   r+   r9      s   
zSigV2Auth.add_authN)r=   r>   r?   __doc__rF   rs   r9   r*   r*   r*   r+   rH   |   s
    rH   c                   @   s   e Zd Zdd Zdd ZdS )	SigV3Authc                 C   rC   rD   rI   rK   r*   r*   r+   rF      rG   zSigV3Auth.__init__c                 C   s   | j d u rt d|jv r|jd= tdd|jd< | j jr-d|jv r&|jd= | j j|jd< tj| j jdt	d}|
|jd d t|  }d| j j d|d }d	|jv rb|jd	= ||jd	< d S )
NDateTusegmtX-Amz-Security-Tokenr.   rN   zAWS3-HTTPS AWSAccessKeyId=z ,Algorithm=HmacSHA256,Signature=zX-Amzn-Authorization)rJ   r   headersr   r   r\   r]   r^   r_   r   rc   r   rf   rg   r{   r4   )r<   r6   new_hmacencoded_signaturer   r*   r*   r+   r9      s*   



zSigV3Auth.add_authN)r=   r>   r?   rF   r9   r*   r*   r*   r+   r      s    r   c                   @   s   e Zd ZdZdZdd Zd1ddZdd	 Zd
d Zdd Z	dd Z
dd Zdd Zdd Zdd Zdd Zdd Zdd Zdd Zd d! Zd"d# Zd$d% Zd&d' Zd(d) Zd*d+ Zd,d- Zd.d/ Zd0S )2	SigV4Authz+
    Sign a request with Signature V4.
    Tc                 C   s   || _ || _|| _d S rD   )rJ   _region_name_service_namer<   rJ   service_nameregion_namer*   r*   r+   rF      s   
zSigV4Auth.__init__Fc                 C   s<   |rt ||dt }|S t ||dt }|S r-   )r\   r]   r_   r   	hexdigestrf   )r<   rm   msghexsigr*   r*   r+   _sign   s
   zSigV4Auth._signc                 C   sL   t  }|j D ]\}}| }|tvr|||< qd|vr$t|j|d< |S )zk
        Select the headers from the request that need to be included
        in the StringToSign.
        r(   )r
   r   itemslowerSIGNED_HEADERS_BLACKLISTr,   r&   )r<   r6   
header_mapnamern   lnamer*   r*   r+   headers_to_sign   s   zSigV4Auth.headers_to_signc                 C   s"   |j r	| |j S | t|jS rD   )rh   _canonical_query_string_params_canonical_query_string_urlr   r&   r;   r*   r*   r+   canonical_query_string   s   z SigV4Auth.canonical_query_stringc                 C   s~   g }t |tr| }|D ]\}}|t|ddtt|ddf qg }t|D ]\}}|| d|  q)d|}|S )Nz-_.~rR   rT   rU   )r0   r   r   ra   r   r5   r`   rb   )r<   rh   key_val_pairsrm   rn   sorted_key_valsr   r*   r*   r+   r     s   

z(SigV4Auth._canonical_query_string_paramsc           	      C   sv   d}|j r9g }|j dD ]}|d\}}}|||f qg }t|D ]\}}|| d|  q%d|}|S )NrQ   rU   rT   )queryri   	partitionra   r`   rb   )	r<   partsr   r   pairrm   _rn   r   r*   r*   r+   r     s   
z%SigV4Auth._canonical_query_string_urlc                    sZ   g }t t|}|D ]}d fdd||D }|| dt|  q
d|S )a  
        Return the headers that need to be included in the StringToSign
        in their canonical form by converting all header keys to lower
        case, sorting them in alphabetical order and then joining
        them into a string, separated by newlines.
        ,c                 3   s    | ]}  |V  qd S rD   )_header_value.0vr<   r*   r+   	<genexpr>0  s    

z.SigV4Auth.canonical_headers.<locals>.<genexpr>r!   rM   )r`   setrb   get_allra   r   )r<   r   r   sorted_header_namesrm   rn   r*   r   r+   canonical_headers&  s   
zSigV4Auth.canonical_headersc                 C   s   d | S )N )rb   ri   )r<   rn   r*   r*   r+   r   6  s   zSigV4Auth._header_valuec                 C   s    t dd t|D }d|S )Nc                 s   s    | ]	}|   V  qd S rD   )r   rg   )r   nr*   r*   r+   r   ?  s    z+SigV4Auth.signed_headers.<locals>.<genexpr>;)r`   r   rb   )r<   r   r   r*   r*   r+   signed_headers>  s   
zSigV4Auth.signed_headersc                 C   s0   |j di }|d}t|to|ddkS )Nchecksumrequest_algorithmintrailer)contextr$   r0   dict)r<   r6   checksum_context	algorithmr*   r*   r+   _is_streaming_checksum_payloadB  s   
z(SigV4Auth._is_streaming_checksum_payloadc                 C   s   |  |rtS | |stS |j}|r>t|dr>| }t|j	t
}t }t|dD ]}|| q+| }|| |S |rFt| S tS )Nseek    )r   "STREAMING_UNSIGNED_PAYLOAD_TRAILER_should_sha256_sign_payloadUNSIGNED_PAYLOADbodyhasattrtell	functoolspartialreadPAYLOAD_BUFFERr   iterrc   r   r   EMPTY_SHA256_HASH)r<   r6   request_bodypositionread_chunksizer   chunkhex_checksumr*   r*   r+   payloadG  s&   


zSigV4Auth.payloadc                 C   s   |j dsdS |jddS )Nr    Tpayload_signing_enabled)r&   
startswithr   r$   r;   r*   r*   r+   r   a  s   z%SigV4Auth._should_sha256_sign_payloadc                 C   s   |j  g}| t|jj}|| || | | |}|| 	|d  || 
| d|jv r>|jd }n| |}|| d|S )NrM   X-Amz-Content-SHA256)rZ   upper_normalize_url_pathr   r&   rX   ra   r   r   r   r   r   r   rb   )r<   r6   crrX   r   body_checksumr*   r*   r+   canonical_requestk  s   





zSigV4Auth.canonical_requestc                 C   s   t t|dd}|S )Nz/~rR   )r   r   )r<   rX   normalized_pathr*   r*   r+   r   z  s   zSigV4Auth._normalize_url_pathc                 C   sN   | j jg}||jd dd  || j || j |d d|S N	timestampr      aws4_requestrL   )rJ   r{   ra   r   r   r   rb   r<   r6   scoper*   r*   r+   r   ~  s   


zSigV4Auth.scopec                 C   sH   g }| |jd dd  | | j | | j | d d|S r   )ra   r   r   r   rb   r   r*   r*   r+   credential_scope  s   

zSigV4Auth.credential_scopec                 C   sH   dg}| |jd  | | | | t|d  d|S )z
        Return the canonical StringToSign as well as a dict
        containing the original version of all headers that
        were included in the StringToSign.
        AWS4-HMAC-SHA256r   r.   rM   )ra   r   r   r   r_   r   rb   )r<   r6   r   stsr*   r*   r+   rj     s
   
zSigV4Auth.string_to_signc                 C   sd   | j j}| d|  |jd dd }| || j}| || j}| |d}| j||ddS )NAWS4r   r   r   r   T)r   )rJ   r^   r   r_   r   r   r   )r<   rj   r6   rm   k_datek_region	k_service	k_signingr*   r*   r+   r     s   zSigV4Auth.signaturec                 C   s   | j d u rt t }|t|jd< | | | |}t	d t	d| | 
||}t	d| | ||}t	d| | || d S )Nr   z$Calculating signature using v4 auth.zCanonicalRequest:
%sStringToSign:
%szSignature:
%s)rJ   r   r   r}   SIGV4_TIMESTAMPr   _modify_request_before_signingr   rV   rW   rj   r   _inject_signature_to_request)r<   r6   datetime_nowr   rj   r   r*   r*   r+   r9     s   



zSigV4Auth.add_authc                 C   sV   d|  | g}| |}|d| |  |d|  d||jd< |S )NzAWS4-HMAC-SHA256 Credential=zSignedHeaders=z
Signature=, Authorization)r   r   ra   r   rb   r   )r<   r6   r   auth_strr   r*   r*   r+   r     s   
z&SigV4Auth._inject_signature_to_requestc                 C   sv   d|j v r	|j d= | | | jjr"d|j v r|j d= | jj|j d< |jdds9d|j v r2|j d= t|j d< d S d S )Nr   r   r   Tr   )r   _set_necessary_date_headersrJ   r   r   r$   r   r;   r*   r*   r+   r     s   



z(SigV4Auth._modify_request_before_signingc                 C   s   d|j v r.|j d= tj|jd t}ttt|	 |j d< d|j v r,|j d= d S d S d|j v r7|j d= |jd |j d< d S )Nr   r   
X-Amz-Date)
r   datetimestrptimer   r   r   intcalendartimegm	timetuple)r<   r6   datetime_timestampr*   r*   r+   r     s   




z%SigV4Auth._set_necessary_date_headersN)F)r=   r>   r?   r   r@   rF   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   rj   r   r9   r   r   r   r*   r*   r*   r+   r      s2    




r   c                       s0   e Zd Z fddZ fddZdd Z  ZS )S3SigV4Authc                    s2   t  | d|jv r|jd= | ||jd< d S )Nr   )superr   r   r   r;   	__class__r*   r+   r     s   
z*S3SigV4Auth._modify_request_before_signingc                    s   |j d}t|dd }|d u ri }|dd }|d ur|S d}|j di }|d}t|tr<|ddkr<|d	 }|jd
rG||jvrIdS |j ddrRdS t 	|S )Nclient_configs3r   zContent-MD5r   r   r   headerr   r    Thas_streaming_inputF)
r   r$   getattrr0   r   r&   r   r   r   r   )r<   r6   r   	s3_configsign_payloadchecksum_headerr   r   r   r*   r+   r     s&   


z'S3SigV4Auth._should_sha256_sign_payloadc                 C      |S rD   r*   r<   rX   r*   r*   r+   r        zS3SigV4Auth._normalize_url_path)r=   r>   r?   r   r   r   __classcell__r*   r*   r   r+   r     s    )r   c                       s8   e Zd ZdZ fddZ fddZ fddZ  ZS )S3ExpressAuthTc                      t  ||| || _d S rD   )r   rF   _identity_cache)r<   rJ   r   r   identity_cacher   r*   r+   rF        
zS3ExpressAuth.__init__c                    s   t  | d S rD   )r   r9   r;   r   r*   r+   r9   !  s   zS3ExpressAuth.add_authc                    s>   t  | d|jvr| jj|jd< d|jv r|jd= d S d S )Nzx-amz-s3session-tokenr   )r   r   r   rJ   r   r;   r   r*   r+   r   $  s   

z,S3ExpressAuth._modify_request_before_signing)r=   r>   r?   REQUIRES_IDENTITY_CACHErF   r9   r   r
  r*   r*   r   r+   r    s
    r  c                   @      e Zd ZdZdd ZdS )S3ExpressPostAuthTc                 C   J  t  }|t|jd< i }|jdd d ur|jd }i }g }|jdd d ur9|jd }|dd d ur9|d }||d< d|d< | ||d< |jd |d< |ddi |d| |i |d|jd i | jjd ur| jj|d	< |d	| jji t	
t|d
d
|d< | |d ||d< ||jd< ||jd< d S )Nr   s3-presign-post-fieldss3-presign-post-policy
conditionsr   x-amz-algorithmx-amz-credential
x-amz-dateX-Amz-S3session-Tokenr.   policyx-amz-signaturer   r}   r   r   r$   r   ra   rJ   r   rd   re   r2   dumpsr_   r4   r   r<   r6   r   fieldsr  r  r*   r*   r+   r9   0  s>   



zS3ExpressPostAuth.add_authN)r=   r>   r?   r  r9   r*   r*   r*   r+   r  -  s    r  c                       sJ   e Zd ZdZdZed fdd
Zdd Zdd	 Zd
d Zdd Z	  Z
S )S3ExpressQueryAuthi,  T)expiresc                   s   t  j||||d || _d S )N)r  r   rF   _expires)r<   rJ   r   r   r  r"  r   r*   r+   rF   ^  s   	
zS3ExpressQueryAuth.__init__c                 C     |j d}d}||kr|j d= | | |}d| ||jd | j|d}| jjd ur3| jj|d< t	|j
}t|jdd}d	d
 | D }|jrT||j i |_d}	|jrc|t| d|_|rkt|d }	|	 t| }
|}|d |d |d |
|d f}t||_
d S )Ncontent-type0application/x-www-form-urlencoded; charset=utf-8r   r   zX-Amz-AlgorithmzX-Amz-Credentialr   zX-Amz-ExpireszX-Amz-SignedHeadersr  Tkeep_blank_valuesc                 S      i | ]	\}}||d  qS r   r*   r   kr   r*   r*   r+   
<dictcomp>      zES3ExpressQueryAuth._modify_request_before_signing.<locals>.<dictcomp>rQ   rU   r            r   r$   r   r   r   r   r$  rJ   r   r   r&   r   r   r   rh   rc   r/   r7   r   r   )r<   r6   content_typeblocklisted_content_typer   auth_paramsr'   query_string_parts
query_dictoperation_paramsnew_query_stringpnew_url_partsr*   r*   r+   r   o  >   
z1S3ExpressQueryAuth._modify_request_before_signingc                 C      | j d| 7  _ d S Nz&X-Amz-Signature=r&   r<   r6   r   r*   r*   r+   r        z/S3ExpressQueryAuth._inject_signature_to_requestc                 C   r  rD   r*   r  r*   r*   r+   r     r	  z&S3ExpressQueryAuth._normalize_url_pathc                 C      t S rD   r   r;   r*   r*   r+   r        zS3ExpressQueryAuth.payload)r=   r>   r?   DEFAULT_EXPIRESr  rF   r   r   r   r   r
  r*   r*   r   r+   r!  Z  s    	Ar!  c                       s4   e Zd ZdZef fdd	Zdd Zdd Z  ZS )SigV4QueryAuth  c                    r  rD   r#  )r<   rJ   r   r   r"  r   r*   r+   rF     r  zSigV4QueryAuth.__init__c                 C   r%  )Nr&  r'  r   r   r(  r   Tr)  c                 S   r+  r,  r*   r-  r*   r*   r+   r/    r0  zASigV4QueryAuth._modify_request_before_signing.<locals>.<dictcomp>rQ   rU   r   r1  r2  r3  r4  )r<   r6   r5  blacklisted_content_typer   r7  r'   r8  r9  r:  r;  r<  r=  r*   r*   r+   r     r>  z-SigV4QueryAuth._modify_request_before_signingc                 C   r?  r@  rA  rB  r*   r*   r+   r     rC  z+SigV4QueryAuth._inject_signature_to_request)r=   r>   r?   rG  rF   r   r   r
  r*   r*   r   r+   rH    s    ArH  c                   @   s    e Zd ZdZdd Zdd ZdS )S3SigV4QueryAutha  S3 SigV4 auth using query parameters.

    This signer will sign a request using query parameters and signature
    version 4, i.e a "presigned url" signer.

    Based off of:

    http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html

    c                 C   r  rD   r*   r  r*   r*   r+   r     r	  z$S3SigV4QueryAuth._normalize_url_pathc                 C   rD  rD   rE  r;   r*   r*   r+   r   #  rF  zS3SigV4QueryAuth.payloadN)r=   r>   r?   r   r   r   r*   r*   r*   r+   rK    s    rK  c                   @   r  )S3SigV4PostAuthz
    Presigns a s3 post

    Implementation doc here:
    http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-UsingHTTPPOST.html
    c                 C   r  )Nr   r  r  r  r   r  r  r  x-amz-security-tokenr.   r  r  r  r  r*   r*   r+   r9   3  s:   


zS3SigV4PostAuth.add_authNr=   r>   r?   r   r9   r*   r*   r*   r+   rL  +      rL  c                   @   sx   e Zd Zg dZdddZdd Zdd Zd	d
 Zdd ZdddZ		dddZ
	dddZdd Zdd Zdd ZdS )
HmacV1Auth)$
accelerateaclcorsdefaultObjectAcllocationlogging
partNumberr  requestPaymenttorrent
versioning	versionIdversionswebsiteuploadsuploadIdzresponse-content-typezresponse-content-languagezresponse-expireszresponse-cache-controlzresponse-content-dispositionzresponse-content-encodingdelete	lifecycletaggingrestorestorageClassnotificationreplicationrX  	analyticsmetrics	inventoryselectzselect-typezobject-lockNc                 C   rC   rD   rI   r   r*   r*   r+   rF     rG   zHmacV1Auth.__init__c                 C   s>   t j| jjdtd}||d t| 	 
dS )Nr.   rN   )r\   r]   rJ   r^   r_   r   rc   r   rf   rg   r4   )r<   rj   r   r*   r*   r+   sign_string  s
   zHmacV1Auth.sign_stringc                 C   s   g d}g }d|v r|d= |   |d< |D ])}d}|D ]}| }|| d ur6||kr6|||   d}q|s>|d qd|S )N)content-md5r&  dater   FTrQ   rM   )	_get_dater   ra   rg   rb   )r<   r   interesting_headershoiihfoundrm   lkr*   r*   r+   canonical_standard_headers  s"   

z%HmacV1Auth.canonical_standard_headersc                 C   s   g }i }|D ] }|  }|| d ur&|dr&ddd ||D ||< qt| }|D ]}|| d||   q/d|S )Nx-amz-r   c                 s   s    | ]}|  V  qd S rD   )rg   r   r*   r*   r+   r     s    
z6HmacV1Auth.canonical_custom_headers.<locals>.<genexpr>r!   rM   )r   r   rb   r   r`   keysra   )r<   r   rp  custom_headersrm   rs  sorted_header_keysr*   r*   r+   canonical_custom_headers  s   


z#HmacV1Auth.canonical_custom_headersc                 C   s$   t |dkr|S |d t|d fS )z(
        TODO: Do we need this?
        r1  r   )rY   r   )r<   nvr*   r*   r+   	unquote_v  s   zHmacV1Auth.unquote_vc                    s   |d ur|}n|j }|jrC|jd}dd |D } fdd|D }t|dkrC|jtdd dd |D }|d7 }|d|7 }|S )	NrU   c                 S   s   g | ]}| d dqS )rT   r1  ri   r   ar*   r*   r+   
<listcomp>  s    z1HmacV1Auth.canonical_resource.<locals>.<listcomp>c                    s$   g | ]}|d   j v r |qS r,  )QSAOfInterestr{  r}  r   r*   r+   r    s    r   )rm   c                 S   s   g | ]}d  |qS )rT   )rb   r}  r*   r*   r+   r    s    ?)rX   r   ri   rY   sortr   rb   )r<   ri   	auth_pathbufqsar*   r   r+   canonical_resource  s   	
zHmacV1Auth.canonical_resourcec                 C   sN   |  d }|| |d 7 }| |}|r||d 7 }|| j||d7 }|S )NrM   r  )r   rt  ry  r  )r<   rZ   ri   r   r"  r  csrw  r*   r*   r+   canonical_string  s   
zHmacV1Auth.canonical_stringc                 C   sB   | j jr|d= | j j|d< | j||||d}td| | |S )NrM  r  r   )rJ   r   r  rV   rW   rk  )r<   rZ   ri   r   r"  r  rj   r*   r*   r+   get_signature  s   
zHmacV1Auth.get_signaturec                 C   sX   | j d u rttd t|j}td|j | j|j||j|j	d}| 
|| d S )Nz(Calculating signature using hmacv1 auth.zHTTP request method: %sr  )rJ   r   rV   rW   r   r&   rZ   r  r   r  _inject_signature)r<   r6   ri   r   r*   r*   r+   r9     s   


zHmacV1Auth.add_authc                 C   s
   t ddS )NTr   r   r   r*   r*   r+   rn    rG   zHmacV1Auth._get_datec                 C   s4   d|j v r	|j d= d| jj d| }||j d< d S )Nr   zAWS r!   )r   rJ   r{   )r<   r6   r   auth_headerr*   r*   r+   r    s   
zHmacV1Auth._inject_signature)NNrD   )r=   r>   r?   r  rF   rk  rt  ry  r{  r  r  r  r9   rn  r  r*   r*   r*   r+   rP  [  s    
'
	

rP  c                   @   s0   e Zd ZdZdZefddZdd Zdd Zd	S )
HmacV1QueryAuthz
    Generates a presigned request for s3.

    Spec from this document:

    http://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html
    #RESTAuthenticationQueryStringAuth

    rI  c                 C   s   || _ || _d S rD   )rJ   r$  )r<   rJ   r"  r*   r*   r+   rF     s   
zHmacV1QueryAuth.__init__c                 C   s   t tt t| j S rD   )r5   r   r|   r$  r   r*   r*   r+   rn    s   zHmacV1QueryAuth._get_datec           	      C   s   i }| j j|d< ||d< |jD ]"}| }|dkr!|jd |d< q|ds*|dv r1|j| ||< qt|}t|j}|d rH|d  d| }|d	 |d
 |d ||d f}t||_d S )Nrt   rP   r   Expiresru  )rl  r&     rU   r   r1  r2  r3  )	rJ   r{   r   r   r   r   r   r&   r   )	r<   r6   r   r9  
header_keyrs  r;  r<  r=  r*   r*   r+   r    s    

z!HmacV1QueryAuth._inject_signatureN)r=   r>   r?   r   rG  rF   rn  r  r*   r*   r*   r+   r    s    
r  c                   @   r  )HmacV1PostAuthz
    Generates a presigned post for s3.

    Spec from this document:

    http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingHTTPPOST.html
    c                 C   s   i }|j dd d ur|j d }i }g }|j dd d ur.|j d }|dd d ur.|d }||d< | jj|d< | jjd urM| jj|d< |d| jji tt	|
dd|d< | |d |d< ||j d< ||j d< d S )	Nr  r  r  rt   rM  r.   r  r   )r   r$   rJ   r{   r   ra   rd   re   r2   r  r_   r4   rk  )r<   r6   r   r  r  r*   r*   r+   r9   B  s,   


zHmacV1PostAuth.add_authNrN  r*   r*   r*   r+   r  9  s    r  c                   @   r  )
BearerAuthz
    Performs bearer token authorization by placing the bearer token in the
    Authorization header as specified by Section 2.1 of RFC 6750.

    https://datatracker.ietf.org/doc/html/rfc6750#section-2.1
    c                 C   s>   | j d u rt d| j j }d|jv r|jd= ||jd< d S )NzBearer r   )rE   r   r   r   )r<   r6   r  r*   r*   r+   r9   i  s   

zBearerAuth.add_authNrN  r*   r*   r*   r+   r  a  rO  r  c                 C   sR   | D ]!}|dkrt |   S |t v rt | }|tv r|  S qt|dt| d)Nsmithy.api#noAuthsignature_version)AUTH_TYPE_TO_SIGNATURE_VERSIONAUTH_TYPE_MAPSr   r   )
auth_trait	auth_typer  r*   r*   r+   resolve_auth_types  s   

r  c                    s   dd |D  dd | D }|rt d| |   } fddt|D }|D ]}|dkr4t|   S t|}|tv rA|  S q(tdt	 d)	Nc                 S   s   g | ]	}| d d qS #r|  r   r%   r*   r*   r+   r    r0  z2resolve_auth_scheme_preference.<locals>.<listcomp>c                 S   s   g | ]}|t vr|qS r*   )AUTH_PREF_TO_SIGNATURE_VERSIONr  r*   r*   r+   r    
    z/Unsupported auth schemes in preference list: %rc                    s   g | ]}| v r|qS r*   r*   r  service_supportedr*   r+   r    r  noAuthr   r  )
rV   rW   r   fromkeysr  r$   r  r   rb   r`   )preference_listauth_optionsunsupportedcombinedprioritized_schemesr%   sig_versionr*   r  r+   resolve_auth_scheme_preference  s,   

r  )v2v3v3httpsr   zs3-queryzs3-presign-postzs3v4-presign-postzv4-s3expresszv4-s3express-queryzv4-s3express-presign-postbearer)CRT_AUTH_TYPE_MAPS)v4zv4-querys3v4z
s3v4-queryr  v4ar  none)zaws.auth#sigv4zaws.auth#sigv4azsmithy.api#httpBearerAuthr  c                 C   s    i | ]\}}| d d |qS r  r|  )r   auth_schemer  r*   r*   r+   r/    s    r/  )Krd   r   r   r   r\   r2   rV  r|   collections.abcr   email.utilsr   hashlibr   r   operatorr   botocore.compatr   r	   r
   r   r   r   r   r   r   r   r   botocore.exceptionsr   r   r   r   botocore.utilsr   r   r   	getLoggerr=   rV   r   r   r~   r   r   r   r   r,   r7   r8   rB   rH   r   r   r   r  r  r!  rH  rK  rL  rP  r  r  r  r  r  r  botocore.crt.authr  rc   r  r   r  r*   r*   r*   r+   <module>   s   4

=  6-hQ0 *5(!

